Tech Support Guy banner
  • Please post in our Community Feedback thread for help with the new forum software! If you are having trouble logging in, please Contact Us for assistance.
Status
Not open for further replies.
1 - 10 of 10 Posts

·
Registered
Joined
·
64 Posts
Discussion Starter · #1 ·
My homepage resets to "about:blank" everytime I reboot. Here is my Hijack This log. Any help on what if anything to delete would be appreciated. Also I have run ad-aware, spy-bot and cwshredder with no success.

Thanks for any help.

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SYSTEM\ATI2PLXX.EXE
C:\WINDOWS\SYSTEM\ATIPTAXX.EXE
C:\WINDOWS\SYSTEM\ATI2CWXX.EXE
C:\WINDOWS\SYSTEM\PRPCUI.EXE
C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPLPR.EXE
C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPENH.EXE
C:\PROGRAM FILES\PHOENIX TECHNOLOGIES\BAYSWAP\BAYSWAP.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\DESKTOP\HIJACKTHIS\HIJACKTHIS.EXE

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [ScanRegistry] c:\windows\scanregw.exe /autorun
O4 - HKLM\..\Run: [ATIPOLAB] ati2plxx.exe
O4 - HKLM\..\Run: [AtiPTA] Atiptaxx.exe
O4 - HKLM\..\Run: [Ati2cwxx] Ati2cwxx.exe
O4 - HKLM\..\Run: [PRPCMonitor] PRPCUI.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [BaySwap] C:\Program Files\Phoenix Technologies\BaySwap\BaySwap.exe
O4 - HKLM\..\Run: [BaySwap2] C:\Program Files\Phoenix Technologies\BaySwap\TbUpdate.exe
O4 - HKLM\..\Run: [RegShave] C:\Progra~1\REGSHAVE\REGSHAVE.EXE /autorun
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [CriticalUpdate] c:\windows\SYSTEM\wucrtupd.exe -startup
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
O4 - Startup: Free WebSite Tools.lnk = C:\Program Files\CoffeeCup Software\CoffeeCup Free Zip Wizard\ThirtyDayTimer.exe
O9 - Extra button: Real.com (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Messenger (HKLM)
O16 - DPF: Dialpad Java Applet - http://www.dialpad.com/applet/src/vscp.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/ansi/iuctl.CAB?37900.5410069444
O16 - DPF: {544EB377-350A-4295-9BEB-EAB8392E09C6} (MSN Money Charting) - http://fdl.msn.com/public/investor/v13/invinstl.exe
O16 - DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} (Office Update Installation Engine) - http://office.microsoft.com/officeupdate/content/opuc.cab
 

·
Registered
Joined
·
878 Posts
This is just how the home page is set on your computer I think. Nothing to do with any virus or trojan. Just a simple setting, You can use what ever page you want as your home page. About blank is the page I always use as I don't like looking at ads I'm never going to use anyway. The msm.com home page for instance.

Click the help button of IE tollbar and you should find this listed

To change your home page

Your home page is the page that appears every time you open Internet Explorer. Choose a page that you want to view frequently, or one that you can customize to get quick access to all the information you want, such as the msn.com home page.

Go to the page you want to appear when you start Internet Explorer.
On the Tools menu, click Internet Options.
Click the General tab.
Under Home page, click Use Current.
 

·
Administrator
Joined
·
123,521 Posts
Are you sure CWShredder didn't take care of the About:blank problem because I don't see it in the log (I might be missing something though). This is a CWS hijack.

Please repost your entire log because you cut off the top portion which gives valuable information about your OS.

Cookie
 

·
Trusted Advisor
Joined
·
85,504 Posts
Cookiegal:

You took the words right out of my mouth. I was wondering which operating system(95, 98, ME) is being used and if the HijackThis program is up-to-date(1.97.7).

Imyers:

Do you have an antivirus program installed? I don't see one in your running processes.

What do you mean you ran Spybot, Ad-aware, and CWShredder with no success? No spyware, browser hijackers, etc. was detected and removed?
 

·
Registered
Joined
·
64 Posts
Discussion Starter · #8 ·
Since I had no success using several anti-spy programs I installed an anti-virus program and immediately found and removed two trojans. Problem was immediately solved. I did not use anti-virus before since this is just my traveling laptop and I seldom use it to connect to the internet with it. I mainly prepare reports and get e-mail with it.

It is a Compaq 1700 with P3 processor, Windows 98SE. Thanks to those who offered assistance.

Larry
 
1 - 10 of 10 Posts
Status
Not open for further replies.
Top