Tech Support Guy banner
  • IMPORTANT: Only authorized members may reply to threads in this forum due to the complexity of the malware removal process. Authorized members include Malware Specialists and Trainees, Administrators, Moderators, and Trusted Advisors. Regular members are not permitted to reply, and any such posts will be deleted without notice or further explanation. Notice
Status
Not open for further replies.
1 - 4 of 4 Posts

·
Registered
Joined
·
79 Posts
Discussion Starter · #1 ·
I'm helping a user in another forum.

I've never seen this entry in a HJT log before.

Anyone else?

I'll post the complete log, additional details, and/or update here if there is continued interest.

In the original log, the "****" are the "F" word.

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = <--What the **** are u looking at??
 
G

·
What this looks like to me is this. You know when you open your browser and it gives you a name in the upper left? Well, I believe the registry was edited to display that statement on the webpage. It's like changing the name "Recycle Bin" to "Outhouse" I alwaqys did that. I am sure there are viruses that can do that if no one there tweaked the registry. I think if you use the cleaning tools you should be able take care of it.
 

·
Registered
Joined
·
49,014 Posts
It may be nothing more than a prank, but..........

SpywareBlaster 3.4 http://majorgeeks.com/download2859.html
SpyBot V1.4 http://www.majorgeeks.com/download2471.html * NEW *
AdAware SE 1.06 http://www.majorgeeks.com/download506.html - * NEW *
MS AntiSpy - http://download.microsoft.com/downl...-fca2f2c6f0cc/MicrosoftAntiSpywareInstall.exe (XP and W2K only)

DL them (they are free), install them, check each for their
definition updates
and then run AdAware and Spybot, fixing anything
they say.

In SpywareBlaster - Always enable all protection after updates
In SpyBot - After an update run immunize

Do these and reboot before the next step.

Then get HiJack This V1.99.1 http://thespykiller.co.uk/files/hijackthis_sfx.exe - double click the DL file and click unzip letting it extract to its default folder C:\Program FIles\HiJackThis, run it from there, DO NOT fix anything, post the log here.
 

·
Registered
Joined
·
79 Posts
Discussion Starter · #4 ·
AtechGuy & MFDnSC

Thanks for the responses.

I too considered the prank aspect, but the user seemed sincere.

The entry was fixed without a fuss using HJT, so this thread can be considered solved.

If y'all or anyone else has more info, please PM me.

If anyone else needs help with a similar problem, please start a new thread.
 
1 - 4 of 4 Posts
Status
Not open for further replies.
Top