Author Topic: redirect/browser hijack  (Read 18888 times)

0 Members and 1 Guest are viewing this topic.

monkeybones

  • Guest
Re: redirect/browser hijack
« Reply #45 on: March 04, 2012, 11:44:59 AM »
log attempt

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: redirect/browser hijack
« Reply #46 on: March 04, 2012, 12:21:36 PM »
Just post the bottom section of the log please

The last 20 lines or so

monkeybones

  • Guest
Re: redirect/browser hijack
« Reply #47 on: March 04, 2012, 12:43:09 PM »
i was able to post the whole thing.  it's in the post preceding yours.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: redirect/browser hijack
« Reply #48 on: March 04, 2012, 12:49:48 PM »
Can you now access normal windows ?

monkeybones

  • Guest
Re: redirect/browser hijack
« Reply #49 on: March 05, 2012, 12:04:56 AM »
no.  it doesn't stay on.

monkeybones

  • Guest
Re: redirect/browser hijack
« Reply #50 on: March 05, 2012, 03:28:16 AM »
what does it look like to you?  can you tell me more about what it is i'm trying to do? 

is there anything i can be doing in between communication that would be helpful?

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: redirect/browser hijack
« Reply #51 on: March 05, 2012, 09:25:43 PM »
From safe mode we will use SFC to check out the system file structure

Go start > All Programs > Accessories
Right click command prompt and select run as administrator
In the black box type :

sfc /scannow

Then press enter
Let me know if it repairs any files

Also are there any dump files in c:\Windows\minidumps

monkeybones

  • Guest
Re: redirect/browser hijack
« Reply #52 on: March 06, 2012, 08:04:42 AM »
the scan is running.

there are no files in minidump

monkeybones

  • Guest
Re: redirect/browser hijack
« Reply #53 on: March 06, 2012, 08:35:01 AM »
Microsoft Windows [Version 6.0.6002]
Copyright (c) 2006 Microsoft Corporation.  All rights reserved.

C:\Users\Alexandra>sfc/scannow

Beginning system scan.  This process will take some time.

Beginning verification phase of system scan.
Verification 100% complete.
Windows Resource Protection found corrupt files but was unable to fix some of th
em.
Details are included in the CBS.Log windir\Logs\CBS\CBS.log. For example
C:\Windows\Logs\CBS\CBS.log

C:\Users\Alexandra>

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: redirect/browser hijack
« Reply #54 on: March 06, 2012, 09:09:00 PM »
Could you zip the CBS log and upload to mediafire and post the sharing link

monkeybones

  • Guest
Re: redirect/browser hijack
« Reply #55 on: March 07, 2012, 10:41:37 PM »
i'm sorry, i don't know how to do that on her computer. 

can i post it here in parts for you, or would that be prohibitive?  save it in separate text files perhaps, in successive posts?

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: redirect/browser hijack
« Reply #56 on: March 07, 2012, 11:05:18 PM »
Could you scan the log and look for files that it was unable to repair.  Then let me know what they were 


monkeybones

  • Guest
Re: redirect/browser hijack
« Reply #57 on: March 07, 2012, 11:14:14 PM »
got it... just had to restart a few times until networking would connect :)

http://www.mediafire.com/?n231yub28nsxja5

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: redirect/browser hijack
« Reply #58 on: March 07, 2012, 11:46:25 PM »
OK got it - it will take a while to interpret though

monkeybones

  • Guest
Re: redirect/browser hijack
« Reply #59 on: March 08, 2012, 03:43:34 AM »
thank you for your time and help.