This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Malware Removal Forums

Please help with my Hijack This log

55 min read

This thread's last reply is from April 20, 2010, 10:53 AM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

tiggs1603,
Very good.
----------------------------------------------
Please download GooredFix from one of the locations below and save it to your Desktop
Download Mirror #1
Download Mirror #2
  • Now Ensure all Firefox windows are closed.
  • To run the tool, double-click it (XP), or right-click and select Run As Administrator (Vista).
  • When prompted to run the scan, click Yes.
  • GooredFix will check for infections, and then a log will appear. Please post the contents of that log in your next reply (it can also be found on your desktop, called GooredFix.txt).

askey127
Hi Askey127
Log as instructed

GooredFix by jpshortstuff (08.01.10.1)
Log created at 19:43 on 16/04/2010 (Owner)
Firefox version 3.6.3 (en-GB)

========== GooredScan ==========


========== GooredLog ==========

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd} [14:07 18/02/2007]
{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} [11:29 06/12/2008]
{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} [06:33 08/04/2009]
{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} [06:28 10/06/2009]
{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} [06:37 09/08/2009]
{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} [07:28 04/11/2009]
{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} [07:49 27/01/2010]

C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\ug7exm7i.default\extensions\
[removed] [10:32 25/02/2007]
{20a82645-c095-46ed-80e3-08825760534b} [17:08 02/09/2009]
{3112ca9c-de6d-4884-a869-9855de68056c} [20:14 08/04/2010]
{635abd67-4fe9-1b23-4f01-e679fa7484c1} [20:24 15/10/2008]
{77b819fa-95ad-4f2c-ac7c-486b356188a9} [06:57 04/06/2009]

[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]
"{ABDE892B-13A8-4d1b-88E6-365A6E755758}"="C:\Program Files\Real\RealPlayer\browserrecord" [18:48 10/10/2008]
"{20a82645-c095-46ed-80e3-08825760534b}"="c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\" [20:06 21/08/2009]
"[removed]"="C:\Program Files\Java\jre6\lib\deploy\jqs\ff" [11:29 06/12/2008]

-=E.O.F=-
I don't see anything recent that should cause any redirects.
We may have removed the cause.
Check overnite and let me know if you have any additional issues.
Will do, have a good evening
David