Malware Removal Forums

HijeckThis log for "Hacked by Tbh w0rm" issue

cargani · 2009-09-29T08:05:48+00:00

I get this "hacked by tbh w0rm" on my Internet Explorer browser title, and the homepage was changed to "http://gade12.ga.funpic.org/" and can't be changed back. Also computer slows down and mouse behaviour is faulty. Thank's Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 9:21:50 AM, on 9/29/2009 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\svchost.exe C:\PROGRA~1\AVG\AVG8\avgrsx.exe C:\Program Files\Canon\CAL\CALMAIN.exe C:\WINDOWS\Explorer.EXE C:\Program Files

17 min read

✨ The volunteers who helped with this thread aren't active anymore, but you can still get a personalized answer — click Ask AI below.

muppy03 MRU Emeritus

October 22, 2009, 7:18 AM UTC

Glad we were able to help :flower:

Gary R Administrator

October 22, 2009, 8:43 AM UTC

As your problems appear to have been resolved,

✨ Ask AI about this thread

No ads, no affiliate links — generated on request from this thread's own archived content, not written by forum staff. Never run a scan/removal tool as a self-service step if the original thread describes it being done under a helper's direct supervision, and don't include your name, email, or other personal details in a follow-up question. See our privacy page for details on how this works.