This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Malware Removal Forums

Please help with my Hijack This log

13 min read

This thread's last reply is from April 20, 2010, 10:53 AM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

askey127 Admin/Teacher
tiggs1603,
Very good.
----------------------------------------------
Please download GooredFix from one of the locations below and save it to your Desktop
Download Mirror #1
Download Mirror #2
  • Now Ensure all Firefox windows are closed.
  • To run the tool, double-click it (XP), or right-click and select Run As Administrator (Vista).
  • When prompted to run the scan, click Yes.
  • GooredFix will check for infections, and then a log will appear. Please post the contents of that log in your next reply (it can also be found on your desktop, called GooredFix.txt).

askey127
tiggs1603
Hi Askey127
Log as instructed

GooredFix by jpshortstuff (08.01.10.1)
Log created at 19:43 on 16/04/2010 (Owner)
Firefox version 3.6.3 (en-GB)

========== GooredScan ==========


========== GooredLog ==========

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd} [14:07 18/02/2007]
{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} [11:29 06/12/2008]
{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} [06:33 08/04/2009]
{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} [06:28 10/06/2009]
{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} [06:37 09/08/2009]
{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} [07:28 04/11/2009]
{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} [07:49 27/01/2010]

C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\ug7exm7i.default\extensions\
[redacted] [10:32 25/02/2007]
{20a82645-c095-46ed-80e3-08825760534b} [17:08 02/09/2009]
{3112ca9c-de6d-4884-a869-9855de68056c} [20:14 08/04/2010]
{635abd67-4fe9-1b23-4f01-e679fa7484c1} [20:24 15/10/2008]
{77b819fa-95ad-4f2c-ac7c-486b356188a9} [06:57 04/06/2009]

[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]
"{ABDE892B-13A8-4d1b-88E6-365A6E755758}"="C:\Program Files\Real\RealPlayer\browserrecord" [18:48 10/10/2008]
"{20a82645-c095-46ed-80e3-08825760534b}"="c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\" [20:06 21/08/2009]
"[redacted]"="C:\Program Files\Java\jre6\lib\deploy\jqs\ff" [11:29 06/12/2008]

-=E.O.F=-
askey127 Admin/Teacher
I don't see anything recent that should cause any redirects.
We may have removed the cause.
Check overnite and let me know if you have any additional issues.
tiggs1603
Will do, have a good evening
David
askey127 Admin/Teacher