Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

Help Please - Infected Banner and Random Websites Popping Up

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

Unread postby andya729 » February 2nd, 2006, 1:25 am

Thanks again for 'sticking with me' on this.

Here's the regfile:
A reg_look by IMM
----------------------------------------
Handle OK.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows
(key has 0 subkeys and 6 value entries - last modified 02:30(UTC) 02/01/2006)
[AppInit_DLLs] = not present!
----------------------------------------
Handle OK.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
(key has 4 subkeys and 32 value entries - last modified 05:19(UTC) 02/02/2006)
[Userinit] = "C:\WINDOWS\system32\userinit.exe," (REG_SZ)
----------------------------------------
Handle OK.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\IniFileMapping\system.ini\boot
(key has 0 subkeys and 5 value entries - last modified 12:24(UTC) 08/12/2005)
[Shell] = "SYS:Microsoft\Windows NT\CurrentVersion\Winlogon" (REG_SZ)
----------------------------------------
andya729
Regular Member
 
Posts: 36
Joined: January 2nd, 2006, 12:52 am
Advertisement
Register to Remove

Unread postby amateur » February 2nd, 2006, 9:19 pm

Hi Andya729,

It's most likely the entries in the previous registry search are the zones set by antispyware programs like Spybot, Spywareblaster and IE-Spyad.

Please go to Intenet Explorer> Tools > Internet Options > Security and then select the Trusted Sites then click on Sites and look for the following domains in that zone. You shouldn't have anything in the Trusted Sites, preferably. Do the same for Restricted Sites and let me know if you find them there

doubleclick.com
doubleclick.be
doubleclick.uk
doubleclick.de
doubleclick.ne.jp
doubleclick.net
doubleclick.nl

Here is another useful link to read: http://support.microsoft.com/kb/326155/?sd=RMVP
User avatar
amateur
MRU Master
MRU Master
 
Posts: 2545
Joined: September 25th, 2005, 1:13 pm
Location: RI, USA

Unread postby andya729 » February 7th, 2006, 3:55 am

The entries don't show up in Trusted Sites, but a few are in the Restricted Sites listing.

I'm waiting for the problem to happen when I'm home (it's mostly effecting my wife right now, so she's restarting a few times a day), then I'll go through some of the troubleshooting tips from the microsoft site.

I also have downloaded netscape and will have her try that next time it's not working. That way I can isolate if it's a IE setting or something else.

Thanks again and I'll keep you updated.
andya729
Regular Member
 
Posts: 36
Joined: January 2nd, 2006, 12:52 am

Unread postby amateur » February 7th, 2006, 4:52 pm

OK. Thanks for updating. :D
User avatar
amateur
MRU Master
MRU Master
 
Posts: 2545
Joined: September 25th, 2005, 1:13 pm
Location: RI, USA

Unread postby NonSuch » February 23rd, 2006, 11:09 pm

Whilst we appreciate that you may be busy, it has been 14 days or more since we heard from you.

Infections can change and fresh instructions will now need to be given. This topic is now closed, if you still require assistance then please start a new topic in the Malware Removal Forum.

If you wish this topic reopened, please send us an email to 'admin at malwareremoval.com' with a link to your thread.

You can help support this site from this link :
Donations For Malware Removal

Do not bother contacting us if you are not the topic starter. A valid,
working link to the closed topic is required along with the user name used.
If the user name does not match the one in the thread linked, the email will be deleted.
User avatar
NonSuch
Administrator
Administrator
 
Posts: 28747
Joined: February 23rd, 2005, 7:08 am
Location: California
Advertisement
Register to Remove

Previous

  • Similar Topics
    Replies
    Views
    Last post

Return to Infected? Virus, malware, adware, ransomware, oh my!



Who is online

Users browsing this forum: No registered users and 296 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware