Hijacked Browser spyware or...

[grrlfromoz 0]

My computer froze up while I was online and I eventually got it to restart but when I did, a bunch of "your computer is infected with spyware" and porn shortcuts were left on my desktop. I opened up IE and a begin2search toolbar was present. Ran Symantec Antivirus, Spyware Doctor, and had Secretmaker running at the time when it happened. I went into add/remove programs but didn't see anything wrong there. Googled and followed YoKenny's instructions here: http://www.webservertalk.com/message377740.html , so I got HJT, installed WinPatrol, IE-SPYAD, and changed browser security.

When I run HijackThis, it says begin2search is still present, even though I've told the program to fix it. Now I can't get IE to run at all and for some reason Mozilla is extrememly unstable. Does anybody have any ideas on what else to do? Any help would be greatly appreciated.

[serverph 0]

seems your cleaners were overzealous in cleaning your IE. some malware stick theirconfigs in the registry. and when it was "cleaned", some important registry keys mayhave been "cleaned" (deleted) as well. if you want to stick with IE, you may have to reinstall your browser. but get Mozilla Firefox (its better than IE, and is fairly stable,at least for me).

[ElBandoneonWEbsite 0]

have you tried Spyware, adaware or spywarescanner...it might solve your program, but yeah I'd recommend you not to use IE until is fixed, or it can get worse, and you can even get trojans trgohtu the pop ups, or you can even start having pop ups when your not even using EI...Just use Firefox, you'll like it!

[ashiezai 0]

or u could try spybot ?it's quite a useful one .. may be this can help ui dunno but this helped me alot everything when i got infected

[pbrugge 0]

Run regedit and start to remove these keys (if present):

[/br]HKEY_CLASSES_ROOT\clsid\{52fe5233-367c-4efb-bdd7-0be4d212c107}[br]HKEY_LOCAL_MACHINE\software\microsoft\internetexplorer\toolbar\{52fe5233-367c-4efb-bdd7-0be4d212c107}[/br]

[Zenchi 0]

Actually, sometimes if the file isn't deleted (like on my screwy system) by your program, try deleting it manually. (Thanks for that phrugge)

[ashiezai 0]

Run rededit and start to remove these keys (if present):

 

CODE 

 

HKEY_CLASSES_ROOT\clsid\{52fe5233-367c-4efb-bdd7-0be4d212c107}

HKEY_LOCAL_MACHINE\software\microsoft\internetexplorer\toolbar\{52fe5233-367c-4efb-bdd7-0be4d212c107}

 

erm .. i think this should be regedit rite ? anyway thx for the code

[grrlfromoz 0]

This is me, typing to you, from IE. Woohoo it works! Thanks so much to everybody! I DLed Spybot like you suggested, and ran regedit (thanks for that pbrugge and ashiezai), ran hijackthis again and everything seems to be working perfectly. Haven't even had to restart or anything. This is me--very happy. Thanks again all!

[X3r0X 0]

Its really sad to know that someone is trying to ruin your computer though. Oh well, at least its workin!Now that everything is fixed, this topic is....../////CLOSED\\\\\