[annabanana]

Ok i have hijack this and spybot on my desktop. One day i stupidly let my OLDER brother on my computer. I went on it and i had alot of websites including faceparty.com redirected to http.(random letters).outhost.net I looked at my desktop and Hijack this and spybot had disapeared. My brother swore he never deleted them and occasionly when i reload they appear on my desktop for a few seconds before dissapearing again. I hope i gave enough detail for you to help me.

[Advertisements]

Hi Annabanana. Welcome to GTG.

Let us take a closer look at what is running on your PC. We'll need you to use a free diagnostic tool (HiJackThis) and post a log back here with the results.

Click the HijackThis Guide in my signature, download it and follow the instructions in the guide.

Most of what it lists will be harmless or even essential, DO NOT delete or modify anything yet! Someone will be along to tell you what steps to take after you post the contents of the scan results.

[coachwife6]

Hi Annabanana. Welcome to GTG.

Let us take a closer look at what is running on your PC. We'll need you to use a free diagnostic tool (HiJackThis) and post a log back here with the results.

Click the HijackThis Guide in my signature, download it and follow the instructions in the guide.

Most of what it lists will be harmless or even essential, DO NOT delete or modify anything yet! Someone will be along to tell you what steps to take after you post the contents of the scan results.

[annabanana]

Hi Annabanana. Welcome to GTG. 

Let us take a closer look at what is running on your PC. We'll need you to use a free diagnostic tool (HiJackThis) and post a log back here with the results.

Click the HijackThis Guide in my signature, download it and follow the instructions in the guide.

Most of what it lists will be harmless or even essential, DO NOT delete or modify anything yet! Someone will be along to tell you what steps to take after you post the contents of the scan results.

Like i said i already have hijack this but it has dissapeared

[annabanana]

Sorry for double posting but i cannot edit by other post. Anyway i decided to try and download Hijackthis anyway and it said 'cannot copy from source' Or somthing like that.

[admin]

In order to detect whether you are infected by HackDefender, please download this utility: http://bagpuss.swan....torv0[1].62.zip

[annabanana]

In order to detect whether you are infected by HackDefender, please download this utility: http://bagpuss.swan....torv0[1].62.zip

I ran the program and some red writing started to appear then the program closed. Also i have been getting popups in norton saying it has found HackDefender and it was autodeleted so i think i do have it

[admin]

If your system drive (usually C is formatted with the FAT32 file system, simply create a bootable floppy, boot from it, and delete the directory from the command prompt.

If your system drive is formatted with the NTFS file system, download Bart's PE builder from http://www.nu2.nu/pebuilder/ in order to create a pre installed environment cd image. Burn that image and boot using the CD, use then the utilities inside the PE in order to delete this folder.

You can read more on HackDefender here: http://bagpuss.swan....comms/hxdef.htm

[annabanana]

If your system drive (usually C is formatted with the FAT32 file system, simply create a bootable floppy, boot from it, and delete the directory from the command prompt.

If your system drive is formatted with the NTFS file system, download Bart's PE builder from http://www.nu2.nu/pebuilder/ in order to create a pre installed environment cd image. Burn that image and boot using the CD, use then the utilities inside the PE in order to delete this folder.

You can read more on HackDefender here: http://bagpuss.swan....comms/hxdef.htm

How do i find out what my System drive is formatted with? Also my laptop does not have a floppy disk drive.

[annabanana]

If your system drive (usually C is formatted with the FAT32 file system, simply create a bootable floppy, boot from it, and delete the directory from the command prompt.

If your system drive is formatted with the NTFS file system, download Bart's PE builder from http://www.nu2.nu/pebuilder/ in order to create a pre installed environment cd image. Burn that image and boot using the CD, use then the utilities inside the PE in order to delete this folder.

You can read more on HackDefender here: http://bagpuss.swan....comms/hxdef.htm

How do i find out what my System drive is formatted with? Also my laptop does not have a floppy disk drive.

Its a NTFS. Ill try and follow your instructions but i dont really understand them.

[annabanana]

Sorry for posting so much. You REALLY need a edit button. I downloaded PE Builder and i have no clue what to do next. Please could you tell me what to do step by step? I dont mean to be cheeky...

[coachwife6]

The edit button should be at the bottom right hand corner of your post.

[annabanana]

The edit button should be at the bottom right hand corner of your post.

Well its not

[mpfeif101]

Hey, here's the edit button: (you can only see the edit button on your own posts)



Please run full tests at PCPitStop here:
http://www.pcpitstop...top/default.asp
and post the results for me to see.
To do this use this tutorial:
http://www.pcpitstop...ress/howto1.asp

Edited by mpfeif101, 28 October 2004 - 03:50 PM.