frame.crazywinnings.com [resolved]
Started by
vincentharris726
, Dec 02 2004 11:34 PM
#1
Posted 02 December 2004 - 11:34 PM
#2
Posted 02 December 2004 - 11:42 PM
Welcome Vincent. Let us take a closer look at what is running on your PC. We'll need you to use a free diagnostic tool (HiJackThis) and post a log as a new topic in the Hijack This forum. It will get a better response there from the people most qualified to analyze logs.
Click the HijackThis Guide in my signature, download it and follow the instructions in the guide. Also see this post.
Most of what it lists will be harmless or even essential, DO NOT delete or modify anything yet! Someone will be along to tell you what steps to take after you post the contents of the scan results.
Click the HijackThis Guide in my signature, download it and follow the instructions in the guide. Also see this post.
Most of what it lists will be harmless or even essential, DO NOT delete or modify anything yet! Someone will be along to tell you what steps to take after you post the contents of the scan results.
#3
Posted 03 December 2004 - 09:32 AM
Logfile of HijackThis v1.98.2
Scan saved at 10:30:08 AM, on 12/3/2004
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2600.0000)
O1 - Hosts: 69.20.16.183 auto.search.msn.com
O1 - Hosts: 69.20.16.183 search.netscape.com
O1 - Hosts: 69.20.16.183 ieautosearch
O15 - Trusted Zone: *.frame.crazywinnings.com
These are the only problems i have left. i know the rest of the hijack file is fine.
Scan saved at 10:30:08 AM, on 12/3/2004
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2600.0000)
O1 - Hosts: 69.20.16.183 auto.search.msn.com
O1 - Hosts: 69.20.16.183 search.netscape.com
O1 - Hosts: 69.20.16.183 ieautosearch
O15 - Trusted Zone: *.frame.crazywinnings.com
These are the only problems i have left. i know the rest of the hijack file is fine.
#4
Posted 03 December 2004 - 10:43 AM
We can definitely help you, but first you need to help us. The first step in this process is to apply Service Pack 1a for Windows XP. Without this update, you're wide open to re-infection, and we're both just wasting our time.
Click here: http://www.microsoft...p1/default.mspx
Apply the update, reboot, and post a fresh Hijack This log.
We'll also need to see the entire log.
Click here: http://www.microsoft...p1/default.mspx
Apply the update, reboot, and post a fresh Hijack This log.
We'll also need to see the entire log.
#5
Posted 04 December 2004 - 08:46 PM
Hello. I just joined the site hoping to get some much needed help removing *.frame.crazywinnings.com from my Trusted Sites list in IE Security. A bunch of crap managed to load itself on my system when I accidently clicked on a questionable site. Virusscan caught some trojans, and then using SpyBot and AdAware removed everything else that got added to my Trusted Sites list. However, that one site seems to somehow have survived. So basically my question is the same as the other guys, how can I remove *.frame.crazywinnings.com? I've searched around alot but haven't been able to find any clear cut solution. Thanks for your help!
#6
Posted 04 December 2004 - 11:12 PM
Here's a reg fix that should work.
Installation: Copy and paste the code below into a text editor such as Notepad.
Save this text as RemoveDomains.reg. Make sure the "Save as type:" is "All Files (*.*)" and save it to your desktop.
Double-click on RemoveDomains.reg. When it asks you to merge the information to the registry click Yes.
Installation: Copy and paste the code below into a text editor such as Notepad.
Save this text as RemoveDomains.reg. Make sure the "Save as type:" is "All Files (*.*)" and save it to your desktop.
Double-click on RemoveDomains.reg. When it asks you to merge the information to the registry click Yes.
REGEDIT4 ; Filename: RemoveDomains.reg ; ; Provider: LineOFire [-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\*.frame.crazywinnings.com ] "http"=dword:00000004
#7
Posted 05 December 2004 - 07:33 AM
Thanks. I managed to find another source that had covered this topic and they directed the individual to the program that basically did the same thing you suggested (just clears the Trusted/Restricted Site lists). The problem has seemed to be completely corrected (I hope ) and I'm hopefully all clean now. Your help is much appreciated.
Similar Topics
0 user(s) are reading this topic
0 members, 0 guests, 0 anonymous users