This topic is locked
i have a problem with www.google.it, . com
when i try to search something ie is redirect to a xxx site
i try with antivirus (norton & kaspersky), ad - aware, spy doctor and webroot spy, and i also delete the hosts file in winnt/system32 cartel but the problem remain!
please help me (i post the logfile Hijack, html code of google page that appear on my PC and the image of)
Logfile of HijackThis v1.99.1
Scan saved at 12.02.14, on 01/03/2005
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\csrss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\Explorer.EXE
C:\WINNT\System32\khooker.exe
C:\Programmi\Java\j2re1.4.2_04\bin\jusched.exe
C:\Programmi\File comuni\Real\Update_OB\realsched.exe
C:\Programmi\iTunes\iTunesHelper.exe
C:\Programmi\QuickTime\qttask.exe
C:\Programmi\Webroot\Spy Sweeper\SpySweeper.exe
C:\Programmi\iPod\bin\iPodService.exe
C:\Documents and Settings\Manuela\Desktop\HijackThis.exe
R3 - Default URLSearchHook is missing
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [SiS KHooker] C:\WINNT\System32\khooker.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programmi\Java\j2re1.4.2_04\bin\jusched.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Programmi\File comuni\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [iTunesHelper] C:\Programmi\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmi\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [KAVPersonal50] C:\Programmi\Kaspersky Lab\Kaspersky Anti-Virus Personal\kav.exe /minimize
O4 - HKCU\..\Run: [SpySweeper] "C:\Programmi\Webroot\Spy Sweeper\SpySweeper.exe" /0
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn...pdownloader.cab
O16 - DPF: {D719897A-B07A-4C0C-AEA9-9B663A28DFCB} (iTunesDetector Class) - http://ax.phobos.app.../ITDetector.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{CEBB97DE-1AF2-4D07-A14A-2E1BB424D262}: NameServer = 151.99.125.2,151.99.125.3
O23 - Service: Servizio amministrativo di Gestione disco logico (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: Servizio iPod (iPodService) - Apple Computer, Inc. - C:\Programmi\iPod\bin\iPodService.exe
O23 - Service: kavsvc - Kaspersky Lab - C:\Programmi\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe
____________________________________________________________________
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<title>Googl</title>
<base target="_blank">
<style><!--
body,td,a,p,.h{font-family:arial,sans-serif;}
.h{font-size: 20px;}
.q{color:#0000cc;}
//-->
</style>
<script>function sf(){document.Search.qq.focus();}</script>
</head>
<body bgcolor=#ffffff text=#000000 link=#0000cc vlink=#551a8b alink=#ff0000 onLoad=sf()>
<center>
<img src="/images/logo.gif" width=276 height=110 alt="Googl">
<br>
<br>
<table border=0 cellspacing=0 cellpadding=4>
<tr>
<td nowrap>
<font size=-1>
<b>Web</b>
<a id=1a class=q href="http://www.rape-stor...res/index.html" onClick="return qs(this);">Images</a>
<a id=2a class=q href="group.html" onClick="return qs(this);">Groups</a>
<sup><a href="group.html" style="text-decoration:none;" onclick="return qs(this);"><font color=red>New!</font></a></sup>
<a id=3a class=q href="http://free.modern[bleep]ing.com" onClick="return qs(this);">New</a>
<a id=4a class=q href="http://www.rape-stor...ies/index.html" onClick="return qs(this);">Stories</a>
<b><a href="index.html" class=q>more »</a></b>
</font>
</td>
</tr>
</table>
<table cellspacing=0 cellpadding=0>
<tr>
<td width=25%> </td>
<td align=center>
<form name='Search' method='GET' action='search.php'>
<input type="text" name="qq" size="55" value="" maxlength="100"><br>
<input type="hidden" name="30951" value="1">
<input type=submit value="Googl Search" name=btnG>
<input type=submit value="I'm Feeling Lucky" name=btnI>
</form>
</td>
<td valign=top nowrap width=25%>
<font size=-2>
<a href=index.html>Advanced Search</a><br>
<a href=index.html>Preferences</a><br>
<a href=index.html>Language Tools</a>
</font>
</td>
</tr>
</table>
<br>
<br>
<font size=-1>
<a href="index.html">Advertising Programs</a> - <a href=index.html>Business Solutions</a> - <a href=index.html>About Googl</a></font><p><font size=-2>©2005 Googl - Searching 8,058,044,651 web pages</font></p></center></body></html>
Sign In
Create Account
