can someone help, pc slow. hijak this file

redballoon_2

yippee!!!!!!!!!

thanks all soo much for helping me sort this!!!

I'm dead chuffed with myself.

Will it stay ok now i have got all my firewalls and things? or will i need to keep an eye on it every week or so?

P.S I have now put on the yahoo parental controls on to hubbys log in! ha ha ha!

Alfonso_Skinarelli

These "Smitfraud" related infections have a tendancy to add particular registry entries and shortcuts to unsafe websites which don't show in a HijackThis log. It may be a good idea if you run the SmitfraudFix tool on your machine to check for such entries.


Download SmitfraudFix by S!Ri from either of these mirrors to your desktop:

SmitfraudFix Mirror 1
SmitfraudFix Mirror 2

Right click SmitfraudFix.zip and Extract (unzip) the SmitfraudFix folder inside to your desktop.

Open the SmitfraudFix folder and double-click "smitfraudfix.cmd"

Select option #1 - "Search" by typing 1 and pressing "Enter".

Copy & paste the contents of the text file which appears back here please.

Some anti-virus programs detect PROCESS.EXE (a component of SmitfraudFix) as a "risktool". In this instance it is not harmful and any alerts from your anti-virus program of this nature should be ignored.


Note: The following entries in your log are Red Sheriff spyware:

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://uk.red.clientapps.yahoo.com/c...rch.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://uk.red.clientapps.yahoo.com/c...o/bt_side.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://uk.red.clientapps.yahoo.com/c...rch.yahoo.com/

Not particularly horrible but I'd get rid nonetheless.

redballoon_2

ok i will get rid of em! but it does say on the analayser website that everything is safe?

What exactly do these things do?

Alfonso_Skinarelli

I wouldn't pay too much attention to that site. It flags legitimate entries as malicious and misses more than it's fair share of nasties. I'm afraid removing malware these days consists of far more than removing a few entries in a HijackThis log. If only it were that simple still !!

Alfonso_Skinarelli

OOPs, double post

cwp500

make sure you have decent anti virus software, and a range of anti spyware protection. keep these updated weekly and this will help also.

Alfonso_Skinarelli

Better late than never CWP500