"Also when I open IE the homepage is different and I cant get rid of it. Tried to change it but it reverts back to the same thing??"
--- This is a Browser HiJacker (that has probably altered your HOSTS file).
"spybot took care of [spy sherrif] but the warning message is still present."
--- indicates that Spy Sherrif was only partially removed.
My suggestion is for you to download the latest version of HJT(hijackthis) (version 1.99.1) from
you must create a separate folder and place it there.... people commonly use C:\HJT. Note: Please do *NOT* use a TEMP folder, *NOR* a DESKTOP folder, as HJT will be generating log files and backup files in the folder from which it is run... you risk accidentally losing these if you use a TEMP folder, and you will generate extreme clutter if you use a DESKTOP folder.
The file above comes as a compressed .ZIP file... you have to UNzip it (hopefully, you have an UNzip utility built into your Windows Explorer. If for any reason, you're unable to UNzip it, you can download the already-unzipped .EXE file from http://downloads.malwareremoval.com/HijackThis.exe )
After Unzipping, double click on HiJackThis.EXE
Click on Do a System Scan and Save a LogFile
This will automatically open NotePad
Copy the entire file from NotePad: EDIT/SelectAll, EDIT/Copy
Then go to the new forum dedicated for HiJack This logs (**NOT** back here), and PASTE the results there:
Be sure to include a detailed description of any problems/errors/warnings you are encountering.
Hopefully, one of the HJT experts will get to it as quickly as possible.
WARNING: HiJack This is a VERY POWERFUL tool. Do *NOT* do anything else (in particular, do NOT use it to delete any entries) until you are advised to do so!! Improper use of this tool can severely damage your system.
Please note: The procedure as worded above has been carefully edited over time, so as to expedite the process of helping you. Nevertheless, it seems that many people try to be "creative", and make some variations. It really would be to your benefit if you follow these directions EXACTLY as stated... because certain changes on your part can result in slowing-down the help process.
Specifically, the following are 3 very common BAD deviations which will cause delays:
a)
BAD:
using an older/outdated version of HiJackThis...
The experts only work with the current version. So if you make a post with an older version, you'll simply be advised to get the latest version, re-run it, and re-post your log.
b)
BAD:
using a TEMP or DESKTOP directory for HJT....
Some experts may insist you move HJT before they'll begin working with you. Others will start the repair process, advising you to move HJT as one of the very first steps.
Failure to do so can result in losing potentially critical information. So please, just use the suggested
C:\HJT directory, rather than try to be creative.
c)
BAD:
posting your log in the wrong forum...
if you post your log back here, in the Virus/SpyWare forum, it will "sit idly", either until the forum moderator gets around to move it for you... or until you decide to repost your log... in the HiJackThis forum.
Thanks for the replies guys..I am going to download HJT right now and see what happens. I did more searching and this "SPYsheriff" seems to be a big problem to get rid of. Hopefully this works out...
100mph
1.2K Posts
0
July 10th, 2005 02:00
ky331
3 Apprentice
•
15.6K Posts
0
July 10th, 2005 11:00
http://majorgeeks.com/download3155.html
you must create a separate folder and place it there.... people commonly use C:\HJT. Note: Please do *NOT* use a TEMP folder, *NOR* a DESKTOP folder, as HJT will be generating log files and backup files in the folder from which it is run... you risk accidentally losing these if you use a TEMP folder, and you will generate extreme clutter if you use a DESKTOP folder.
The file above comes as a compressed .ZIP file... you have to UNzip it (hopefully, you have an UNzip utility built into your Windows Explorer. If for any reason, you're unable to UNzip it, you can download the already-unzipped .EXE file from http://downloads.malwareremoval.com/HijackThis.exe )
After Unzipping, double click on HiJackThis.EXE
Click on Do a System Scan and Save a LogFile
This will automatically open NotePad
Copy the entire file from NotePad: EDIT/SelectAll, EDIT/Copy
Then go to the new forum dedicated for HiJack This logs (**NOT** back here), and PASTE the results there:
http://forums.us.dell.com/supportforums/board?board.id=si_hijack
Be sure to include a detailed description of any problems/errors/warnings you are encountering.
Hopefully, one of the HJT experts will get to it as quickly as possible.
enjoieclubchamp
15 Posts
0
July 10th, 2005 20:00