PDA

View Full Version : start.chm hijack



mjc
04-09-2004, 06:43 PM
Everyone who has it please look at this thread:

http://www.pcguide.com/vb/showthread.php?s=&threadid=29039

As of right now, there is no good automated removal procedure and the manual one seems to be hit or miss.

That generally means we are missing a key component of the hijacker.

If you would please search your system for the files listed in that referenced thread and then go back and search of any other files on the same date/time I would apprieciate them being emailed to here (submissions@mjc1.com). Please zip the files into one archive, and include a link back to this thread. Post that you have sent them as a reply here.

I may be asking some of you for specific registry key exports and or Startup List logs, in addition to the HijackThis log.

Please be patient this is a new critter and it may be using a new exploit...:rolleyes:

And this may be the infection path....:eek:

http://www.pcguide.com/vb/showthread.php?s=&postid=175342#post175342

UPENDRA UPADHYAY
07-14-2004, 04:11 AM
Hi mjc, is item no.4 on the page http://www.subratam.org/?page=removal can remove the problem??

Budfred
07-14-2004, 07:59 PM
That tool wasn't available when mjc posted this, but it is able to do the fix...