View Full Version : start.chm hijack

04-09-2004, 07:43 PM
Everyone who has it please look at this thread:


As of right now, there is no good automated removal procedure and the manual one seems to be hit or miss.

That generally means we are missing a key component of the hijacker.

If you would please search your system for the files listed in that referenced thread and then go back and search of any other files on the same date/time I would apprieciate them being emailed to here (submissions@mjc1.com). Please zip the files into one archive, and include a link back to this thread. Post that you have sent them as a reply here.

I may be asking some of you for specific registry key exports and or Startup List logs, in addition to the HijackThis log.

Please be patient this is a new critter and it may be using a new exploit...:rolleyes:

And this may be the infection path....:eek:


07-14-2004, 05:11 AM
Hi mjc, is item no.4 on the page http://www.subratam.org/?page=removal can remove the problem??

07-14-2004, 08:59 PM
That tool wasn't available when mjc posted this, but it is able to do the fix...