Jump to content


Photo

Can't Get Rid of Browser Hijacker.Deskbar


  • Please log in to reply
6 replies to this topic

#1 linder5

linder5

    Newbie

  • Members
  • Pip
  • 3 posts

Posted 03 September 2009 - 02:25 AM

Have run SuperAntiSpyware and repeatedly cannot get rid of Browser Hijacker.deskbar. Have also booted in safe mode and cannot get rid of it. Even tried to manually delete the registry keys and Windows will not allow it to be deleted. Here's the log... would appreciate some assistance in getting this off my system. Thanks.

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 09/02/2009 at 09:04 PM

Application Version : 4.27.1002

Core Rules Database Version : 4083
Trace Rules Database Version: 2023

Scan type : Quick Scan
Total Scan Time : 00:43:00

Memory items scanned : 596
Memory threats detected : 0
Registry items scanned : 664
Registry threats detected : 16
File items scanned : 10859
File threats detected : 5

Adware.Tracking Cookie
C:\Documents and Settings\zixan\Cookies\zixan@tribalfusion[1].txt
C:\Documents and Settings\DJJ\Cookies\djj@specificclick[1].txt
C:\Documents and Settings\DJJ\Cookies\djj@specificmedia[1].txt
C:\Documents and Settings\DJJ\Cookies\djj@iacas.adbureau[1].txt
C:\Documents and Settings\DJJ\Cookies\djj@insightexpressai[1].txt

Browser Hijacker.Deskbar
HKCR\TypeLib\{77AA25E8-6083-4949-A831-9CB11861DC10}
HKCR\TypeLib\{77AA25E8-6083-4949-A831-9CB11861DC10}\1.0
HKCR\TypeLib\{77AA25E8-6083-4949-A831-9CB11861DC10}\1.0\0
HKCR\TypeLib\{77AA25E8-6083-4949-A831-9CB11861DC10}\1.0\0\win32
HKCR\TypeLib\{77AA25E8-6083-4949-A831-9CB11861DC10}\1.0\FLAGS
HKCR\TypeLib\{77AA25E8-6083-4949-A831-9CB11861DC10}\1.0\HELPDIR
HKCR\Interface\{6ABB739A-787B-495B-82B8-1526B804E912}
HKCR\Interface\{6ABB739A-787B-495B-82B8-1526B804E912}\ProxyStubClsid
HKCR\Interface\{6ABB739A-787B-495B-82B8-1526B804E912}\ProxyStubClsid32
HKCR\Interface\{6ABB739A-787B-495B-82B8-1526B804E912}\TypeLib
HKCR\Interface\{6ABB739A-787B-495B-82B8-1526B804E912}\TypeLib#Version
HKCR\Interface\{EA5C58AE-7DB0-40C3-BAAE-BA9008A243EB}
HKCR\Interface\{EA5C58AE-7DB0-40C3-BAAE-BA9008A243EB}\ProxyStubClsid
HKCR\Interface\{EA5C58AE-7DB0-40C3-BAAE-BA9008A243EB}\ProxyStubClsid32
HKCR\Interface\{EA5C58AE-7DB0-40C3-BAAE-BA9008A243EB}\TypeLib
HKCR\Interface\{EA5C58AE-7DB0-40C3-BAAE-BA9008A243EB}\TypeLib#Version

#2 siliconman01

siliconman01

    Advanced Member

  • Members
  • PipPipPip
  • 1,210 posts
  • LocationWest Virginia, USA

Posted 03 September 2009 - 06:36 AM

It sounds like you have a "Permissions" issue with these registry keys. What Windows operating system are you running (with service pack #)?

___________________________________

Windows 8.1.u1 x64 Professional, local MS Office 2013, Internet Explorer 11 on Dell XPS 8700 (SAS Pro) and a MS Surface tablet (SAS Pro). 

 


#3 linder5

linder5

    Newbie

  • Members
  • Pip
  • 3 posts

Posted 03 September 2009 - 12:11 PM

I am running Windows XP with Service Pack 3.  I've looked at the permissions and they looked ok, but maybe I need to be walked through how to check them again for proper settings.  Thanks.

#4 linder5

linder5

    Newbie

  • Members
  • Pip
  • 3 posts

Posted 03 September 2009 - 06:06 PM

Thanks... I worked on the permissions for these registry items and finally was able to delete this.  Something in the registry from freeze.com that had changed the permission so that nothing would delete it.  Uuugh... what a pain.  Thanks for the help.

#5 siliconman01

siliconman01

    Advanced Member

  • Members
  • PipPipPip
  • 1,210 posts
  • LocationWest Virginia, USA

Posted 03 September 2009 - 07:01 PM

Glad you are fixed up. It's a typical cybercriminal tactic to change key permissions to prevent removal of their nasty registry keys. :x

___________________________________

Windows 8.1.u1 x64 Professional, local MS Office 2013, Internet Explorer 11 on Dell XPS 8700 (SAS Pro) and a MS Surface tablet (SAS Pro). 

 


#6 Jarred12

Jarred12

    Newbie

  • Members
  • Pip
  • 1 posts

Posted 11 November 2009 - 05:03 PM

I have the same problem, but i dont know how to get to change permissions.

#7 siliconman01

siliconman01

    Advanced Member

  • Members
  • PipPipPip
  • 1,210 posts
  • LocationWest Virginia, USA

Posted 12 November 2009 - 08:04 AM

Jarred12,

What Windows operating system are you running? And are you familiar with using the registry editor Regedit? If not, it is best that you submit a Customer Service Request and let the SAS gurus fix you up.

http://www.superanti...eateticket.html

___________________________________

Windows 8.1.u1 x64 Professional, local MS Office 2013, Internet Explorer 11 on Dell XPS 8700 (SAS Pro) and a MS Surface tablet (SAS Pro). 

 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users