Spyware, Viruses, & Security forum

General discussion

Hijack this

I deleted a file using hijack this and now I cannot get on the internet. I had my log file analyzed on hijackthis.de and this was the only entry marked "Possibly Nasty" so I had it removed. The entry was 017-HKLM\System\CCS\Services\Tcip\..\(A57C451A-CFD7-4112-863A-7DB3DDBDFA1E):Name Server = 209.130

Obviously I should have left it alone. What can I do to fix this?

Discussion is locked
You are posting a reply to: Hijack this
The posting of advertisements, profanity, or personal attacks is prohibited. Please refer to our CNET Forums policies for details. All submitted content is subject to our Terms of Use.
Track this discussion and email me when there are updates

If you're asking for technical help, please be sure to include all your system info, including operating system, model number, and any other specifics related to the problem. Also please exercise your best judgment when posting in the forums--revealing personal information such as your e-mail address, telephone number, and address is not recommended.

You are reporting the following post: Hijack this
This post has been flagged and will be reviewed by our staff. Thank you for helping us maintain CNET's great community.
Sorry, there was a problem flagging this post. Please try again now or at a later time.
If you believe this post is offensive or violates the CNET Forums' Usage policies, you can report it below (this will not automatically remove the post). Once reported, our moderators will be notified and the post will be reviewed.
Collapse -
If using XP, try System Restore.

In reply to: Hijack this

If using Windows 98, then try booting into MS-DOS, running scanreg /restore and choose a date before you deleted this registry key. Or was it more then just a registry key?

Although you don't give the whole IP-address (like 209.130.x.y) this could very well be a valid DNS-server. Check you TCP-IP-settings. And better inform somewhere what's suspect with this line.

Hope this helps.


Kees

Collapse -
Re: If using XP, try System Restore.

In reply to: If using XP, try System Restore.

I am using XP and I did a System Restore, but I still cannot access the internet or receive email. I now know that the file I deleted was a valid DNS server because "O17 - HKLM\System\CCS\Services\Tcpip\..\{1B93038C-BDB2-4169-BD0B-FD183F12D318}: NameServer = 209.130.32.63,205.152.0.58" is located on all of our computers in the office. How do I go about fixing this? I also tried to restore the file using the back up option in HJT. I had to use the back up file from another computer because the one that was created for the computer in question had already been overwritten. I tried to restore the file and it acted like it worked (no errors or anything), but when I scan again using HJT the file is not there. I had to do the exact same thing on another PC to get the back up file in the first place and it worked just fine. So I'm am not sure where to go from here. Please help.

Collapse -
Re: Hijack this

In reply to: Hijack this

If something goes wrong you can undo the changes done by Hijack This. Go to the bottom right hand corner of Hijack This and click on config. Then choose backups.There you can reverse any changes you made.

Collapse -
Re: Hijack this

In reply to: Re: Hijack this

I tried to restore the file using the back up option in HJT. I had to use the back up file from another computer because the one that was created for the computer in question had already been overwritten. I tried to restore the file and it acted like it worked (no errors or anything), but when I scan again using HJT the file is not there and I still cannot access internet or email. I had to do the exact same thing on another PC to get the back up file in the first place and it worked just fine. So I'm am not sure where to go from here. Please help if you can. I am using XP and I also did a System Restore, but I still cannot access the internet or receive email. I now know that the file I deleted was a valid DNS server because "O17 - HKLM\System\CCS\Services\Tcpip\..\{1B93038C-BDB2-4169-BD0B-FD183F12D318}: NameServer = 209.130.32.63,205.152.0.58" is located on all of our computers in the office. How do I go about fixing this?

Collapse -
Re: Hijack this

In reply to: Re: Hijack this

Collapse -
Lallab, Have You Tried....

In reply to: Hijack this

...using either of the connection restorers at the sites below ? Removal of spyware can sometimes corrupt connection files. The Utilities below can usually help restore those. Both are fairly small files and can be transfered from computer to computer on a floppy disk:

Repairs Winsock 2 settings caused by buggy software or improperly removed internet software:
http://www.cexx.org/lspfix.htm

IEFix Utility
http://www.mvps.org/sramesh2k/IEFIX.htm

Hope this helps.

Grif

Popular Forums

icon
Computer Newbies 10,686 discussions
icon
Computer Help 54,365 discussions
icon
Laptops 21,181 discussions
icon
Networking & Wireless 16,313 discussions
icon
Phones 17,137 discussions
icon
Security 31,287 discussions
icon
TVs & Home Theaters 22,101 discussions
icon
Windows 7 8,164 discussions
icon
Windows 10 2,657 discussions

GRAMMYS 2019

Here's Everything to Know About the 2019 Grammys

Find out how to watch the Grammy Awards if you don't have cable and more.