Re: spam and browser hijacking

From: Sleepless in Seattle (jonah_at_guest.com)
Date: 01/21/05


Date: Fri, 21 Jan 2005 19:44:24 +1300

Help with Hijackware
http://aumha.org/a/parasite.htm
     http://aumha.org/a/quickfix.htm
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/Darnit.htm

CoolWebSearch Chronicles
http://www.spywareinfo.com/~merijn/cwschronicles.html

Run these tools in the following order with nothing else running in
background:

1. CWShredder (fix all found)

2. Ad-Aware (fix all found)

3. Spybot (RTFM but generally fix everything in red)

Important: You *must* seek updates for Ad-Aware, Spybot, etc., before each
and every use, even "right out of the box". But even they can't catch
everything, 24/7. When all else fails, HijackThis
(http://www.spywareinfo.com/~merijn/files/HijackThis.exe) is the preferred
tool to use. It will help you to both identify and remove any
hijackware/spyware. **Post your files to http://forums.spywareinfo.com/ or
http://forum.aumha.org/viewforum.php?f=30 for expert analysis, not here.**

[Alternate download pages for many of the above tools may be found at
http://aumha.org/a/parasite.htm.]

Also:

1. Download and run Stinger (http://vil.nai.com/vil/stinger/); then...

2. Update your virus definitions, enable Show Hidden Files
(http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2002092715262339)
and run a full system scan in Safe Mode
(http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001052409420406)
with nothing else running in background.

Note the files identified and removed then find the corresponding page for
the file at your AV maker's online support pages (e.g.,
http://securityresponse.symantec.com/avcenter/venc/data/adware.winfavorites.html)
and follow all Removal steps.

WinXP Only (WinME similar): If this scan finds anything, create a new
Restore Point then Disk Cleanup > More options > Delete all but the most rec
ent Restore Point.

So How Did I Get Infected Anyway?
http://boards.cexx.org/viewtopic.php?t=957

-- 
HTH - Please Reply to This Thread
~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE), AH-VSOP
AumHa Forums
http://forum.aumha.org
What You Should Know About Spyware
http://www.microsoft.com/mscorp/twc/privacy/spyware.mspx
-- 
"desparate" <desparate@discussions.microsoft.com> wrote in message 
news:141601c4ff80$00d2faa0$a601280a@phx.gbl...
> Hi sleepless
>
> firstly thanks for replying
>
> one example is win32:dialer
>
> and of course, i cannot set my browser back to what i
> want no matter what program i run.  they say it is clean
> but the browser still goes back to the infected site
> which is xysearch or something along those lines
>
>
>>-----Original Message-----
>>Example please of the spyware which you can't delete.
>>
>>-- 
>>Jonah
>>"desparate" <desparate@discussions.microsoft.com> wrote
> in message
>>news:032c01c4ff7b$47c5c460$a501280a@phx.gbl...
>>> hi
>>>
>>> i have used microsofts beta version of software that
>>> helps with browser hijacking and deleting spyware etc.
>>>
>>> however, i found it does not permanently delete all of
>>> the above.
>>>
>>> How can i permanently delete spyware and browser
>>> hijacking?
>>>
>>> I am desparate!!!
>>
>>
>>.
>> 


Relevant Pages

  • Re: IE6 will not launch
    ... I do not believe I am suffering from a hijacking or from spyware. ... I need to download the setup, which detects my version, ... >> use Windows Explorer as an emergency browser, ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • RE: Clear history
    ... it seems that your browser is hijacked. ... hijacking the browser by spyware. ... go to www.lavasoftusa.com and www.spybot.com and download these freeware which will clean your computer from spyware. ... The clear history button is greyed out and deleting the history files in the user folder does not work. ...
    (microsoft.public.windowsxp.general)
  • Yes, Another Hijacked browser- VERY nasty
    ... >stuff, still have browser hijacking. ... >registry problems with the bad registry for the IE ... >Installed spyware blaster- didn't fix it. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Yes, Another Hijacked browser- VERY nasty
    ... stuff, still have browser hijacking. ... registry problems with the bad registry for the IE search ... Installed spyware blaster- didn't fix it. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Adware Sick
    ... SpyBot Search and Destroy ... These are the main programs I used this weekend to fix my brother's computer but he had problems beyond just IE hijacking. ...
    (microsoft.public.windowsxp.help_and_support)

Loading