Re: Hijacked browser

Tech-Archive recommends: Speed Up your PC by fixing your registry

What do you mean by "use care" with HijackThis?

Does "cached files" in IE mean "Temporary Internet Files" under
Internet Options?

*** Ballard
ballardr@xxxxxxx


On Wed, 30 Mar 2005 19:20:10 GMT, "Fitz" <linc007@xxxxxxxxxxx> wrote:

>I use the following steps to get rid of spyware and they work for me. All
>these programs are free. Do a "Google" to find them.
>
>Download and install the latest version of:
> Lavasoft's AdAware
> Spybot Search and Destroy
> CWShredder
> HijackThis
> Spyware Blaster
> Microsoft AntiSpyware
> McAfee's Stinger
>Download and install the latest definition files for the above (except for
>CWShredder and HijackThis which should be the latest versions).
>Download and install the latest definition files for your anti-virus
>program.
>Disable System Restore.
>Navigate to C:\Windows\Prefetch
>Delete all files in the Prefetch folder. Don't delete the folder itself.
>Delete all cached files in IE.
>Run disk Cleanup. Check all items in options blocks and run.
>Make sure the Recycle bin is empty.
>Restart in Safe Mode.
>Run all of the above programs (including anti-virus) one by one. Use care
>with HijackThis.
>Run them all again until they show no infection or malware.
>Restart in normal mode and see if all is OK.
>Enable System Restore.
>
>Run these programs on a regular basis.
>
>Good luck, let us know.
>
>Fitz
>
>"*** Ballard" <ballardr@xxxxxxx> wrote in message
>news:vtpl41tbpqcqok7ffok03c9dkkrsn47lk7@xxxxxxxxxx
>> My IE has been hijacked by a web site I visited. My home page was
>> changed, my search engine has been changed, and items were added to my
>> favorites. I am able to get all of these things back to normal, but
>> when I restart IE the junk is all back. Same if I reboot.
>>
>> Additionally, there is a (bogus?) Windows Firewall look alike icon in
>> the system notification area with a hover note that "your computer may
>> be at risk". A balloon there wanted me to click on it, but I am
>> suspicious that this too is part of the spyware/adware that I caught.
>> There is also a periodic warning notification that appears with pretty
>> much the same message. It goes to an "MSN" site explaining
>> adware/spyware, but it also appears bogus because of the way the links
>> behave.
>>
>> What is the best tool to get rid of this stuff? Are there known files
>> that I can find and dump? Has IE itself been altered or is it just
>> being pointed to the adware data for the alterations?
>>
>> *** Ballard
>> ballardr@xxxxxxx
>

.

Quantcast