Re: Hijacked browser

I use the following steps to get rid of spyware and they work for me. All
these programs are free. Do a "Google" to find them.

Download and install the latest version of:
Lavasoft's AdAware
Spybot Search and Destroy
CWShredder
HijackThis
Spyware Blaster
Microsoft AntiSpyware
McAfee's Stinger
Download and install the latest definition files for the above (except for
CWShredder and HijackThis which should be the latest versions).
Download and install the latest definition files for your anti-virus
program.
Disable System Restore.
Navigate to C:\Windows\Prefetch
Delete all files in the Prefetch folder. Don't delete the folder itself.
Delete all cached files in IE.
Run disk Cleanup. Check all items in options blocks and run.
Make sure the Recycle bin is empty.
Restart in Safe Mode.
Run all of the above programs (including anti-virus) one by one. Use care
with HijackThis.
Run them all again until they show no infection or malware.
Restart in normal mode and see if all is OK.
Enable System Restore.

Run these programs on a regular basis.

Good luck, let us know.

Fitz

"*** Ballard" <ballardr@xxxxxxx> wrote in message
news:vtpl41tbpqcqok7ffok03c9dkkrsn47lk7@xxxxxxxxxx
> My IE has been hijacked by a web site I visited. My home page was
> changed, my search engine has been changed, and items were added to my
> favorites. I am able to get all of these things back to normal, but
> when I restart IE the junk is all back. Same if I reboot.
>
> Additionally, there is a (bogus?) Windows Firewall look alike icon in
> the system notification area with a hover note that "your computer may
> be at risk". A balloon there wanted me to click on it, but I am
> suspicious that this too is part of the spyware/adware that I caught.
> There is also a periodic warning notification that appears with pretty
> much the same message. It goes to an "MSN" site explaining
> adware/spyware, but it also appears bogus because of the way the links
> behave.
>
> What is the best tool to get rid of this stuff? Are there known files
> that I can find and dump? Has IE itself been altered or is it just
> being pointed to the adware data for the alterations?
>
> *** Ballard
> ballardr@xxxxxxx


.

Quantcast