Yes, Another Hijacked browser- VERY nasty

anonymous_at_discussions.microsoft.com
Date: 05/18/04


Date: Tue, 18 May 2004 14:42:45 -0700

Did you turn off Windows Restore?
 

>-----Original Message-----
>Okay, I know, I know, here are many posts on hijacked
>browsers, but I can't find a resolution.
>
>Windows XP Home- IE6
>
>Had Norton, and it didn't pick up anything. Downloaded
>Spybot search and destroy and it found a bunch of stuff,
>but my browser was still hijacked, with an additional
>menu system. Downloaded Ad-aware and it found tons of
>stuff, still have browser hijacking. It finds the
>registry problems with the bad registry for the IE
search
>info. It inserts a entry into the registry named "search
>bar" as well.
>
>Ad-aware didn't fix it, but it finds the bad registry
>info. When I delete the entries, within minutes, it's
>back to where it was.
>
>I then went and bought McAfee Internet Security Suite,
>installed it, ran Virus scan, and their anti-spyware
>programs. Found nothing.
>
>Installed spyware blaster- didn't fix it.
>
>Installed cws shredder - didn't fix it.
>
>Installed hijackthis - didn't fix it.
>
>I can see everything happening in the registry, but I
>can't figure out where it's coming from.
>
>I did a clean boot, started turning services on and it
>came back up when I turned system services on.
>
>Any idea how to find out what's causing this? Also, I
>notice my lsass file is all capital letters, where it's
>not capitals on my laptop. Does this mean anything?
>
>Thanks-
>.
>



Relevant Pages

  • Yes, Another Hijacked browser- VERY nasty
    ... stuff, still have browser hijacking. ... registry problems with the bad registry for the IE search ... Installed spyware blaster- didn't fix it. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: spam and browser hijacking
    ... CWShredder (fix all found) ... What You Should Know About Spyware ... i cannot set my browser back to what i ... >>> helps with browser hijacking and deleting spyware etc. ...
    (microsoft.public.windowsxp.general)
  • Re: Trojan Horse = BackDoor.Agent.BA + Startpage
    ... This advice covers three types of home page locking - hijacking (by web ... If you are using Spybot S&D, check your 'immunize' settings which may be ... There is a clever little shareware programme that can help stop your home ... The locking is done using registry settings as per the ...
    (microsoft.public.security.virus)
  • Re: CrushEm2.0 & PuzzlEm1.0
    ... This advice covers three types of home page locking - hijacking (by web ... hijacking and locking (by ISPs when you install their ... The locking is done using registry settings as per the ...
    (microsoft.public.security)
  • Re: IE6 browser identification .NET CLR 1.1.4322
    ... > more hijacking by adware/spyware? ... Dealing with Unwanted Malware, Parasites, Toolbars and Search Engines ... > browser identification line. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)