entire browser has been hijacked
From: D.K. (dkhusial_at_earthlink.net)
Date: 08/06/04
- Next message: Kevin T: "Hijacked Home Page URL"
- Previous message: Cindy: "Need to type http:// before website address to access site"
- In reply to: Bladeless: "entire browser has been hijacked"
- Next in thread: D.K.: "entire browser has been hijacked"
- Messages sorted by: [ date ] [ thread ]
Date: Fri, 6 Aug 2004 05:12:58 -0700
I do have XP, and I was able to do the CMD, get Spybot
thing. Spyboy did catch some stuff Adaware didn't. But
the browser remains hijacked. Here are some more symptoms:
(1) On Add/Remove I've removed these programs constantly--
PGate Basic, Search Assistant Uninstall, Uninstall
180searchAssistant--and somehow they always reappear when
I restart my computer.
(2) Whenever I try to shut down my computer there appears
to be some program running in the background. I get End
Now errors about some SysFader and DDE Server running.
There was a rundll32.exe error but that's gone now.
(3) When I first turned my computer on and discovered my
browser had been hijacked, a Spyware protection called
Spyware Stormer automatically installed, without me ever
having gone to its web site. And after installing, the
damn thing said I'd have to pay to use it--worthless.
(4) Then --and now-- there's a Norton Antivirus message
that pops up, but I don't even have Norton on my
computer. This pop up takes me to a site that says buy
this security pack to clean up your PC. But I don't trust
the URL. Nowhere in it do I see mcafee or norton
mentioned.
(5) That C:\WINDOWS\secure.html displays this message
only:
Detected SPYware! System error #384
_______________________________________________________
Your IP address is (insert my correct IP address here).
Using this address a remote computer has gained anaccess
to your computer and probably is collecting the
information about the sites you've visited and the files
contained in the folder Temporary Internet Files.
Attention! Ask for help or install the software for
deleting secret information about the sites you visited.
_______________________________________________________
Your computer is full of evidences!
ISP of transmission: MINDSPRING
Your IP address: (insert my correct IP address here)
They know you're using: Mozilla/4.0 (compatible; MSIE
6.0; Windows NT 5.1; Roadrunner)
Your computer is: Windows XP
Risk status for further investigation: VERY HIGH RISK
To prevent from the spyware - click here
To prevent information transmission - click here
To delete the history of your activity, click here
Based on the amount of typos and grammar mistakes I knew
not to trust the links given on this page either.
Now that everyone knows a little bit more information, is
there anything familiar that you can help with?
>-----Original Message-----
>Go on another computer and download Spybot - Search &
>Destroy. It tends to do more good then adaware, you can
>use an ftp to download it (Windows has a built in, go
>start->run->command.com(if you are using winxp use CMD)
>and type in the dos box, ftp, log on to this site
>ftp://ftp.download.com/pub/win95/utilities/spybotsd13.exe
>
>Best of luck! You'll need it!
- Next message: Kevin T: "Hijacked Home Page URL"
- Previous message: Cindy: "Need to type http:// before website address to access site"
- In reply to: Bladeless: "entire browser has been hijacked"
- Next in thread: D.K.: "entire browser has been hijacked"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
