Re: Hijacked Homepage
From: Jan Il (abuse_at_localhost.com)
Date: 09/19/04
- Next message: Jan Il: "Re: Hotmail: The page cannot be displayed?"
- Previous message: Jan Il: "Re: IE no longer blocks pop ups"
- In reply to: Elizabeth: "Hijacked Homepage"
- Next in thread: Elizabeth: "Re: Hijacked Homepage"
- Reply: Elizabeth: "Re: Hijacked Homepage"
- Messages sorted by: [ date ] [ thread ]
Date: Sun, 19 Sep 2004 06:26:47 -0700
Hi Elizabeth :-)
You may have a hijacker, malware, spyware or parasites on your system
causing this problem. In addition to running your updated anti-virus
program, you should do the following to be sure none of these are present on
your system. Some variants of malware can replicate themselves over and
over if not removed properly. Follow all instructions carefully to be sure
your system is thoroughly cleaned
Dealing with Unwanted Spyware and Parasites:
http://mvps.org/winhelp2002/unwanted.htm
Be sure to run CWShredder, Ad-aware and Spybot.
Also be sure to use the HijackThis. Please do not post your log to this
newsgroup, but to the SpywareInfo or the Aumha HiJackThis forums
http://forum.aumha.org/viewforum.php?f=30, to allow the experts there to
evaluate your log and advise you of the necessary steps to clean your
system.
CAUTION!!!!! Before you try to remove spyware using any of the programs
below, download a copy of LSPFIX from any of the following sites:
http://www.cexx.org/lspfix.htm
http://www.spychecker.com/program/winsockxpfix.html
(if your OS is Win2k or XP) The process of removing certain malware may kill
your internet connection. If this should occur, this program, LSPFIX, will
enable you to regain your connection.
Also, get a copy of WINSOCKFIX available at:
http://www.spychecker.com/program/winsockxpfix.html
and
WinsockXP Fix- WinXP http://www.spychecker.com/program/winsockxpfix.html
Also, with instructions, at http://www.iup.edu/house/resnet/winfix.shtm
also
>From LavaSoft- all versions of Windows-
http://digital-solutions.co.uk/lavasoft/whndnfix.zip
and......
AdAware SE
http://www.lavasoftusa.com/support/download/
Update immediately after installing before using
Additional information on how to protect your PC:
The Parasite Fight http://www.aumha.org/a/quickfix.htm
More security tips at http://www.aumha.org/a/parasite.htm
Bugs, Glitches & Stuffups: http://www.mvps.org/inetexplorer/Darnit.htm
If these steps do not resolve your problem, please post back to this thread
with the details and any error messages.
Hope this helps
Jan :)
Smiles are meant to be shared,
that's why they're so contagious.
Please reply to the newsgroup so others may benefit.
Replies are posted only to the newsgroup for the benefit or other readers.
How to make a good newsgroup post:
http://www.dts-l.org/goodpost.htm
> Hi all ...
>
> Somehow or other I navigated to a site which has hijacked my home
> page / start page; it is now pointed to http://www.iwantsearch.com,
> which immediatley redirects to
> http://ez-finder.com/cgi-bin/index.cgi?c=1 ... if I reset the page to
> my usual start page, it will go there once but then reverts to this
> annoying destination, presumably dumping some information along the
> way there.
>
> I have tried Spybot, TDS and attempted to use the PestPatrol free
> scan but the ActiveX would not download ... none of these programs
> are picking up the problem so far as I can tell ...
>
> Does anyone have any advice to offer on this ... it's annoying and
> somewhat concerning since I have no idea what this little trick is
> really doing ....
>
> Thanks ....
>
>
> PS: In the process of trying to hunt this down, I noticed the old
> notepad.exe/note.com presence in my c:\windows directory; after a
> bit of fussing with it I think I have successfully deleted
> notepad.exe (the malware) and renamed note.com to notepad.exe; I'm
> not really sure if this is related to the above problem but I do know
> that it has not fixed it ...
- Next message: Jan Il: "Re: Hotmail: The page cannot be displayed?"
- Previous message: Jan Il: "Re: IE no longer blocks pop ups"
- In reply to: Elizabeth: "Hijacked Homepage"
- Next in thread: Elizabeth: "Re: Hijacked Homepage"
- Reply: Elizabeth: "Re: Hijacked Homepage"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
