Re: Browser Hijacked - Any Help Appreciated!!
- From: "PA Bear" <PABearMVP@xxxxxxxxx>
- Date: Tue, 7 Nov 2006 22:54:41 -0500
Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine.blogspot.com/
http://www.elephantboycomputers.com/page2.html#Removing_Malware
When all else fails, HijackThis v1.99.1
(http://aumha.org/downloads/hijackthis.zip) is the preferred tool to use. It will help you to both identify and remove any hijackware/spyware. **Post your log to http://aumha.net/viewforum.php?f=30, http://castlecops.com/forum67.html, http://forums.subratam.org/index.php?showforum=7, or other appropriate forums for expert analysis, not here.**
If the procedures look too complex - and there is no shame in admitting this isn't your cup of tea - take the machine to a local, reputable and independent (i.e., not BigBoxStoreUSA) computer repair shop.
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE, OE, Security, Shell/User)
AG wrote:
Hello. I've picked up a nasty piece of spyware which redirects Google
searches to premium search sites. Also, when I initially run Internet
Explorer 6, it will somtimes pop up with an error message that says
that lexplore has caused an error in <unknown>, which is clearly the
spyware masking it's name/file extension. I have tired spybot, adaware,
spysubtract, AVG virus scan, Panda Virus Scan, and a few others, and
nothing has cleaned it. Hijack This came up with one item that looked
suspicious, I deleted it, but the problem came back. It appears that
this <unknown> program continues to boot upon start up - I caught it
doing so by doing a ctl-alt-del every few seconds to see what was
loading. HOWEVER, it appears to be masking it's identity in msgconfig.
I've run a program which lists all start up programs, but I'm not sure
I've found anything there either.
I've seen other users post about similar problems. Has ANYONE recorded
the specific file locations/start up names of the spyware I've got on
my system? It's a pretty nasty one, it seems.
ANY help would be appreciated.
Thanks again!
.
- References:
- Prev by Date: Re: Cannot download a Norton uninstall tool
- Next by Date: Re: Allow only one website
- Previous by thread: Re: Browser Hijacked - Any Help Appreciated!!
- Next by thread: RE: Slow internet connection
- Index(es):