|
|
 |
03-03-2004, 01:59 AM
|
#1 of 10 
|
|
Member
Join Date: Sep 2002
Local Time: 10:19 PM
Local Date: 10-07-2008
Posts: 1,677
|
Help! Might be under attack from Spyware.
I keep my PC very clean and protected by virus scanning / firewall.
I don't load any plug-ins or Gator-type crap.
But somehow, something got thru...
At random intervals, my IE homepage is hijacked and my browser is re-directed to default-homepage-network.com
This insidious site then jams my PC with a fullscreen browser window that requires arcane keystrokes to close and taunts me by opening my CD drawer for effect.
THEN, they want to sell me software to stop all this nonsense!
I put the site on my Security blocklist, which traps the process, but I still have to change my homepage back after the attack.
Do I need to dl a Spyware remover or is this something that needs to be removed manually?
|
|
|
|
03-03-2004, 02:22 AM
|
#2 of 10
|
|
Member
Join Date: Sep 2002
Local Time: 10:19 PM
Local Date: 10-07-2008
Posts: 1,677
|
Good god, now we need spyware removers to remove the spyware removers!
http://news.zdnet.co.uk/internet/sec...9146150,00.htm
Not sure how to fix this yet, but I did remove a suspicious program file from within IE. |
|
|
|
|
03-03-2004, 02:43 AM
|
#3 of 10
|
|
Member
Join Date: Sep 2002
Local Time: 10:19 PM
Local Date: 10-07-2008
Posts: 1,677
|
OK, kept looking into this...
Found some freeware call Hijackthis1977.
http://www.lurkhere.com/~nicefiles/
It runs a scan of various Startup locations.
Spotted an entry for the offending site that was hiding in my IE settings in the Registry (Current User Key).
Tools lets you easily remove various entries, we'll see... |
|
|
|
|
03-03-2004, 02:47 AM
|
#4 of 10
|
|
Member
Join Date: Jan 2004
Local Time: 03:19 AM
Local Date: 10-08-2008
Posts: 175
|
adaware 6 - lavasoft.de and spybot search & destroy - safer-networking.com are two very good FREE spyware hunters.
|
|
|
|
|
03-03-2004, 06:24 AM
|
#5 of 10
|
|
Member
Join Date: Jan 2004
Local Time: 09:19 AM
Local Date: 10-08-2008
Posts: 96
|
Quote:
|
adaware 6 - lavasoft.de and spybot search & destroy - safer-networking.com are two very good FREE spyware hunters.
|
I'll second that.
MY HOME THEATER
http://www.imagestation.com/album/?id=4291832485&code=8238044&mode=invite
|
|
|
|
|
03-03-2004, 12:35 PM
|
#6 of 10
|
|
Member
Join Date: Oct 1999
Local Time: 08:19 PM
Local Date: 10-07-2008
Posts: 2,920
|
third
i never really bothered to use a program like either of these until I saw that my university offers free licenses. I'm not sure if they're shareware or what without the license but give them a download, i'm almost positive it'll solve your problem.
|
|
|
|
|
03-03-2004, 02:17 PM
|
#7 of 10
|
|
Member
Join Date: Feb 2000
Local Time: 06:19 AM
Local Date: 10-08-2008
Posts: 2,079
|
And at the risk of becoming downright repetitive and boring - consider switching to another browser that isn't as susceptible and/or attractive as a target.
http://www.opera.com
http://www.mozilla.org - either full Mozilla or the rather sleek and spiffy Firefox.
"If we do happen to step on a mine, Sir, what do we do?"
"Normal procedure, Lieutenant, is to jump 200 feet in the air and scatter oneself over a wide area." -- "BlackAdder 4"
|
|
|
|
|
03-03-2004, 03:37 PM
|
#8 of 10
|
|
Member
Join Date: Feb 2004
Local Time: 11:19 PM
Local Date: 10-07-2008
Posts: 48
|
Quote:
| But somehow, something got thru... |
There is no realistic way to stop all the crap adware/spyware, etc. from infesting your machine. . . especially using I.E.
Your best bet is to adopt a vigilant maintenance routine that includes physically emptying your temp Internet folder, running a good virus program and using a spyware scanner such as adaware.
I was recently hit with a similar bug, Frank. Downloader.ramex.c got into one of my restore files and the only way I could rid myself of it was to delete the file. I've subsequently disabled the restore services.
|
|
|
|
|
03-04-2004, 02:45 AM
|
#9 of 10
|
|
Member
Join Date: Jan 2004
Local Time: 03:19 AM
Local Date: 10-08-2008
Posts: 175
|
I agree with Kimmo's reccomendation to change your browser. I use Mozilla and I love it more than IE features wise alone. It's so much more stable and safe too! It has tabbed browsing for cryin' out loud! TABBED BROWSING!!!!!!!!!!!
Between that and the free spyware hunters I reccomended (and everyone agreed with) you'll be a step above the rest! |
|
|
|
 |
 |
|
03-04-2004, 11:04 AM
|
#10 of 10
|
|
Member
Join Date: Sep 2000
Local Time: 09:19 PM
Local Date: 10-07-2008
Posts: 5,000
|
As a stop-gap solution, in Windows XP (and Windows 98?) you can run msconfig.exe from the command-line and disable all startup programs. Reboot, see if the problem goes away. If so, slowly re-enable the startup items, one program at a time, until you find the culprit.
I find adaware ineffective against random browser popup programs. I had one on my machine that I had disabled because it looked suspicious...adaware never found it even after a year of updates! Stupid adaware.
Mahatma Gandhi, as you know, walked barefoot most of the time, which produced an impressive set of calluses on his feet. He also ate very little, which made him rather frail and with his odd diet, he suffered from bad breath. This made him...a super-callused fragile mystic hexed by halitosis.
Gameshow host: "Is taking Viagra kosher during Passover dinner?"
Whoopee Goldberg: "Not if it leads to pork."
Kermit the Frog: "Hey, that's my line!"
|
|
|
|
 |
 |
|
