Browser Hijacker problem

[Sumdumgi]

I hastily made a mistake of deleting some files that a web browser hijacker had placed on my computer. I dont know when it happened but all the sudden when i open my browser (usually set to google) it took me to some other crappy site. I got pissed and deleted the cookies and some files that it had stored on my system. I did it a while ago so forgive me for not remembering where I deleted the files from.

I accomplished not having to look at their site but now every 3-5 times I open my browser I get an error message saying it cant find a file that it needs to open the crap site again and resets my start page back to their home only it doesnt load there page. I am tired of resetting my home page every 3-5 times. How can I fix my mistake?

Do i need to uninstall & reinstall ie6.0 or what?

TIA:confused:

[dldz]

Hi Sumdumgi, have you checked out this THREAD (http://forum.pcmech.com/showthread.php?s=&postid=337526#post337526) I think you might find something to help you there.
Don

[Sumdumgi]

Thanks dldz but that didnt help.

[Sumdumgi]

Here is the message when it trys to go to the crap web site;
Windows is unable to open ///c:/windows/system32/ms7531.html

[Nuclear Krusader]

Hmm. What is your starting page?

[Sumdumgi]

It was stored in the ms7531.html file i deleted. My home page has always been set to google until the ms7531 episode, i cant remember the name of the site that took over my browser though. I just remembered, it was XUPITER! I went to their site after deleting the files when I encountered the (uhoh) problem. I ran there uninstall program but it was to late as the damage had already been done. I think the ms7531 was the xupiter home page file but am not for sure. When i deleted the file i went to ie6 internet options, settings, and view objects, thats where i deleted the file from. I also ran The Cleaner vs 3.5 program on my system today and had the back orifice (sub seven) trojan. I deleted it.

[Nuclear Krusader]

Run Spybot Seach and Destroy to get rid of the remaining spyware.

Set your starting page to blank and see what happens.

[Sumdumgi]

I have run ad aware to no avail, what do you mean "blank"? I can change my home page to google just fine but the third time I open IE6 it trys to open the ms7531 file.

[Nuclear Krusader]

How are you changing the start page? In the Tools > Internet Options > General ?

[Sumdumgi]

Correct

[SARGE]

Hopefully the below should fix. Start, Run, type REGSVR32 URLMON.dll and it will indicate when completed. Then from IE, tools, internet options, programs, click "reset web settings".

Here's some free ptotection:

http://www.spywareinfo.com/downloads/spg/

[Sumdumgi]

Wow Thanks Sarge! Thats why I love this site! Excellent advice! I just opened IE 25 times and no error! What a nightmare this has been. Its like a thorn out of the lions claw:)!

The urlmon.dll file, what exactly is it? I am sure it has to do with a page loading but am curious. By the way Sarge, did you used to play Delta Force 2 or Land Warrior? I had a guy named Sarge from Texas that played in my squad.

I use AdAware, is the other a better one?

Thanks again!

[scorch]

This technically isn't related to this post but I just had to express my gratitude for everyone on this site. I was just about to post a problem about browser hijacking that had been driving me nuts for the past 4 hours when I read this thread and guys, you solved all of my problems yet again. Don't know what I would do without ya!!!!

[Sumdumgi]

Sarge
I hate to report that today I rebooted and the problem came back.

[SARGE]

Did you get this? There's a sequence to this process of fixing:

http://www.spywareinfo.com/downloads/spg/

[SARGE]

Originally posted by Sumdumgi
Wow Thanks Sarge! Thats why I love this site! Excellent advice! I just opened IE 25 times and no error! What a nightmare this has been. Its like a thorn out of the lions claw:)!

By the way Sarge, did you used to play Delta Force 2 or Land Warrior? I had a guy named Sarge from Texas that played in my squad.

I use AdAware, is the other a better one?

Thanks again!

Never played online games. The link isn't the same as Ad Aware; it prevents your start page from being hijacked. Get it. Ad Aware is supposed to snoop out the critters and get rid of them, BEFORE they do any damage.

[Sumdumgi]

Okay, I downloaded, will get it running now.
Thanks

[Iman74]

Sum did that work for you permanetly? IF yes, then I will have to do that if my problem comes back. Just yesterday I found Xupiter and had to load Lavasoft and Spybot to get rid of it. Between 3 reboots and running both apps twice it appears to be gone. Hope it remains that way.

[Sumdumgi]

Yes Iman
No problems since. Sorry I didnt post back.