View Full Version : Hijack?
zim1and2
12-22-2003, 12:50 AM
Hello. I have an ongoing problem. Whenever I reboot, 2 porn bookmarks are added to IE favs and my IE homepage is reset to a search page for porn, drugs, etc. I reset the homepage, delete the 2 bookmarks, delete all cookies, clear history, empty the temp and temp internet files, run virus scan, ad aware, trojan scan, registry cleaner. Then, when I reboot, the bookmarks re appear and the homepage is reset again. All scans show nothing and I have the latest patches. Any hints? thanks
kstatefan40
12-22-2003, 12:56 AM
that sounds like a virus i had the other day... i think the name was byteverify
thats exactly what it did. do a search at www.trendmicro.com and see if thats what it sounds like... i can provide removal instructions if thats what it is.
EDIT: Oh yeah, WELCOME TO PCMECH!!
oddjob
12-22-2003, 12:57 AM
http://www.wilderssecurity.net/bhblaster.html
Browser Hijack Blaster.
HTH
DragonNOA1
12-22-2003, 02:08 AM
Check to see what programs are starting. I had one like what you said, and in msconfig there were two programs, one called systray another systray_ but the underscore didn't show in that menu, just in windows explorer. So double check what you have starting up and look out for tricks.
SARGE
12-22-2003, 02:37 PM
Besides investigating what's in msconfig (start, run, type msconfig, click startup tab), hit ctrl alt del and write down each entry. Do a find for each and again investigate and perhaps a google.com search. Get a copy of Ad-Aware and SpyBot (free) and the below:
http://www.spywareinfo.com/downloads/spg/
http://www.f-prot.com/products/home_use/dos/
zim1and2
12-22-2003, 10:10 PM
thanks for all the replys, still have the problem . kstatefan40, what are the removal instructions please. I was able to get rid of a few virus files embedded in the restore program that I have not been able to remove until now because of the write protected media thing, thanks for the tips. Any others would be most welcome.
Undead_Rider
12-23-2003, 10:57 AM
welcome to pc mech. I has this problem around halloween. Homepage kept getting a porn site. and every time i had a pop up for halloween sex like every 2 seconds. I ran scan found nothing. than i deleted every temperay files etc right kept coming back after a re-boot so i left my computer on for a full 72 hours with everythng deleted and nothing poped up any more and home page was at default
zim1and2
12-23-2003, 08:21 PM
I used the online virus scan at TrendMicro.com and it found 4 virus files that Mcafee had missed and 1 was described as doing exacty what was happening to my PC. I deleated all and the problem is now gone! thanks to everyone who replied. I will be reading and posting quite often because I am planning on building my first PC...
catfishjoe_1
12-24-2003, 09:51 PM
This is the reason it is wise to check how good your resident a-v program really is. I do scans at housecall (http://housecall.trendmicro.com/housecall/start_corp.asp) at least once every two weeks. Weekly scan with Norton. And check for updates with trojan hunter (http://sh1204.sajthotellet.com/trojanhunter/) .So far I have not had a virus get by the guard feature of either of these (to my knowledge), although when I loaded trojan hunter the first time I was very dirty.
cat
ErnieNow
12-25-2003, 06:32 PM
Zim - Mcafee is kinda a joke virus checker. Get a good ol' Norton. Mcafee is pretty much laughed at by viruses.
zim1and2
12-26-2003, 01:24 PM
Thanks
vBulletin® v3.7.4, Copyright ©2000-2009, Jelsoft Enterprises Ltd.