Re: Hijacker help
From: donnie (donnie_at_queyosepa.org)
Date: 03/27/05
- Next message: pavlov: "Re: Disaster Recovery Site"
- Previous message: pavlov: "Re: Disaster Recovery Site"
- In reply to: Starman: "Hijacker help"
- Next in thread: Starman: "Re: Hijacker help"
- Reply: Starman: "Re: Hijacker help"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Sat, 26 Mar 2005 23:22:11 GMT
On Sat, 26 Mar 2005 02:49:33 GMT, "Starman"
<iknowbutidontknow@yahoo.com> wrote:
>I've been hijacked by searchmaid homepage, how I do i remove this? I've run
>adaware, spymaster and cw shredder to no availa and it still remains! please
>advise.
>
########################
There is one of some google results for that. Always search google
and the registry when something like that happens.
http://forums.techguy.org/archive/t-338679.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
http://www.searchmaid.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
http://www.searchmaid.com/
F2 - REG:system.ini: Shell=explorer.exe, msmsgs.exe
View Hidden Files
Open Windows Explorer. Go to Tools, Folder Options and click on the
View tab.
Make sure that "Show hidden files and folders" is checked.
Also uncheck "Hide protected operating system files".
Uncheck hide extensions
Now click "Apply to all folders", Click "Apply" then "OK"
Delete these files
C:\WINDOWS\System32\ msmsgs.exe
START ? RUN ? key in %temp% OK - Edit ? Select all ? File ? Delete
then go to C:\windows\temp and select EVERYTHING except temporary
internet files, cookies and history folders and delete all that and
then do the same for C:\temp
Empty the recycle bin
- Next message: pavlov: "Re: Disaster Recovery Site"
- Previous message: pavlov: "Re: Disaster Recovery Site"
- In reply to: Starman: "Hijacker help"
- Next in thread: Starman: "Re: Hijacker help"
- Reply: Starman: "Re: Hijacker help"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
