Re: redirect exploit

From: Malke (malke_at_nospoonnotreally.com)
Date: 10/06/04


Date: Wed, 06 Oct 2004 05:55:47 -0700

karenr wrote:

> Hi, Norton antivirus says i have MHTMLRedirect.Exploit .
> Apparently i cant remove it, but dont know what to do. I
> cant get into my hotmail, i keep getting messages on
> things that say"internet explore cant open the internet
> site, operation aborted. " And then something about an
> Active X control. Search engines appear that i havent
> clicked on. Can anyone help me?

You have malware on your computer. Most antivirus programs do not remove
the spyware type of malware. Here are removal steps:

Remove spyware with Spybot Search & Destroy from
www.safer-networking.org and Ad-aware from www.lavasoftusa.com. Be sure
to update these programs before running them. These programs are free,
so run them both since they complement each other. It is best to run
antivirus and spyware removal tools in Safe Mode. You may also want to
run CWShredder and HijackThis from http://aumha.org/freeware.htm.
Although CWShredder is no longer being updated, it will still clean
older variants of the CoolWebSearch malware. A combination of
HijackThis and About:Buster (http://www.majorgeeks.com) works well in
removing homepage hijackers. Please read the instructions carefully.
Make sure you are able to see all hidden files and extensions (View tab
in Folder Options). Also, make sure you've visited Windows Update and
applied all security patches. Do not install driver updates from
Windows Update. Make sure you are running a firewall.

Malke

-- 
MS MVP - Windows Shell/User
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"


Relevant Pages

  • Re: strange virus/spyware
    ... It looks like some form of spyware I guess. ... Although CWShredder is no longer being updated, ... I find a combination of HijackThis and AdBuster ... Do not install driver updates from Windows Update. ...
    (microsoft.public.security.virus)
  • Re: Viruses and Trojan heaven
    ... there is this bar at the ... Your computer is badly infected with possible viruses and spyware. ... run CWShredder and HijackThis from http://aumha.org/freeware.htm. ... Windows Update. ...
    (microsoft.public.security.virus)
  • Re: Graphics
    ... What is your video card? ... A combination of HijackThis and About:Buster ... Always read the instructions before running a spyware removal tool. ... Do not install driver updates from Windows Update; ...
    (microsoft.public.windowsxp.general)
  • Re: Problem installing Scanner
    ... computer is 100% virus and spyware-free before attempting to install ... It is best to run antivirus and spyware ... HijackThis from http://aumha.org/freeware.htm. ... Do not install driver updates from Windows Update. ...
    (microsoft.public.windowsxp.general)
  • Re: XP HOme wont shut down
    ... Rafael Chemtob wrote: ... It is best to run antivirus and spyware removal tools in ... A combination of HijackThis and About:Buster ... Do not install driver updates from Windows Update. ...
    (microsoft.public.windowsxp.general)