Re: redirect exploit thankyou Malke

anonymous_at_discussions.microsoft.com
Date: 10/08/04 

Date: Thu, 7 Oct 2004 19:27:08 -0700

Just wanted to say thankyou, took your advice with spybot
and Ad-aware. Cleaned up my system, and now it works soi'm
happy.

>-----Original Message-----
>karenr wrote:
>
>> Hi, Norton antivirus says i have MHTMLRedirect.Exploit .
>> Apparently i cant remove it, but dont know what to do. I
>> cant get into my hotmail, i keep getting messages on
>> things that say"internet explore cant open the internet
>> site, operation aborted. " And then something about an
>> Active X control. Search engines appear that i havent
>> clicked on. Can anyone help me?
>
>You have malware on your computer. Most antivirus
programs do not remove
>the spyware type of malware. Here are removal steps:
>
>Remove spyware with Spybot Search & Destroy from
>www.safer-networking.org and Ad-aware from
www.lavasoftusa.com. Be sure
>to update these programs before running them. These
programs are free,
>so run them both since they complement each other. It is
best to run
>antivirus and spyware removal tools in Safe Mode. You may
also want to
>run CWShredder and HijackThis from
http://aumha.org/freeware.htm.
>Although CWShredder is no longer being updated, it will
still clean
>older variants of the CoolWebSearch malware. A
combination of
>HijackThis and About:Buster (http://www.majorgeeks.com)
works well in
>removing homepage hijackers. Please read the instructions
carefully.
>Make sure you are able to see all hidden files and
extensions (View tab
>in Folder Options). Also, make sure you've visited
Windows Update and
>applied all security patches. Do not install driver
updates from
>Windows Update. Make sure you are running a firewall.
>
>Malke
>--
>MS MVP - Windows Shell/User
>Elephant Boy Computers
>www.elephantboycomputers.com
>"Don't Panic!"
>.
>

Relevant Pages

  • Re: Tools/internet options restricted
    ... HijackThis, below, in that order). ... The process of removing certain malware may kill your internet connection. ... Another excellent program for this purpose is SpyBot Search and Destroy ... Spyware and Hijackware Removal Support, ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Homepage change, registry keys changed
    ... CoolWebSearch (if not, then see AdAware, SpyBot, and HijackThis, below). ... this also indicates that you may have acquired some other malware ... Spyware and Hijackware Removal Support, ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Unwanted home page addition
    ... CoolWebSearch (if not, then see AdAware, SpyBot, and HijackThis, below). ... this also indicates that you may have acquired some other malware ... Spyware and Hijackware Removal Support, ...
    (microsoft.public.win2000.registry)
  • Re: home page hacked
    ... Download, UPDATE before running, and run: ... this also indicates that you may have acquired some other malware ... Another excellent program for this purpose is SpyBot Search and Destroy ... Spyware and Hijackware Removal Support, ...
    (microsoft.public.windows.inetexplorer.ie6.ieak)
  • Re: Startpage about:blank keeps on coming back
    ... CoolWebSearch (if not, then see AdAware, SpyBot, and HijackThis, below). ... Restore and then reboot your system in order to clear the malware garbage ... then you can disable and then re-enable System Restore. ... Spyware and Hijackware Removal Support, ...
    (microsoft.public.windows.inetexplorer.ie6.browser)