Re: Need help IE uncrontrollable website access

From: David H. Lipman (DLipman~nospam~_at_Verizon.Net)
Date: 10/13/04

  • Next message: Fred Marshall: "OT: Buydomains.com Seeq.com IE hijack" 
    Date: Wed, 13 Oct 2004 17:01:47 -0400

    I had no problem with that Web site.

    1) Download the following three items...

             Trend Sysclean Package
             http://www.trendmicro.com/download/dcs.asp

             Latest Trend signature files.
             http://www.trendmicro.com/download/pattern.asp

             Adaware SE (personal free version)
             http://www.lavasoftusa.com/

    Create a directory.
    On drive "C:\"
    (e.g., "c:\New Folder")
    or the desktop
    (e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")

    Download sysclean.com and place it in that directory.
    Dowload the signature files (pattern files) by obtaining the ZIP file.
    For example; lpt194.zip

    Extract the contents of the ZIP file and place the contents in the same directory as
    sysclean.com.

    2) Update Adware with the latest definitions.
    3) If you are using WinME or WinXP, disable System Restore
                http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
    4) Reboot your PC into Safe Mode
    5) Using both the Trend Sysclean utility and Adaware, perform a Full Scan of your
            platform and clean/delete any infectors/parasites found.
    6) Restart your PC and perform a "final" Full Scan of your platform using both the
            Trend Sysclean utility and Adaware
    7) If you are using WinME or WinXP,Re-enable System Restore and re-apply any
                System Restore preferences, (e.g. HD space to use suggested 400 ~ 600MB),
    8) Reboot your PC.
    9) If you are using WinME or WinXP, create a new Restore point
    10) Please report back your results

    Dave

    "AL" <news@emptycup.plus.com> wrote in message
    news:416d9283$0$59447$ed2619ec@ptn-nntp-reader03.plus.net...
    | Hi
    | Sorry if this is a stupid problem.
    |
    | I have an ADSL connection with a physical firewall (router) and zone alarm.
    | Also have AVG. Whenever I use IE I am taken to a search page (not google or
    | other main engines). If I try to change my home page back to microsoft.com
    | ~(or any other site) it does not work, just goes back to search site. If i
    | manually type in a website of any sort it directs me to a porn site!
    | The following link is an example, so I don't know if this is a cause of the
    | problem or just the reult of the trojan (if it is one.)
    |
    | http://www.heretofind.com/show.php?id=118&q=www.kjdhcijucj.com
    |
    | PLEASE DO NOT CLICK ON THIS!
    |
    | Any help would be great, what is here to find? and how can I stop it. I
    | have been a complete idiot and am only just dloading SP2, then will dload
    | office updates. Thank god I had Firefox on a CD somewhere, otherwise I
    | would not have been able to do this. PLease help.
    |
    | Thank you
    | Andy
    |
    |
    | ---
    | Outgoing mail is certified Virus Free.
    | Checked by AVG anti-virus system (http://www.grisoft.com).
    | Version: 6.0.776 / Virus Database: 523 - Release Date: 12/10/2004
    |
    |

  • Next message: Fred Marshall: "OT: Buydomains.com Seeq.com IE hijack"

    Relevant Pages

    • Re: Service Pack 4 Install Failure
      ... (e.g., "c:\New Folder") ... Download sysclean.com and place it in that directory. ... If you are using WinME or WinXP, disable System Restore ...
      (microsoft.public.win2000.general)
    • Re: mcafee32.exe
      ... Dump the contents of the IE Temporary Internet Folder cache ... Download SYSCLEAN.COM and place it in that directory. ... If you are using WinME or WinXP, disable System Restore ...
      (microsoft.public.security.virus)
    • RE: PC Shut-Off when I scan for Virus with any Software
      ... Dump the contents of the IE Temporary Internet Folder cache ... Download SYSCLEAN.COM and place it in that directory. ... If you are using WinME or WinXP, disable System Restore ...
      (microsoft.public.security.virus)
    • Re: Problems getting into web sites and links
      ... (e.g., "c:\New Folder") ... Download sysclean.com and place it in that directory. ... If you are using WinME or WinXP, disable System Restore ...
      (microsoft.public.security.virus)
    • Re: Call home ?
      ... (e.g., "c:\New Folder") ... Download sysclean.com and place it in that directory. ... If you are using WinME or WinXP, disable System Restore ...
      (microsoft.public.windowsxp.security_admin)
    Loading