Wikiposts
Search
Computer/Internet Issues & Troubleshooting Anyone with questions about the terribly complex world of computers or the internet should try here. NOT FOR REPORTING ISSUES WITH PPRuNe FORUMS! Please use the subforum "PPRuNe Problems or Queries."

Help I'm infected

Thread Tools
 
Search this Thread
 
Old 25th Apr 2004, 05:47
  #1 (permalink)  
Thread Starter
 
Join Date: Jun 2001
Posts: 341
Likes: 0
Received 0 Likes on 0 Posts
Help I'm infected

I'm running windows XP, broadband with pipex and keep getting my home page hijacked to some porn directory site despite repeatedly selecting google as the home page. Have updated and run AVG and ad-aware 6 to no avail. I have looked for the prog / file and can't find it to delete. HELP!
stillin1 is offline  
Old 25th Apr 2004, 10:12
  #2 (permalink)  
 
Join Date: Dec 2000
Location: Horsham, England, UK. ---o--O--o---
Posts: 1,185
Received 4 Likes on 2 Posts
stillin1 -

Suggest you also try downloading and running Spy bot and also try Trend Micro's House call.. See Sticky Thread at top of this Forum.

Spy bot apparently can find some items that ad aware can miss and vice versa..
Out Of Trim is offline  
Old 25th Apr 2004, 14:34
  #3 (permalink)  

...the thin end thereof
 
Join Date: Jun 1998
Location: London
Posts: 269
Likes: 0
Received 0 Likes on 0 Posts
You have a trojan.

Try all the suggestions on the sticky; but they are not exhaustive and even the most up to date fixes - Adaware/Spybot can't do everything.

Google for a help site, there are some good ones that can help you clean your PC.

When you have fixed it, or before, install a firewall. There are some good free ones online.
Wedge is offline  
Old 26th Apr 2004, 19:35
  #4 (permalink)  
 
Join Date: Jan 2004
Location: Bracknell UK
Posts: 357
Likes: 0
Received 0 Likes on 0 Posts
Hi Stillin,

I've already got a fair idea of what you've got infesting your machine.. the latest variant(s) of CWS (CoolWebSearch), and at the moment we've got just about every security expert on the planet working on a fix, and it's not yet 100%.

Please download 'Hijack This!' from here, unzip, and place it in it’s own folder, (not in the temp folder, or on the desktop) doubleclick HijackThis.exe, and hit "Scan". When the scan is finished, click "Save Log", and copy and paste it in a PM to me.

This will give me a rundown of what’s going on in your PC. I'll be happy to check it over for you. Don’t fix anything yourself yet, as a lot of the stuff on that list will be harmless or required.

Cheers

Liam

A member of the Alliance of Security Analysis Professionals since 2004.
E-Liam is offline  
Old 26th Apr 2004, 21:55
  #5 (permalink)  
 
Join Date: Jul 2000
Location: The Daylight Saving Free Zone
Posts: 733
Likes: 0
Received 0 Likes on 0 Posts
Question

Gidday E-Liam: Can you tell me why HJT needs to be in its own folder and not on the desktop?
sprocket is offline  
Old 27th Apr 2004, 05:55
  #6 (permalink)  
 
Join Date: Jan 2004
Location: Bracknell UK
Posts: 357
Likes: 0
Received 0 Likes on 0 Posts
Hi Sprocket,

HJT generates backups should something be accidentally deleted and needs replacing. It needs it's own folder in order to do this.

Cheers

Liam
E-Liam is offline  

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off



Contact Us - Archive - Advertising - Cookie Policy - Privacy Statement - Terms of Service

Copyright © 2024 MH Sub I, LLC dba Internet Brands. All rights reserved. Use of this site indicates your consent to the Terms of Use.