This is a real nasty hijack that seems to be making it's rounds on the
internet. Here's my experience with it on one of my clients machines and how
I fixed it...
The about:blank page was locked into IE's home page setting and I could not
change it. Every minute or so the browser would get hijacked to a
"ssearch.biz" page.
The back\forward buttons in IE and Explorer were not functional (grayed
out).
The search function would not operate (hitting Start -> Search would cause
the systray to lockup)
**I don't think all of these are related, but I'm sure that the about:blank
and 'ssearch.biz' are.
I tried TONS of thing to correct the problem:
Ad-aware
Hijack This
CWShreadder (2 different versions)
and two other German spyware killer programs of which I forgot the name
I finally fixed ALL of these problems with one program...Windows XP SP2!!!!
Yes, I am as shocked as you. To be fair SP2 didn't kill the spyware but it
must have done something to hinder it's effectiveness because after the
install of SP2, NAV2004 (which was on the system all along) found and got
rid of files that it called (something).bookmark.trojan and all is well.
Here's the file names that NAV2004 found and got rid of:
cgl.dll
gokkaa.dll
m[1].bin
*Note. Backup these files before deletion just to be sure.
Hope this helps others with this problem.
--
"I don't cheat to survive. I cheat to LIVE!!"
- Alceryes
|
Similar Threads
