Homepage

[Guest]

My Homepage keeps re-setting itself to Blank - this has only happened in the
last few days. Any ideas?

 

[Guest]

My Homepage keeps re-setting itself to Blank - this has only happened in the
last few days. Any ideas?

Yes, you have the "About Blank" hijacker
http://www.silentrunners.org/sr_cwsremoval.html

Here are some free programs that may be of some help.

Hijack this - http://www.majorgeeks.com/download3155.html\
Hijackthis tutorial - http://forums.maddoktor2.com/index.php?showtopic=165
SpywareBlaster - http://www.javacoolsoftware.com/spywareblaster.html
SpywareGuard - http://www.javacoolsoftware.com/spywareguard.html
WinPatrol - http://winpatrol.com
BHODemon - http://pcworld.com/downloads/file_download.asp?fid=23611&fileidx=1
asquared2 "Trojan Remover" - http://www.emsisoft.com/en/
Socklock- http://nsclean.com/socklock.html
A nice site -
http://groups.msn.com/TeMercInternetSecuritySite/malwarecountermeasures.msnw
NOD32Anti-Virus Free 30 day trial
http://nod32.com/download/trial.htm
Process Guard-
http://www.diamondcs.com.au/processguard/index.php?page=download
A link for free online virus and trojan scanners.
http://virusall.com/downscan.html

A listing of BHO's
http://www.spywaredata.com/bho.php?current_page=0

To see if that freeware program you are about to inststall
is infested with spyware check it out first at this link.
http://www.spychecker.com/


To help stop unauthorized downloads via your activex controls change your
default settings.
These settings are good for XP. The wording should be close for other systems
as well.
Go to control panel and open "internet optionsâ€.
Click on the security tab then custom level.
make sure these settings are as follows.

Download signed active x controls>set to prompt
Download unsigned active x controls>set to disable
Initialize and script active x controls not marked as safe>set to disable
Run active x controls and pluggins>set to enable
Script active x controls marked safe for scripting>set to enable
Java permissions>set to high
Launching programs and files in a IFRAME" > Prompt
Installation of Desktop items"> Prompt
Navigate sub-frames across different domains>prompt

 

[Frank Saunders, MS-MVP IE/OE]

My Homepage keeps re-setting itself to Blank - this has only happened in
the
last few days. Any ideas?

First, if you don't have WinXP SP2, get LSP-Fix - a free program to repair
damaged Winsock 2 stacks
http://www.cexx.org/lspfix.htm
save it because you might need to repair the Winsock 2 stacks after removing
the culprit.
For WinXP SP2 this command will restore the Winsock stacks if you can't
connect after clearing the malware.
Go to Start | Run and type
CMD
In the command window type
netsh winsock reset

Then get CWShredder
http://www.intermute.com/products/cwshredder.html

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup only. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com./athome/security/protect/default.aspx
http://defendingyourmachine.blogspot.com/

 

[Guest]

Frank - Many thanks for this advice - just to be sure - I have XP SP2, so I
run CW Shredder first, but if I have problems connecting afterwards, I reset
winsock?

Thanks

Michael

 

[Guest]

Hello Frank

I tried CW Shredder - unfortunately it did not work. I'm a bit scared about
the solution suggested by MAP so would appreciate any more advice you can
give me.

 

[Frank Saunders, MS-MVP IE/OE]

Hello Frank

I tried CW Shredder - unfortunately it did not work. I'm a bit scared
about
the solution suggested by MAP so would appreciate any more advice you can
give me.

I haven't looked at all the sites MAP lists. but it looks like good advice.
First try running CWShredder in Safe Mode. If that still doesn't fix it,
run HijackThis and Post your HijackThis log to
http://forums.spywareinfo.com/
http://forums.tomcoyote.org/
http://castlecops.com/forum67.html
http://www.wilderssecurity.com/ or the Spyware forum at
http://forum.aumha.org/viewforum.php?f=30 for expert analysis, not here.

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup only. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com./athome/security/protect/default.aspx
http://defendingyourmachine.blogspot.com/