Internet Explorer Problems

[Kevin]

I'm having a problem with my Internet Explorer. Each
time I set the LAN settings and the Homepage, it
automatically sets them back to a specific setting
(Homepage for searchmeup.com and LAN Settings to a
proxy). I normally use about:blank for home and
Autodetect LAN Settings.

With the proxy settings many webpages don't load, or load
incompletely, so I have to keep resetting my settings
each time I open my browser. I've run Ad-Aware and it
finds a "Possible Browser Hijack Attempt" every single
time (9 registry keys set to the above webpage). I
quarantine and Delete them, and restart my browser, where
it opens to microsoft.com homepage. But as soon as I
close and reopen the browser moments later, the
searchmeup.com page is back and the registry keys can be
found using Ad-Aware once again.

The Lan settings are even more annoying and I don't know
if it has to do with this bug or something else.

I appreciate greatly anyone who could help me out!

Thanks!

Kevin Cook

 

[Kevin]

I also just tried to adjust the links using RegEdit, and
after changing them appropriately, they would
automatically return back to their previous settings from
the "Hijacked browser"
(http://www.searchmeup.com/search.php?aid=1057)...

Please help!

Thanks!

Kevin Cook

 

[Chuck]

I also just tried to adjust the links using RegEdit, and
after changing them appropriately, they would
automatically return back to their previous settings from
the "Hijacked browser"
(http://www.searchmeup.com/search.php?aid=1057)...

Please help!

Thanks!

Kevin Cook

Kevin,

How current is your virus protection? Try these free online virus scans:
<http://www.bitdefender.com/scan/license.php>
<http://www.pandasoftware.com/activescan/com/activescan_principal.htm>
<http://security.symantec.com/ssc/home.asp>
<http://housecall.trendmicro.com/housecall/start_corp.asp>

Now check for, and learn to defend against, additional carriers of infection.

First, download LSP-Fix and WinsockXPFIx from <http://www.cexx.org/lspfix.htm>,
and CWShredder from <http://www.majorgeeks.com/download4086.html>. All are
free.

Next, run CWShredder. Have it fix all variants.

Now check for, and remove, spyware. AdAware is not the best solution here. Get
HijackThis <http://www.majorgeeks.com/download.php?det=3155> and Spybot S&D
<http://security.kolla.de/index.php?lang=en&page=download>. Both free.
1) Install and run Spybot. First update it ("Search for updates"), then run a
scan ("Check for problems"). Trust Spybot, and make all recommended deletions.
2) Install and run HijackThis. Do NOT make any changes immediately. Save the
HJT Log.
3) Have your HJT log interpreted by experts at one or more of the following
forums (and post it here):
<http://forums.net-integration.net/>
<http://www.spywareinfo.com/forums/>
<http://forums.tomcoyote.org/>
<http://www.wilderssecurity.com/>

If removal of any spyware affects your ability to access the internet (some
spyware builds itself into the network software, and its removal may damage your
network), run LSP-Fix and / or WinsockXPFIx.

Harden your browser. There are various websites which will check for
vulnerabilities, here are three which I use.
http://www.jasons-toolbox.com/BrowserSecurity/
http://bcheck.scanit.be/bcheck/
https://testzone.secunia.com/browser_checker/

Harden your operating system. Check at least monthly for security updates.
http://windowsupdate.microsoft.com/

Block possibly dangerous websites with a Hosts file. Three Hosts file sources I
use:
http://www.accs-net.com/hosts/get_hosts.html
http://www.mvps.org/winhelp2002/hosts.htm
(The third is included, and updated, with Spybot (see above)).

And Kevin, please don't contribute to the spread of email address mining
viruses. Learn to munge your email address properly, to keep yourself a bit
safer when posting to open forums. Protect yourself and the rest of the
internet - never post your address unmunged.
http://www.mailmsg.com/SPAM_munging.htm

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.