we have a pc that when click on internet explorer C:\windows\secure.html is
the default page.. This brings up a whole bunch of popups. We go into
internet tools &options and set the home page as msn.com we do apply and
ok but next time we open it up.. the same c:\windows\secure.html shows up
as the default plage...
You may have been hijacked, or you have malware/spyware of some sort on your
machine: Download, install and then update the first 4 the programs listed
below and run them. Run the HiJackThis first, then run the others while you
wait for your HJT log to be analyzed. Also install the SpywareBlaster to
keep the scumware from getting on your machine. If you do not have a
firewall, install the Zone Alarm. All programs are free. Follow all the
directions carefully:
SpyBot Search & Destroy: Free
http://download.com.com/3000-8022-10289035.html?tag=lst-0-2
or
http://majorgeeks.com/download2471.html
AdAware: Free
http://www.lavasoftusa.com/support/download/
or
http://www.majorgeeks.com/downloads31.html
McAfee Avert Stinger
http://tinyurl.com/2esu7
or
http://vil.nai.com/vil/stinger/
HiJackThis: - Free
Go to
http://computercops.biz/downloads-cat-14.html ,
or
http://tinyurl.com/2oce8
and download HiJackThis. Unzip to a folder other than your Desktop or the
Temp folder, doubleclick HiJackThis.exe, and hit "Scan".
When the scan is finished, the "Scan" button will change into a "Save Log"
button. Press that, save the log some place you remember where it is. Most
of
what it lists will be harmless or even required, so DO NOT fix anything yet.
Open a the copy of your log in NotePad and made a copy. Then you can go here
to post you log:
http://forum.aumha.org/
Go to the HiJackThis section on the forum list and click to open. You can
post as a guest. It's also a good site to keep for reference. The experts
there will analyze the log and report back the results. Please allow at
least a few hours or a days time for a response.
Remember, you must return to the HJT site to get your answer. It is a good
idea to click the "Notify" box so that you will get an electronic
notification by e-mail to let you know when a response has been posted.
But, you must still return to the site of your answer
Zone Alarm - Free
http://tinyurl.com/iwhb
or
http://tinyurl.com/kzq
SpywareBlaster: (this program does not need to be run, just install and
update regularly
http://www.javacoolsoftware.com/spywareblaster.html
More Security Information::
Spyware Information:
http://www.mvps.org/inetexplorer/Darnit.htm
http://www.cexx.org/adware.htm
http://www.mvps.org/winhelp2002/unwanted.htm
Parasites: Cookies, Dialers, Keyloggers, Trackers
http://www.generation.net/~hleboeuf/bhoindex.htm
Go here to get update notices for SpyBot, Adaware, SpywareBlaster & HJT.
You should check for updates regularly or set for auto update.
Latest Security Updates
http://tinyurl.com/352te
HTH
Jan
