Grandson's computer hopelessly hijacked.....

[PeterM]

My grandson just called me to tell me that his computer has been hijacked.
It will not let him do anything. I told him to (he's using Win XP Home) do a
F8, go into safe mode, and run Spybot, adaware, and things like that. He was
unable to get on the internet before, but finally it worked. I also told him
to download Hijack this, but he said he was redirected to something called
domain something. Has that company been sold, or is this a trick, by some
hijack program. Are there any other things that we should do, to get out of
this mess. I also told him to get to a restore point, hopefully several days
back. He does download music, uses Yahoo, and is in Chat rooms. He is only
15, but rarely listens to me, only when it's is too late. Is there a way I
can get on his computer, like the way we do at work? We use VNC there. I
then could get into his computer, and make an attempt to fix it. If it's
possible could anybody help me with some advise, w/o giving me a lecture
about my grandson behavior. I do know the problems, but I'm having a problem
with the computer now. Many many thanks to any of you that could help this
old man and his grandson..........Peter

 

[R. McCarty]

If he has Broadband, have him boot to Safe Mode with Networking.
Then use Help & Support and send you a "Remote Assistance" ticket.
Best to use email to send the ticket. It will allow you to log on and take
control. With Firewalls Port 3389 can be blocked and might stop the
Remote session, but it's worth a try.

You can still do it with dial-up - but it would be painfully slow. Also,
any system changes requiring a reboot would end your session, so have
him make the ticket valid for 4-hours or so.

 

[sgopus]

More than likely if he can't get to the hijackthis web site
it's due to be hijacked, I'm sure it can be downloaded at
download.com or twocows.com, meanwhile see if he can
download spyware blaster, if so tell him to install and
get the latest updates, then scan his system and enable
the protection, this help him get back his ability to
visit website. Of course it would be better if kids
listen, but who's kid ever does, they all think they know
better then their parents, till the bad times hit, and
guess who they run to first??? but that's life LOL

 

[aegxgea]

Remove from net - unplug phone line or cable.
You have already mentioned some programs to start cleaning - also try
"avast" cleans quite well and it is free.
Try zonealarm to stop bugs geting in - again free.

 

[PeterM]

Many many thanks to both of you for this wonderful help. I had no idea about
the remote control situation. I will try it. Unfortunately he is in the
backwoods of Tenn., and can only get dialup there. The other writer
mentioned the spyblaster, I will get that one and blast the damn intruders.
I feel like these people are terrorist amongst us screwing with our
computers. But I guess we are helpless................many thanks
again..........Peter

 

[PeterM]

Thanks for that tip, I will try all of them, this sounds
good............Peter

 

[SteveL]

LOL

-----Original Message-----
Many many thanks to both of you for this wonderful help. I had no idea about
the remote control situation. I will try it. Unfortunately he is in the
backwoods of Tenn., and can only get dialup there. The other writer
mentioned the spyblaster, I will get that one and blast the damn intruders.
I feel like these people are terrorist amongst us screwing with our
computers. But I guess we are

helpless................many thanks

 

[Alex Nichol]

My grandson just called me to tell me that his computer has been hijacked.
It will not let him do anything. I told him to (he's using Win XP Home) do a
F8, go into safe mode, and run Spybot, adaware, and things like that. He was
unable to get on the internet before, but finally it worked. I also told him
to download Hijack this, but he said he was redirected to something called
domain something. Has that company been sold, or is this a trick, by some
hijack program.

You never know. I suggest you point him to MVP Richard Harper's page
http://rgharper.mvps.org/cleanit.htm
with easily read advice, and links to get the tools
And if he uses Hijack This, tell it to save the log file and then
consult the expert forum at
HijackThis Logs:
http://forum.aumha.org/viewforum.php?f=30

 

[Yves Leclerc]

No. Hijackthis is still where it should be. The PC is hopelessly hijacked!
It is re-directed to another web page, which may be acting like a proxy
server. You may not be able to download any spyware removal tools because
such type of website may block all known removal tools.

Your best bet is to download Spybot, Hijackthis, CWShredder and Ad Aware SE
Personal on another PC. Then create a CD with these and go to the
"infested" PC so as to install/run each.

Y.

 

[PeterM]

Thank God for all you nice people here that answered. I send him the CD with
the downloaded programs overnight delivery. He can get back into his regular
routine now. It must be fixed, because I have not heard anything from him. I
was waiting for a note, well well. His father told me he is on the computer
again, and glued to the chair. I would have not been able to help him if it
wasn't for you nice folks. Bless you all................Peter
I will get an answer from him sooner or later, and then I will report back.
I hope it's soon.......Peter

No. Hijackthis is still where it should be. The PC is hopelessly hijacked!
It is re-directed to another web page, which may be acting like a proxy
server. You may not be able to download any spyware removal tools because
such type of website may block all known removal tools.

Your best bet is to download Spybot, Hijackthis, CWShredder and Ad Aware SE
Personal on another PC. Then create a CD with these and go to the
"infested" PC so as to install/run each.

Y.