Hijack of IE web opening

[Bluescreen174]

When I open my Earthlink web, I have it set to
automatically open IE to access the web. In the last
month, something now intercepts the setting changing the
earthlink start string (http://start.earthlink,net/) to
read "http://look-
today.com/passthrough/index.html?//http:start.earthlink.ne
t/". The result is every thing I do appearantly be seen
by someone else. Resetting the connection tab is only
temporary. Sometimes it returns on the first reboot,
sometimes on the 2-5th reboot. How can I find the thing
and kill it?

 

[Jerry]

Try here: http://www.spywareinfo.com/~merijn/downloads.html and get the
CWShredder.

 

[Malvern]

When I open my Earthlink web, I have it set to
automatically open IE to access the web. In the last
month, something now intercepts the setting changing the
earthlink start string (http://start.earthlink,net/) to
read "http://look-
today.com/passthrough/index.html?//http:start.earthlink.ne
t/". The result is every thing I do appearantly be seen
by someone else. Resetting the connection tab is only
temporary. Sometimes it returns on the first reboot,
sometimes on the 2-5th reboot. How can I find the thing
and kill it?

Download and run the following free Spyware clean-up programs (One may ask
for a donation--your choice.):

Ad-Aware -
http://www.lavasoftusa.com

Spybot
http://www.safer-networking.org/

CWShredder
http://www.spywareinfo.com/~merijn/downloads.html

These will confirm or refute your suspicions and clean things up if need be.

Malv

 

[Guest]

Bluescreen174,

Please see the following instructions.

Spyware/Virus Removal and Prevention:
http://www.fixyourwindows.com/windowsxpsolutions.htm
(Links to online virus scans on the same page)

Good Luck!

 

[Yuriy Shkolnikov [MSFT]]

Try removing the spyware using adaware from lavasoft. It is free.