hijacked internet explorer

[Guest]

WinXP Pro Internet explorer.

Someone has hijacked the internet explorer and a specific web site loads. The hope page can be manually changed to another and on the next reboot and IE restart the other website as become the default.

I looked in C:\Winnt\system32\drivers\etc\hosts file and the IP number for the errant website has been added there.

I do not know how this was added and what the look up sequence for Internet explorer is on boot up to read this file.

Norton antivirus comes back clean and spybot comes back clean.

Where should I look next to solve this?

Andy

 

[kim]

WinXP Pro Internet explorer.

Someone has hijacked the internet explorer and a specific web site
loads. The hope page can be manually changed to another and on the
next reboot and IE restart the other website as become the default.

I looked in C:\Winnt\system32\drivers\etc\hosts file and the IP
number for the errant website has been added there.

I do not know how this was added and what the look up sequence for
Internet explorer is on boot up to read this file.

Norton antivirus comes back clean and spybot comes back clean.

Where should I look next to solve this?

Andy

Go to http://mjc1.com/mirror/hjt/ Download and run HijackThis and post the
log to the support forum listed there. They will help you clean up the
system.

Kimmy

 

[Malke]

Go to http://mjc1.com/mirror/hjt/ Download and run HijackThis and
post the
log to the support forum listed there. They will help you clean up
the system.

Kimmy

Aside from HijackThis (which is a good suggestion), it is always useful
to scan with Ad-aware in addition to Spybot. Both programs should be
updated before running, and it is useful to run them in Safe Mode. A
great source of information about spyware and other malware is
www.spywareinfo.com

Malke