Hijacked - Need Help

[Jo L]

Friend has a desktop PC running XP Home. For last few weeks, every
time she enters a subject in Google search window and selects any
search result, she is "hijacked" to various sites inculding True.com,
info.com., yellowpage.com, findstuff.com, anticipatesavings.com.
and a variety of other unwanted sites.. She did a scan with free
HijackThis but the PC still takes her to sites including those
mentioned. Any suggestions before she does a clean install?

PS: Happy Holidays to All here!

 

[Leonard Grey]

Show the computer to a professional.

 

[Bruce Hagen]

HijackThis creates a file that needs to be submitted for inspection. It does
not fix anything.

Checking for help with Hijackware

http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine.blogspot.com/
http://www.elephantboycomputers.com/page2.html#Removing_Malware

When all else fails, HijackThis v2.0.2
(http://aumha.org/downloads/hijackthis.zip) is the preferred tool to use. It
will help you to both identify and remove any hijackware/spyware *with
assistance from an expert in such matters*.

**Post your log to http://aumha.net/viewforum.php?f=30,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7, or other appropriate
forums for expert analysis, not here.**

 

[db.·.. >]

you might try running
a program called spybot
and use the inoculation
feature.

then also run another
program called hijackthis.

the hijackthis results will produce
a number of lines indicating
what is installed to execute
a redirection.

for many of us, we can delete
all the lines.

but for the novice, some should
be left alone however others can
be deleted.

like the entries pertaining
to the browser.

you can delete them all or
leave the one for the
homepage.

----------
incidentally don't forget
to make a system restore
point before doing any of
the above.
--

db·´¯`·...¸><)))º>
DatabaseBen, Retired Professional
- Systems Analyst
- Database Developer
- Accountancy
- Veteran of the Armed Forces

 

[Gerry]

Jo

What are the anti-virus and anti-spyware arrangments?

I would download and run Spybot S & D (freeware version) and see if it
finds anything like a Trojan. If Spybot S & D finds anything significant
( other than cookies) you need to be wary. If it removes something and
it returns or another nasty pops up it can be an indication that there
is another hidden nasty not being detected.

Spybot S & D. There is a freeware version buried in this link:
http://www.safer-networking.org/en/spybotsd/index.html


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~