-----Original Message-----
hi, my homepage has been hijacked and it sends me to this address
res://brceg.dll/index.html#12802. i have tried ad adware and spybot,
but they have had no success. can anyone help?
.
Hi
There is help but you'll need several tools and a change in
your surfing habits.... I fixed my son's XP Home system
using a suite of tools. No single tool will do it.
Forget HijackThis - this only identifies some things and
leaves to killing up to you.
AdAware is not a perfect solution and SpyBot only removes
this stuff temporarily. The resident DLLs keep renaming
themselves so it is a cat and mouse game.
First, get BHOdemon. This tells you immediately the name of
the DLL process that is waiting for you to launch IE.
On a typical machine you will always have three: Symantec,
Adobe and SpyBot if installed. The bad guy will appear
there also. Turning hin "off" will not help but write down
the name of the DLL. I suspect it is brceg.dll which is
calling a special index.html file.
Second, get CWShredder. This will repair a corruped IE.
Third, get Adware Away - nice little tool that quickly
identifies hijackers and trojans. Click on the third icon
and remove this stuff.
Get Security Task Manager:
http://www.spychecker.com/program/securitytask.html
Great for rating the processes by degree of vulnerability.
Clobber that DLL there if it still lives. Be carful about
others - not all >50% are "bad"
Clobber that HTML file also. You may need to boot with PF8
to safe mode to get it.
Erase your TEMP files from internet. Get the tool ProgClean
to erase this stuff regulary.
Avoid swap sites.
Good luck. Follow the suggestions and you'll get this thing
off your system. Make sure you keep AV up to date.
Note_ the DSO Exploit will be fixed next week with a SpyBot
update
