host file hacked

[Don]

A website without my agreement downloaded code which
changes my home page from my default to their site every
time I log off and log back on. Also, I keep getting a
full page set of instructions telling me to fix this, by
deleting the starting of svchost.exe file in current
version of Windows (XP) and then reboot computer and
delete svchost.exe file in windows directory, then reboot
windows and start in safe mode (PF8 key) delete
winlongon.exe in Startup. - and then clear "host file"
leaving only "127.0.0.1 localhost." By just doing last
step (eliminating their site name from the list), it
keeps coming back with each logon. Doing the first steps
sound dangerous to me. How should I deal with this
problem? Am I right in thinking svchost.exe and
winlogon.exe are files that cannot be deleted like this?

 

[Carey Frisch [MVP]]

Home Page Hijacking - Has Your Browser Been Hijacked?
http://www.gmpservices.com/articles/hijack.asp

Perform the following:

Symantec Security Check
http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym

Stop the Invasion of Adware and Intrusive Spybot Spyware - Restore Your Privacy
http://spybot-spyware.com/

How to Delete Cookie Files
http://support.microsoft.com/default.aspx?scid=kb;EN-US;278835

How to Delete the Contents of the Temporary Internet Files Folder
http://support.microsoft.com/default.aspx?scid=kb;en-us;260897&Product=ie600

Consider purchasing and installing a good internet security program:
http://www.symantec.com/sabu/nis/nis_pe/features.html

For additional Internet Explorer assistance:

Please visit the Internet Explorer newsgroup experts:
news://msnews.microsoft.com/microsoft.public.windows.inetexplorer.ie6.browser


--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

---------------------------------------------------------------------------------


| A website without my agreement downloaded code which
| changes my home page from my default to their site every
| time I log off and log back on. Also, I keep getting a
| full page set of instructions telling me to fix this, by
| deleting the starting of svchost.exe file in current
| version of Windows (XP) and then reboot computer and
| delete svchost.exe file in windows directory, then reboot
| windows and start in safe mode (PF8 key) delete
| winlongon.exe in Startup. - and then clear "host file"
| leaving only "127.0.0.1 localhost." By just doing last
| step (eliminating their site name from the list), it
| keeps coming back with each logon. Doing the first steps
| sound dangerous to me. How should I deal with this
| problem? Am I right in thinking svchost.exe and
| winlogon.exe are files that cannot be deleted like this?