IE6 Taken Over by ???

[Guest]

Hi,

I'm running XP Professional with Norton 2003 Personal Firewall and AntiVirus. Today IE6 has been taken over, including a) resetting the homepage (Internet Options) to a string (%6E%6B%...) and b) going to one of three search sites, all with the same address (Searchpage.cc) and some reference on the status bar to NKVD.US.

I've used and reused SpyBot to remove two changes to my registry (Prolivation) that occur each time I use the browser.

I'm flummoxed. Any help?

Thanks.

 

[Wesley Vogel]

searchpage.cc - Adware removal instructions
http://www.kephyr.com/spywarescanner/library/searchpage.cc/index.phtml

First.
Start | Settings | Control Panel | Internet Options | Advanced tab |
Make sure both of these are NOT checked.

 Enable Install On Demand (Internet Explorer)
[[Specifies to automatically download and install Internet Explorer
components if a Web page needs them in order to display the page properly or
perform a particular task.]]
 Enable Install On Demand (Other)
[[Specifies to automatically download and install Web components if a Web
page needs them in order to display the page properly or perform a
particular task.]]

Apply | OK
=================================

Second. If you need a scan right now.

Follow the instructions!
THE PARASITE FIGHT QUICK FIX PROTOCOL
http://aumha.org/a/quickfix.php

======================
Third.
It is known as Scumware. Visit these sites. 1, 2, 3 and 4 are really good.
Download, install, run, update and run again; one or all. They are all
good, FREE utilities.

1) Spybot S & D
http://www.safer-networking.org/index.php?lang=en&page=download

2) SpywareBlaster
[[SpywareBlaster doesn't scan and clean for spyware - it prevents it from
ever being installed.
The most important step you can take is to secure your system. And
SpywareBlaster is the most powerful protection program available.]]
http://www.javacoolsoftware.com/spywareblaster.html

3) HijackThis (some other stuff that may be of interest also)
http://www.spywareinfo.com/~merijn/downloads.html

4) CWShredder direct download:
http://216.180.233.163/~merijn/files/CWShredder.exe

5) Bazooka Adware and Spyware Scanner v1.13
http://www.kephyr.com/spywarescanner/index.html?source=appvisit

6) ToolbarCop
http://www.mvps.org/sramesh2k/toolbarcop.htm

7) AdAware
http://www.lavasoft.de/support/download/
===============

Additional information & instructions.
A wealth of information here, boys and girls.

THE PARASITE FIGHT QUICK FIX PROTOCOL
http://aumha.org/a/quickfix.htm

THE PARASITE FIGHT
Finding, Removing & Protecting Yourself From Scumware
http://aumha.org/a/parasite.htm

Bugs, Glitches & Stuffups
http://www.mvps.org/inetexplorer/Darnit.htm

Dealing with Unwanted Spyware and Parasites
http://mvps.org/winhelp2002/unwanted.htm

Unexplained computer behavior may be caused by deceptive software
http://support.microsoft.com/default.aspx?scid=kb;EN-US;827315#appliesto

Spyware and Deceptive Software
http://www.microsoft.com/mscorp/twc/privacy/spyware.mspx?gssnb=1

What you should know about spyware
http://www.microsoft.com/security/articles/spyware.asp

 

[Alex Nichol]

I'm running XP Professional with Norton 2003 Personal Firewall and AntiVirus. Today IE6 has been taken over, including a) resetting the homepage (Internet Options) to a string (%6E%6B%...) and b) going to one of three search sites, all with the same address (Searchpage.cc) and some reference on the status bar to NKVD.US.

I've used and reused SpyBot to remove two changes to my registry (Prolivation) that occur each time I use the browser.

You have something that has hijacked your Home page; as an immediate
expedient while you sort things, go to Internet Options and set the Home
Page as blank. Then before applying, edit the about:blank to
about:mozilla. You have one of the Hijacks that takes over that
about:blank reference. Then Go to http://www.aumha.org/a/parasite.htm
and try other tools linked from it; especially CWShredder and
Hijackthis.

 

[Guest]

Thanks Alex. All set. See prior posts.

Kind regards,
George