Internet Securite Website???

[Guest]

Everytime I open my browser, a site called Internet Security keeps coming up.
It is trying to get me to download security software. I have tried blocking
this website (www.iesecurity.com) but it still pops up as my homepage. I
have went in and checked my settings for my homepage and it still says
msn.com which was my homepage. I have ran Norton and it finds nothing.
Anyone know what this is and how to get it off my explorer?

 

[Steven L Umbach]

Try running a spyware detection and removal program to see if it can detect
and remove the hijacking of your home page. AdAware SE is free and well
worth a try. Be sure to allow it to update itself before you scan with it.
The links below explain more on how to deal with spyware and protect your
computer.

Steve

http://www.lavasoftusa.com/products/ad-aware_se_personal.php --- AdAware SE
http://www.microsoft.com/athome/security/computer/default.mspx

 

[David H. Lipman]

From: "Nicole" <[email protected]>

| Everytime I open my browser, a site called Internet Security keeps coming up.
| It is trying to get me to download security software. I have tried blocking
| this website (www.ie***.com) but it still pops up as my homepage. I
| have went in and checked my settings for my homepage and it still says
| msn.com which was my homepage. I have ran Norton and it finds nothing.
| Anyone know what this is and how to get it off my explorer?



If you are using any version of Sun Java that is prior to JRE Version 5.0 update 9,
then you are strongly urged to remove any/all versions.
There are vulnerabilities in them and they are actively being exploited.

It is highly suggested that you update to the latest version which is Sun Java JRE/JSE
Version 5.0 Update 9

Simple check, look under...
C:\Program Files\Java

The only folder under that folder should be the latest version.

Such as...
C:\Program Files\Java\jre1.5.0_09

http://java.sun.com/javase/downloads/index.jsp
http://www.java.com/en/download/manual.jsp

FYI:
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102557-1
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102648-1


For non-viral malware...

Please download, install and update the following software...

* Ad-aware SE v1.06
http://www.lavasoft.de/
http://www.lavasoftusa.com/
http://www.lavasoft.de/ms/index.htm

* SpyBot Search and Destroy v1.4
http://security.kolla.de/
http://www.safer-networking.org/microsoft.en.html

* SuperAntiSpyware
http://www.superantispyware.com/superantispywarefreevspro.html

After the software is updated, I suggest scanning the system in Safe Mode.

I also suggest downloading, installing and updating BHODemon for any Browser Helper Objects
that may be on the PC.

* BHODemon

http://www.majorgeeks.com/downloadget.php?id=3550&file=11&evp=245a87539eea8ed6904332b4b8b8442d

For viral malware...

* Download MULTI_AV.EXE from the URL --
http://www.ik-cs.com/programs/virtools/Multi_AV.exe

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to allow it to download the needed AV vendor related files.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal Mode.
This way all the components can be downloaded from each AV vendor's web site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC.

You can choose to go to each menu item and just download the needed files or you can
download the files and perform a scan in Normal Mode. Once you have downloaded the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
during boot] and re-run the menu again and choose which scanner you want to run in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
file. http://www.ik-cs.com/multi-av.htm

Additional Instructions:
http://pcdid.com/Multi_AV.htm


* * * Please report back your results * * *

 

[Guest]

Nicole,
The malware has probably associated its own IP address with msn.com in your
'hosts' file.

Go to C:\Windows\system32\drivers\etc\ and rename the file hosts.txt to
suspect.txt.
Then using notepad create the following lines and save as hosts.txt - your
PC will then use the name-to-IP address look up from your ISP:

# Copyright (c) 1993-1999 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host
127.0.0.1 localhost


Note that if you add the line
127.0.0.1 www.iesecurity.com # foil the hijackers

then any attempt to open www.iesecurity.com will give a 'could not contact
server' error, in case this URL is planted in your registry or any
configuration files.

 

[David H. Lipman]

From: "Newell White" <[email protected]>

| Nicole,
| The malware has probably associated its own IP address with msn.com in your
| 'hosts' file.
|
| Go to C:\Windows\system32\drivers\etc\ and rename the file hosts.txt to
| suspect.txt.
| Then using notepad create the following lines and save as hosts.txt - your
| PC will then use the name-to-IP address look up from your ISP:

You are telling the person to treat the symptom and NOT the cause. That's not the correct
approach !

 

[Guest]

I thought I was giving the original poster some important information she did
not seem to have.

In no way was I contradicting anything you posted.
Please do not confuse subscribing to a particular orthodoxy with being
correct.
While lack of hygiene allows diseases to spread, it is the symptoms which
kill individual victims.