Klounada.com

[Mike]

This website has defaulted to my homepage and when I try
to reset to my normal homepage, Klounada reappears after
every reboot. I can't get rid of it and reset my homepage
properly. Can anyone help?

 

[war17]

1. Use the following scanners to find and remove the website.

SpyBot S&D searches your harddisk for so-called spy- or adbots;
http://security.kolla.de/
or
Adaware
http://www.lavasoftusa.com/software/adaware/
or
CoolWebShredder
http://www.spychecker.com/program/coolwebshredder.html

2. Some porn websites redirects links to their websites using your HOSTS
file. Do a search for the HOSTS (without extension) file and remove the
entry.

3. If still no joy, download HijackThis from Spywareinfo download page

http://www.spywareinfo.com/program/hijackthis.html

Run the program and you will find many entries. Most are OK. Post the log. I
will find the problem for you.

4. For future preventive maintenance, make sure programs cannot just
download on your computer without your permission. From the Internet
Toolbar, go to Tools > Internet Options > Advanced. Make sure "Enable
Install On Demand (Internet Explorer)" and "Enable Install On Demand
(Other)" are unchecked.

 

[siljaline]

This website has defaulted to my homepage and when I try
to reset to my normal homepage, Klounada reappears after
every reboot. I can't get rid of it and reset my homepage
properly. Can anyone help?

The site would appear to be a bog-standard hijack portal.
Try running Lavasoft's Ad-aware Spyware scanner first -
This URL will auto-download the executable for Ad-aware >
http://www.majorgeeks.com/downloadget.php?id=506&file=3&evp=8dbaff7daca8f4b55bf695220993fc0f
Install, reboot - read FAQ and overview - **update** prior to running
a scan using the built-in update engine.

Post back if your problem persists.

HTH

~Silj

--
siljaline

MS - MVP Windows IE/OE
______________________

(Reply to group, as return address
is invalid - that we may all benefit)

 

[Mike]

Tried adaware. Quarantined a lot of files but still
didn't get rid of the homepage. Checked HOSTS and deleted
a couple of files, no change. I tried to get to
HijackThis and got a 404 NotFound error.

Any other suggestions? Except for slowing down my machine
when I first boot on and being a real nuisance, this
doesn't seem to be stopping me from doing anything, but I
want to get rid of it. Thanks.

 

[siljaline]

Tried adaware. Quarantined a lot of files but still
didn't get rid of the homepage. Checked HOSTS and deleted
a couple of files, no change. I tried to get to
HijackThis and got a 404 NotFound error.

Any other suggestions? Except for slowing down my machine
when I first boot on and being a real nuisance, this
doesn't seem to be stopping me from doing anything, but I
want to get rid of it. Thanks.

http://www.spywareinfo.com/~merijn/files/cwshredder.zip
Unzip the file, close all Windows and running programs, click on the
executable and follow the prompts.

"Hijack This" is here if you would like to have it.
http://www.spywareinfo.com/~merijn/files/hijackthis.zip

HTH

~Silj

--
siljaline

MS - MVP Windows IE/OE
______________________

(Reply to group, as return address
is invalid - that we may all benefit)

 

[Mike]

coolwebshredder did it!! Thanks for the help....

-----Original Message-----


http://www.spywareinfo.com/~merijn/files/cwshredder.zip
Unzip the file, close all Windows and running programs, click on the
executable and follow the prompts.

"Hijack This" is here if you would like to have it.
http://www.spywareinfo.com/~merijn/files/hijackthis.zip

HTH

~Silj

--
siljaline

MS - MVP Windows IE/OE
______________________

(Reply to group, as return address
is invalid - that we may all benefit)


.

 

[siljaline]

coolwebshredder did it!! Thanks for the help....

Great! Thanks for the feedback...

Tip of the hat to my colleague MVP Mike Burgess for the
assist on this one in exposing the true nature of this hijack.

~Silj

--
siljaline

MS - MVP Windows IE/OE
______________________

(Reply to group, as return address
is invalid - that we may all benefit)