need more help

[average joe]

My homepage was highjacked. I went through MS's
Knowledge Base Article 320159 and made changes to the
Registry to fix the home page and also removed items from
the startup. However, certain links on certain webpages
are not what they are supposed to be; when I run the
cursor over the link it shows it
as 'http://nativehardcore.com/main/k.php?key=YOUNG'. And
of course if I choose that link it highjacks my homepage
again. What is the next step I need to make to correct
this link problem?

 

[Ramesh [MVP]]

First, scan the system for parasites and remove them. SpyBot S&D searches
your harddisk for Spyware and Adware
http://security.kolla.de/

&

Adaware (similar)
http://www.lavasoftusa.com/software/adaware/
(Remember to perform a Webupdate to have the latest definitions installed)

This will remove malware from the PC.

--
Ramesh - Microsoft MVP
http://www.mvps.org/sramesh2k

Microsoft Most Valuable Professional Program
http://mvp.support.microsoft.com

~ Please reply to newsgroup ~


My homepage was highjacked. I went through MS's
Knowledge Base Article 320159 and made changes to the
Registry to fix the home page and also removed items from
the startup. However, certain links on certain webpages
are not what they are supposed to be; when I run the
cursor over the link it shows it
as 'http://nativehardcore.com/main/k.php?key=YOUNG'. And
of course if I choose that link it highjacks my homepage
again. What is the next step I need to make to correct
this link problem?

 

[Mike Burgess]

Average Joe,
nativehardcore.com = (Trojan) "Downloader.Tooncom"
http://www.symantec.com/avcenter/venc/data/downloader.tooncom.html
FYI: "Tooncom" is targeted in my HOSTS file (see below)

Dealing with Unwanted Spyware, Parasites, Toolbars and Search Engines
http://mvps.org/winhelp2002/unwanted.htm
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 11-04-03]
Please post replies to this Newsgroup, email address is invalid