24start.com spyware keeps coming back.

[Sam Santiago]

Does anyone know how to permanently remove this spyware that installs files in the C:\Program Files\Onlinedirect\Portal directory and then sets your home page to the file portal.html in that directory. I have used HiJackThis to remove it several times, have used AdAware to scan and remove spyware, and have used SpywareBlaster to configure IE with tighter restrictions.
Whenever I reboot this spyware keep reappearing. I have examined the startup related registry keys, startup group, etc. Any ideas on how to permanently remove this spyware? My last resort has been to lock down permissions on the IE related registry keys and the Program Files directory. I'm using XP by the way.

Thanks,

Sam

 

[Guest]

Did you turn off System Restore when you ran your spyware
programs? If not, I believe Restore is saving the file
and thats why you can't get rid of it.

-----Original Message-----
Does anyone know how to permanently remove this

spyware that installs files in the C:\Program
Files\Onlinedirect\Portal directory and then sets your
home page to the file portal.html in that directory. I
have used HiJackThis to remove it several times, have
used AdAware to scan and remove spyware, and have used
SpywareBlaster to configure IE with tighter restrictions.

Whenever I reboot this spyware keep reappearing. I

have examined the startup related registry keys, startup
group, etc. Any ideas on how to permanently remove this
spyware? My last resort has been to lock down
permissions on the IE related registry keys and the
Program Files directory. I'm using XP by the way.

 

[Jan Il]

Does anyone know how to permanently remove this spyware that installs files in the C:\Program Files\Onlinedirect\Portal directory and then sets your home page to the file portal.html in that directory. I have used HiJackThis to remove it several times, have used AdAware to scan and remove spyware, and have used SpywareBlaster to configure IE with tighter restrictions.
Whenever I reboot this spyware keep reappearing. I have examined the startup related registry keys, startup group, etc. Any ideas on how to permanently remove this spyware? My last resort has been to lock down permissions on the IE related registry keys and the Program Files directory. I'm using XP by the way.

Have you looked to see if it is still in the _Restore folder?

hth

Jan

 

[Sam Santiago]

Thanks for the tip. Turned off system restore and it still re-appeared. Downloading latest security patches for IE, let's see if that helps.

Thanks,

Sam

--
_______________________________
Sam Santiago
(e-mail address removed)
Does anyone know how to permanently remove this spyware that installs files in the C:\Program Files\Onlinedirect\Portal directory and then sets your home page to the file portal.html in that directory. I have used HiJackThis to remove it several times, have used AdAware to scan and remove spyware, and have used SpywareBlaster to configure IE with tighter restrictions.
Whenever I reboot this spyware keep reappearing. I have examined the startup related registry keys, startup group, etc. Any ideas on how to permanently remove this spyware? My last resort has been to lock down permissions on the IE related registry keys and the Program Files directory. I'm using XP by the way.

Have you looked to see if it is still in the _Restore folder?

hth

Jan

 

[H Leboeuf]

Watch your phone bills.
24start.com is a #[Dialer.SwitchDialer]

You can block it with this HOSTS file.
http://www.mvps.org/winhelp2002/hosts.htm


--

Henri Leboeuf
Web page: http://www.colba.net/~hlebo49/index.htm
===

Thanks for the tip. Turned off system restore and it still re-appeared.
Downloading latest security patches for IE, let's see if that helps.

Thanks,

Sam

--
_______________________________
Sam Santiago
(e-mail address removed)
portal.html in that directory. I have used HiJackThis to remove it several
times, have used AdAware to scan and remove spyware, and have used
SpywareBlaster to configure IE with tighter restrictions.
Whenever I reboot this spyware keep reappearing. I have examined
the startup related registry keys, startup group, etc. Any ideas on how to
permanently remove this spyware? My last resort has been to lock down
permissions on the IE related registry keys and the Program Files directory.
I'm using XP by the way.

Have you looked to see if it is still in the _Restore folder?

hth

Jan