Browser Hijacked

  • Thread starter Thread starter NelChris
  • Start date Start date
N

NelChris

I have used MSAS to remove the spyware from my XP Pro SP2
laptop and it finds and removes said spyware. However, it
has hijacked my start, search etc pages so that it
automatically diverts to these pages. I tried the default
page restore from within MSAS logged on as administrator
and it says it has done it but it doesn't. I have tried
changing it directly within the registry but again it will
not save it. Any ideas as it is doing my head in.

Cheers
 
Hi There

Can you let us know what was removed by the spyware
removers you used. If its MS Antispy Open MSAS then
goto "tools" on the top bar then to "Spyware Scan",
Click "View Spyware Scan History", Choose the date the
items were removed then click the "View Full Details Of
Scan" button and copy and paste that back here.

This is required to see ehat you have been infected with
and then repairing the damage should be easy enough.

You could try this. Close all IE Browser Windows
Goto "Start Menu" then "Control Panel" then to "Internet
Options", Goto the "Programs Tab" and press "Reset Web
Settings" and include the home page and press "Yes" then
go back to the "General Tab" and enter the homepage you
wish to use into the space provided then click "Apply"
and exit

If this changes back you still have malware on your
system so posting some details of the scan results and
what the search page is being changed to would help

Andy
 
Don't use either System Explorer, nor the 'Restore this
setting now' hyperlink in Browser Hijack Settings Restore
to fix these problems, as they don't work properly.

Instead, use the 'Change this setting to a new URL...'
hyperlink in Browser Hijack Settings Restore. Select the
item you want to modify, press the hyperlink, type in the
correct URL, and press Enter.

NOTE: Make certain to run a full system scan with MSAS,
ewido (http://www.download.com/3001-8022_4-
10326287.html), Ad-Aware (http://www.download.com/3001-
8022_4-10399602.html), and Spybot Search & Destroy
(http://www.download.com/3001-8022_4-10401314.html) in
Safe Mode (F8 before Windows screen during boot/reboot)
before trying to modify the browser settings. Only run
one scan at a time, removing what it finds, then use
another app untill you have run all the apps. ALso make
certain to have the latest updates for every app.

Alan
 
Back
Top