Is the machine fully patched at Windows Update?
A. Reset Internet Explorer (IE)
====================
Note: This step will help us clear cookies, restore the security level back
to the default settings, and disable third-party browser extensions. Before
trying the steps, we can export the cookies so they can be easily restored
later if you desire:
1. Press "Alt" from your keyboard, click "File", and click "Import and
Export".
2. Click "Next", select "Export Cookies", and click "Next".
3. The file is saved by default to your “Documents†folder, click "OK".
If you would like to import the cookies after resolving the issue, please
select “Import Cookies†in file menu to import the saved cookies file and
choose the “cookies†file from your “Documents†folder.
For Internet Explorer 6.0:
----------------------------------------
1. Click Start, Run, type: “inetcpl.cpl†(without quotation marks) and press
Enter.
2. Select the General tab, and in the Temporary Internet files window, click
"Delete Cookies", and click OK.
3. In the same tab click Delete Files, check the "Delete all offline
contents" box and click OK.
4. Click the Programs tab, and click "Reset Web Settings".
5. Click the Advanced tab, and click "Restore Defaults".
6. Under the Advanced tab, uncheck "Enable third-party browser extensions"
(requires restart).
7. Click OK.
B. Unexplained computer behavior may be caused by deceptive software
http://support.microsoft.com/kb/827315
Run a /thorough/ check for hijackware, including posting your hijackthis log
to an appropriate forum.
Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine2.blogspot.com/
http://www.elephantboycomputers.com/page2.html#Removing_Malware
When all else fails, HijackThis v2.0.2
(
http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use (in
conjunction with some other utilities). HijackThis will NOT fix anything on
its own, but it will help you to both identify and remove any
hijackware/spyware with assistance from an expert. **Post your log to
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
http://forums.spybot.info/forumdisplay.php?f=22,
http://aumha.net/viewforum.php?f=30, or another appropriate forum for review
by an expert in such matters, not here.**
If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.
