Homepage

[Jeff]

Everytime I restart my computer, Internet Explorer 6
automatically directs the 'homepage' to
http://www.fastwebfinder.com/hp.php
even though I never set it to this page. Also, three
webpages are mysteriously added to my 'favorites' folder.
I have tried many things, such as deleting all cookies
and all temporary internet files. Is there anything else
I can do?
This problem only happens with Interet Explorer, not my
other browsers. Also, under my cookies folder, there is
one file I cannot seem to delete called index.dat.
Windows won't let me delete it since it tells me it is
being used by another program. Could this be the source
of the problem? Thanks.

 

[PA Bear]

Dealing with Hijackware
http://mvps.org/winhelp2002/unwanted.htm
http://www.mvps.org/inetexplorer/Darnit.htm#tshoot
http://aumha.org/a/parasite.htm

I highly recommend using HijackThis to identify and assist in the removal of
these bad guys. **Post your files to http://forums.spywareinfo.com/, not
here.**

NB: If you have ever downloaded HijackThis or CWShredder, it is urgent that
you upgrade to the latest versions before using them again. Due to a new
variant of the CWS Trojan, using either HijackThis or CWShredder on an
infected Win98 or WinME computer may lead to severe damage to that computer.
You must update to the very newest versions of these programs before using
either of them again, and you should get a new copy of CWShredder before
each and every use.
(11 Nov-03)

http://www.spywareinfo.com/~merijn/files/hijackthis.zip :: HijackThis
http://www.spywareinfo.com/~merijn/files/cwshredder.zip :: CWShredder
http://www.wilderssecurity.net/spywareblaster.html :: SpywareBlaster

Also update your virus definitions and then run a full system scan. From
now on, do both daily.
--
HTH...Please post back to this thread

~Robear Dyer (aka PA Bear)
MS MVP-Windows (IE/OE), AH-VSOP

Protect Your PC
http://www.microsoft.com/security/protect/default.asp

 

[Mike Burgess]

Jeff,
fastwebfinder is the latest varient of Coolwebsearch (parasite)

How to remove Coolwebsearch and affiliates
http://mvps.org/winhelp2002/unwanted.htm#Coolwebsearch

Note: this type hijack indicates an unpatched machine!
Please visit Windows Update to avoid these exploits.
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 11-08-03]
Please post replies to this Newsgroup, email address is invalid