Hi Paul
Paul said:
I have a problem I am trying to resolve for a client with IE6. The default
page is stuck on
http://default-homepage-network.com/start.cgi?new-hkcu.
When you open IE it constantly trys to forward you to this url. If I click
on stop and type in a url like
www.yahoo.com or any, it still tries to
forward you to the same url. Even if I change it in Internet Options. The
computer was infected with a trojan and spyware. I was able to remove all of
them using Spy Sweeper and Norton AV 2004. I also tried the repair option
for IE and restoring back to IE5, but no luck. Anyone have a fix, other wise
I guess I will have to reinstall the OS.
It is possible you may have parasites, spyware, adware or
malware on your system causing the problem. Download
and install, you *must* update the programs prior to running to
be sure they have the latest definitions, then run the programs
below. They are free and very effective.Be sure to run both
SpyBot and Adaware, as what one does not detect the other
may. It is important that you follow all directions carefully.
These types of files will not be detected by your AV or a Trojan cleaner.
Run the SpyBot and AdAware programs first, then the HiJackThis. Just copy
and paste the links into the address window. If you can't get to the
websites from the infected computer, then go to another computer and
download then from the websites, burn them to a CD and then install them on
the infected machine. As soon as the problem has been cleared, update the
SpyBot and AdAware to be sure it has the latest definitions and run them
again to be sure the machine is clean.
SpyBot Search & Destroy: Free
http://download.com.com/3000-8022-10289035.html?tag=lst-0-2
or
http://majorgeeks.com/download2471.html
AdAware: Free
http://www.lavasoftusa.com/support/download/
or
http://www.majorgeeks.com/downloads31.html
HiJackThis: - Free
Go to
http://computercops.biz/downloads-cat-14.html ,
or
http://tinyurl.com/2oce8
or
http://tinyurl.com/2atxk
and download HiJackThis. Unzip to a folder other than your Desktop or the
Temp folder, doubleclick HiJackThis.exe, and hit "Scan".
When the scan is finished, the "Scan" button will change into a "Save Log"
button. Press that, save the log some place you remember where it is. Most
of
what it lists will be harmless or even required, so DO NOT fix anything yet.
Open a the copy of your log in NotePad and made a copy. Then you can go here
to post you log:
http://forum.aumha.org/
Go to the HiJackThis section on the forum list and click to open. You can
post as a guest. It's also a good site to keep for reference. The experts
there will analyze the log and report back the results. Please allow at
least a few hours or a days time for a response.
Remember, you must return to the HJT site to get your answer. It is a good
idea to click the "Notify" box so that you will get an electronic
notification by e-mail to let you know when a response has been posted.
But, you must still return to the site of your answer
Help with Hijackware & Scumware Information - Free
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/Darnit.htm
HTH
Jan