Kao...need some help here.Follow

Kaolian,

I have been a reader here for quite some time and just beena lurker up til now. I have had some computer problems and thought I would ask you if you could help with them. 2 times in the last 4 days my homepage has been hijacked and I have to reset it back to what it is supposed to be. I am not sure what is causing this but it is annoying the heck out of me. the page that shows up instead says something along the lines of "Has your start page been changed recently?", among other things. It tells me to click on a link to download software to get rid of nasty spyware. I have AsAware and ran it as soon as this happened this 1st time. It got rid of a few things, but it has happened again. I wrote the addresses down that the page was changed to.

I can post them here if you need them, just let me know.

Any ideas would greatly appreciated!


Vandig

That would be helpful to taylor the removal instructions, but for now, just try this blanket spyware nukage proceedure:

Step one. run a search for any "hosts" files that may have been created on the machine. Chances are they are not needed, so rename them to something other than hosts for the time being so they won't be active.

Next in internet explorer go to Tools: Internet Options. On the General tab, Click on Delete cookies; Delete files (delete all ofline files is Checked); click on the settings button, go to view files (delete anything in that directory) then click view objects (Also delete anything in that directory). Click Clear History.

On the security tab, Select Internet and then click on custom level then select Reset to: Medium and press the reset button.

On the Content tab, click Clear SSL state

On the Connections tab, if you are connected via a network card, click on the LAN button. If the Proxy server section has any content in it, or is checked, uncheck and delete all information.

On the Programs tab, press the Reset all web settings button

On the advanced tab, click the restore all defaults.

Now go to Start:Run and type in ipconfig /flushdns

After that, restart the computer and see if it will connect to the internet when it restarts. If it will, great. If it won't there is probably still another registry key that is messed up. The easiest way to fix that will be to grab a new copy of internet explorer (you can get IE 6 off the windows XP cd) and install it over the existing copy.

That should reset every possible internet variable to default and get rid of any leftover reinfection vectors. If that doesn't do it, then it may be a problem with the windows VxD drivers. IN that case, a WIndows reinstall will be necceessary.