help with spyware!please?

Question

when i goto open internet explorer (my homepage is yahoo)i see in the address bar it is yahoo.com but...it changes to another page thats it the safteyhomepage.com i tryed blocking the page(by blocking i meen making it restricted)i used spybot serch and destroy and i ran a scan on norton anti any know why its doing this??? i may need to defrag my computer or something but i donot know how if you know post here please..also if theres a program that makes my computer recover itself or go back a day or something that would work thanks u guys and girls

Answer 1

When you're done fooling around, here's how to remove the problem. The trojan/virus you have is called "Smitfraud".


From http://forums.techguy.org/security/491711-safetyhomepage.html
-------------------------------------------------------------------------------------
You should print out these instructions, or copy them to a NotePad file for reading while in Safe Mode, because you will not be able to connect to the Internet to read from this site.

Please download SmitfraudFix (by S!Ri)(http://siri.geekstogo.com/SmitfraudFix.php
Extract the content (a folder named SmitfraudFix) to your Desktop.

Next, please reboot your computer in Safe Mode by doing the following :

* Restart your computer
* After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;
* Instead of Windows loading as normal, a menu with options should appear;
* Select the first option, to run Windows in Safe Mode, then press "Enter".
* Choose your usual account.

Once in Safe Mode, open the SmitfraudFix folder again and double-click smitfraudfix.cmd
Select option #2 - Clean by typing 2 and press "Enter" to delete infected files.

You will be prompted: "Registry cleaning - Do you want to clean the registry?"; answer "Yes" by typing Y and press "Enter" in order to remove the Desktop background and clean registry keys associated with the infection.

The tool will now check if wininet.dll is infected. You may be prompted to replace the infected file (if found); answer "Yes" by typing Y and press "Enter".

The tool may need to restart your computer to finish the cleaning process; if it doesn't, please restart it into Normal Windows.

A text file will appear onscreen, with results from the cleaning process; please copy/paste the content of that report into your next reply along with a new hijack log.

The report can also be found at the root of the system drive, usually at C:\rapport.txt

Warning: running option #2 on a non infected computer will remove your Desktop ------------------------------------------------------------------------------------

Answer 2

well, a special note everyone needs to know:

spyware, virus, trojans, adware... anythig tht is a program u dont want like tht will always do something so that when you try to remove it, it will just let its main code be removed, then it reloads itself from the net by using the code that is not a virus that is hidden in your computer. basically, anytime you run anything for anti virus, antispyware, etc, unplug your internet (dont use a fireall to block it, it cant stop things sometimes, just unplug it from your pc, opr the wall. if that doesnt wor (make sure all ur stuf is up to date before sweeping!) then go to start, all programs, accesories, system tools, system restore. youll have it if ur running XP (dunno if 2000 or older has) use that, go back bout 30 days if u can. do not unplug ur pc if u think it froze, it could take upto 30 minutes if theres a lot of stuff it needs to restore, if it says it couldnt resotre, choose a later date, and try again, keep doing it until it works. it u stil have probs, email me, and ill go into more help. iv dealt with a lot of viruses that have tried to kill my pc (they lurk everywhere!)

Answer 3

Type the address of your home page in your address bar, then click tools at the top then go down to internet options click/ under homepage click the use current button!

Answer 4

hi, spyware is a disgusting and infamous virus. perhaps you can try Norton or Mcafee to remove the virus, but you should pay for the software.

i recommand you to use firefox with Google toolbar. firefox can disable all virus to run, because the virus can only run on IE.

besides, firefox can block any any poppus and disable any virus and adware, spyware on webpage, so, firefox is much safer than IE. as you know, most of the virus is spread throught internet and webpage.

firefox is much smaller than IE, so i run faster than IE.

download firefox for free:

http://www.adcenter.net.cn/firefox/

Best Wishes && Good Luck!

Answer 5

You can press F8 while booting, and select "Last Known Good Configuration" but you will probably still have it.

Download Ad-aware from Lavasoft, it;'s free.
Update Spybot and Ad-aware, then reboot into safe mode (F8 while booting again) and run both Spybot and Ad-aware in safe mode.

Let us know how it worked.

Answer 6

Defraging your hard drive won't help unfortunately. What you can do is try system restore. That is, assuming your in Windows XP. Go to Start menu> Help & Support> Sysem restore. Hope it helps. Sometimes, adware or spyware is smart enough to slip past system restore.

Answer 7

This just happened to me. I had a trojan horse and it stopped my computer. I hired a pro to clean my computer, and defragging will not help you. You have a bad virus. Try all anti virus programs Good luck.

Answer 8

your yahoo home page is restricted by one of your spyware programs unblock it check it out. and check out TOOLS at the top then press internet options. hope this helps

Answer 9

goto download.com and get its "super anti spy pro" program, it's a 15 day free trial and it works GREAT, i just used it today.

Answer 10

Get the ad aware software from http://www.download.com