I got hijacked fixed it with adaware, but my homepage keeps changing everyday.?

Question

When I reboot my PC it changes my homepage to www.findthewebsiteyouneed.com every time. I finally got all the spyware and party poker off, but how do I get this stupid bug to stop changing my homepage?

Answer 1

http://www.superantispyware.com/superant...now that u have what u need....lets clean the pc first
go to start..run..type in msconfig.....press ok...new window...press start up..select disable all.press apply..press ok
go to start..run..type in prefetchin new window in top left corner..select edit..select all..press delete.......yes..delete all...
go to start..all programs..system tools..disc clean up..select c drive..after it has finished analyzing..check all the boxes..press ok..when it has finished cleaning..it will disappear...
now go to start..control panel...folder options.....view...u will see a option that says "show all hidden files and folders"..check that..press apply..press ok.....
ok....now we need to go into safe mode....turn off ur computer.....as soon as u turn it back on...u have to press f8 repeatedly until u see a screen that shows u several different options.....u need to enter the option " safe mode" use the arrow keys on keyboard to scrool to it..then press enter...after u afew moments..u will see log on as.....admin or user....select user....after that u will see ur desktop......now open antispyware..( please update this b4 going into safe mode)..click scan my computer....select full or complete system scan.....then press next..it might take ahour or so..after it has finished..remove what ever it finds...now close superantispyware....
go to start.run..type in...%temp%...press ok..new window..go to edit.select all..press delete..tes..delete all....
go to start..control panel...folder options.....view...click reset to default..press apply..press ok...
now restart your computer...u will see a pop up from system configuration...put a check mark in the little box..press ok

Answer 2

then apparently u didn't get rid of all of it ..the changing of the web is the biggest part is why a hijacking comes to ur computer is several stages the changing of ur home page is the main body of the Trojan....hijacking is not a virus ...virus contends to just one ot two files when a Trojan gets into ur computer it installs and hides in ur hidden files that are kept with in windows not IE...so since IE is Incorporated in windows it hides in ur car root files and to fine and delete is almost but impossible even if u did manage to fine where in registry it is at if u delete u crash computer....try these 2 programs the after u have control of ur computer u need this program and with these 3 u have a better chance at staying alive on the net

Answer 3

Not a solution exactly but why dont you give firefox a go? it wont be hijacked like IE is - and i prefer it... its free.

you have a few more options to try; microsofts version of "adaware" (its in beta... but seems to work great)
http://www.microsoft.com/athome/security/spyware/software/default.mspx

you can also try "SpyBot Search and Destroy"

all free. You probably jsut have a new version of spyware adaware hasnt detected thats causing the problem... make sure you have the definitions upto date :)

Answer 4

it rather is spyware alrighty. you will desire to replace your spyware sotware and attempt back. First, attempt Adaware, then Spyboy: seek and Destory. ultimately, circulate to Microsoft and get their new Defender application (nonetheless in beta, and unfastened). do not overlook to replace the definitions for those classes earlier you run the searches, one among them will easily discover your difficulty.

Answer 5

You didn't remove everything.
Try some of these:

Spyware, Adware, Trojans, Malware, Dialers, Popups:
http://www.download.com/Ad-Aware-SE-Personal-Edition/3003-8022_4-10399602.html?tag=tab_rev
http://www.ewido.net/en/download/
http://www.javacoolsoftware.com/spywareblaster.html
http://www.download.com/Bazooka-Adware-and-Spyware-Scanner/3000-8022-10247782.html
http://www.javacoolsoftware.com/sgdownload.html
http://www.safer-networking.org/
http://www.download.com/HijackThis/3000-8022_4-10379544.html
http://www.emsisoft.com/en/software/download/
Online Scanners:
http://www.webroot.com/consumer/products/spysweeper/freescan.html?
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
http://www.pandasoftware.com/products/activescan.htm
http://www.bitdefender.com/scan8/ie.html
http://www.windowsecurity.com/trojanscan/
http://www.kaspersky.com/virusscanner
http://www.spywareguide.com/onlinescan.php
http://housecall65.trendmicro.com/
Spyware, Adware, Trojans, Malware, Dialers, Popups List:
http://www.softpedia.com/catList/104
http://www.download.com/Adware-Spyware-Removal/3150-8022_4-0.html?tag=dir
http://www.majorgeeks.com/downloads31.html
http://www.filehippo.com/software/antispyware/setarea
Antivirus:
http://www.grisoft.com/
http://www.avast.com/
http://www.free-av.com/
Antivirus Lists:
http://www.softpedia.com/catList/1
http://www.download.com/Antivirus/3150-2239_4-0.html?tag=dir
http://www.majorgeeks.com/downloads29.html
http://www.filehippo.com/software/antivirus/
Firewall:
http://www.zonelabs.com/store/content/company/products/znalm/freeDownload.jsp?dc=12bms&ctry=US&lang=en&lid=staticcomp_za
Firewall Lists:
http://www.softpedia.com/catList/97
http://www.download.com/Firewalls/3150-10435_4-0.html?tag=dir
http://www.majorgeeks.com/downloads34.html
http://www.filehippo.com/software/firewalls/
IP Blocker:
http://prdownloads.sourceforge.net/peerguardian/pg2-050918-nt.exe?download
Browser:
http://www.mozilla.com/firefox/
Email, News, RSS:
http://www.mozilla.com/thunderbird/
System Cleaner:
http://www.ccleaner.com/
System Cleaning List:
http://www.softpedia.com/catList/98
http://www.majorgeeks.com/downloads12.html
http://www.filehippo.com/software/cleaning/
System Info:
http://www.softpedia.com/catList/92
http://www.majorgeeks.com/downloads9.html

Answer 6

I agree with Beer_farts recommendation of using Ewido. It is the best Trojan remover out there. I recommend you use it following this procedure. Doing the removal process in normal mode and still connected to the Net allows it to be downloaded immediately. This is because part of the infection hide in "Hidden files, folders and restore points" in your computer. All of these areas must be accessed for proper removal.

MALWARE REMOVAL (GENERAL).


Malware is a general word for all form of Viruses, Spyware etc. This procedure works for all Malware. Use the appropriate program.

You might be unable to access the Internet after removing the Malware so you will need to run LSPfix or Winsockxpfix (as appropriate). Download one, but do not run until later, if required.

LSPfix: all Windows OS except 95.

http://www.cexx.org/lspfix.htm

Winsock XP Fix: Windows XP only.

http://www.spychecker.com/program/winsockxpfix.html



UPDATE YOUR ANTI-VIRUS OR ANTI-SPYWARE PROGRAM.


Let's get cleaning

Part 1

• Temporarily show hidden files.

For Windows XP:

1.
Click Start, and then click Control Panel.

2.
Click Appearance and Themes, and then click Folder Options.

3.
On the View tab, under Hidden files and folders, click "Show hidden files and folders", and clear(uncheck) the "Hide protected operating system files" check box.



For older systems:

1.
Double-click My Computer, click View, and then click Folder Options.

2.
On the View tab, under "Hidden files and folders", click "Show hidden files and folders", and clear (uncheck) the "Hide protected operating system files" check box.


IMPORTANT: Files are hidden by Windows for a very good reason. It is not wise to experiment with these files. Unfortunately, to successfully remove modern spyware we must turn this protection off temporarily. Please turn the protection back on when you have finished cleaning your system.


Empty your Internet Explorer cache and your other temporary file folders:

1.
On the Internet Explorer Tools menu, click Internet Options.

2.
On the General tab, in the Temporary Internet Files section, click the Delete Files button. This will delete all the files that are currently stored in your cache.

3.
Select the Delete all offline content check box in the confirmation dialogue box that appears, click OK.

4.
Click OK again.

Restart in Safe Mode:

To do this you need to hold down or repeatedly tap the F8 key while the computer is booting (when the computer is displaying a black screen with white text). When the boot menu appears, use your keyboard arrows to select "Safe Mode."

Safe Mode can look quite ugly. The color may look bad, and all of your desktop icons will be very large. This is normal.



START RUNNING YOUR SCANNER.


When the scan and removal are completed REBOOT COMPUTER. This will restart you in normal mode.

If you are unable to access the Internet after removing Malware you will need to run LSPfix or Winsockxpfix (as appropriate).


If you are using Windows XP Service Pack 2 (SP2) and are unable to access the Internet after removing Malware, there is a command that may fix the problem, removing the need to run Winsockxpfix. It works by resetting the winsock catalogue. Click on Start, then Run and type CMD in the dialogue box that appears. Click OK. Type "netsh winsock reset" (no quotes)into the DOS window that appears.


The last steps

If you are running Windows XP or Windows ME, and your computer has been successfully cleaned of Malware, there is one more thing that needs to be done.

Delete any old restore points and then create a new restore one. The old ones may, of course, be infected with the Malware and cannot be used.

First, start and then stop the Restore Service. This is done differently depending on what operating system you are running.

Windows XP:

1.
Click Start, and then click Control Panel.

2.
Click Performance and Maintenance, click System, and then click on the System Restore tab.

3.
Select the Turn Off System Restore check box, click Apply, then restart your computer.

4.
Return to the System Restore Tab and turn System Restore back on.


Windows ME:

1.
Click Start, click Control Panel, click System.

2.
Click Performance, click File System, and then click Troubleshooting.

3.
Enable the option Disable System Restore, click Apply then restart your computer.

4.
Return to the Troubleshooting tab and turn System Restore back on.


To set a manual restore point complete the following steps:

1.
Click the Start button.

2.
Point to Programs, then navigate to Accessories, then System Tools, then click System Restore.

3.
Choose Create a restore point, and then click Next.

4.
In the Restore point description box, type a name for your restore point, and then click Next.

5.
Click OK.

If the Ewido doesn't remove this Hijacker then you might have a SmitFraud Trojan. These sometimes require special removal programs. Here are two site that specialize in SmitFraud removal.

http://www.internetinspiration.co.uk/roguefix.htm

http://siri.urz.free.fr/Fix/SmitfraudFix_En.php

I also recommend you read this site after you get the hijacker removed.

http://www.internetinspiration.co.uk/computer_privacy_and_security.htm

Answer 7

Then you didnt get it fixed! You still have a homepage hijacker!

Answer 8

this site has a nice and easy to use browser hijack cleaner. good for 10 free cleans then you have to buy. took care of a couple of my computers that got hijacked. goodluck.

Answer 9

Then obviously you didnt fix it, to fix it for free download the yahoo toolbar, and run the Norton Anti-Virus that should be on the tool bar. Hope it helps

Answer 10

Try Spybot to get rid of the adware and then innoculate using it, then it won't let anything download to your system without intervention on your part.