 OT, Help, Browser take over attack |
|
|
|
Porsche, and the Porsche crest are registered trademarks of Dr. Ing. h.c. F. Porsche AG.
This site is not affiliated with Porsche in any way. Its only purpose is to provide an online forum for car enthusiasts. All other trademarks are property of their respective owners. |
|
|
| DNHunt |
 Mar 27 2004, 08:51 AM
Post
#1
|
|
914 Wizard? No way. I got too much to learn.  Group: Members Posts: 4,099 Joined: 21-April 03 From: Gig Harbor, WA Member No.: 598  |
Every time I visit here I get a browser take over the next time I connect. It adds some pretty digusting stuff to our favorites list and I'm not sure what else it may be trying to do. Ad-Aware will remove it but, it comes back. Here's what Ad-Aware says about it.
Vendor:Possible Browser Hijack attempt Category:Malware Object Type:RegData Size:- Location:Software\Microsoft\Internet Explorer\Main "Start Page" ("res://mshp.dll/index.html#37049") Last Activity:3-27-2004 Risk LevelMedium Comment:Possible browser hijack attempt Description:Possible attempt to control\redirect the browser. This object referrs to a "blacklisted" site. Anybody else get this? Any suggestions? Dave |
   |
 
|
  |
Replies
| Malmz |
Mar 27 2004, 10:26 PM
Post
#2
|
|
CSOBOSC founding member Group: Benefactors Posts: 489 Joined: 22-April 03 From: So. Cal Member No.: 602  |
Yep, my key while at clients. Spybot Search and Destroy 1.2 with all the updates get install on every machine I touch now. Make sure you immunize and lock the browser (also on the immunize tab, you have to scroll down to see it).
When that doesn't work, hijackthis. Another free tool that just digs deeper. I have even totally cleaned house with hijackthis when necessary and then just installed any start program as necessary. If you delete everything with hijackthis, it will erase your default Explorer page so don't be shocked if you bring up IE and it goes to a blank page. Save a log (option in the program) just in case you need to add anything back. Bagle-Q kicked my ass on a couple computers last week. Comes in email and you don't have to execute anything to launch it. Got a hold of it now, but it's a nasty little virus that came in under the radar... sm |
|
|
|
Posts in this topic
DNHunt OT, Help Mar 27 2004, 08:51 AM
Bleyseng Try Spy Bot to remove it.
Is your start page on MS... Mar 27 2004, 09:04 AM J P Stein I too would try spybot.
After you scan with spybo... Mar 27 2004, 09:42 AM Bruce Allert I just had the exact same thing happen yesterday ... Mar 27 2004, 09:53 AM Mark Henry Yep I had the same thing and it would always come ... Mar 27 2004, 10:14 AM sanglee007 Spybot / Adaware work well, and you can always run... Mar 27 2004, 11:36 AM mikester You can also run the google tool bar as it has a p... Mar 27 2004, 12:50 PM tracks914 I run Netscape browser and Mail programs at home a... Mar 27 2004, 07:11 PM ! I ended up getting the Spysweeper from Webroot....... Mar 27 2004, 07:20 PM Qarl EVERYONE should run this software. It's free a... Mar 27 2004, 07:23 PM Bruce Allert I did the Spybot install but had to install Ad-War... Mar 28 2004, 07:52 AM Malmz Also, Hotbar was made my Satan. :evilgrin: If yo... Mar 28 2004, 12:32 PM 914gt40 I agree with Mikez, Spysweeper from webroot.com ru... Feb 21 2005, 12:40 PM rhodyguy major attempt at browser change for me too. i get ... Feb 21 2005, 01:09 PM balljoint Mozilla Firefox and Thunderbird I just switched... Feb 21 2005, 01:33 PM rhodyguy i seem to get the b.c. notice frequently when ever... Feb 21 2005, 01:44 PM dinomium Dave, you might have to remove the bug manually fr... Feb 21 2005, 01:50 PM rhodyguy you might as well come by my place too dino. i wou... Feb 21 2005, 01:57 PM Travis Neff Hacking the registry doesn't always stop the p... Feb 21 2005, 02:09 PM rhodyguy travis, how is the hk_local_machine... actually pe... Feb 21 2005, 02:18 PM JB 914 download mozilla. problem solved. Feb 21 2005, 02:32 PM Travis Neff A file is downloaded into your temp directory, it ... Feb 21 2005, 03:08 PM rhodyguy i sent the data to you travis. for you other compu... Feb 21 2005, 06:12 PM Pnambic Just some little tricks that might help you along ... Feb 21 2005, 08:48 PM Bruce Allert I was scourged with the "About:blank" take over Feb 21 2005, 09:03 PM SirAndy <... Feb 22 2005, 08:04 AM rhaas microsoft has a great antispyware. It if free in ... Feb 22 2005, 08:06 AM skline I do this everyday for clients, the ones you delet... Feb 22 2005, 08:11 AM rhodyguy that's the problem scott. i don't know wha... Feb 22 2005, 08:23 AM skline Yes, I took a lot of classes from Microsoft, got c... Feb 22 2005, 08:27 AM rhodyguy "matering" http://www.914wo... Feb 22 2005, 08:31 AM reverie I don't think an amateur should do any file de... Feb 22 2005, 10:49 AM SirAndy ... Feb 22 2005, 10:50 AM rhodyguy all well and good. reread what i've been posti... Feb 22 2005, 11:02 AM SGB -open "help and type "safe mode" to learn how to s... Feb 22 2005, 11:22 AM rhodyguy the computer will soon be flying out the door, to ... Feb 22 2005, 11:44 AM rhodyguy something more. repeated spyboting this comes up e... Feb 22 2005, 02:48 PM
rhodyguy to quote frank barone-"HOLY CRAP!!!". ... Feb 25 2005, 07:35 PM |
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:
|
Lo-Fi Version | Time is now: 11th July 2025 - 08:42 AM |
Invision Power Board
v9.1.4 © 2025 IPS, Inc.