Favorites and Homepage hijacked

schueymcfee · 2nd January 2004

Can somebody help me remove the software that is filling my favorites folder with rubbish and changing my homepage.

I've used HijackThis, SpyBot, Trojan Remover and MCAfee but none of them seem to be able to cure his problem which returns within an hour of clearing the registry.

Thanks.

Welshjim · 2nd January 2004

schueymcfee--Have you updated each of these programs with the latest "definitions"?
Have you a firewall?
IE6 Tools|Internet Options|Security Tab|Custom Level, set most ActiveX and scripting settings at Disable or Prompt.
( You could set your Privacy tab settings to Medium High.)
You could also install SpywareBlaster, StartPage Guard, SpywareGuard, HiJack Blaster, etc.
Have you looked in your various Startup folders (like System Configuration Utility--MSCONFIG|Startup tab) to be sure some nasty is not still actively starting at each boot?
Are you visiting a specific site just before the problem starts?

noahdfear · 2nd January 2004

Could possibly be more helpful if we knew the hijacker, but suggest you also use AdAware and CWShredder and try to determine 'where' this bug keeps getting a hold on you.

**Zander** · 2nd January 2004

I would suggest you clean things up the same way you've been doing. Then, reboot and then run hijack this as soon as windows starts. Then copy and paste what it finds to this thread so we can have a look. We might be able to spot something that's getting missed in the cleanup routine. If somebody can spot something in it, it would go a long ways towards letting us know what we're dealing with here.

schueymcfee · 3rd January 2004

It was webcoolsearch and CWShredder got rid of it.

Thanks for the help!