Browsing problem

My sister is running Win 98SE. She has her home page set to access her Yahoo Mail. Home page does not appear to be "hijacked" however when she types in her username and password to access her Yahoo Mail, it goes to a page called www.sweepstakes.com. No matter what she does it goes to this page even if she tries another website from her Favorites. If she closes out her browser and restarts it, it will correctly go to her Yahoo Mail sign in page....but everytime she enters her username and passwrod it goes to www.sweepstakes.com. How can this be fixed?

 

If she hasn't already, tell her she needs to download, install, immediately update and then run Spybot and/or Ad-Aware. Read the help files to familiarize yourself with how they work. I recommend you use them both since each tends to find things the other misses. Let them clean up any spyware found.

 

She can't download anything because she can't get to any other website.

 

I should never assume anything so correct me if I'm wrong. You both have your own pc and you posted because she can't.

1) Can you do a ALT CTRL DEL and see what's running?
2) Have you tried to go to (with IE opentop of page) Tools> Internet Options> and change the home page?

Try #2 first.

 

We do have our own pc's as we're both adults and live in our respective homes. Yes I posted because she can't and I'm the one who keeps in touch with the various forums.

I'll have to try your #2 item. Thanks for the tip.

 

If that works make sure you also do what Miz posted. This will just be the start of the fix. If #2 works be sure to be at her pc when posting back if possible. Either way please let us know.

 

I'm going to her house tomorrow. I'll let you know what happens.

 

Download HijackThis from the CWShredder link in my signature, in the Official Downloads section (it will fit on a floppy). Save it to a permanent folder (I create a new folder in C:\ named HJT). Open and hit scan. So that you might be able to get here without being redirected, look at the R1 and R0 start page and search page/search assistant entries. If they don't say google, yahoo, microsoft, dell or something else you know would be safe, place a check beside them, close all other windows and click fix (browsing through some of the other posts here to see what type of entries have been fixed and left alone would be helpful in identifying good and bad). If there are any 01 HOSTS file entries, fix them also. Reopen IE and you should be able to navigate here and you can download Spybot and Ad-aware from the links in my signature. Make sure to immediately check for updates. Configure Ad-aware for a custom full scan and as Miz said, delete all they find. After running the two spyware removal programs, do another HJT scan, open and hit scan, then save log. Once it is saved it will open in notepad. Select all from the edit button, copy and paste the results here. If still unable to download, or even access this site, create a log, copy to the floppy and post it from home. We'll let you know what needs to be fixed and how.

 

Thanks a million noahdfear. I followed your insturctions with the programs you suggested and my sister is now able to browse the Internet once again.
In the process of making corrections with spybot S&D, a file was deleted, dmtdll.exe. As a result when the computer boots it gives the pop up message that it was unable to find the file dmtdll.exe which is included in the win.ini file. Once you click ok the sytem will run. Do yo know what this file is for and what I can do to stop the messge from popping up when windows boots?

 

I'm sure noahdfear would want you to post a new HijackThis log.

 

I fixed the problem. I ran HJT, looked under section F1 (auto loading programs) and checked the section with dmtdll.exe. I rebooted and everything is fine.

Thanks a MILLION again!!!!

 

GREAT
If you have the time would you post the new log? It helps all to view the differences in the logs after fixes.

 

This was my sister's computer so I don't have immediate access to the info right now.