|  RSS

PC World Forums: Hijacked! - PC World Forums

Jump to content

Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

Hijacked!

#1 User is offline   aueloxn3 Icon

  • Newbie
  • Pip
  • Group: Members
  • Posts: 2
  • Joined: 03-August 08

Posted 03 August 2008 - 06:46 PM

Thank you, all, for the wonderful information posted on this site. I've been researching the PCW questions and documents, but I can't seem to find what I"m looking for. I ran Spy Sweeper, Spybot and Advanced Windowscare2 with no luck. It appears that my laptop (running XP) has been hijacked (ever since my 17 yr. old was using it) in that Google was my Internet home page. Now the following site pops multiple windows automatically in the middle of each application I work on. http://www.ask.com/?o=0&l=dir

Which type of miracle software will rid the hijacks? Not only will I be grateful for a successful reply, but my son will be happy to hear me stop cringing.
0

#2 User is offline   Flashorn Icon

  • Expert
  • PipPipPipPipPipPip
  • Group: Members
  • Posts: 2,848
  • Joined: 19-May 07
  • Location:Canada

Posted 03 August 2008 - 11:12 PM

Hey aueloxn3!!



Welcome to PCWorld Community!



Ok, well , if you are willing , we will try a few programs to try and

discourage these pop-ups from reoccurring.



First , If you would, download and run CWShredder from Trend Micro . This is a free program.

This is an .exe and will not need to be installed. Simply double click on the .exe and run the program. This is what you will see:

!http://forums.pcworld.com/legacyimages/
1!

Click on the "Fix" button. Next , you will see this pop-up appear and click "OK"

Make sure your Internet Browser and your Windows Media Player are closed.

!http://forums.pcworld.com/legacyimages/
1!

The CWShredder will now run . It will only take a few seconds if it doesn't find anything.

If it does , it will delete the items found .

The next window will be that of the finished scan"

!http://forums.pcworld.com/legacyimages/
1!

Mine was not infected but, if yours is , it will fix and delete what it found .

Click on the "Next" button.

The final window will list what it found , IF there were any infected files.

!http://forums.pcworld.com/legacyimages/
1!
{font:Verdana}{size:2}
{size}{font}

OK, If it found any infected files and has removed them , then you should reboot

your notebook.

The second security application I would like you to try is called

SUPERAntiSpyware by Nick Skepetos This is a free Antimalware

and will require an installation. This will not conflict with your other security programs.

Download from the Blue Link above and install. Once installed , look at the bottom left hand side

where you will see : "Check fo Updates" . Click on the button and let it update it's definitions.

!http://forums.pcworld.com/legacyimages/
1!

Now , you will click on the "preferences" tab on the opposite side of the window.

Click on the tab. This will bring you to the configuring menu. On that window , click on the

"Scanning Control" tab . PLZ. check mark the same boxes as in the screen shot below.

!http://forums.pcworld.com/legacyimages/
1!

Close the window and start a FULL SCAN of your notebook .

When the Scan is done and IF SUPERAntiSpyware finds anything , it

will ask you to "Delete or Quarantine" what it found. PLEASE do so.

Now reboot your notebook and report your findings in your next post.



FLASHORN, !http://forums.pcworld.com/legacyimages/
1!
0

#3 User is offline   rtfire1 Icon

  • Senior Member
  • PipPipPipPipPip
  • Group: Members
  • Posts: 756
  • Joined: 24-January 08
  • Location:usa

Posted 04 August 2008 - 07:13 AM

nice write up Flashorn
0

#4 User is offline   aueloxn3 Icon

  • Newbie
  • Pip
  • Group: Members
  • Posts: 2
  • Joined: 03-August 08

Posted 10 August 2008 - 09:10 AM

Flashorn,

You truly rock! Thank you every so much. CWShredder found 2 threats whereas SUPERAntivirus found over 110! Although it's a beautiful day out today, I am compelled to run your recommendations immediately on my desktops as well.

Oh oh, hold on a moment:

OMG - I am writing from my desktop while looking at the laptop's "blue screen". It has been displaying a the following

different messages inbetween restarts.

kmodeexceptionnot_handled

pagefaultinnonpagedarea

nomoreirpstacklocations

badpoolheader

bogus_driver

sysinternalgreatsite

Please let me know if IM assistance is available.

AuEloxN3
0

#5 User is offline   Adama Icon

  • Veteran
  • PipPipPipPipPipPipPip
  • Group: Members
  • Posts: 6,757
  • Joined: 07-September 07
  • Location:California

Posted 10 August 2008 - 01:01 PM

aueloxn3 said:

Flashorn,

You truly rock! Thank you every so much. CWShredder found 2 threats whereas SUPERAntivirus found over 110!

Hi Aueloxn and Flashorn,

I just have a silly question: How can CWShredder and SUPERAntivirus find so many things when Aueloxn has already run SpySweeper and other programs?
0

#6 User is offline   lilxkid24 Icon

  • Expert
  • PipPipPipPipPipPip
  • Group: Members
  • Posts: 1,948
  • Joined: 08-July 07

Posted 10 August 2008 - 01:14 PM

because spysweeper misses a lot of things. Ive used spysweeper before and it totally missed a malaware i had in my system that superantisypware picked it up. I had a 6month free trial of spysweeper but after i saw how low performance it does i uninstalled it.
0

#7 User is offline   Flashorn Icon

  • Expert
  • PipPipPipPipPipPip
  • Group: Members
  • Posts: 2,848
  • Joined: 19-May 07
  • Location:Canada

Posted 10 August 2008 - 01:26 PM

Hey Adama!!



Actually, Spirit would be the best to ask this question to but,

I will try and if my explanation is not complete well, I hope

that Spirit will correct or add.



OK, CWS from Trend Micro is a specific program aimed at a

specific infection which does have variants . CWS can handle

the main threat and their variants. Meaning that one threat can

come in different forms. ( different coding for different places

on your PC or notebook ).



SUPERAntiSpyware is also an ANTIMALWARE. meaning that

It will concentrate on Trojans and the Vundo threat which are

more prevalent these days than Viruses are. Now, I'm not saying

that there are no more Viruses but, there are more Trojans and it

seems that the coding of these threats are easier converted to

attack more places in Windows.



There is also another VERY good ANTIMALWARE out there.

MALWAREBYTES ANTIMALWARE. But again , a more specific

scanner then the regular ANTISPYWARE scanner.

You have to know when to use this one. It is more specific to

infected Registry keys and .dlls. So, if your PC is exhibiting

specific behaviors like , warnings or messages referring

to .dlls not registering, then you start a discussion and ask for

HELP.



FLASHORN. !http://forums.pcworld.com/legacyimages/
1!
0

#8 User is offline   Adama Icon

  • Veteran
  • PipPipPipPipPipPipPip
  • Group: Members
  • Posts: 6,757
  • Joined: 07-September 07
  • Location:California

Posted 10 August 2008 - 01:51 PM

Hi Flashorn,

Thanks so much for the great, clear answer. We are so lucky to have you here at PCW! :x
0

#9 User is offline   Flashorn Icon

  • Expert
  • PipPipPipPipPipPip
  • Group: Members
  • Posts: 2,848
  • Joined: 19-May 07
  • Location:Canada

Posted 10 August 2008 - 02:20 PM

My pleasure Adama!!





FLASHORN. !http://forums.pcworld.com/legacyimages/
1!
0

Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users