Desktop has been HIjacked! Please Help!
Started by
jreid25
, Feb 03 2006 11:17 AM
2 replies to this topic
#1
Posted 03 February 2006 - 11:17 AM
Register to Remove
#2
Posted 03 February 2006 - 11:33 AM
Somewhere during browsing, a user on your computer accepted or was dupped into downloading a malware that you are now seeing.
I recently cleaned up a friend's computer with a similar situation in which "SpywareCleaner" had been installed. In that case, I was able to remove it through Control Panel - Add/Remove.
Take a look there and see if you have a new antispyware/cleaner program installed that you did not intend to have there. Use Add/Remove to uninstall it.
I would not "rely" on this simple fix if you continue to experience problems as other malware may have come bundled, or other malware may have since been added.
If after doing the above, you still have problems then posting a HJT in the appropriate Forum is advised.
Best Regards
The help you receive here is free.
If you wish, you may Donate to help keep us online.
If you wish, you may Donate to help keep us online.
#3
Posted 03 February 2006 - 02:12 PM
Hi Jason,
I left you with a rather incomplete response. If/after you remove any unwanted installation, it would be wise to update your securtity baseline programs or download them if you don't have them onboard already.
You can download Spybot Search & Destroy 1.4 here:
http://www.safer-net...rg/en/download/
and
Ad-Aware SE Personal 1.06 here:
http://www.download....ubj=dl&tag=top5
Install and allow both to update their .dat files.
Update other legitimate AntiVirus and AntiSpyware programs you may have onboard.
Now re-boot into SAFE Mode, by restarting your commputer and immediately tapping continuously on F8 until the Master Boot Menu appears. Select Safe Mode.
Now run your updated scanners and allow them to fix/remove items detected, including "remove on re-boot". Allow the reboot if suggested by the tool, and use the "tapping F8" procedure to reboot your machine into SAFE Mode to do the next scan.
If at that time you are still experiencing symptoms compromising your computer, it may be useful to run and post a HJT Log
Please Read and Follow these instructions for downloading, running and Posting a New Topic in the HJT Forum
http://www.tomcoyote.org/hjt/
It is possible that you've run into: SpyAxe/SpywareStrike, a nasty invasive fake tool.
Here is the "self-help" removal for this infection if you discover that it is what you are facing:
http://forums.tomcoy...showtopic=54307
Best Regards
I left you with a rather incomplete response. If/after you remove any unwanted installation, it would be wise to update your securtity baseline programs or download them if you don't have them onboard already.
You can download Spybot Search & Destroy 1.4 here:
http://www.safer-net...rg/en/download/
and
Ad-Aware SE Personal 1.06 here:
http://www.download....ubj=dl&tag=top5
Install and allow both to update their .dat files.
Update other legitimate AntiVirus and AntiSpyware programs you may have onboard.
Now re-boot into SAFE Mode, by restarting your commputer and immediately tapping continuously on F8 until the Master Boot Menu appears. Select Safe Mode.
Now run your updated scanners and allow them to fix/remove items detected, including "remove on re-boot". Allow the reboot if suggested by the tool, and use the "tapping F8" procedure to reboot your machine into SAFE Mode to do the next scan.
If at that time you are still experiencing symptoms compromising your computer, it may be useful to run and post a HJT Log
Please Read and Follow these instructions for downloading, running and Posting a New Topic in the HJT Forum
http://www.tomcoyote.org/hjt/
It is possible that you've run into: SpyAxe/SpywareStrike, a nasty invasive fake tool.
Here is the "self-help" removal for this infection if you discover that it is what you are facing:
http://forums.tomcoy...showtopic=54307
Best Regards
Edited by dough, 03 February 2006 - 02:18 PM.
The help you receive here is free.
If you wish, you may Donate to help keep us online.
If you wish, you may Donate to help keep us online.
0 user(s) are reading this topic
0 members, 0 guests, 0 anonymous users