|
Posted by Martin Ireland on July 22, 2004, 7:23 pm
If you were Registered and logged in, you could reply and use other advanced thread options
[posted and mailed]
dmckeon@ameritas.com (Dan McKeon) wrote in
> I have been having a problem on Windows XP using Internet Explorer 6.0
> where my home page keeps getting reset to about:blank, but it loads a
> search engine called "Search for.." When I view the source, it is
> redirecting to a hex string that I translated to a dll on
> c:\windows\system32. I scanned the registry and removed the entries
> for that dll (there were 2 in HKEY_CLASSES_ROOT). I then booted to a
> DOS window to delete the dll as it was being called by explorer.dll!
>
> Then, after a few hours, the problem reappears with a different dll
> name. The name seems to be random, but some examples are:
>
> c:\windows\system32\jjbejd.dll
> c:\windows\system32\jigkoe.dll
>
> I ran both Spybot - Search and Destroy and Ad-Aware. They found and
> removed spyware, but it keeps coming back. I am running a virus scan
> now (Norton), and so far it hasn't found anything.
>
> Does anybody know what's going on? Is there a way to clear this
> problem up? Am I or is my computer at serious risk as a result of
> spyware?
>
> Any help you can provide will be greatly appreciated.
>
> TIA,
> Dan
>
Get the info from your AV company on disabling the System Restore feature
of Windows XP. Once disabled, repeat the removal of the Dlls. Then re-
enable System Restore.
--
Martin
Email address is ROT13 encoded to slow down spammers
| 
XML site map