|
Posted by =?Utf-8?B?TVQ=?= on July 24, 2005, 9:23 pm
If you were Registered and logged in, you could reply and use other advanced thread options
I seem to have stumbled across a nasty virus (i think)... Here are the
symptoms: my home page has been permanently changed to
"oneclicksearches.com", it cannot be changed. my desktop wallpaper has been
replaced with a anti-spyware ad claiming to have my best interests at heart,
and my internet explorer is 'very selective' as to which websites I can
visist... (it wont let me even go to Microsoft.com/security it just redirects
me back to the 'oneclicksearches.com' site.. HELP!!!!! (1) What am I dealing
with and (2) how do I get rid of it?? I have spybot and adaware that are not
doing any good.....
|
|
Posted by Malke on July 24, 2005, 9:51 pm
If you were Registered and logged in, you could reply and use other advanced thread options
MT wrote:
> I seem to have stumbled across a nasty virus (i think)... Here are the
> symptoms: my home page has been permanently changed to
> "oneclicksearches.com", it cannot be changed. my desktop wallpaper
> has been replaced with a anti-spyware ad claiming to have my best
> interests at heart, and my internet explorer is 'very selective' as to
> which websites I can visist... (it wont let me even go to
> Microsoft.com/security it just redirects
> me back to the 'oneclicksearches.com' site.. HELP!!!!! (1) What am I
> dealing
> with and (2) how do I get rid of it?? I have spybot and adaware that
> are not doing any good.....
Follow the general malware removal steps here:
http://www.elephantboycomputers.com/page2.html#Removing_Malware
It is crucial that you do all work with updated tools in Safe Mode.
To fix the desktop issue, go to the Display applet in Control Panel and
look on the Desktop tab. Click on Customize Desktop, and then click on
the Web tab. You will see that there are checkmarks next to "My Current
Home Page" and probably "Lock Desktop Items". Uncheck these. By
highlighting the "My Current Home Page" and clicking on the Properties
button, you will be able to determine the name of the file that is the
message. It might be called something like "security.html" or the like.
Click Apply and OK out when you've made your changes. Then you want to
find the *.html malware file and delete it.
Malke
--
MS-MVP Windows User/Shell
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic"
|
|
Posted by Fitz on July 24, 2005, 9:54 pm
If you were Registered and logged in, you could reply and use other advanced thread options
Do the following things:
Google for and then download and install:
MS Anti-Spyware
SpyBot Search and Destroy
AdAware
Spyware Blaster
HiJackThis
a-squared
Update your virus definitions
Open the programs and update them to get the latest definitions (don't
bother running the programs yet).
Download a program called winsockxpfix in case the repairs break your
internet connection.
Delete temp files, IE cache, etc.
Delete the contents of C:\windows\prefetch. Don't delete the folder.
Disable System Restore.
Disconnect from the internet.
Restart in Safe Mode.
Run all of the above programs. Fix what needs to be fixed.
Run again in Safe Mode.
When all is clean, restart Normally.
Re-enable System Restore.
Let us know.
>I seem to have stumbled across a nasty virus (i think)... Here are the
> symptoms: my home page has been permanently changed to
> "oneclicksearches.com", it cannot be changed. my desktop wallpaper has
> been
> replaced with a anti-spyware ad claiming to have my best interests at
> heart,
> and my internet explorer is 'very selective' as to which websites I can
> visist... (it wont let me even go to Microsoft.com/security it just
> redirects
> me back to the 'oneclicksearches.com' site.. HELP!!!!! (1) What am I
> dealing
> with and (2) how do I get rid of it?? I have spybot and adaware that are
> not
> doing any good.....
|
|
Posted by =?Utf-8?B?UGFuZGFfbWFu?= on July 25, 2005, 1:17 pm
If you were Registered and logged in, you could reply and use other advanced thread options
Follow my general malware and bad-ware removal instructions and also
protections steps.If you do not understand something,post again and ask for
more information.
Here are the instructions:
@ Delete all Temporary Internet Files
For IE's Temporary Internet Files
Goto Start->Settings->Control Panel->Internet Options
There ,on the General Tab yo will see where you can delete temporary
files,cookies,history
Delete them all.
@ Other
On the Security tab make sure the Internet level is Medium
On the Privacy tab make sure the level is Medium High.
On the Content tab ,goto Auto complete and Delete(clear) forms and passwords
@ Delete the temporary files
You should empty the Temps folder.
For XP (and other new)
The path is :
C:\Documents and Settings\USER\Local Settings
USER-that is your user name in your computer
and
C:\Windows\Temp
For 98
The path is :
C:\Windows\Temp
@ Run Disc Clean up
This is very useful Windows system function that allows you to delete/remove
all unnecessary
things from your computer,such as programs and components which haven’t been
used for months,temporary and internet temporary files, ,java applets and
stuff like that.
Goto
Start -> Programs -> Accessories -> System Tools -> Disc Cleanup to start
the utility
Then you will be able to choose things to remove .
Remove Temprary files,Internet temporary files,Downloaded programs files .
I advise you not to remove programs and/or Win components using Disc clean up.
@ Remove spywares ,adwares ,hijackers and other junk
Download Spybot Search & Destroy and Ad-aware
http://www.lavasoftusa.com/software/adaware
and
http://www.safer-networking.org/microsoft.en.html
These programs are free of charge,
they are compatiable to each other, so use them together.
Be sure to update these programs before running.
You can also scan in Safe Mode.
The newest version of the programs are 1.4 for SpyBot and 1.06 for Ad-aware .
@ Boot your computer in Safe Mode
Do this by repeatedly typing F8 while Windows is starting.
Then you'll open the BIOS menu where you can choose SAFE MODE.
(If you are XP user ,find more about Safe Mode in Help and Support Center
Start-Help and Suport)
You may drop this (booting in safe mode) ,however if you have some malware
problems,
you DO need to do it.
@ Scan all your system with antivirus software.
Use only 1 av software!!!Two different programs will cause serious problems
to your PC,because of their real-time protectors.
Before scanning make sure all the security settings are turned ON
(example: scanning All files,disinfecting,heuristic scan,behaviour analyze
or detecting spyware,hacking tools,jokes and so on…..)
and
Make sure the program is updated before running !
It would be better if you scan in Safe Mode,too.
Some very good antivirus softwares
Panda http://www.pandasoftware.com AV+
Kaspersky http://www.kaspersky.com AV+
McAfee http://www.mcafee.com AV+
F-prot http://www.f-prot.com
AV+ means that the program can detect either viruses,trojans,worms and
other security threats
<< If you have big malware problems,I recommend you to download and use a
Panda product,
especially Panda Platinum Internet Security 2005. They can detect
everything,destroy ,block
and eliminate it ,because they use the newest technologies. >>
Keep in mind that from those web-sites you can download only trial versions
of the product
(shareware program) ,which is free.
@ System Restore (for XP and ME only)
If you are running Windows ME or XP,
you have to disable/enable System Restore
AFTER the system is clean of all kind of malware
because malware will be in Restore Points.
Right click on My Computer->Properties->System Restore
Make a tick on Turn off system restore.Click OK
Then again Right click on My computer-?Properties->System Restore
Disable the tick on Turn off system restore
@ Windows Update
Make sure you visit Windows Update regularly and
download all the security updates - Express and Critical updates.
Start -> Windows Updates
or
http://windowsupdate.microsoft.com
(ME and XP) It will be great if you turn on Automatic Updates.
Right clock on My computer -> Properties -> Automatic updates ->
Download update automatically,but let me choose when to install them
@ Use an internet firewall
Firewall is one of the most important things for the good security in 21
century.
Why you need a firewall??? A firewall is a protective boundary between a
computer
(or a network of computers) and the outside world, where people or programs
may try to
access your computer without invitation.
Hackers commonly use software that scans the Internet looking for computers
with
unprotected Internet connections. This software sends a very small message
to your
computer. If your computer does not have a firewall, your computer will
automatically answer
the message and thus announce that it is unprotected. But if you have set up
a firewall,
it will receive such messages and not answer them, so hackers won't even
know that
your computer exists.
(If you are XP user ,find more in Help and Support Center
Start->Help and Support. Type : firewall)
If you have Windows XP
SP1 and SP2 have different types of firewall :
Internet Connection Firewall (ICF) for SP1
and
Windows Firewall (WF) for SP2
Both ICF and WF can protect your computer from access by hackers on
the Internet, with no need to download and use a separate software
firewall.
Service Pack 1
Internet connection firewall (ICF) is partial firewall.
It is BEST for use only on a direct connection to the Internet
(e.g. dial-up, DSL, or cable modem).
In LAN's ,you may also use software firewall
Goto Start-> Settings-> Contol Panel-> Network Connections
Choose the connection you use,then right click on it->Advanced
Here ,you can enable or disable it.
Service Pack 2
You have built-in firewall.
Full firewall,suitable for all kind of connections and users.
Start -> Settings -> Control Panel -> Windows Firewall
Make sure the Firewall is turned ON
See also the exceptions list in Windows Firewall.
If you are home user and you do not want to play network games,exchange
different files over chat and other,
you can make a tick on Don’t allow exception
This guarantees you a maximum protection for hachers,network viruses,worms
and other.
If you are not XP user
You have to use software firewall because Windows versions which are
different from XP do not have ICF or built in firewall.
They are not protected from hackers and attacks,network viruses and other.
!!! It is very important to know that you MUST NOT use more that one
firewall.
If you are XP SP 2 user,you have built in firewall and don't have to use
other
software firewall.Two different firewall will definitely cause serious
problems to your computer .
WF is easy to use and is also very good,but
if you use firewall different from Windows Firewall,disable WF and use the
other one)!!!
@ Visit www.microsoft.com/protect
and learn more about different types of security things
Visit http://www.microsoft.com/athome/security/downloads/default.mspx
and see different kinds of free or trial security software
These things are very useful.
Win XP SP 2 only>>> Often goto Start -> Settings -> Control Panel ->
Security center
and see whether the most important thing for your PC are working correctly.
@ Other
1.Never read and even open attachments from people you do not know.
2.Scan everything you download with av software and install software only
from a trusted source.
Good luck!
"MT" wrote:
> I seem to have stumbled across a nasty virus (i think)... Here are the
> symptoms: my home page has been permanently changed to
> "oneclicksearches.com", it cannot be changed. my desktop wallpaper has been
> replaced with a anti-spyware ad claiming to have my best interests at heart,
> and my internet explorer is 'very selective' as to which websites I can
> visist... (it wont let me even go to Microsoft.com/security it just redirects
> me back to the 'oneclicksearches.com' site.. HELP!!!!! (1) What am I dealing
> with and (2) how do I get rid of it?? I have spybot and adaware that are not
> doing any good.....
|
| Similar Threads | Posted | | The Difference Between Adware, Spyware and Anti-virus.(spyware blockers) | April 4, 2008, 5:53 am |
| http://www.spyware-solutions.info a website about spyware solutions | November 11, 2006, 8:07 pm |
| Help I have been Infected | October 1, 2006, 9:26 pm |
| HotPOP.com infected | July 1, 2005, 4:33 pm |
| Web Server infected? | September 16, 2005, 2:58 pm |
| wininet.dll is infected | October 1, 2005, 12:17 am |
| Can't handle infected PC. Please Help! | April 15, 2006, 6:17 am |
| RE: Can't handle infected PC. Please Help! | April 15, 2006, 1:10 pm |
| "Your computer is infected" | July 1, 2006, 10:59 am |
| !!Infected with cool.exe Help!! | August 9, 2006, 10:01 pm |
|
XML site map