Browser Hijack?

Browser Hijack?

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Browser Hijack? jedsam 02-21-2007
Posted by =?Utf-8?B?amVkc2Ft?= on February 22, 2007, 2:35 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Thanks for the INFO. It seems a long and complicated cleansing procedure. I
think I would get myself in a bit of a PICKLE being a computer novice! As the
problem I have is only a very minor inconvenience I think I will leave it for
now. But if things get much worse I will reset the computer back to 'factory
despatch' condition. I think I can cope with that and it should be good as
new!

"Panda_man" wrote:

> "jedsam" wrote:
>
> > When I select the Homepage on my internet explorer browser I am immediately
> > taken to the security centre with the following address
> > http://asafetynotice.com/ It advertises a number of security programs you
can
> > download (at cost). Though I already have McAffee antivirus/firewall
> > installed which has not detected any problems. It is annoying but it only
> > happens when trying to open the 'Homepage'
> > Would appreciate any ideas. Thanks
> >
>
>
> Hi . Please open this site and strictly perform the Malware Removal
> Instructions .
> http://pandaman.my.contact.bg
>
> If they don't help you , post again . Good luck !
>
> --
> Panda_man
> Silver level Contributor

Posted by David H. Lipman on February 21, 2007, 4:33 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

| When I select the Homepage on my internet explorer browser I am immediately
| taken to the security centre with the following address
| http://asafetynotice.com/ It advertises a number of security programs you can
| download (at cost). Though I already have McAffee antivirus/firewall
| installed which has not detected any problems. It is annoying but it only
| happens when trying to open the 'Homepage'
| Would appreciate any ideas. Thanks



Two part reply..

Perform Part 1 then perform Part 2.

If the first two parts don't work, perform the alternate section.

It is suggested that you execute each tool in Normal Mode then in Safe Mode.



Part 1
-----------

Use noahdfear's SmitFraud, SpyAxe, SpyFalcon, et. al., removal tool --
SmitRem.exe
http://noahdfear.geekstogo.com/click%20counter/click.php?id=1

http://www.bleepingcomputer.com/forums/topic43659.html


Part 2
-----------

Download SmitFraud.exe from the URL --
http://www.ik-cs.com/programs/virtools/SmitFraud.exe

Execute; SmitFraud.exe { Note: You must accept the default of C:\McAfee }
Choose; Unzip
Choose; Close

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go
through your
FireWall to enable WGET.EXE to download the needed McAfee related files.

Execute; c:\mcafee\clean.bat
{ or Double-click on 'Clean Link' in c:\mcafee }

A final report in HTML format called C:\mcafee\Normal_ScanReport.HTML or
C:\mcafee\Safe_ScanReport.HTML will be generated. At the end of the scan, it
will be
displayed in your browser (Opera, FireFox or Internet Explorer). However, if
you are using
WinXP, Win2K or Win2003 your system will be left in a state where you will have
to manually
shutdown/reboot the PC. On Win9x/ME platforms the report will not be shown in
your bowser
but your PC will automatically be shutdown. It is suggested that you move the
report out of
c:\mcafee before performing another scan.

It would be best to scan in both Safe Mode and in Normal Mode and save a copy of
the HTML
report for each session.


ALTERNATE:

S!ri's SmitfraudFix
http://siri.urz.free.fr/Fix/SmitfraudFix_En.php



Please Copy and Paste the contents of the HTML Log files;
C:\mcafee\Normal_ScanReport.HTML & C:\mcafee\Safe_ScanReport.HTML in your reply.

* * * Please report back your results * * *


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Posted by =?Utf-8?B?amVkc2Ft?= on February 22, 2007, 2:31 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Thanks for the INFO. It seems a long and complicated cleansing procedure. I
think I would get myself in a bit of a PICKLE being a computer novice! As the
problem I have is only a very minor inconvenience I think I will leave it for
now. But if things get much worse I will reset the computer back to 'factory
despatch' condition. I think I can cope with that and it should be good as
new!

"David H. Lipman" wrote:

>
> | When I select the Homepage on my internet explorer browser I am immediately
> | taken to the security centre with the following address
> | http://asafetynotice.com/ It advertises a number of security programs you can
> | download (at cost). Though I already have McAffee antivirus/firewall
> | installed which has not detected any problems. It is annoying but it only
> | happens when trying to open the 'Homepage'
> | Would appreciate any ideas. Thanks
>
>
>
> Two part reply..
>
> Perform Part 1 then perform Part 2.
>
> If the first two parts don't work, perform the alternate section.
>
> It is suggested that you execute each tool in Normal Mode then in Safe Mode.
>
>
>
> Part 1
> -----------
>
> Use noahdfear's SmitFraud, SpyAxe, SpyFalcon, et. al., removal tool --
SmitRem.exe
> http://noahdfear.geekstogo.com/click%20counter/click.php?id=1
>
> http://www.bleepingcomputer.com/forums/topic43659.html
>
>
> Part 2
> -----------
>
> Download SmitFraud.exe from the URL --
> http://www.ik-cs.com/programs/virtools/SmitFraud.exe
>
> Execute; SmitFraud.exe { Note: You must accept the default of C:\McAfee }
> Choose; Unzip
> Choose; Close
>
> NOTE: You may have to disable your software FireWall or allow WGET.EXE to go
through your
> FireWall to enable WGET.EXE to download the needed McAfee related files.
>
> Execute; c:\mcafee\clean.bat
> { or Double-click on 'Clean Link' in c:\mcafee }
>
> A final report in HTML format called C:\mcafee\Normal_ScanReport.HTML or
> C:\mcafee\Safe_ScanReport.HTML will be generated. At the end of the scan, it
will be
> displayed in your browser (Opera, FireFox or Internet Explorer). However, if
you are using
> WinXP, Win2K or Win2003 your system will be left in a state where you will
have to manually
> shutdown/reboot the PC. On Win9x/ME platforms the report will not be shown in
your bowser
> but your PC will automatically be shutdown. It is suggested that you move the
report out of
> c:\mcafee before performing another scan.
>
> It would be best to scan in both Safe Mode and in Normal Mode and save a copy
of the HTML
> report for each session.
>
>
> ALTERNATE:
>
> S!ri's SmitfraudFix
> http://siri.urz.free.fr/Fix/SmitfraudFix_En.php
>
>
>
> Please Copy and Paste the contents of the HTML Log files;
> C:\mcafee\Normal_ScanReport.HTML & C:\mcafee\Safe_ScanReport.HTML in your
reply.
>
> * * * Please report back your results * * *
>
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>
>

Posted by David H. Lipman on February 22, 2007, 4:19 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

| Thanks for the INFO. It seems a long and complicated cleansing procedure. I
| think I would get myself in a bit of a PICKLE being a computer novice! As the
| problem I have is only a very minor inconvenience I think I will leave it for
| now. But if things get much worse I will reset the computer back to 'factory
| despatch' condition. I think I can cope with that and it should be good as
| new!
|

Being infected with *any* malware is not a mere "minor inconvenience". You and
your data
and your finances are "at risk" !

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Posted by =?Utf-8?B?ZGFzaCByaXByb2Nr?= on February 21, 2007, 6:08 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
helloe jedsam
I had the same problem..seems the culprit is a company called drive cleaner.
Makes your PC run real slow.They somehow get into your PC with
malware/spyware etc. and u keep getting annoying pop ups telling u that u
have a security problem and should download or run their systems scan..and
then they want u to buy their software. Not a nice business practice huh?
Anyways I called my broadband provider "which has free anti virus/spyware
protection" wish I knew that in the first place. They directed me to their
symantec.com site. I ran a free hour long system scan. It told me that "drive
cleaner" was a "threat" to my computer. It also gave my the file info. I did
a system search on my computer for it and deledted it manually. I also got a
months credit of my broadband bill because they didn't initially inform of
their free protection. My suggestions:
Contact your internet provide and
Try symantec.com and run their check.

Good luck
Dash Riprock




"jedsam" wrote:

> When I select the Homepage on my internet explorer browser I am immediately
> taken to the security centre with the following address
> http://asafetynotice.com/ It advertises a number of security programs you can
> download (at cost). Though I already have McAffee antivirus/firewall
> installed which has not detected any problems. It is annoying but it only
> happens when trying to open the 'Homepage'
> Would appreciate any ideas. Thanks

Similar ThreadsPosted
Browser hijack attempt resulting in lost favorites (= no bookmarks) October 11, 2005, 8:51 pm
posting log of Hijack This December 31, 2005, 6:19 pm
Computer Hijack June 28, 2006, 3:41 am
Download.Trojan (aka Desktop HiJack) April 25, 2006, 11:13 pm
Google Gmail E-mail Hijack September 26, 2007, 3:37 pm
Is Browser using Localhost OK ? July 27, 2005, 11:57 am
Browser being hijacked? February 21, 2007, 7:03 am
What, exactly, is a 'normal' browser? December 10, 2008, 5:54 pm
Browser Re Direct or Similar August 11, 2005, 4:01 pm
HP loads PC with nonexistent web browser September 23, 2008, 9:21 am

The site map in XML format XML site map

Contact Us | Privacy Policy