|
Posted by Steven L Umbach on August 14, 2005, 8:03 pm
If you were Registered and logged in, you could reply and use other advanced thread options
detection and removal program. Try using one or more of the parasite
detection and removal programs such as AdAware SE, SpyBot Search and
Destroy, or Microsoft AntiSpyware. You may also have to use tools like
BhoDemon, CWShredder, or Hijack This depending on exactly what the problem
is. Whatever you try be sure that the application is current with
definitions before you scan and you may need to also scan in Safe Mode.
Though opinions vary on Microsoft AntiSpyware I have found it to work well
and have seen it remove cases of hijacked home pages. See the links below
for more details. --- Steve
http://www.microsoft.com/athome/security/spyware/software/default.mspx ---
Microsoft AntiSpyware
http://www.download.com/3000-2144-10045910.html --- AdAware SE.
http://mvps.org/winhelp2002/unwanted.htm --- dealing with parasites tips.
http://www.microsoft.com/athome/security/spyware/default.mspx --- MS link
on Spyware.
> ***I figure this is a MS Security issue, hence why I posted this here. If
> this is the wrong place, please point to to the correct place. Thanks! ***
>
> I was surfing the web when all of a sudden viruses (viri, but it looks
> funny) are detected. I tried to elliminate with AVG (which detected them),
> but not all were apparently removed.
>
> First, I have a two-screen system, and one of these screen was changed to
> an ad for 'RazeSpyware'. I was only able to remove this by downloading
> their demo and running it.
>
> Then I openned my browser, and it comes up with a page telling me I have a
> security risk instead of my MSN.com home page. This page has info about my
> system on it, such as keywords, and links to a company called
> "Evidence-Eliminator.com".
>
> I've tried to change my homepage, but it always comes back to this
> hijacked page if I hit the homepage icon or open up a new browser. It
> seems to be getting this from my own machine, as this appears in the
> address field:
>
> res://C:\WINDOWS\system32\shdocvn.dll/errorAPI.htm#ID=PX8594;
>
> I've tried changing the homepage both by drag-and-drop and by going into
> the 'Tools : Internet Options". I've applied and just exited, in all cases
> the homepage reverts back to their 'ad'.
>
> I've run my (already owned) anti-spyware and anti-virus software sweepers,
> they report nothing is wrong. And, whatever they did, it cleared all
> previous 'restore points', so couldn't even solve it that way.
>
> "Evidence-Eliminator.com" is England based. Isn't this blackmail? Buy our
> software (which will likely return control of my homepage to me) or we
> won't let you change your homepage?
>
> FYI:
>
> Operating System: Win XP Pro 5.1
> Browser: MS IE 6.0.2900.2180.xpsp_gdr.050301-1519
> Update Versions: ; SP2;
>
> I have most recent MS updates installed.
>
> Basically I'm looking for a way to return my homepage control. Any ideas?
> And don't you think MicroSoft should have a word with these guys (my
> homepage was MSN.com)? They also almost slander MS in regards to what they
> say.
>
> And to show how awful "Evidence-Eliminator.com" is, this is their
> disclaimer (at bottom of my 'new homepage'):
>
> "The information is provided 'as is' without warranty of any kind. But, if
> you don't follow our recommendations & don't use 'required software', we
> will disclaim all warranties, either expressed or implied, including the
> warranties of merchantability and fitness for a particular purpose. In no
> event shall we be liable for any damage whatsoever including direct,
> indirect, incidental, consenquential, loss of business profits or special
> damages, even if we have been advised of the possibility of such damage."
>
> The 'required software' in the above is a link to buy their software.
>
> Again, I didn't go to them, they hijacked my homepage via a virus of some
> kind while surfing totally unrelated content.
>
> Help!!!
>
> [==Peteroid==]
>
| 
XML site map