Jump to content


Photo

Hijack IE - easysearch, casino, viagra, spyware


  • Please log in to reply
1 reply to this topic

#1 rwbenson

rwbenson

    Member

  • New Member
  • Pip
  • 1 posts

Posted 09 July 2004 - 10:51 PM

I have read the FAQ and followed the directions. I have run updated Adaware, SpyBot, Spysweeper and Hijackthis. Nothing has yet fixed the problem.

I am running Windows XP.

At various times the IE home page gets hijacked to "about: blank". At the same time the search pages are changed as well.

I am intercepting these changes with Spysweeper but it is a constant battle.

In addition the Hijack program tries to deposit favorites on the Favorite page with titles such as easysearch, casino, viagra, spyware. I also get a pop up menu that tries to direct me to Spyware.

Help

:rofl:

#2 LOW MOLE

LOW MOLE

    Member

  • Full Member
  • Pip
  • 18 posts

Posted 10 July 2004 - 12:11 AM

1. Open Task Manager and kill the following processes: (not all of them may be running)
a. msmk.dll
mess.exe
taskngr.exe or taskmgn.exe (not taskmgr.exe which is normal)
telnetxp.exe
reinstall.exe
2. Next go to Start -> Run and open a command prompt.
a. At the command prompt type in: regsvr32 msmk.dll /u
3. Now you’ll need to browse to C:\windows\system32 and delete the following files
a. mess.exe
taskngr.exe or taskmgn.exe (not taskmgr.exe which is normal)
telnetxp.exe
reinstall.exe
b. You won’t be able to delete the msmk.dll file yet.
4. Now browse to C:\Windows\Prefetch and delete any files that start with the same names as above.
a. Ex: telnetxp.exe-00000000.pf
5. Now you’ll need to reboot
6. After the reboot browse to C:\windows\system32 and delete the msmk.dll file.
7.Now open internet explorer and then Tools -> Internet options
a. Go to the “Programs” tab and click the “Reset web settings…” button.
b. This will clear out all the setting the msmk.dll file overwrote.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

Member of ASAP and UNITE
Support SpywareInfo Forum - click the button