page hijacking

[electricmaker]

I am currently running windows, and I have a problem, i cant set my homepage anymore.even when I do it always opens to a blank page, with alot of advertisements and links. Think my homepage has been hijacked, tried everything short of formatting.. Any suggesstions?

[Belisarius]

Ad-aware and Spybot?

[sde]

try: http://www.lavasoftusa.com/

when you ping your domain, does it resolve to the ip of your host?

[electricmaker]

really not sure of my ip, as of yet. tell to find it. And those are programs you have to pay for right?

[electricmaker]

went to downloads, but cant start download..just sits there, says download in progress but nothing is happening

[Belisarius]

No, they're free (as of last time I used them). Some of the mirrors can be a bit slow, so just try a different one if you don't get any response from the one you tried.

[electricmaker]

well i feel happy and sad, that ad aware really works , should of came here sooner, already had bought a cheesy one for 30 bucks...
spyware nuker :rock:

[DavH27]

You are probably not out of the woods, I'm afraid. These spy bot b***ards get in every way they can. I was hijacked, spammed, virus attacked, keylogged, EVERYTHIGN malicous you could think of all at the same time and I boiled it all down to a few damn trojans.

I know I should have firewalls and anti-virus programs in place but I don't know if I can get anythign that works on Win98

Anyway there are a few things left you should do just in case.

Run 'regedit' and go through the 'main' values and make sure the settings for any of the default home pages, search pages etc don't point to some horrible page like mine used to (if you get super-spider.com', you're in trouble!!

Download 2 programs:
SpywareGuard
HijackThis!

It is probably not recommended you do much with HiJackThis! unless you REALLY know what you are doing. One slip and your computer is screwed and heading for another formatting.

You can consult the program creator's homepage where guys who know what they are talkin about can disect your HiJackThis scan logs for you.

Also delete your cookies and disable thier use. Seemingly harmless programs don't get deleted or scanned by anti-virus programs nor Spyware Blockers because they really aren't harmless UNTIL they reference their processes to a cookie file in your cookie folder where the actual malicous code is found. I found a good few cookies a few weeks back that cranked up to 100k each! For a cookie file?! Surely not!

I hope you really are in the clear.

OH and one last thing. If SpywareGuard ever asks you to instal a BHO that has no connection with a RECENT program you just installed, don't authorise it.