a little help

[Camel toe joe]

any of you guys know of a manual way to get rid of these bastards? http://default-homepage-network.com/ they hijack your homepage and then send you a ton of pop-ups we are having a bit of an issue with this at work.

thanks in advanced

[Conscious*]

http://forums.powervs.com/showthread.php?s=&threadid=8920

Use hijackthis to get rid of the registry entries. Also check your running processes and see if there's anything funky in there. If so, you'll have to restart in safe mode and run hijackthis. Man, these things are pervasive.

[Conscious*]

Yea they sure are, Kazaa gives you like 10 registry keys and a milliion files caught by Ad-Aware.

[007]

This happens to me sometimes too. Usually, just running Spybot/Ad-aware gets rid of it for about a month or two.

[Camel toe joe]

This is for a citrix server, which basicly many terminal connect to, so i have to go through a lot of red tape before I can actually make any changes. But thansk for the links I'll look into my options

<cough>ANTIVIRUS</cough>

Originally posted by RCinator
<cough>ANTIVIRUS</cough>

Wish it were that simple. I've seen two computers belonging to friends & family, decked out with NAV, completely up-to-date, one of which had two firewalls enabled, and this crap still got in there. The thing is, it's not necessarily a virus in the sense that it does actual harm to your file structure, rather it literally hijacks your system. (Though I think you know this, I'm iterating it for some reason.) On my mother's computer, there were 4 or 5 weird processes running that were called on startup from registry entries. I still have no idea what these things did, but there were occasional pop-up ads. No doubt it's from someone downloading something, because I made that computer as secure as a I possibly could. Enabled two firewalls, one hardware, one software, and NAV with autoprotect and scheduled nightly scans. Eventually, one of these hijacker programs attempted to import a virus onto the computer, at which point NAV cought it, and that's when my mom called me. There's no telling how long these programs were on the computer, nor what their purpose was, and it was a huge pain in the ass to get rid of them. Eventually, I think that the AV programs will adapt to protect against these things as well (I've heard that the latest MacAffee protects against some spyware), but until then, it's gonna be a manual process.

[MoDyna]

I suffered a HiJacking myself, even with up to date, AntiVirus, and spyware removal tools, etc. My only recourse was to use HiJackThis removal tool, post the results at their site, then let one of their knowledgeable people recommend what to remove. Worked like a charm. Took about two days for the whole process. They are good people. Highly recommend them.

Mo!

Glad I decided to revisit The Smoking Room after such a long lay off... After dealing with my most current PC disaster I am getting pretty damned leary of anything and everything. Will have to keep this in mind. Thanks for the info and various links.

Originally posted by MoDyna
I suffered a HiJacking myself, even with up to date, AntiVirus, and spyware removal tools, etc. My only recourse was to use HiJackThis removal tool, post the results at their site, then let one of their knowledgeable people recommend what to remove. Worked like a charm. Took about two days for the whole process. They are good people. Highly recommend them.

Mo!

Another good way to DIY is to take the report, and just plug the .exe filenames and other info into google, and see what you come up with. That's how I did it, myself. 99% of the time, if it didn't come up on google, it was some evil executable, and if it was something questionable, I found a site or two describing what the program was and whether or not it was a problem.

Nav2k4 incorporates spyware scanning/removal, dunno how well it does at real-time checking.

Doomy!

[Camel toe joe]

Originally posted by RCinator
<cough>ANTIVIRUS</cough>

The machines are running antivirus and it's updated, my main problem isn't even just the hijacking but also the redtape i have to go throught work on the infected box since it effects many diffrent departments