a little help

Off topic, but don't go too far overboard - after all, we are watching...heh.
User avatar
Posts: 1944
Joined: Tue Nov 05, 2002 7:39 pm
Location: The Land before Broadband...

a little help

Postby Camel toe joe » Wed Apr 21, 2004 6:53 pm

any of you guys know of a manual way to get rid of these bastards? http://default-homepage-network.com/ they hijack your homepage and then send you a ton of pop-ups we are having a bit of an issue with this at work.

thanks in advanced

Posts: 2702
Joined: Fri Jun 27, 2003 4:09 pm

Postby Conscious* » Wed Apr 21, 2004 6:57 pm


Murgatroyd

Postby Murgatroyd » Wed Apr 21, 2004 7:45 pm

Use hijackthis to get rid of the registry entries. Also check your running processes and see if there's anything funky in there. If so, you'll have to restart in safe mode and run hijackthis. Man, these things are pervasive.

Posts: 2702
Joined: Fri Jun 27, 2003 4:09 pm

Postby Conscious* » Wed Apr 21, 2004 7:53 pm

Yea they sure are, Kazaa gives you like 10 registry keys and a milliion files caught by Ad-Aware.

User avatar
Posts: 276
Joined: Wed Mar 12, 2003 9:53 pm

Postby 007 » Wed Apr 21, 2004 9:01 pm

This happens to me sometimes too. Usually, just running Spybot/Ad-aware gets rid of it for about a month or two.

User avatar
Posts: 1944
Joined: Tue Nov 05, 2002 7:39 pm
Location: The Land before Broadband...

Postby Camel toe joe » Thu Apr 22, 2004 12:06 am

This is for a citrix server, which basicly many terminal connect to, so i have to go through a lot of red tape before I can actually make any changes. But thansk for the links I'll look into my options :)

RCinator

Postby RCinator » Thu Apr 22, 2004 9:35 am

<cough>ANTIVIRUS</cough>

Murgatroyd

Postby Murgatroyd » Thu Apr 22, 2004 9:52 am

Originally posted by RCinator
<cough>ANTIVIRUS</cough>


Wish it were that simple. I've seen two computers belonging to friends & family, decked out with NAV, completely up-to-date, one of which had two firewalls enabled, and this crap still got in there. The thing is, it's not necessarily a virus in the sense that it does actual harm to your file structure, rather it literally hijacks your system. (Though I think you know this, I'm iterating it for some reason.) On my mother's computer, there were 4 or 5 weird processes running that were called on startup from registry entries. I still have no idea what these things did, but there were occasional pop-up ads. No doubt it's from someone downloading something, because I made that computer as secure as a I possibly could. Enabled two firewalls, one hardware, one software, and NAV with autoprotect and scheduled nightly scans. Eventually, one of these hijacker programs attempted to import a virus onto the computer, at which point NAV cought it, and that's when my mom called me. There's no telling how long these programs were on the computer, nor what their purpose was, and it was a huge pain in the ass to get rid of them. Eventually, I think that the AV programs will adapt to protect against these things as well (I've heard that the latest MacAffee protects against some spyware), but until then, it's gonna be a manual process.

Posts: 125
Joined: Thu Dec 19, 2002 4:32 pm
Location: Fort Worth, TX

Postby MoDyna » Thu Apr 22, 2004 10:04 am

I suffered a HiJacking myself, even with up to date, AntiVirus, and spyware removal tools, etc. My only recourse was to use HiJackThis removal tool, post the results at their site, then let one of their knowledgeable people recommend what to remove. Worked like a charm. Took about two days for the whole process. They are good people. Highly recommend them.

Mo!
I carry twenty-three great wounds all got in battle. Seventy-five men have I killed with my own hands in battle. I scatter, I burn my enemies' tents. I take away their flocks and herds. The Turks pay me a golden treasure, yet I am poor! Because *I* am a river to my people!

{CN}Doomfarer

Postby {CN}Doomfarer » Thu Apr 22, 2004 10:16 am

Glad I decided to revisit The Smoking Room after such a long lay off... After dealing with my most current PC disaster I am getting pretty damned leary of anything and everything. Will have to keep this in mind. Thanks for the info and various links. :beer:

Murgatroyd

Postby Murgatroyd » Thu Apr 22, 2004 10:18 am

Originally posted by MoDyna
I suffered a HiJacking myself, even with up to date, AntiVirus, and spyware removal tools, etc. My only recourse was to use HiJackThis removal tool, post the results at their site, then let one of their knowledgeable people recommend what to remove. Worked like a charm. Took about two days for the whole process. They are good people. Highly recommend them.

Mo!


Another good way to DIY is to take the report, and just plug the .exe filenames and other info into google, and see what you come up with. That's how I did it, myself. 99% of the time, if it didn't come up on google, it was some evil executable, and if it was something questionable, I found a site or two describing what the program was and whether or not it was a problem.

Bullhead

Postby Bullhead » Thu Apr 22, 2004 10:46 am

Nav2k4 incorporates spyware scanning/removal, dunno how well it does at real-time checking.

Doomy! :beer:

User avatar
Posts: 1944
Joined: Tue Nov 05, 2002 7:39 pm
Location: The Land before Broadband...

Postby Camel toe joe » Thu Apr 22, 2004 11:19 am

Originally posted by RCinator
<cough>ANTIVIRUS</cough>


The machines are running antivirus and it's updated, my main problem isn't even just the hijacking but also the redtape i have to go throught work on the infected box since it effects many diffrent departments

Return to The Smokin' Room

Who is online

Users browsing this forum: Google [Bot] and 7 guests