Browser Hijacking

[Keshin]

Need help!

Since yesterday I havent been able to log into my hotmail email account. As soon as I log in, I'm sent to some stupid ass spyware page, along with the added 7 or so pop-ups telling me I have spyware.

I've had this for awhile, but its only just started effecting my email account. It does the same whenever I run searches and even when I search through Amazon. It takes me to that dumb-ass site.

It only used to reset my homepage which is annoying alone. But I downloaded SpySweeper (free trial version) and that would reset my homepage back to normal. However it wouldn't get rid of the problem itself. I emailed SpySweeper and told them about the problem I was having, and the reply told me that if I purchased the full version, it would get rid of it.

However I was planning on upgrading my PC in about 3 months time (new harddrive etc), but since yesterday, the virus thing has become more aggressive. Every 5 seconds SpySweeper needs to reset my search page back to default and I cant read my hotmail email adress anymore .......and I'm waiting on some important emails!!


Anyway, I purchased the full retail version of SpySweeper and ran a full system scan. It found some spyware, and I selected everything and deleted them all. However, when I went to log into my email account. The same damn site came up. I just cant loggon. I ran that sweeper again..... and the exact same result came up. I made sure I didn't make any mistakes and chose to quaranteen them and then delete them......... but again it didn't do anything. I'm seriously pissed!!

I sent an email (using my free internet providers email address) to SpySweeper, I told them that nothing happened and that I was told by them it would remove it once I paid, and I want my money back if something isn't done.



I just want to know if anyone has this same problem!?? I really NEED my email back. Can anyone with experience in this kind of subject give me some advice and what I need to do please? :dead:

[Jinxie]

I deal with this kind of problem all day. (network admin). What's happening is that there is a DLL on your computer that reinstalls the spyware once you've removed it. Its pointers are usually stored in the RUN areas or WINLOGON areas of your system registry. I've tried various spyware removal tools, but none of them have permanently removed this type of spyware. What you can do to manually remove the DLL is to check your registry(don't do it without backing it up first) these are the Keys:
HKEY_LOCALMACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENT_VERSION\RUN

HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENT_VERSION\RUN

There are entries in these keys that need to be there, so don't delete anything if you're not sure. You may also want to check your HOSTS file to see if any entries were made by the spyware. The HOSTS file is under c:\<systemfolder>\system32\drivers\etc. Unless you have a need for entries here (which I doubt) delete all IP mappings except 127.0.0.1 localhost. The spyware can use your HOSTS file to access a website/server to download more spyware or to report your computer stats to the creator of the spyware program. If you have to delete anything from the HOSTS file, remember to save it without a file extension. I hope this helps. *****Reminder: Back up your registry. If you totally hose your PC up because you tooled around in the registry it is not my fault or this websites...lol******

[Crug]

stupid browser hijacking websites.

ok first off if your using webshots remove it yea i know some of the picures are pretty but it seems to be a gate way for these stupid sites.

secondly check around on the page that your geting sent to for a link to a removal tool or if you have a really nasty one check any links its puting in your favorites if its doing this more then likely they all point back to one website.

third get a good pop up blocker. i use earthlink and the popup blocking utilty they have is very good. check around or im pretty shure some one is bound to post a link to a good utility.

fourth. make shure your pop up blocker is in nazi mode when you go porn surfing.. alot of the time you get this crud when jackass webmasters hide it in there java scripting

or the last way stop using ie and go with mozilla or one of the other fine nonsecurty flaw riddled browsers