"The address that keeps popping up as my home page is
"youfindall.net/344012" Please help! "
Above is the email message one of our customers sent to our help line. A
phone call to the man revealed that his Internet access is hijacked by a
certain website. His default IE homepage was wiped out and replaced by
"youfindall.net/344012". The following actions were taken (given to man on
phone) and proved useless:
1. Reconfigure his Internet Properties to remove the above address and
re-enter his default webpage.
2. After rebooting and above step didn't work, went back to Internet
Properties and changed default to "Use Blank."
3. Then accessed Registry and did a search (Find) for the above address.
Found one entry, deleted it. Win.ini showed no entry.
4. Closed Registry and went to My Computer and searched directories for
above address.
5. Searched for new/unusual/strange/suspicious folders in different
directories, found none.
6. PC owner ran Scandisk & Defrag. Rebooted.
7. Vooila!!! We're back to square one!!
One of the things happening he said was, the hijacker address would force
his "current program to switch to another site!" Pop-ups are
uncontrollable! Unfortunately this customer does not have Pop-up/Spyware
blockers installed. Does not have a firewall either. (Will recommend him
to d/l Spybot/ZA free)
The customer claimed that "something" is controlling his computer. I
advised him to bring his CPU in (tomorrow) so we can do the "Search &
Destroy" mission better at the shop. I have not experienced anything like
this myself and the way this hijacker is controlling his computer, I am
tempted not to do search and destroy but wipe out his hard drive clean,
reformat and clean install Windows, Spybot and ZA.
If anyone in the List had this experience before, can you share your ideas
with me?? TIA.
AMD XP-1700+/512MB mem/30 GB HD/CDR & burner/cable modem
Emie DelRosario
doubtful
The NOSPIN Group Promotions is now offering
Mandrake Linux or Red Hat Linux CD sets along
with the OpenOffice CD... at a great price!!!
http://freepctech.com/goodies/promotions.shtml
|
