Discussion Locked

HIJACKING

0 helpful
7 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
NY COMPUTER HAS BEEN HIJACKED, HOW CAN I REMEDY THE PROBLEM AND HOW CAN I PREVENT THIS FROM HAPPENING AGAIN?

7 replies

by edlockett

What are you talking about?
Please describe the problem you are experiencing.
Then someone might be able to help you.

by black_eyed_pea

Download the utilities listed at the bottom of this post and then try this:

Spyware Removal Checklist

1. Boot into Safe Mode with Networking (some spyware can only be removed in Safe Mode).
2. Open Add/Remove programs and remove any application you do not recognize.
3. Install Spybot Search & Destroy, update it, and run it on the infected system.
4. Install Ad-Aware, update it, and run it on the infected system.
5. Launch HijackThis and click the Scan button. Make sure you run this after other malware removal apps. (WARNING: Reference the HijackThis tutorial at http://www.spywareinfo.com/~merijn/htlogtutorial.html before removing anything.)
6. Reboot and run both Ad-Aware and Spybot again until the system is clean.
7. Launch Internet Explorer and browse the Web to verify Winsock was not broken while removing
spyware. If you cannot browse the Web, run the WinSockFix utility and perform another Web test.

Ad-Aware - http://www.lavasoftusa.com
CWShredder - http://cwshredder.net/bin/CWSInstall.exe
Spybot Search & Destroy - http://www.safer-networking.org/en/download/
WinSockFix - http://www.spychecker.com/program/winsockxpfix.html

by black_eyed_pea

Spyware Prevention Checklist

1. Open Internet Explorer, click Internet Options, click the Security tab, and click Default Level on each Security Zone.
2. Install all Windows Critical Updates.
3. Install and update Spyware Blaster. Remember to click the link to Enable All Protection.
4. If you have Windows XP, use SP2's built-in popup blocker.
5. Run GRC's Shoot the Messenger applet.
6. Run GRC's Unplug & Pray applet (Windows XP Only).
7. Run GRC's DCOMbobulator, click the DCOMbobulate Me! tab and then click the Disable DCOM button.
8. Execute DSOStop2 and click the Protect Internet Explorer button.
9. Execute HTAStop and click the Protect Internet Explorer button (WARNING: Windows XP Only - Will cause problems on Windows 2000).
10. Install IE-Spyad. This is profile specific, so you must run it under each Windows profile you wish to protect.
11. Run GRC's SocketLock utility.
12. Install and update JavaCool's Spyware Guard.
13. Rename the default Windows Hosts file located at %windir%\system32\drivers\etc and place the Gorilla Design HOSTS file in the same directory.
14. Install eDexter to reduce the efficiently handle the new HOSTS file.
15. Educate yourself on Internet best practices.

Ad-Aware - http://www.lavasoftusa.com
CWShredder - http://cwshredder.net/bin/CWSInstall.exe
DSOstop2 - http://www.wilders.org/downloads.htm
eDexter - http://www.pyrenean.com/distribution/dxtr135.exe
Firefox - http://www.mozilla.org/products/firefox/
Hosts File - http://accs-net.com/hosts/get_hosts.html
HTAStop - http://www.wilders.org/downloads.htm
IE-Spyad - http://www.pcworld.com/downloads/file_download.asp?fid=23332&fileidx=1
Shoot The Messenger - http://www.grc.com/freepopular.htm
SocketLock - http://www.grc.com/freepopular.htm
Spyware Blaster - http://www.javacoolsoftware.com/spywareblaster.html
Spyware Guard - http://www.javacoolsoftware.com/sgdownload.html
Unplug & Pray - http://www.grc.com/freepopular.htm

by rschlump

First you want to run spyware cleaners like ad-aware and spybot search & destroy. This will clean most of the infections. Then run Hijack this! to see what is left. Take out anything that looks suspisious. You can Google the stuff you don't recognize to see what it is. Click the boxes of the stuff you want to delete and then remove them. It's a pretty good idea to make a backup of your registry before you do this in case you make a mistake. There are a few bits of spyware that are harder to remove like Wintools. This little nasty will restart it self everytime you kill the service. You must delete the folder from the common folder it is starting from. Usually a tricky process of setting the priority low on the wintools that is running as a service, bringing up the folder you want to delete clicking the delete and then killing the process before answering yes to the delete question. Slower PCs are easier to do than new fast ones. Good luck.

by naresh4you

You can use software like noadware or web sweeper to remove the trojans or viruses on your pc and you can also install a personal firewall like zone alarm which is a free software for securing your computer

This discussion is closed to new replies.