Fog Creek Software
Discussion Board




My browser hijacked!

Hi All,

I don't know how but somehow sbvr.com has hijacked my browser! :(
It resets my homepage/search page after every boot! Keeps opening some browser windows alternatively
And worse of it all,
It installs a ugly toolbar on my windows explorer and keeps putting XXX sites shortcuts on my desktop! :(

I don't know how it got in to my PC, but I am simply unable to remove it.

Searching on NET wasn't of much help. Most of the sites are asking to download some software which is paid one! :(

Actually I have searched for all startup options (using msconfig and registry) but I am unable to locate file which is resetting my homepage/search page.

Is there any way I can know for sure which ALL programs are starting when Windows boots up??


I have two questions to ask:
1. How do I remove this software?
2. How come it is so easy for a site to get into my PC like this?


Please help me!

Regards,
JD

JD
Monday, June 02, 2003

Use AutoRuns from http://www.sysinternals.com/ntw2k/source/misc.shtml#autoruns to find out what is running at startup.

Duncan Smart
Monday, June 02, 2003

> 2. How come it is so easy for a site to get into my PC like
> this?

What browser are you using? What did you do at the site? I've just been there - clicked on a couple of links. Nothing happened. I'm using Opera.

If you're using IE, try BHODemon, at http://www.definitivesolutions.com/ . Never needed to use it, as my usage of IE is the bare minimum, but it might be of some help. Anyone has any experience with this utility?

Also, if you're using IE, how is your security configured, i.e., running ActiveXs and the like?

HTH,
--
"Suravye ninto manshima taishite (Peace favor your sword)" (Shienaran salute)
"Life is a dream from which we all must wake before we can dream again" (Amys, Aiel Wise One)

Paulo Caetano
Monday, June 02, 2003

Which brower?

Which Operating System?

and for both, which versions?

tapiwa
Monday, June 02, 2003

You really need Adaware from lavasoft.

http://www.lavasoftusa.com/

The basic package is free. 

Ged Byrne
Monday, June 02, 2003

Oops I forgot to mention the OS/Browser!

I am currently running IE 6.0 with Windows XP.

ActiveX setting is set to 'Prompt'.

I will be trying out lavasoft link and see if it works for me.

Thanks for all the help,
Regards,
JD

JD
Monday, June 02, 2003

Also check if you have installed all critical patches from Windows Update, esp. the security ones. Adaware is the best among all free popups/spyware killers I tried. Also check out zone alarm, PC-cillin, Blackice. The last two are not free.

S.C.
Monday, June 02, 2003

Since you run XP, try Start->Programs->Accessories->System Tools->System Restore. Restore to a point before the advirus programs appeared.

Jay
Monday, June 02, 2003

http://www.antivirus.com will scan your computer for viruses using the latest pattern files for free.

Kent Design4Effect
Monday, June 02, 2003

it's a spyware/adware shit.  Google and you'll find it.  Comes from a company called LOP.(live online portal?!?).  Tried kazaa did you :-)

I know I sound preachy but if you play with web downloads you MUST have ad-aware http://www.lavasoftusa.com/ and/or Spybod Seach & Destroy http://security.kolla.de/

and seriosly google before you ask

adn another advice - use mozilla ro firebird, IE security sucks

tekumse
Monday, June 02, 2003

If Kazaa did this dirty deed, use "Kazaa lite."  Spyware free, as far as I can tell.  These things are really advertisements for controlled environs like VMWare.

greg
Monday, June 02, 2003

He did search, just in the wrong places. You shouldn't get on his case for asking.

Now how do you know if your browser's been hijacked secretly.. an invisible button that reports back about your browsing habits and passes on passwords.

www.MarkTAW.com
Monday, June 02, 2003

I did search on NET. Mostly it got me results where they were recommending me to buy Ad-aware software or some thing else.

Anyways, I have found the solution.

I downloaded this nifty utility to see what is running at start up. http://www.sysinternals.com/ntw2k/source/misc.shtml#autoruns

I simply removed the naughty entries there and their corresponding files from Application data folder and I am through! :)

Regards,
JD

JD
Monday, June 02, 2003

SpyBot is a nice alternative to Adaware and also appears to be free for commercial use, which Adaware isn't. Certainly worth looking at and it should solve the original poster's problems.

http://security.kolla.de/
http://beam.to/spybotsd

Adam
Tuesday, June 03, 2003

Ad-aware is THE solution if you want to get everything out of your machine.  Plus there is a free version.

tekumse
Tuesday, June 03, 2003

Free for private use, which may not help the original poster.

Adam
Wednesday, June 04, 2003

Also try Advanced Uninstaller from http://www.advanceduninstaller.com/

It is a shareware application - you must pay for it in the end, but you get to use it for a lot of days for free.

It can:

- forcefully remove IE toolbars, IE plugins, and BHOs (Browser Helper Objects)

- manage startup programs

Just start it, and disable or uninstall ANY dubious program from the cathegories above.

Practically allows you to get any persistent toolbar / spyware off your computer, IF you have a bit of technical knowledge.

Then, if you don't want to buy the program (I did buy it), you can simply uninstall it.

It's a very nice program.

George Dean
Thursday, June 19, 2003

*  Recent Topics

*  Fog Creek Home