Ask Me Help Desk

Ask Me Help Desk (https://www.askmehelpdesk.com/forum.php)
-   Spyware, Viruses, etc. (https://www.askmehelpdesk.com/forumdisplay.php?f=477)
-   -   Internet Connection Hijacked (https://www.askmehelpdesk.com/showthread.php?t=7671)

  • Feb 7, 2005, 09:24 PM
    oneillnz
    Internet Connection Hijacked
    My internet connection has been hijacked. Every time I connect my username and dial up phone connection are changed. I reset them again and again but very I reconnect they are changed. I think something has hijacked my default settings and keeps restoring there own one. The number they put in is an international one that costs a lot every time you ring it. Any help would be appreciated.
  • Feb 8, 2005, 05:26 AM
    fredg
    Hijacked
    Hi,
    You have Spyware/Malware in your computer.
    To get rid of it, do the following:

    If you think you already have Spyware/Advertising Ware in your computer, run these as follows:

    http://www.security-related.com/download2.htm
    Download: SpyBot Search & Destroy; 1.3

    AdAware at:
    http://www.lavasoftusa.com
    Download: AdAware_SE

    CWShredder at:
    http://www.download.com/CWShredder/3...ml?tag=lst-0-1
    (CWShredder is intended only for removal of CoolWebSearch files; placed as spyware on the harddrive). It is not a "stand alone" scan, but needs to be run.

    All 3 of the above programs run better and much faster when run in SafeMode.

    To get into SafeMode:
    Re-boot the computer, and immediately after starting up, Press and hold down, F8, at top of keypad.
    When the options show on the screen, use the up and down arrow keys on the keyboard to select
    "Safe Mode".
    Press Enter

    It's best to run the AdAware scan first; 3 times; then re-boot.
    Then, run the AdAware scan again 3 times; then run the SpyBot. Then, run CWShredder.
    Re- Boot.
    Reason for running so many times:
    Some of these trojans' files can be deleted the first time; leaving some others; but on re-boot, they re-write the files that were deleted.
    Running multiple times deletes most of it the first
    Time.

    If you wish to have a great program, after you clean out Spyware/Advertising Ware:
    SpyWare Blaster 3.2
    Great, free, program that STOPS spyware, trojans, home page hijacks, etc, BEFORE they get into your computer. Check it out at CNET at link:

    http://www.download.com/SpywareBlast...ml?tag=lst-0-2

    Best of luck,
    fredg
  • Feb 8, 2005, 01:28 PM
    oneillnz
    Re Internet Connection Hijacked
    Thank you fredg

    I have done as you said and there have been positive results. Two little probelems remain

    When AdAware is run it still comes up with the following critical

    HKEY_LOCAL_MACHINE:software\microsoft\windowsnt\cu rrentversion\winlogon"Shell"(explorer.exe soundmon.exe)

    And

    When I log on to Google I am redirected to www.powow.com\greenleaf420\c4t\c4t.htm a screen then comes up asking if I wish to upgrade my explorer the only way I can get out of this is using cont alt del also I notice that the Microsoft updates are continually downloading

    Hopefully these problems sound familiar and you can suggest a remedy

    Thank you again for the excellent advice you have given me thus far

    Cheers

    Maurieo
  • Feb 8, 2005, 01:54 PM
    oneillnz
    Re Internet Connection Hijacked #2
    Further to my reply

    When I log out of the internet and go to work offline a popup comes up saying that a program has requested info from r00nauf.info ansask which internet connection I wish to connect with I tick the box saying don't ask me again to get rid of this.

    Hoping you can help

    Cheers

    Maurieo
  • Feb 8, 2005, 08:36 PM
    always_learning
    Yet Another Hijack This Sufferer Needing Help
    The following link provides a comprehensive online tutorial for detecting and removing the various bits and pieces of Hijack This.

    http://www.thespykiller.co.uk/hjttut.htm

    Hope this helps.
  • Feb 14, 2005, 11:50 PM
    oneillnz
    Thanks for Help
    Thanks for the help with this problem. I believe I have solved the immediate problem and am now in control of my own internet connection. I have a sneeking feeling that parts of the infection still exist however regularly runnibg add aware seems to keep everything at bay. Thanks for the help

    Cheers

    Maurieo
  • Feb 20, 2005, 11:42 PM
    ladyandjan
    Also go to winpatrol.com and download the latest free version which will protect your home page from ever getting hijacked in the first place. Have had it on my computer for almost 2 yrs. And a box will pop up telling you something is trying to change your home page and you just click no and your settings are retained with no changing being allowed. Small program but works great and you won't have to use spybot, ad-aware or anything like that to get rid of the hijacker since winpatrol won't allow it in the first place. I read these posts from people who've had their computer hijacked and I just think-only if they had winpatrol they wouldn't have these kinds of problems.
  • Feb 21, 2005, 02:07 AM
    oneillnz
    Thanks I will give it a go
  • Feb 21, 2005, 06:16 AM
    ScottGem
    One,
    If you have Win XP, you might want to check out Microsoft's new free anti-spyware utility. One of its advantages is that's it real time protection like an anti-virus. It blocks the malware from being installed.

    You can find it here:
    http://www.microsoft.com/athome/secu...e/default.mspx
  • Feb 24, 2005, 07:07 AM
    fredg
    Adware
    Hi,
    As an afterthought, if you don't want to use the new Microsoft Adware program, the free Spyware Blaster does the same thing, and runs great with all windows operatiing systems.
    It can also be update, with latest detections, free, with new ones every week.
    Best wishes,
    fredg

  • All times are GMT -7. The time now is 01:14 AM.