home page hijacked

hezi · Guest

Hi,

My IE home page was hijacked by some tipe of a search engine.
The hijacker is controling my 'about:blank' and keeps changing the home page definition to be 'about:blank'.
When I try to go to google for example, from this page, I can't.
I have Norton Antivirus 2002 running on my PC and it detects nothing.
Some time it detect a script cold sysh.htm which I can't get rid of.
When I try to go to google while in this 'about:blank' page, by typing the address in the address line, I get a page saing it is un recognized address and I can see in the address line that actually google is being searched by - www.onestepsearch.biz.

Can you help with it?

Thanks

claire · Posted: Sat May 01, 2004 3:48 pm Post subject:

Welcome Hezi ,if you have not registered, please do it now. Hezi we need a snapshot of your running processes..........but First:
Virus=Read This: http://www.computercops.biz/postt8864.html
HiJack= Read This: http://www.computercops.biz/postt911.html

Download : HiJack This!

Create and Unzip to a folder not your Desktop or the Temp folder, doubleclick HijackThis.exe, and hit "Scan".
Unzip the download (using a piece of software like: Winzip)

When the scan is finished, the "Scan" button will change into a "Save Log" button.
Press that, save the log in a text file, and post it in the CCSP "Spyware - Hijack Related" forum:

http://computercops.biz/forum67.html

Most of what it lists will be harmless or even required, so do NOT fix anything yet.
Someone here will be happy to help you analyze the results.

guest · Guest

I had the exact same problem!! i cant get rid of it does nebody know how to please help me

Guest · Posted: Wed Jun 02, 2004 9:57 am Post subject:

my web site trys to loop back to www.onestepsearch.biz and i can't go to any web sites, it loops back to that website.


	Home ˇ Topics ˇ Submit News ˇ Top 10 This entire site, Cops Themes, and Computer Cops are Š 2002 - 2004 Computer Cops, LLC. All rights reserved. You can syndicate our news using the file RSS 0.91, ultramode.txt, or RSS 1.0. Acceptable Use Policy. Use signifies your agreement. Engine Copyright Š 2002 by PHP-Nuke, GNU/GPL Licensed. ICRA Member. Paul Laudanski, Member of Computer Cops, LLC Server Load: 660 pages served in previous 5 minutes. Page Rendered: 0.386 seconds.