I have what appears to be a virus on my computer. Every time I log on to the web it automatically sets my home page to a Search Web Site. Also when I try to access my email on the web it doesn’t allow me to and kicks me back to the home page - some pop-ups come up at this point about getting rid of spyware etc :roll:
Does anyone have any idea what I can do to get rid of this thing. I have run ‘Spybot’ and ‘Ad-aware’ several times to no avail. They always pick up something but it doesn’t fix the problem.
I never thought I would see the day when I would give advice on computer problems but here goes;
I had a similar spot of bother and fixed it by going to Tools,then Internet options then General. In the first box you see you delete the imposed address and write the one of your choosing.
Worked for me. I run on Windows XP so if you are on anything else well…?
there is also a program you can run called HIJACK THIS. You can download it from a lot of sites. It will scan yor registry and show you what is there. You can then go to sysinfo.org for an explanation of each item. Select and delete the ones that are malware.
Thanks for the advice Dubhlinn. I have tried that several times and it works while I’m still logged on. Once I shut down the Internet and log on again I’m back to that stupid page.
I have had this before and I just save what I need then run a recovery program, the other option is to go to your internet options and take the address that is being forced into your home page and run it through google, you may want to add the word removing removal or virus to the search with the address. Doing this often leads to a forum or site that has directions for removal, but the solution often involves manually removing files from many folders, a pain in the rear.
In my experience many spyware programs did not remove or detect this type of infection. The one I got I traced to a water craft site after I got it twice.
Dont know which version of Windoes you have but all allow you to edit the system files. The best is XP. There you can run MSCONFIG from the run box off the start menu. It lets you controll what starts at bootup. No matter how many entries your spyware has in the registry setting them to off in MSCONFIG turns them off completely.
In earlier Win32 GUIs you have to edit the Registry for entries matching the offending name. The most critical entry to be deleted - usualy the ‘value’ or target, and the agent or ‘name’ of the mechanism - will be under the label ‘run’ Open regedit from the run box, then in search type the offending name. Search by value, name etc separately because that is faster.
Do what Ron said and download a copy of HIJACKTHIS. It sounds like one site has modified your Windows Registry. Be careful using the Registry editing program. Certain lines will be flagged that are needed. Others that look innocent are in fact the problem.
Go to your START menu and do a search for a file called “HOSTS.” You’ll have to open this file with Notepad or Wordpad. The only entry in this file should be:
127.0.0.1 localhost
If you see anything else (and you probably will) delete it. More than likely you’ll see a long list of serach engine address (Google, Yahoo, etc…) that are being redirected to the page that keeps coming up.
Unfortunately, even if you do this it may come back later.
You could also switch from IE to a browser like Mozilla Firefox (http://www.mozilla.org) or Opera and you’ll have less trouble with this kind of stuff.
Agreed, stop using IE.
I’ve been using ad-aware with good results…
YOU MUST ADD A FIREWALL.
Netscape was my default browser and things were so bad that IE windows were popping up!
I cleaned out a system last week that was really infected and had to use Spy Sweeper because Ad-Aware didn’t catch everything. it removed 1,500+ traces that Ad-Aware didn’t see.
Yeah, don’t forget Zone Alarm. If you are on broadband, it’s just a matter of time if you don’t. Zone Alarm free version, and keep it updated. And I like AVG anti virus over anything else out there. Also free. And doesn’t hog system resources like McAffee and Nortons.
This isn’t quite true. The host file directs the browser to look on the local computer for the url listed. This is a great way to block sites. Spybot can install a list, but it is very large. I downloaded a list and add advertising servers as I run into them. In stead of the ad, there is a notice that the site was not accessable. I have cable so the bandwidth is not a problem, but it will speed up site loading since you don’t download the ads.
The problem I had was that every time I logged on to the web a page called ‘About:Blank’ inserted itself as my home page.
Based on the advice I got here I downloaded ‘HIJACKTHIS’ and ran it. It showed up several entries with About:Blank in them so I deleted all of them. Next time I logged on they came back.
I also did a ‘regedit’ and searched for ‘About:Blank’. I deleted any entries I found but again they were back next time I logged on.
I downloaded several different adware/spyware kiling software. I ran them with the network plugged in and unplugged - no luck.
One tip I got here - from Duffy I think - said to try a search on Google. I did this and ended up on a site called Computer Cops ( http://computercops.biz/ ) . This is an excellent site with great information and downloads (very technical in some ways but also very informative). There was several threads on About:Blank and one person recommended downloading and running a program called ‘CWShredder’. I did this at 12:30am this morning (after spending about 6 hours trying to solve the problem) and EUREKA! it fixed the problem.
Now, can someone tell me how I can prevent this from happening again. Tony mentioned installing a Firewall. Will this prevent this type of thing. If so any recommendations on the best one to get and can I download it directly from the web? Also there was some mention of changing from IE. Will that help?
Also I hope my experience will help someone else who might end up with the same problem.
Many installed programs regularly ‘talk’ to the home website whenever you go online. Often it’s harmless linking just to see if there are any updates. In the case of spyware, it’s to load more offending files or send information about your system to other websites without your permission.
The firewall will allow you to block many of the unwanted visits and you select which ones get through.
I’m using System Mechanic 4 on one computer and System Suite 4 on another. They both well for me.
When I set IE to show no home page, it says About:Blank in my preferences box. As far as I know that is a normal indicator. Maybe a virus has used that too, I don’t know.
