Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Iesecuritytool And Spyheal


  • Please log in to reply
3 replies to this topic

#1 Sparkys kneecap

Sparkys kneecap

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:11:53 PM

Posted 03 January 2007 - 01:08 PM

Hi there,

My homepage has been hijacked by this site: -

hxxp://iesecuritytool.com/

It looks very similar to the last one I had when I was infected before and that was systemuptodate.net

I was told to download Smitrem and run that and it worked instentaniously then but nothing seems to budge this new homepage!

Also used roguescanfix and Spybot and they dont seem to work either! Near in mind you may have to go quite slow with me as I am not very good at these advice sites!

Thanks in advance.

(BTW I have Windows XP)

Mod Edit: Disabled active link to malware site

Edited by quietman7, 03 January 2007 - 02:17 PM.


BC AdBot (Login to Remove)

 


#2 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,109 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:07:53 PM

Posted 03 January 2007 - 02:21 PM

If your using Win XP or 2000, do this.

First, print out these instructions, or copy them to a NotePad file for reading while in Safe Mode, because you will not be able to connect to the Internet to read from this site.

Please download, install and update AVG Anti-Spyware 7.5.
Be sure to print out and follow the AVG Anti-Spyware Install-Scan Instructions. DO NOT perform a scan yet.

Please download ATF Cleaner by Atribune & save it to your desktop. DO NOT use yet.

Next, follow the generic instructions for using SmitfraudFix in BC's "How to remove the Smitfraud / Generic Zlob". You will have to extract the zip file to you Desktop. (Click here for information on how to do this if not sure. Win 9x/2000 users click here. A ZIP file requires an unzipping utility. If you need one, download 7zip (its free).

After using the tool as instructed, reboot again in "SAFE MODE" and double-click ATF-Cleaner.exe to run the program.
  • Under Main "Select Files to Delete" choose: Select All.
  • Click the Empty Selected button.
  • If you use Firefox browser click Firefox at the top and choose: Select All
  • Click the Empty Selected button.
    NOTE: If you would like to keep your saved passwords, please click No at the prompt.
  • If you use Opera browser click Opera at the top and choose: Select All
  • Click the Empty Selected button.
    NOTE: If you would like to keep your saved passwords, please click No at the prompt.
  • Click Exit on the Main menu to close the program.
Then scan with AVG Anti-Spyware 7.5 per the instructions you printed out and reboot normally.
Note: Close all open windows, programs, and DO NOT USE the computer while AVG Anti-Spyware is scanning. Doing so can hamper AVG Anti-Spyware's ability to clean properly and may result in reinfection.

Post back if your still having problems after following these instructions.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#3 Sparkys kneecap

Sparkys kneecap
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:11:53 PM

Posted 19 January 2007 - 08:02 PM

Thanks for that mate. Worked perfectly!! Sorry I was so long in replying!

#4 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,109 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:07:53 PM

Posted 19 January 2007 - 09:20 PM

If you have not already done, so SET A NEW RESTORE POINT to prevent reinfection from an old restore point. Any malware you picked up could have been saved in System Restore. Since System Restore is a protected directory, your tools can not access it to delete these bad files which can reinfect your system. Setting a new restore point AFTER cleaning your system will help prevent this and enable your computer to "roll-back" to a clean working state.

The easiest and safest way to set a new RESTORE POINT:
  • Go to Start > Programs > Accessories > System Tools and click "System Restore".
  • Choose the radio button marked "Create a Restore Point" on the first screen then click "Next". Give the R.P. a name then click "Create". The new point will be stamped with the current date and time. Keep a log of this so you can find it easily should you need to use System Restore.
  • Then go to Start > Run and type: Cleanmgr
  • Click "OK".
  • Click the "More Options" Tab.
  • Click "Clean Up" in the System Restore section to remove all previous restore points except the newly created one.
Then to protect yourself against malware and reduce the potential for re-infection, read:
"Simple and easy ways to keep your computer safe".
"The Ten Most Dangerous Things Users Do Online".
"How did I get infected?, With steps so it does not happen again!".
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users