| Forum Home | ||||
| Press F1 | ||||
| Thread ID: 43529 | 2004-03-17 19:55:00 | homepage changed by web | srm33 (3954) | Press F1 |
| Post ID | Timestamp | Content | User | ||
| 223340 | 2004-03-20 01:16:00 | This from Start up Lists. "Added as a result of the SANKER VIRUS! Note that the valid "rundll32.exe" resides in C:\Windows\System32 wheras this version resides in C:\Windows" A bit of clarification. Bye |
Peter H (220) | ||
| 223341 | 2004-03-22 19:49:00 | Now its getting really frustrating!! Have tried all the above- Adaware, Spybot, Hijackthis, CWS, and still the www.24start.com keeps coming back- it is from the C drive as follows. and seems to happen offline or online. Is fine for a day and then back. No matter how many times I delete this it will reappear later at some time. C:\Program Files\QuickPage\Portal\portal.html Is it likely to be a program within my computer, external cookie. or whatever?- I have no clue! I have XP SP 1. I have added the site to my restricted sites- no difference. Can anyone help? srm |
srm33 (3954) | ||
| 223342 | 2004-03-22 21:21:00 | Go here (securityresponse.symantec.com) and follow their removal instructions. Pay particular note to disabling the system restore. Let us know how you get on. ;-) |
Fire-and-Ice (3910) | ||
| 223343 | 2004-03-22 21:36:00 | Fire and Ice, I agree, A virus. Doest netsky do this also, if fire and ice idea didn't work try a on line virus scan my Fav' is http:\\www.pcpitstop.com there are others but I donot have the ur for those you could search for them oh another one is housecall. good luck. |
beama (111) | ||
| 223344 | 2004-03-22 22:13:00 | Another online scanner is TrendMicro here (housecall.trendmicro.com) | Pheonix (280) | ||
| 223345 | 2004-03-23 20:21:00 | OK, I have scanned with Trendmicro (by net), PCPitstop (by net) and Sophos (on my computer). Not a virus in sight! Yet still changing. I have an ADSL connection if that is that a factor. Any ideas where to next? |
srm33 (3954) | ||
| 223346 | 2004-03-23 21:47:00 | OK it sounds like you have a particularly difficult hijack to get rid of. Go and read all of this thread (www.spywareeliminator.com) and see if the advice given can help you. You will need to download and run HijackThis (www.majorgeeks.com) but be very careful to only delete the entries advised in that thread. | Fire-and-Ice (3910) | ||
| 223347 | 2004-03-23 22:22:00 | -that has now pointed me in the right direction- thanks! However as a non guru- should I post the log file for advice or better not to? srm |
srm33 (3954) | ||
| 223348 | 2004-03-23 22:34:00 | It would be a good idea to post the log file for advice, yes. | Fire-and-Ice (3910) | ||
| 223349 | 2004-03-23 23:09:00 | There may be something useful on this site if anyone can translate from Dutch Go to google and type in - 24start homepage hijack Only the one site comes up, can't seem to put that url in here for some reason. |
Jim B (153) | ||
| 1 2 3 4 5 | |||||