Home page hijacked

[Mucho]

How do I get rid of this hijacker "http://296f8.ilxt.info/index.php?aid=20037"

 

[Modeps]

Tools -> Internet Options -> Home Page -> Use Blank.

 

[Mucho]

Originally posted by: Modeps
Tools -> Internet Options -> Home Page -> Use Blank.

Thanks, but I want Google

 

[Modeps]

Originally posted by: Mucho

Originally posted by: Modeps
Tools -> Internet Options -> Home Page -> Use Blank.

Thanks, but I want Google

So type http://www.google.com in there...

 

[EvanB]

look for SWshredder, might take care of the spyware that is doing that.

 

[BlueWeasel]

You might try using BHOdemon.

The exact same hijacker was installed on a friend's system and running Ad-aware, Spybot, and SpywareBlaster did nothing. There is a hidden DLL file in the \Windows\System directory that wasn't identified by any of the those programs and can't be deleted from Windows.

I used BHOdemon to identify the DLL file (in my case it was mndmsm.dll or something similar). You'll need to boot to a command prompt (use a Win98 or WinME boot CD) and delete the DLL file that BHOdemon shows. Reboot into Windows and use the registry cleaner in BHOdemon to remove the registry entry.

Worked great for me for this exact hijacker.

 

[Mucho]

Thanks BlueWeasel I'll give it a shot.

 

[Beau]

http://www.spychecker.com/program/hijackthis.html

Run that app and post your log