| reply to Solid_Snake
Re: browser jacked can't fix it Solid_Snake:
What is actually causing this are these 3 keys-
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = »www.makemesearch.com/?said=114
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = »www.makemesearch.com/?said=114
O2 - BHO: Tubby - {9EAC0102-5E61-2312-BC2D-4D54434D5443} - C:\WINBLOWS\System32\MTC.dll
You need to REMOVE the MTC.dll file from your /system32 directory. Also look for an MTC.ini file; remove if found.
Even with the latest signature updates Ad-Aware and Spybot
"will not" detect this. Ad-Watch will see the attempt to modify the registry and when you click to block it, Ad Watch
will for some reason ALLOW the registry mod....your hijack
can can happen with either IE or Firefox...If you were browsing with firefox this sneaky hijack will alter your IE;
not firefox...in other words it's seeking IE as a target.
After you have successfully cleaned your system rerun Hijack
to confirm....good luck. |
