misaal9 0 Posted May 27, 2005 i have some spywares on my comp. whenever i type a new address in the address bar of internet exploer, i get redirected to random internet sites, one of which is: "http://80.77.87.190/drugs1/". how do i remove this? also, i have some program names tht appear on the msconfig (startup tab) even though these programs were uninstalled loong time bak. is there any way to remove thes names from here? Share this post Link to post
Sampson 0 Posted May 27, 2005 Look for a file called "hosts". Generally it is under \windows\system32\drivers\etc\hosts . There is normally only one entry 127.0.0.1 localhost . That is its default. Delete all other entries unless you put them there. After altering this file, run your spyware and anti-virus to rid yourself of those gremlins so that they don't re-edit the hosts file. You might also want to Run BHODemon. Share this post Link to post
misaal9 0 Posted May 30, 2005 ok... i went thru "hosts" in C:/Windows... there were some instructions and one entry (the default one), nothing else... i ran norton antivirus 2004 (updated), no threats found. but i still get tht web page (http://80.77.87.190/drugs1/) also i want to remove some program name frm the msconfig startup list... Share this post Link to post
Sampson 0 Posted May 30, 2005 To remove these items permanently you will have to go into the registry. Since this is sometimes intimi[censored], go here: http://www.mlin.net/StartupCPL.shtml and download this little applet. You can use this interface to get into the registry and get rid of the programs in your startup folder and run or runonce registry entries. Share this post Link to post
ScinteX 0 Posted May 30, 2005 Also try: Spybot http://www.safer-networking.org/en/download/index.html Adaware http://www.download.com/3000-2144-10045910.html?part=69274&subj=dlpage&tag=button Spyware blaster http://www.javacoolsoftware.com/spywareblaster.html Spyware Guard http://www.javacoolsoftware.com/sgdownload.html TDS3 (trial version) http://tds.diamondcs.com.au/index.php?page=download Also check out this page and download any of the freeware utils: http://www.diamondcs.com.au/index.php?page=products Note: Reg Prot shows as a trojan with Trend Micro antivirus (its not though). S Share this post Link to post
thatsteveguy 0 Posted May 30, 2005 also if you use the microsoft anti spyware it has a restore your home page setting which can help out with that problem. S Share this post Link to post