RE: [PCTECH] Browser Hijacked

["Joe Pluta" <joepluta@xxxxxxxxxxxxxxxxx>]

I had ZoneAlarm, BHODemon and AVG all in place, and still got this
thing.  Did everything: ran SpyBot, SpyKiller, HijackThis, CWSShredder,
and all that happened is that now my workstation is semi-fried (and the
worm is still in place).  I HATE Windows.  Talk about lost productivity.

Joe

> From: Walden H. Leverich
> 
> 1) Use a real browser like firefox! <G> (Couldn't resist)
> 
> 2) You've probably been hijacked by something that's installed itself
as
> a Browser Helper Object. In the registry check
> "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser
Helper
> Objects" for entries. For each entry check the GUID against
> HKLM\Software\Classes\CLSID\{xxx} where {xxx} is the GUID from the
> Browser Helper Objects list. Find the offending one and kill it's
entry
> in Browser Helper Objects (probably want to remove it's CLSID and DLL
> too).
> 
> 3) As with all registry changes, you mess it up, it's your problem.
<G>
> 
> -Walden