RE: [PCTECH] Browser Hijacked

[michael@xxxxxxxxxxxxxxxxxx]

Did everything but use a Mac. Doesn't it suck that the software we need
is on Windows which is fragile, and IBM (and others) refuse to support
Macs for development?

> -------- Original Message --------
> Subject: RE: [PCTECH] Browser Hijacked
> From: "Joe Pluta" <joepluta@xxxxxxxxxxxxxxxxx>
> Date: Wed, June 01, 2005 2:11 pm
> To: "'PC Technical Discussion for iSeries Users'" <pctech@xxxxxxxxxxxx>
> 
> I had ZoneAlarm, BHODemon and AVG all in place, and still got this
> thing.  Did everything: ran SpyBot, SpyKiller, HijackThis, CWSShredder,
> and all that happened is that now my workstation is semi-fried (and the
> worm is still in place).  I HATE Windows.  Talk about lost productivity.
> 
> Joe
> 
> > From: Walden H. Leverich
> > 
> > 1) Use a real browser like firefox! <G> (Couldn't resist)
> > 
> > 2) You've probably been hijacked by something that's installed itself
> as
> > a Browser Helper Object. In the registry check
> > "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser
> Helper
> > Objects" for entries. For each entry check the GUID against
> > HKLM\Software\Classes\CLSID\ where  is the GUID from the
> > Browser Helper Objects list. Find the offending one and kill it's
> entry
> > in Browser Helper Objects (probably want to remove it's CLSID and DLL
> > too).
> > 
> > 3) As with all registry changes, you mess it up, it's your problem.
> <G>
> > 
> > -Walden
> 
> -- 
> This is the PC Technical Discussion for iSeries Users (PcTech) mailing list
> To post a message email: PcTech@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/pctech
> or email: PcTech-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/pctech.