Some guy had a problem with this on another forum I go to. This was the tip he got, don't know if it works.
Quote:
Run a search on your hard drive for any files ending with *.hta or *.js. If you find any, open them in notepad or some other text editor and look for the URLs that you have been hijacked to. Any file with those URLs, delete them. Also delete all *.tmp files on your drive; some of them contain malicious code (for e.g. browser hijacks or malware (re)installations). Besides, deleting *.tmp files doesn't hurt, unlike dll's which are also used sometimes for this purpose.
Some recommended programs:
Spybot S&D [recommended]
Ad-aware
Aluria Spyware Eliminator
SpySweeper
I use Hijack This, Spybot & Ad-Aware.
|