Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Robbed homepage[CLOSED]


  • This topic is locked This topic is locked

#1
Injanib

Injanib

    New Member

  • Member
  • Pip
  • 1 posts
Hi,

Recently I was hit by Alemod.h.dll virus that infected my wininet.dll file. Mcafee could not clean it. I could only logon in safe mode. In normal mode I was getting a blank screen and my explorer.exe file was returning an error saying "application failed to initialize properly. click ok to close application." Anyways, I downloaded a new copy of wininet.dll file, renamed the old one, coppied the new one into windows\system32 folder and deleted the old one. Now my computer works fine. I have ran Adware and removed all spywares it found. I can not find the virus Alemod.f.dll file to remove it. I am not sure if it is still chilling some where on my system and doing damage. Everything else seems to be back to normal except one thing. My homepage. It used to be Yahoo.com. Now everytime I start internet explorer I get syserror.com. it gives me a warning that someone is spying on me. At the top of the page it says "Security Center" and has the log of Windows Security Center found in control pannel. Anyways everytime I try to go to yahoo.com this page apears. As if the yahoo.com has been replaced with this new website. Even when I click on the Y! icon it takes me to this new website. My homepage in internet option is also yahoo.com.I can not figure this part out. Does anyone have any idea???
  • 0

Advertisements


#2
jwbirdsong

jwbirdsong

    Trusted Helper

  • Retired Staff
  • 668 posts
Make sure you read and follow the instructions Must read before posting a HijackThis log

Please download HijackThis version 1.99.1 from THIS LINK and make sure to unzip and run it it to it's own, permanent folder. To run HijackThis click Scan and then Save log, Post the new log in a reply to this thread. I would be happy to take a look at it.
  • 0

#3
jwbirdsong

jwbirdsong

    Trusted Helper

  • Retired Staff
  • 668 posts
going once....going twice......
  • 0

#4
jwbirdsong

jwbirdsong

    Trusted Helper

  • Retired Staff
  • 668 posts
oops...dups

Edited by jwbirdsong, 22 November 2005 - 03:44 PM.

  • 0

#5
jwbirdsong

jwbirdsong

    Trusted Helper

  • Retired Staff
  • 668 posts
Due to lack of activity; this topic will be closed.

If you're the topic starter, and need this reopened, please contact a staff member with the address of the thread.
Everyone else, please begin a New Topic
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP