My cousin's machine has been hijacked by the site below, every time she opens IE this page appears instead of her homepage. She is also getting pornagraphic pop ups and also appearing in her taskbar is a small triangle with a flashing yellow exclamation mark saying her machine is infected with spyware. Nortons has failed to remove it nor has Spybot.

I would appreciate it if anyone can offer any assistance.

Hello there Uharu and welcome to PCHF,

I have informed our security specialist about this post but in the meantime would you be able to run an ewido scan and hijackthis and post the appropriate logs onto the forum for us.
You can find information on how to use these programs as well as the links under 'Prework' in my signature.

Hi there Uharu.

Lets first run smitrem to get rid of that , and if you then run Ewido and hjt after that then im sure youre pc will be clean in no time.




Download Smitrem to your desktop:

http://noahdfear.geekstogo.com/click...click.php?id=1

Run the installer and then press Start to Extract the
files to the desktop, Do not run it yet.

Reboot into safe mode (Reboot and keep tapping F8 , then
choose safe mode from the list)

Run SmitRem:
Open the SmitRem folder and double click the "RunThis.bat" file to start the tool. Follow the prompts on screen , wait for the tool to complete , and disk cleanup to finish.

The tool will create a log named smitfiles.txt on the drive that you ran Smitrem on, eg; "C:\smitfiles.txt" , or the partition where your operating system is installed on.

Please attach this log to your next reply.



Note: XP users using the XP theme may ex-perience a change to the Classic Windows theme. This can be changed on the themes tab of desktop properties.


You will need to reload your wallpaper as the SmitRem
tool will reset it, you can do this by right clicking
desktop and choosing properties, First check Theme and
set it to Windows XP then click the Desktop tab and
choose the one you want to use and press apply.