Member Panel

I'm a new user and it's nice to meet u... Well this happened a week ago and I think one of my cousins downloaded something off a foreign site. Next day, I start my computer and internet explorer opens up to some site like ycysoft.com or pic789.cn or any of those foreign sites... I tried everything to get that out of my computer but i just don't know how to fix it right... Any ideas? Thanks in advance!

Welcome to the PCHF pinoyboi.

It appears that your internet browser has been hijacked.

Can you please follow the prework linki n my signiture and post the resulting logs?
One of the security teams will take a look at them for you.

Hey man I got the logs...

Hello.

Please download and run Shoot the Messenger: http://www.grc.com/files/shootthemessenger.exe

This is a very simple app that disables the Windows Messenger utility, which is usually unecessary and leaves you vulnerable to possible popup attacks.


Next download and run RegSupremePro:
Macecraft Software - System Maintenance and Registry Cleaning made easy

When you run it, itt will want to make a backup of your cache. Let it.
Click on the Registry Cleaner tab, and choose Aggressive. When it has finished, click on Select and choose All. Click on Fix, and let it fix everything that it finds.


Restart your computer.


Then run Panda ActiveScan.
Once you are on the Panda site click the Scan your PC button
A new window will open...click the Check Now button
Enter your Country
Enter your State/Province
Enter your e-mail address and click send
Select either Home User or Company
Click the big Scan Now button
If it wants to install an ActiveX component allow it
It will start downloading the files it requires for the scan (Note: It may take a couple of minutes)
When download is complete, click on My Computer to start the scan
When the scan completes, if anything malicious is detected, click the See Report button, then Save Report and save it to a convenient location. Post the contents of the ActiveScan report.

I got that...

Your log appears clean... What Panda detected were only cookies. They are nothing to be worried about. They get installed on your computer everytime you visit any webpage. Now some of those are good cookies that get installed for ease of use for next time you visit the same page, but some cookies are spyware used for tracking users surfing habits.


Most of those cookies are third party cookies that can be blocked:

In Firefox go to Tools > Options > Privacy > Cookies

Click the small triangle next to cookies to expand that tab and put a check next to "for the originating website only". This will prevent third party cookies from being installed on your computer.

In IE go to Tools > Internet Options > Privacy and click on Advanced in the Privacy tab

Now put a check next to "Override automatic cookie handling"

Set first party cookies to Accept and third party cookies to Block

Also put a check to "Always allow session cookies" OK your way out.

This won't prevent all bad cookies from being installed, but will reduce the amount.



Are you still encountering your problem?