Google Answers Logo
View Question
 
Q: "Internet homepage problem" ( No Answer,   1 Comment )
Question  
Subject: "Internet homepage problem"
Category: Computers
Asked by: rider1-ga
List Price: $5.50
Posted: 17 Apr 2004 15:56 PDT
Expires: 17 May 2004 15:56 PDT
Question ID: 331873
No matter what we assign on our Tools bar to be our homepage it comes
back to (linklist .cc/index.php/aid=446) I want to know how to remove
this searchengine

Request for Question Clarification by sublime1-ga on 17 Apr 2004 16:57 PDT
rider1...

Please read my answer to a similar question, here:
http://answers.google.com/answers/threadview?id=306923

You may be able to resolve the problem through the use
of the software referred to in that answer.

In case this doesn't resolve the problem, there is 
a thread on the Avast antivirus forum which addresses
your specific form of hijack and suggests special tools
for resolving it, including HijackThis, available here:
http://spywareinfo.com/~merijn/downloads.html

The forum thread on the linklist.cc hijack is here:
http://forum.avast.com/index.php?board=4;action=display;threadid=3414

Part of the process of using HijackThis is to post a 
logfile which the program produces. You could post
the file here and have me analyse it, but for the price
you are offering, you might want to post it on the
Avast forum, and let the experts there assist you.

Let me know where this takes you. If it resolves your
problem, I will post a formal answer here.

sublime1-ga
Answer  
There is no answer at this time.

Comments  
Subject: Re: "Internet homepage problem"
From: jiiins-ga on 18 Apr 2004 06:05 PDT
 
From http://www.spywareinfo.com/~merijn/ , specifically on linklist.cc:

-------------------------------------------------------------- 
March 24, 2004: 
[Update] If your browser has been hijacked to drxcount.biz,
real-yellow-page.com, list2004.com or linklist.cc:
We are working on a fix for this one and drawing near to an automated
solution. This is by far the most sophisticated CWS variant seen to
date, and it will take some time before CWShredder will be able to
remove it.

The following *updated* manual fix should work: 
Download this zip: http://www.zero.vulc4n.com/downloads/pv.zip, unzip
it to the desktop.
Be sure to have at least 1 Internet Explorer open, then double click
on the runme.bat.
Notepad will open with a log in it Look for a line with this file,
size and beginning to it. The filename will always be different:
winajbm.dll 61c00000 61440 c:\windows\system32\winajbm.dll 

This part indicates the bad file: 
61c00000 61440 
It will always start with that header. 
Write down the filename behind it. 

Now download KillBox: 
http://download.broadbandmedic.com/VbStuff/KillBox.zip 
Unzip and run it. 
Don't click any of the buttons though, instead please click on the
Action menu and choose "Delete on Reboot".
On the next screen, click on the File menu and choose "Add File". The
file you copied earlier should now show up in the window. If that's
successful, choose the Action menu and select "Process and Reboot".
You'll be prompted to reboot, do so.
After rebooting, make sure the file is gone. 
If this doesn't work, search on the SpywareInfo forums for topics
posted by users with the same problem and read those. If none of the
solutions you find work, make a new thread and ask for help.

Important Disclaimer: Answers and comments provided on Google Answers are general information, and are not intended to substitute for informed professional medical, psychiatric, psychological, tax, legal, investment, accounting, or other professional advice. Google does not endorse, and expressly disclaims liability for any product, manufacturer, distributor, service or service provider mentioned or any opinion expressed in answers or comments. Please read carefully the Google Answers Terms of Service.

If you feel that you have found inappropriate content, please let us know by emailing us at answers-support@google.com with the question ID listed above. Thank you.
Search Google Answers for
Google Answers  


Google Home - Answers FAQ - Terms of Service - Privacy Policy