-=PCTechTalk=- Re: Browser Hi-jacker
- From: GuitarMan <gman.pctt@xxxxxxxxx>
- To: <pctechtalk@xxxxxxxxxxxxx>
- Date: Tue, 19 Jun 2007 18:18:04 -0400
Steve,
"System Doctor" (not to be confused with the Scandisk replacement
included with Norton Utiilties) is nasty malware that's usually disguised as
a malware remover app like SpySweeper, Ad-Aware, Spybot S&D, etc.. It
doesn't necessarily take any action on your part to contract it (it can
spread through driveby downloads), but if you get it that way it means your
defenses aren't strong enough (and the sites you're surfing are a little
suspect lol).
Download the fix from the link below:
Run the program and follow the directions. Make sure you save all your work
before. If the virus is detected it will force you to immediately restart
your computer.
http://www.pctools.com/downloads/afl_2-spyware/sdsetup.exe
Just in case you're interested (or wish to make absolutely sure it's all
gone), here are the instructions for manually removing it using the awesome
"HijackThis" tool.
http://www.bleepingcomputer.com/forums/topic58656.html
Peace,
GMan
"The only dumb questions are the ones that are never asked!"
----- Original Message -----
From: <DeaconDeamon@xxxxxxxxxxx>
To: <pctechtalk@xxxxxxxxxxxxx>
Sent: Tuesday, June 19, 2007 4:42 AM
Subject: -=PCTechTalk=- Browser Hi-jacker
> Hi all
> I seem to have picked up a hijacker in firefox. This pain in the butt is
> called "System Doctor". After I open Firefox it will take me to there
> site when I click to open a site from my bookmarks list. Usauly the second
> site I go to.
> I did a google on this and it is spyware/malware that piggybacks in on
> other downloads. The only thing I have had downloaded before this started
> was the last update from Microsoft. Hope there not playing this game. Of
> the 3 browsers I have only Firefox is affected. IE7 and Avant are ok.
> I checked out some of the ways to get rid of this via google. All said
> free removal, but all wanted me to buy there program for them to remove
> it.
> Does anyone know of a free way to remove this? Have have used the search
> mode and deleted anyting that came up with that name. It was good for a
> day or 2 than it came back.
> Guess I should also add this only happens after the computer has been shut
> down overnight.
> I'm using XP home with sp2
> Thanks
> Steve
--
Please remember to trim your replies (including this sentence and everything
below it) and adjust the subject line as necessary.
To unsubscribe or change your email settings:
//www.freelists.org/webpage/pctechtalk
To access our Archives:
http://groups.yahoo.com/group/PCTechTalk/messages/
//www.freelists.org/archives/pctechtalk/
Other related posts:
