Article Navigation

Back To Main Page


 

Click Here for more articles

Google
Spyware - Your Web Browser isCulprit!
by: Kevin Souter
My first experience withspyware BHO based infection was several months ago. I had gone through all ofusual steps withclient's machine to clean it. Ad-Aware was run, Spybot: Search and Destroy was as well. Nothing looked suspicious insystem's startup. All appeared well, but it was not.

After extensive testing and no further symptoms I returnedcomputer to my client's home. I hooked it back up, and dialedinternet. Everything so far was progressing smoothly. But, as SOON as I loaded Internet Explorer: BAMsame pop-up advertisements and other annoying things started happening again. With much embarrassment I had to takecomputer back to my office and try again.

It was all Internet Explorers fault. Microsoft Internet Explorer comes withfeature that is designed to add third-party functionality to their browser. It's actuallyvery good idea. Unfortunately, it now gets taken advantage of.

The producers of spyware know that many people now have spyware removers installed on their computers. They also know that quitefew people haveability to check what is in their start-up. Because of this, BHO's are crafted so thatspyware lies dormant until Internet Explorer is opened. Then it can start its dirty work.

The best program to removeerrant Browser Help Object is HijackThis. This program was originally designed to remove homepage hijackers and gradually morphed intoall-around removal tool for everything. If there's any one tool that I couldn't part with it's HJT.

To start, download HijackThis oneninenineone.
http://www.spywareinfo.com/~merijn

Once you've got it, open it. Clickbutton that says "Dosystem scan only". Following that, scroll down toitems labeled zerotwo - BHO. Remove anything here that looks suspicious. Internet Explorer does not require any BHO's to run. Just keepeye onpath that it loads from, andname offile. A legitimate one will be fairly easy to spot, as it'll havelegit title and OK looking path.

Iffilename looks like it was randomly made, like ASGSRTthreetwo.DLL or whatnot then there'sgood ninezero% chance that it's bad. Even if you do remove one that's good, you can always userestore feature of HJT to bring it back.

Aboutauthor:
Kevin Souter isfull time computer technician and operatescomputer repair site, as well asfree spyware removal site.
http://TweaksForGeeks.comhas articles and tutorials on all sorts of computer problems from internet issues to hardware defects, fornovice andexpert.
http://EradicateSpyware.nethas been set up to teach you how to remove annoying Spyware / Adware / Malware from your computer.


Circulated by Article Emporium

 



©twozerozerofive - All Rights Reserved