Browser hijacked

[alexh]

My browser keeps getting it's home page set to xml-cash.com. Suprisingly, I found almost no info about this particular offender on a web search or here. This one is particularly bad - I have tried everything and can't get rid of it. Here are the details -

Windows 2k SP 4, IE 6.0
Nothing apparant in add/remove programs
Search of disk for xml-cash turns up only browser favorites link
Ran Ad-aware, AVG and Spybot many times- Spybot seems to always find something (tracking cookie) but the problem returns shortly.

Thanks for any help

[fink]

Welcome to Virtualdr..

Have a look through this thread...

http://discussions.virtualdr.com/sho...d.php?t=167915

and do all of the things it suggests then copy the Hijackthis log into this thread and then we'll move it to the Hijack forum where one of our experts can have a look at it and advise further.

Pls make sure that hijackthis is installed into it's own permanent folder.. eg- C:/program files/hijackthis

[alexh]

I can't believe this...

I can't be sure it's the xml-cash program, but somehow all cookies are being blocked. All of sites I log onto have the "remember me" function reset. I believe this is so I have to re-enter the logon. My IE is still set to medium security.

This is despite running Spybot and zone alarm. I'm beginning to think that these protection programs are useless.

How do the corporations handle this? I typically work at small companies and this never happens. Even if I have to pay a small fee it may be worth it. It takes most of the day to run all these cleaning problems and it rarely seems to work anyhow.

I'm very frustrated.

[fink]

Let us have a look at the Hijackthis log. That will only take a couple of minutes to download, run and paste the results here.

[Doc]

Once you have everything cleaned up, you will be best served if you use an alternative browser such as FireFox or Opera. If you insist on using Internet Explorer I would upgrade to IE7 as it is more secure.

Doc