How to get rid of web site embeded withine startup items?
Results 1 to 4 of 4

Thread: How to get rid of web site embeded withine startup items?

  1. #1
    Join Date
    Apr 2002
    Posts
    23

    Question How to get rid of web site embeded withine startup items?

    Hi everyone, hope you guys can help me on this one.

    Everytime I start my PC, a IE window will pop up automatically during the startup processes. Its a web site call www.100ku.net, I think I've got this little nasty bugger when I try out Opera. The Java VM install with Opera has a security breach, and this one sneak through.

    The initial symtoms: IE start automatically on startup. The options button under the Home Page all grey out with the above address set as my home page.(Use Current is the only grey out button now)

    I get the update from microsoft and done the upgrade. used CWShredder, AD-aware 6 then SpyBot S&D, Still there. I then removed the key point to the address withine the registry (I though the above software will removed the string but didn't) and it still comes up.

    I comes to a conclusion the spy ware or the malicious code whatever you call it, is embeded withine the startup items, but I can't pinpoint it. When I do a clean boot (safe mode) It won't comes up.

    How can I remove it completely?

    Thanks!

    Andy

  2. #2
    Join Date
    Oct 2002
    Location
    Here, there and everywhere
    Posts
    7,355
    Try HijackThis and post your log here.

    Who are you? Introduce yourself here

    P3-450 powered by

    Intel Core 2 Duo E6600
    Gigabyte 965P DQ6
    4 Gig Crucial Ballistix PC6400
    Gainward Nvidia Geforce 7950GT
    2X Western Digital Caviar 320GB SATA2
    Soundblaster X-Fi XtremeMusic
    Samsung SH-D162C DVD Rom
    Lite-On SHM-165P6S DVDRW
    Samsung 20" LCD Syncmaster 206BW
    Thermaltake Kandalf VA9000SWA Tower
    Tagan Dual Engine 700W PSU
    XP PRO SP3/Windows 7 64-bit
    --------------
    Samsung NC10 2GB Ram
    Windows 7 32-bit

  3. #3
    Join Date
    Apr 2002
    Posts
    23
    Thanks for the quick reply P3-405.

    I run HijackThis and found the root of the problem. I deleted the last string, and erevything goes back to normal.

    Good utility!

    Thanks again P3-450

    Regards
    Andy

  4. #4
    Join Date
    Oct 2002
    Location
    Here, there and everywhere
    Posts
    7,355
    Glad to help
    Who are you? Introduce yourself here

    P3-450 powered by

    Intel Core 2 Duo E6600
    Gigabyte 965P DQ6
    4 Gig Crucial Ballistix PC6400
    Gainward Nvidia Geforce 7950GT
    2X Western Digital Caviar 320GB SATA2
    Soundblaster X-Fi XtremeMusic
    Samsung SH-D162C DVD Rom
    Lite-On SHM-165P6S DVDRW
    Samsung 20" LCD Syncmaster 206BW
    Thermaltake Kandalf VA9000SWA Tower
    Tagan Dual Engine 700W PSU
    XP PRO SP3/Windows 7 64-bit
    --------------
    Samsung NC10 2GB Ram
    Windows 7 32-bit

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •