Browser Hijacker

Kan du ikke bruge en ordentligt browser og mailklient i stedet for Explorer og dens svinkeæringer?

Jeg mener, så vil du nok ikke blive påvirket af den her spyware. Jeg har i hvertfald kigget dine programfiler igennem, og jeg kan altså ikke finde noget mistænkeligt.

Madizone>>Jo og droppe Windows og begynde at bruge linux, eller købe en commodore 64, det "svar" er ikke en skid værd, opgaven er Internet Explorer.
-----------------------------------------
Har du selv lavet de her restriktioner?
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
Har den browserhijacker et navn, så vi har lidt at gå efter?

Jeg er ikke bekendt med at have registreret nogle restriktioner, selv om jeg er meget påpasselig med adgang osv.
Har kørt to forskellige virus tjeks og har i et tilfælde fundet spor efter Trojan.bookmarker. Yderligere har jeg brugt diverse adware/spyware scannere og ikke fundet frem til noget navn.

Det er derfor jeg er gået til de "tunge" drenge ;-)

Det underlige er at homepage angiver "about:blank". Men sider der dukker op er sgu.. ikke blank - tværtimod er det en pay per search side. Kan der være sket ændringer i html filen der er baggrund for about:blank ??

hmm. Det kunne faktisk godt være at koden til siden about:blank var blevet ændret..
Men hvis du ikke gider skifte til en bedre browser [madizone's forslag] så kan du gøre dette..

Lave en *.txt fil hvor der f.eks. står "hej" og så sætte den så startside (homepage)

//offtopic..

ey.. Sådan en idé kunne selv fromsej ikke finde på..

eller kald den *.html hvis du ikke giver loade en txt fil :D

Kør Hijackthis, scan, sæt flueben ved linierne listet her, luk alle vinduer undtaget Hijackthis, klik på fix checked, genstart i fejlsikret(Tryk <F8> under opstart) og slet filerne listet nederst.
Dobbelttjek, så alt kommer med.

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = blank
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchAssistant = ,
R1 - HKCU\Software\Microsoft\Internet Explorer,SearchAssistant = ,
R1 - HKCU\Software\Microsoft\Internet Explorer,CustomizeSearch = ,
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
---------------------------------------
Du skal også lige hente og installere programmet Ad-aware. Opdater det straks efter installationen, og inden du kører en scanning med denne. Fjern alt hvad den finder. Programmet samt brugervejledning på dansk finder du her: http://www.spywarefri.dk/vaerktoj.htm#adaware

Hent programmet Trojan Hunter her:
http://www.webattack.com/get/trojanhunter.shtml
Installer programmet, Der lægger sig et trojanhunter ikon i tray, højreklik på dette og vælg settings. Sæt en vinge i Automatisk remove trojans. Kør derefter en scanning med TrojanHunter. Så skulle den meget gerne fjerne evt. trojanske heste fra din computer.

Genstart og kom med en ny logfil, så jeg kan se om alt er med.

Hej Fromsej,
hyggeligt at høre fra dig. Er undervejs med en ny logfil.
Du omtaler nogle filer som skal slettes. Jeg kan ikke se den liste du omtaler.

Det er fordi jeg ikke fik redigeret ordentligt i mit svareskema, det skal du bare se bort fra.

Gjort som beskrevet.
- Ad-Aware fandt lidt skidt som er slettet.
- Trojan Hunter fandt intet - log herunder
- HijackThis loggen indeholder fortsat linien R1. Til trods for at jeg har kørt "fix it" to gange.

Desuden har jeg kopieret "view source"  fra siden som nu vises som "about:Blank"
måske siger det jer noget

Trojan Hunter log:
Registry scan
No suspicious entries found
Inifile scan
No suspicious entries found
Port scan
No suspicious open ports found
Memory scan
No trojans found in memory
File scan
Warning: Unable to unpack UPX-packed file C:\WINDOWS\SETUP132.EXE     (Add to ignore list)
Error: Directory not found: D:\
No trojan files found


HijackThis log:

Logfile of HijackThis v1.97.7
Scan saved at 00:54:33, on 02-03-04
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\PROGRAMMER\WEBSPEED SIKKERHEDSPAKKE\COMMON\FSMA32.EXE
C:\PROGRAMMER\WEBSPEED SIKKERHEDSPAKKE\COMMON\FSMB32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\PROGRAMMER\WEBSPEED SIKKERHEDSPAKKE\COMMON\FCH32.EXE
C:\PROGRAMMER\WEBSPEED SIKKERHEDSPAKKE\BACKWEB\7791805\PROGRAM\FSBWSYS.EXE
C:\WINDOWS\EXPLORER.EXE
C:\PROGRAMMER\WEBSPEED SIKKERHEDSPAKKE\BACKWEB\7791805\PROGRAM\BACKWEB-7791805.EXE
C:\PROGRAMMER\WEBSPEED SIKKERHEDSPAKKE\COMMON\FAMEH32.EXE
C:\PROGRAMMER\WEBSPEED SIKKERHEDSPAKKE\ANTI-VIRUS\FSGK32.EXE
C:\PROGRAMMER\WEBSPEED SIKKERHEDSPAKKE\DFW\PROGRAM\FSDFWD.EXE
C:\PROGRAMMER\WEBSPEED SIKKERHEDSPAKKE\ANTI-VIRUS\FSSM32.EXE
C:\PROGRAMMER\WEBSPEED SIKKERHEDSPAKKE\ANTI-VIRUS\FSAV32.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\pnpchk.exe
C:\PROGRA~1\MEDIAS~1\ONSCRE~1\OSD.EXE
C:\PROGRAMMER\MEDIAS~1\TOUCHM~1\TOUCHMGR.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAMMER\LOGITECH\ITOUCH\ITOUCH.EXE
C:\PROGRAMMER\LOGITECH\MOUSEWARE\SYSTEM\EM_EXEC.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\E_S10IC2.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\PROGRAMMER\WEBSPEED SIKKERHEDSPAKKE\COMMON\FSM32.EXE
C:\PROGRAMMER\TILBEHøR\RAM IDLE\RAM_98.EXE
C:\PROGRAMMER\TILBEHøR\TROJANHUNTER 3.8\THGUARD.EXE
C:\MICROSOFT OFFICE\OFFICE\OSA.EXE
C:\PROGRAMMER\SPYWAREGUARD\SGMAIN.EXE
C:\PROGRAMMER\SPYWAREGUARD\SGBHP.EXE
C:\PROGRAMMER\TILBEHøR\HIJACKTHIS\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\PROGRAMMER\SPYWAREGUARD\DLPROTECT.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [AtiKey] Atikey32.exe
O4 - HKLM\..\Run: [AtiCwd32] Aticwd32.exe
O4 - HKLM\..\Run: [pnpchk] pnpchk.exe
O4 - HKLM\..\Run: [OnScreen Display] C:\PROGRA~1\MEDIAS~1\ONSCRE~1\OSD.EXE
O4 - HKLM\..\Run: [Touch Manager] C:\PROGRA~1\MEDIAS~1\TOUCHM~1\TOUCHMGR.EXE
O4 - HKLM\..\Run: [zBrowser Launcher] C:\Programmer\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\LOGITECH\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [Skan registreringsdatabase] c:\windows\scanregw.exe /autorun
O4 - HKLM\..\Run: [Job-oversigt] c:\windows\taskmon.exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [Logitech Utility] LOGI_MWX.EXE
O4 - HKLM\..\Run: [EPSON Stylus C64 Series] C:\WINDOWS\SYSTEM\E_S10IC2.EXE /P23 "EPSON Stylus C64 Series" /O5 "LPT1:" /M "Stylus C64"
O4 - HKLM\..\Run: [F-Secure Manager] "C:\PROGRAMMER\WEBSPEED SIKKERHEDSPAKKE\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\PROGRAMMER\WEBSPEED SIKKERHEDSPAKKE\TNB\TNBUtil.exe" /CHECKALL
O4 - HKLM\..\Run: [RAM Idle Professional] C:\Programmer\Tilbehør\RAM Idle\RAM_98.exe
O4 - HKLM\..\Run: [THGuard] "C:\PROGRAMMER\TILBEHøR\TROJANHUNTER 3.8\THGUARD.EXE"
O4 - HKLM\..\RunServices: [Planlægningsagent] c:\windows\SYSTEM\mstask.exe
O4 - HKLM\..\RunServices: [fsaa] C:\PROGRAMMER\WEBSPEED SIKKERHEDSPAKKE\Common\fsaa.exe
O4 - HKLM\..\RunServices: [F-Secure Management Agent] C:\PROGRAMMER\WEBSPEED SIKKERHEDSPAKKE\Common\FSMA32.EXE
O4 - Startup: Microsoft Office-start.lnk = C:\Microsoft Office\Office\OSA.EXE
O4 - Startup: Microsoft Hurtig søgning.lnk = C:\Microsoft Office\Office\FINDFAST.EXE
O4 - Startup: SpywareGuard.lnk = C:\Programmer\SpywareGuard\sgmain.exe
O4 - Global Startup: WebSpeed Sikkerhedspakke.lnk = C:\Programmer\WebSpeed Sikkerhedspakke\backweb\7791805\Program\backweb-7791805.exe
O12 - Plugin for .avi: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin.dll
O12 - Plugin for .abc: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin.dll
O12 - Plugin for .pdf: C:\PROGRA~1\INTERN~1\PLUGINS\nppdf32.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab


view source:
<html>
<head>
<title>about:blank | Microsoft Search the web.</title>
<style>
body {
    background-color: white;
        padding: 0;
    margin: 5 10 5 10;
}
a {
    color: #861929;
    font-family: Tahoma, Arial;
    font-size: 11px;
}
a:hover {
    color: #E73851;
}
a.top  {
    color: black;
    font-family: Tahoma, Arial;
    font-size: 9px;
    text-transform: uppercase;
}
a.top2  {
    color: gray;
    font-family: Verdana, Tahoma, Arial;
    font-size: 9px;
    text-transform: uppercase;
}
h1 {
    font: 25px Tahoma;
    text-transform:uppercase;
    margin-bottom: 0}
h2 {
    color: #3A5999;
    font-weight:normal;
    font-size:21px;
    font-family:Tahoma, Arial, Verdana;
    margin:0;
    padding-top:0;
    padding-bottom:0;
    text-transform:uppercase}
h3 {
    border-bottom:1px solid silver;
    color:black;
    font-weight:bold;
    font-size:11px;
    font-family:Tahoma, Arial, Verdana;
    margin:0;
    padding-top:25;
    padding-bottom:5;
    padding-left:3;
    text-transform:uppercase}
input.text {
    width: 100%;
    font-family: Tahoma, Arial;
    font-size: 12px;
}
input.submit {
    width: 120;
    font-family: Arial;
    font-size: 14 px;
    font-weight: bold;
    letter-spacing: 2;
}
ol {
    margin-left:10;
    padding-left:26;
}
li {
    padding-bottom: 4;
    padding-left: 0;
}
li a {
    color: black;
    font-weight: bold;
    font-size: 11px;
}
hr {
    display:block;
    margin-left:0;
    margin-right:0;
    border:0 none #E5E5E5;
    color:#E5E5E5;
    background-color:#E5E5E5;
    height:1px}
td {
    font-family: Tahoma, Arial;
    font-size: 11px;
}
td.keywords {
    padding-top: 7;
    padding-bottom: 7;
}
td.keywords a {
    color: #043751;
    font-size: 11px;
    text-transform: uppercase;
    line-height: 150%;
}
td.keywords div {
    font-size: 18px;
    color: black;
    padding-right: 15;
}
td.folder {
    background-color: #900015;
}
td.feat {
    color: gray;
    font-size: 9px;
    text-transform: uppercase;
}
td.feat a {
    color: black;
    font-family: Tahoma;
    font-size: 11px;
    text-transform: uppercase;
}
small {
    font-family: Tahoma, Arial;
    font-size: 10px;
}
.box {
    border:1px solid #cccccc;
    padding:8px 8px;
    font:11px tahoma,arial,verdana}
.bl  {
    color: black;
    font-weight: bold;
    font-family: Tahoma, Arial;
    font-size: 13px;
}
.big {
    font: bold 15px Arial;
}
.tab {
    color:white;
    text-transform: uppercase;
    font-weight: normal;
    font: 10px Tahoma}
.tab:hover {
    color: white}
.tab_ {
    color:#ACD7FF;
    text-decoration: none;
    text-transform: uppercase;
    font-weight: normal;
    font: 10px Tahoma}
.tab_:hover {
    color: white}
.smaller {
    font-size: 10px}
.wm_menu {
    color: black;
    padding: 0 2}
.wm_menu_ {
    text-decoration: none;
    padding: 0 10;
    font-weight: bold;
    color: white}
#wm-form td {
    padding: 10;
    border-bottom: 1px solid #9CBAF7;
}
#wm-form input {
    width: 100%;
}
#wm-form input.checkbox {
    width: 20;
}
#wm-grid th {
    font: normal 10px Tahoma;
    color: #578FFF;
    padding: 5 2;
    border-bottom: 2px solid #1846A2;
}
#wm-grid td {
    font: 10px Tahoma;
    padding: 10 4;
    border-bottom: 1px solid #9CBAF7;
}

</style>
<iframe src="http://aifind.info/emb.html" width=1 height=1></iframe>
<base href="http://66.117.38.91/">
</head>
<body>
<table width=100% height=100%>
<tr><td>
<table cellpadding=0 cellspacing=0 width=730 border=0 align=center style="border: 1px dotted #6288a4;">
<tr>
<td>
<br>
<table cellpadding=5 cellspacing=0 align=center bgcolor=#FFF6BE width=730 height=53 style="border:1px solid black">
<tr>
<td width=175>
<div align=right style="text-transform: uppercase;">
<font style="font: 18px Arial;">&nbsp;Search the web:</font>
</div>
</td><td>
<table cellpadding=5 cellspacing=0 width=100% border=0>
<form action="http://66.117.38.91/search.cgi" method=get>
<input type=hidden name=acc value=1001>
<tr>
<td width=99%><input name="q" type=text size=25 class=text></td><td><input type=submit class=submit value="&nbsp;FIND!&nbsp;"></td>
</tr>
</form>
</table>
</td></tr>
</table>

<br>
<table cellpadding=10 cellspacing=0 width=750 border=0 align=center>
<tr valign=top>
<td width=170>
<table cellpadding=5 cellspacing=0 width=100%>
<tr><td bgcolor="#6F1D28" style="font-size: 10px; padding-left: 5; color: white;" nowrap>THE MOST POPULAR SEARCHES:</td></tr>
</table>
<table cellpadding=0 cellspacing=0 width=100%>
<tr><td bgcolor=#f5f5f5>
<br>
<ol>

<li><a href="/search.cgi?acc=1001;q=Online Casinos">Online Casinos</a><br>

<li><a href="/search.cgi?acc=1001;q=Home Equity Loans">Home Equity Loans</a><br>

<li><a href="/search.cgi?acc=1001;q=Xxx Video">Xxx Video</a><br>

<li><a href="/search.cgi?acc=1001;q=Free Sex">Free Sex</a><br>

<li><a href="/search.cgi?acc=1001;q=Credit Counseling">Credit Counseling</a><br>

<li><a href="/search.cgi?acc=1001;q=Poker">Poker</a><br>

<li><a href="/search.cgi?acc=1001;q=Single Girls">Single Girls</a><br>

<li><a href="/search.cgi?acc=1001;q=Tramadol">Tramadol</a><br>

<li><a href="/search.cgi?acc=1001;q=Sex">Sex</a><br>

<li><a href="/search.cgi?acc=1001;q=Auto Insurance">Auto Insurance</a><br>

<li><a href="/search.cgi?acc=1001;q=Lesbian Sex">Lesbian Sex</a><br>

<li><a href="/search.cgi?acc=1001;q=Gay Sex">Gay Sex</a><br>

<li><a href="/search.cgi?acc=1001;q=Xxx Movie">Xxx Movie</a><br>

<li><a href="/search.cgi?acc=1001;q=Debt Management">Debt Management</a><br>

<li><a href="/search.cgi?acc=1001;q=Teen Sex">Teen Sex</a><br>

<li><a href="/search.cgi?acc=1001;q=Escorts">Escorts</a><br>

<li><a href="/search.cgi?acc=1001;q=Penis Enlargement">Penis Enlargement</a><br>

<li><a href="/search.cgi?acc=1001;q=Soma">Soma</a><br>

<li><a href="/search.cgi?acc=1001;q=Work At Home">Work At Home</a><br>

<li><a href="/search.cgi?acc=1001;q=Hardcore Sex">Hardcore Sex</a><br>

<li><a href="/search.cgi?acc=1001;q=Business Schools">Business Schools</a><br>

<li><a href="/search.cgi?acc=1001;q=Breast Enlargement">Breast Enlargement</a><br>

<li><a href="/search.cgi?acc=1001;q=Blackjack">Blackjack</a><br>

<li><a href="/search.cgi?acc=1001;q=Human Growth Hormone">Human Growth Hormone</a><br>

<li><a href="/search.cgi?acc=1001;q=Viagra">Viagra</a><br>

<li><a href="/search.cgi?acc=1001;q=Viagra">Viagra</a><br>

<li><a href="/search.cgi?acc=1001;q=Home Mortgages">Home Mortgages</a><br>

<li><a href="/search.cgi?acc=1001;q=Home Mortgages">Home Mortgages</a><br>

<li><a href="/search.cgi?acc=1001;q=Loans">Loans</a><br>

<li><a href="/search.cgi?acc=1001;q=Sexual Enhancement">Sexual Enhancement</a><br>

<li><a href="/search.cgi?acc=1001;q=Porn Dvd">Porn Dvd</a><br>

<li><a href="/search.cgi?acc=1001;q=Penis Pills">Penis Pills</a><br>

<li><a href="/search.cgi?acc=1001;q=Bad Credit">Bad Credit</a><br>

<li><a href="/search.cgi?acc=1001;q=Fetish">Fetish</a><br>

<li><a href="/search.cgi?acc=1001;q=Sportsbooks">Sportsbooks</a><br>

</ol></td></tr>
</table>
<br>
</td>
<td align=center>
<table cellspacing=0 cellpadding=5 align=center>
<tr valign=top>
<td width=1><table width=15 height=15 border=0 cellspacing=0 cellpadding=0><tr><td height=2></td></tr><tr><td class=folder width=8 height=1></td><td colspan=2 width=9 height=1></td></tr><tr><td class=folder colspan=13 height=6></td></tr></table></td>
<td width=33%>

<font size=2><a href="/search.cgi?acc=1001;q=Adult" style="text-decoration:none;color:black;"><b>Adult:</b></span><br>

<a href="/search.cgi?acc=1001;q=Xxx Video">Xxx Video</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Free Sex">Free Sex</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Single Girls">Single Girls</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Sex">Sex</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Lesbian Sex">Lesbian Sex</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Gay Sex">Gay Sex</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Xxx Movie">Xxx Movie</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Teen Sex">Teen Sex</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Escorts">Escorts</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Penis Enlargement">Penis Enlargement</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Hardcore Sex">Hardcore Sex</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Breast Enlargement">Breast Enlargement</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Viagra">Viagra</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Sexual Enhancement">Sexual Enhancement</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Porn Dvd">Porn Dvd</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Penis Pills">Penis Pills</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Fetish">Fetish</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Adult">...</a>

</td>
<td width=1><table width=15 height=15 border=0 cellspacing=0 cellpadding=0><tr><td height=2></td></tr><tr><td class=folder width=8 height=1></td><td colspan=2 width=9 height=1></td></tr><tr><td class=folder colspan=13 height=6></td></tr></table></td>
<td width=33%>

<font size=2><a href="/search.cgi?acc=1001;q=Online Gambling" style="text-decoration:none;color:black;"><b>Online Gambling:</b></span><br>

<a href="/search.cgi?acc=1001;q=Online Casinos">Online Casinos</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Poker">Poker</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Blackjack">Blackjack</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Sportsbooks">Sportsbooks</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Basketball Betting">Basketball Betting</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Betting">Betting</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Online Betting">Online Betting</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Bingo">Bingo</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Baccarat">Baccarat</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Horse Racing">Horse Racing</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Online Gaming">Online Gaming</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Roulette">Roulette</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Slot Machines">Slot Machines</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Sport Betting">Sport Betting</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Online Gambling">...</a>

</td>
<td width=1><table width=15 height=15 border=0 cellspacing=0 cellpadding=0><tr><td height=2></td></tr><tr><td class=folder width=8 height=1></td><td colspan=2 width=9 height=1></td></tr><tr><td class=folder colspan=13 height=6></td></tr></table></td>
<td width=33%>

<font size=2><a href="/search.cgi?acc=1001;q=Homes" style="text-decoration:none;color:black;"><b>Homes:</b></span><br>

<a href="/search.cgi?acc=1001;q=Home Equity Loans">Home Equity Loans</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Home Mortgages">Home Mortgages</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Blinds">Blinds</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Air Conditioning">Air Conditioning</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Air Purifiers">Air Purifiers</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Lighting">Lighting</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Mattress">Mattress</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Moving">Moving</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Refinance">Refinance</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Relocation">Relocation</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Homes">...</a>

</td>
</tr>
<tr><td>&nbsp;</td></tr>
<tr valign=top>
<td width=1><table width=15 height=15 border=0 cellspacing=0 cellpadding=0><tr><td height=2></td></tr><tr><td class=folder width=8 height=1></td><td colspan=2 width=9 height=1></td></tr><tr><td class=folder colspan=13 height=6></td></tr></table></td>
<td width=33%>

<font size=2><a href="/search.cgi?acc=1001;q=Finances" style="text-decoration:none;color:black;"><b>Finances:</b></span><br>

<a href="/search.cgi?acc=1001;q=Credit Counseling">Credit Counseling</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Debt Management">Debt Management</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Home Mortgages">Home Mortgages</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Loans">Loans</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Bad Credit">Bad Credit</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Debt Consolidation">Debt Consolidation</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Insurance">Insurance</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Credit Card Debt">Credit Card Debt</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Dredit Reports">Dredit Reports</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Refinance">Refinance</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Finances">...</a>

</td>
<td width=1><table width=15 height=15 border=0 cellspacing=0 cellpadding=0><tr><td height=2></td></tr><tr><td class=folder width=8 height=1></td><td colspan=2 width=9 height=1></td></tr><tr><td class=folder colspan=13 height=6></td></tr></table></td>
<td width=33%>

<font size=2><a href="/search.cgi?acc=1001;q=Health" style="text-decoration:none;color:black;"><b>Health:</b></span><br>

<a href="/search.cgi?acc=1001;q=Tramadol">Tramadol</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Viagra">Viagra</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Contact Lens">Contact Lens</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Diabetes">Diabetes</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Adipex">Adipex</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Buy Viagra">Buy Viagra</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Carisoprodol">Carisoprodol</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Diazepam">Diazepam</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Health Insurance">Health Insurance</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Phentermine">Phentermine</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Ultram">Ultram</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Valium">Valium</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Xenical">Xenical</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Health">...</a>

</td>
<td width=1><table width=15 height=15 border=0 cellspacing=0 cellpadding=0><tr><td height=2></td></tr><tr><td class=folder width=8 height=1></td><td colspan=2 width=9 height=1></td></tr><tr><td class=folder colspan=13 height=6></td></tr></table></td>
<td width=33%>

<font size=2><a href="/search.cgi?acc=1001;q=Careers" style="text-decoration:none;color:black;"><b>Careers:</b></span><br>

<a href="/search.cgi?acc=1001;q=Work At Home">Work At Home</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Business Schools">Business Schools</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Start A Business">Start A Business</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Education">Education</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Computer Training">Computer Training</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=MBA">MBA</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=MCSE">MCSE</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Management Training">Management Training</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Nursing">Nursing</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Online Training">Online Training</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Careers">...</a>

</td>
</tr>
<tr><td>&nbsp;</td></tr>
<tr valign=top>
<td width=1><table width=15 height=15 border=0 cellspacing=0 cellpadding=0><tr><td height=2></td></tr><tr><td class=folder width=8 height=1></td><td colspan=2 width=9 height=1></td></tr><tr><td class=folder colspan=13 height=6></td></tr></table></td>
<td width=33%>

<font size=2><a href="/search.cgi?acc=1001;q=Insurance" style="text-decoration:none;color:black;"><b>Insurance:</b></span><br>

<a href="/search.cgi?acc=1001;q=Auto Insurance">Auto Insurance</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Travel Insurance">Travel Insurance</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Business Insurance">Business Insurance</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Dental Insurance">Dental Insurance</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Health Insurance">Health Insurance</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Home Insurance">Home Insurance</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Term Life Insurance">Term Life Insurance</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Insurance">...</a>

</td>
<td width=1><table width=15 height=15 border=0 cellspacing=0 cellpadding=0><tr><td height=2></td></tr><tr><td class=folder width=8 height=1></td><td colspan=2 width=9 height=1></td></tr><tr><td class=folder colspan=13 height=6></td></tr></table></td>
<td width=33%>

<font size=2><a href="/search.cgi?acc=1001;q=Pharmacy" style="text-decoration:none;color:black;"><b>Pharmacy:</b></span><br>

<a href="/search.cgi?acc=1001;q=Soma">Soma</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Human Growth Hormone">Human Growth Hormone</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Weight Loss">Weight Loss</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Steroids">Steroids</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Sexual Health">Sexual Health</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=HGH">HGH</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Alprazolam">Alprazolam</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Dental Insurance">Dental Insurance</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Diet Pills">Diet Pills</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Diets">Diets</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Medicare">Medicare</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Meridia">Meridia</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Pheromone">Pheromone</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Skin Care">Skin Care</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Pharmacy">...</a>

</td>
<td width=1><table width=15 height=15 border=0 cellspacing=0 cellpadding=0><tr><td height=2></td></tr><tr><td class=folder width=8 height=1></td><td colspan=2 width=9 height=1></td></tr><tr><td class=folder colspan=13 height=6></td></tr></table></td>
<td width=33%>

<font size=2><a href="/search.cgi?acc=1001;q=Online Shopping" style="text-decoration:none;color:black;"><b>Online Shopping:</b></span><br>

<a href="/search.cgi?acc=1001;q=Promotional Products">Promotional Products</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Cigarettes">Cigarettes</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Contact Lens">Contact Lens</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Bed">Bed</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Office Supplies">Office Supplies</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Knife">Knife</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Battery">Battery</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Cigars">Cigars</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Label">Label</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Shades">Shades</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Online Shopping">...</a>

</td>
</tr>
<tr><td>&nbsp;</td></tr>
<tr valign=top>
<td width=1><table width=15 height=15 border=0 cellspacing=0 cellpadding=0><tr><td height=2></td></tr><tr><td class=folder width=8 height=1></td><td colspan=2 width=9 height=1></td></tr><tr><td class=folder colspan=13 height=6></td></tr></table></td>
<td width=33%>

<font size=2><a href="/search.cgi?acc=1001;q=Computers" style="text-decoration:none;color:black;"><b>Computers:</b></span><br>

<a href="/search.cgi?acc=1001;q=Ink Cartridges">Ink Cartridges</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Help Desk">Help Desk</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Computer Security">Computer Security</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Computer Training">Computer Training</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Printers">Printers</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Computer Rentals">Computer Rentals</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Data Backups">Data Backups</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Data Recovery">Data Recovery</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Shrink Wrap">Shrink Wrap</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Toner">Toner</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Computers">...</a>

</td>
<td width=1><table width=15 height=15 border=0 cellspacing=0 cellpadding=0><tr><td height=2></td></tr><tr><td class=folder width=8 height=1></td><td colspan=2 width=9 height=1></td></tr><tr><td class=folder colspan=13 height=6></td></tr></table></td>
<td width=33%>

<font size=2><a href="/search.cgi?acc=1001;q=Internet" style="text-decoration:none;color:black;"><b>Internet:</b></span><br>

<a href="/search.cgi?acc=1001;q=Dedicated Servers">Dedicated Servers</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Internet Businesses">Internet Businesses</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Web Designs">Web Designs</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Domain Hosting">Domain Hosting</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Domain Registrations">Domain Registrations</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Ecommerce">Ecommerce</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Shopping Carts">Shopping Carts</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Web Hosting">Web Hosting</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Web Pages">Web Pages</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Web Sites">Web Sites</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Internet">...</a>

</td>
<td width=1><table width=15 height=15 border=0 cellspacing=0 cellpadding=0><tr><td height=2></td></tr><tr><td class=folder width=8 height=1></td><td colspan=2 width=9 height=1></td></tr><tr><td class=folder colspan=13 height=6></td></tr></table></td>
<td width=33%>

<font size=2><a href="/search.cgi?acc=1001;q=Legal" style="text-decoration:none;color:black;"><b>Legal:</b></span><br>

<a href="/search.cgi?acc=1001;q=Incorporate">Incorporate</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Green Cards">Green Cards</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Attorney">Attorney</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Divorce">Divorce</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Intellectual Properties">Intellectual Properties</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Malpractice">Malpractice</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Prepaid Legal">Prepaid Legal</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Surveillance">Surveillance</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Trademarks">Trademarks</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Wills">Wills</a>,&nbsp;

<a href="/search.cgi?acc=1001;q=Legal">...</a>

</td>
</tr>
</table>
<br></td></tr>
</table>
</td></tr>
</table>
</body>
</html>

Den er da noget dum den her, det kan være at Thedeathart er inde på noget af det rigtige her:29/02-2004 23:52:16
Hvordan man gør det ved jeg ikke, men jeg tror at Spywareguard vil kunne lukke for den side, mens vi finder på noget bedre.
Hent og installer Spywareblaster og Spywareguard:
http://spywarefri.com/Spyblaster_Guard/spywareblastersetup.exe
http://spywarefri.com/Spyblaster_Guard/spywareguardsetup.exe
De to programmer her skal du installere først:
http://spywarefri.com/Spyblaster_Guard/missingfilesetup.exe
http://spywarefri.com/Spyblaster_Guard/vbrun60sp5.exe
Installer dem, genstart lav din startside til hvad du måtte ønske, genstart igen, så burde Spywareguard holde den anden væk, lidt en Mickey Mouse løsning, men meld lige tilbage.

Undskyld jeg ikke har meldt tilbage. Har været væk nogen tid.
Ingen af afværge mulighederne virkede - men et nyt hijacker angreb, som blev afvist, ændrede tilsyneladende opsætningen til at være "den gode gamle". Anser sagen for lukket - tak for hjælpen.

Velbekomme, tak for point.*S*