Global Finder Hijack, CSS, and oslogo.bmp

[merlot]

I run spybot and spyware blaster. I currently have not resolved my problem with getting updates from spybot (but that's a separate issue).
I use 'Blaster's' Tool section to change bogus homepage settings for Global Finder, but on restart multiple hijack settings for them (and other vermin) reappear in the tools window.
Checking accessibility in internet options reveals cascading style sheet box has been checked and directs browser to the file oslogo.bmp. Unchecking the box and deleting the file should help but these settings come back too. I tried altering the name of the file and making it read only but no help.
My operating system is '95 (beta version).

I'm not convinced updates is working in 'Blaster' either.
I always get the message "No updates available" The immunize function tells me I have 427 bad products blocked and that 44 additional fixes are available. When I click immunize now it completes the function but finishes by telling me I now have 427 products blocked. If it's not adding the 44 items is this this evidence updates is not working?
Any help is greatly appreciated.

[Pieter_Arntz]

Hi merlot,

First download, unzip and run CWShredder (http://www.spywareinfoforum.com/~merijn/files/cwshredder.zip) to get rid of your hijack.

Then uninstall the old version of SpywareBlaster and download and install the latest: http://www.javacoolsoftware.com/spywareblaster.html

Spybot S&D is having some problems regarding the updates. Try selecting another mirror. If that doesn't work, try again later.

If you´d like me to have a look if more spyware got through to your computer, please post your HijackThis log (http://www.tomcoyote.org/hjt/)
Download, Unzip and run HijackThis. Then click Scan > Save log, save the log as a .txt file and copy & paste its content into your next post.
Don´t fix anything yet. Most of what it finds is harmless.

Regards,

Pieter

[Persimmon]

Hello Pieter,

I have been experiencing the same problem as well. I loaded Spyblaster a few days ago and the very next day after installation and running the software, my IE home page was hijacked by global finder.

I'm looking at your response to fix my problem.
Are CW shredder and HijackThis, Javacool programs?

I have Version 2.6 of SpywareBlaster, which I believe is the latest. Do you have any solution for me?

Thanks!

[claire]

Hi Merlot,

To protect you from browser hijacking try
SpywareGuard(from Javacool) available at the download section)

[Pieter_Arntz]

Hi Persimmon,

HijackThis and CWShredder are not javacool programs. They were produced by Merijn: http://www.spywareinfoforum.com/~merijn/
If the hijacker is globalfinder CWShredder will solve your problem. If it doesn't post you HijackThis log and someone will be happy to help you analyze it.

Regards,

Pieter