Solved

User home page keeps resetting to assistmypc

Posted on 2009-04-01
5
1,739 Views
Last Modified: 2013-12-08
I have a user that has the google toolbar installed.  For some reason I can't find, her homepage is constantly resetting to http://assistmypc.googlepages.com/index.html.  I have tried changing it back, and it goes right back to it.  She has never used this service(?) and has no remote control apps on her system. Has anyone else seen this or how to get rid of it?
0
Comment
Question by:oncalltech
5 Comments
 
LVL 10

Expert Comment

by:Michael_MCDST
ID: 24039246
Emtpy all cookies, history and reset IE to default. then disable any/all 3rd party addons for IE and finally uninstall google Toolbar and any other toobar for the browser. Once done go in and reset IE to default once again and test if issue persists
 
0
 
LVL 27

Accepted Solution

by:
David-Howard earned 250 total points
ID: 24039467
I recommend downloading and updating Malwarebytes.
You can get it free from www.Malwarebytes.org
Prior to running Malwarebytes (or any other anti-virus/malware suite),
disable System Restore. Directions can be found here:
http://support.microsoft.com/kb/310405
Once malwarebytes is downloaded, perform an update, reboot into Safe Mode (F8 at startup) and run a scan.
You should do this with your current antivirus product as well.
You may also need to download and run HiJackThis from
http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis/download
Once you run the utility save the log file.
You can post it for free analysis here or at
www.hijackthis.de
You are primarily looking for items marked with red X's.
You can get a brief overview of Hijackthis here:
http://www.bleepingcomputer.com/tutorials/tutorial42.html
If the above steps fail to remove the threat,
you may need to download and run Combofix.
The free download and directions can be located here.
http://www.bleepingcomputer.com/combofix/how-to-use-combofix
As noted in the directions, prior to running Combofix or any other anti-malware/anti-virus application please stop your anti-virus and anti-malware programs. Combofix should be saved to and run from your desktop.
You should rename the anti-malware suites to a different name prior to downloading as some threats can prevent them from running with their default names.

When you have finished running your scans and the threats have been removed enable System Restore.
0
 
LVL 34

Expert Comment

by:Michael-Best
ID: 24047115
Got CONLICKER Worm?
If YOU cant go here:
http://onecare.live.com/site/en-US/center/cleanup.htm
And run scans
you Got Worm:Win32/Conficker.B
Microsoft is offering $250,000 to a (Worm:Win32/Conficker.B) FIX
Hope its ME
0
 
LVL 34

Expert Comment

by:Michael-Best
ID: 24047222
Run the: "FULL SERVICE SCAN"
http://onecare.live.com/site/en-us/default.htm
0
 
LVL 5

Expert Comment

by:bRvO
ID: 24109387
Spybot Search and destroy will detect and remove the Browser Hijacker even if it isn't malicious

www.safer-networking.org

0

Featured Post

What Security Threats Are You Missing?

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

Password hashing is better than message digests or encryption, and you should be using it instead of message digests or encryption.  Find out why and how in this article, which supplements the original article on PHP Client Registration, Login, Logo…
Any business that wants to seriously grow needs to keep the needs and desires of an international audience of their websites in mind. Making a website friendly to international users isn’t prohibitively expensive and can provide an incredible return…
The viewer will learn how to create and use a small PHP class to apply a watermark to an image. This video shows the viewer the setup for the PHP watermark as well as important coding language. Continue to Part 2 to learn the core code used in creat…
Shows how to create a shortcut to site-search Experts Exchange using Google in the Chrome browser. This eliminates the need to type out site:experts-exchange.com whenever you want to search the site. Launch the Search Engine Menu: In chrome, via you…

746 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now