I keep getting all these sites coming up when I open explorer. I saw Tom41 had a post regarding this issue. Any help out there. The site is revolto.....

have u tryed spybot search and destroy that fixes hijacks but is it just ur home page that has been changed just change it under internet options in explorer

Hi, I suggest Ad-aware 6 it is a really good program that will delete all sorts of internet problems. Mattwizz3

Once you hace restored it as you want it download this prog for free and it will notify you if anyone tries to Hi-jack your Browser again. http://www.wilderssecurity.com/bhblaster.html .............evonok.................

My interenet explorer has been hijacked also. Here is the log file from hijackthis! Can you let me know which files to erase. I also seemt o have some dodgy site references in this lot. Shall I remove this also? Thanks Skywalker Logfile of HijackThis v1.97.2 Scan saved at 10:40:36, on 23/09/2003 Platform: Windows 2000 SP4 (WinNT 5.00.2195) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINNT\System32\smss.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe C:\WINNT\system32\svchost.exe C:\WINNT\System32\svchost.exe C:\WINNT\system32\spoolsv.exe C:\WINNT\MS\SMS\CORE\BIN\CLISVCL.exe C:\OfficeScan NT\ntrtscan.exe C:\WINNT\system32\regsvc.exe C:\WINNT\system32\MSTask.exe C:\OfficeScan NT\tmlisten.exe C:\WINNT\System32\WBEM\WinMgmt.exe C:\WINNT\System32\mspmspsv.exe C:\WINNT\system32\svchost.exe C:\WINNT\MS\SMS\CLICOMP\RemCtrl\Wuser32.exe C:\WINNT\MS\SMS\clicomp\apa\Bin\smsapm32.exe C:\OfficeScan NT\ofcdog.exe C:\WINNT\Explorer.exe C:\WINNT\system32\tp4mon.exe C:\Program Files\Winamp\Winampa.exe C:\Program Files\Common Files\Real\Update_OB\evntsvc.exe C:\WINNT\MS\SMS\CORE\BIN\LAUNCH32.exe C:\Program Files\QuickTime\qttask.exe C:\PROGRA~1\COMMON~1\XCPCSync\TRANSL~1\ErPhn2\ErTray.exe C:\WINNT\system32\internat.exe C:\Program Files\Microsoft ActiveSync\WCESCOMM.exe C:\Program Files\MSN Messenger\MsnMsgr.exe C:\OfficeScan NT\PCCNTMON.exe C:\WINNT\iedll.exe C:\WINNT\loader.exe C:\PROGRA~1\ERICSSON\COMMUN~1\MOBILE~1\EPMWOR~1.exe C:\PROGRA~1\ERICSSON\COMMUN~1\MOBILE~1\DbgOut.exe C:\Program Files\Internet Explorer\iexplore.exe C:\WINNT\system32\wuauclt.exe C:\unzipped\hijackthis[2]\HijackThis.exe C:\WINNT\system32\notepad.exe R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://approvedlinks.com/sp.htm R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://approvedlinks.com/sp.htm R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://approvedlinks.com/sp.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://approvedlinks.com/ R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://approvedlinks.com/sp.htm R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Fast4 R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://ukldnproxy.office.netdecisions.co.uk/ieconfig.pac O1 - Hosts: 66.40.16.131 livesexlist.com O1 - Hosts: 66.40.16.131 lanasbigboobs.com O1 - Hosts: 66.40.16.131 thumbnailpost.com O1 - Hosts: 66.40.16.131 adult-series.com O1 - Hosts: 66.40.16.131 www.livesexlist.com O1 - Hosts: 66.40.16.131 www.lanasbigboobs.com O1 - Hosts: 66.40.16.131 www.thumbnailpost.com O1 - Hosts: 66.40.16.131 www.adult-series.com O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: DNSErr object - {1E1B2879-88FF-11D2-8D96-D7ACAC95951F} - C:\WINNT\DNSErr.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll O2 - BHO: (no name) - {EBCDDA60-2A68-11D3-8A43-0060083CFB9C} - C:\WINNT\System32\nzdd0.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll O4 - HKLM\..\Run: [TrackPointSrv] tp4mon.exe O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon O4 - HKLM\..\Run: [OfficeScanNT Monitor] "C:\OfficeScan NT\pccntmon.exe" -HideWindow O4 - HKLM\..\Run: [LoadQM] loadqm.exe O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\Winampa.exe" O4 - HKLM\..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\evntsvc.exe -osboot O4 - HKLM\..\Run: [SMS Application Launcher] C:\WINNT\MS\SMS\CORE\BIN\LAUNCH32.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [XTNDConnect PC - ErPhn2] C:\PROGRA~1\COMMON~1\XCPCSync\TRANSL~1\ErPhn2\ErTray.exe O4 - HKLM\..\Run: [Inet Delivery] C:\Program Files\Inet Delivery\intdel_.exe O4 - HKCU\..\Run: [internat.exe] internat.exe O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.exe" O4 - HKCU\..\Run: [5-1-25-484] c:\winnt\5-1-25-484.exe -m O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.exe" /background O4 - HKCU\..\Run: [iedll] c:\WINNT\iedll.exe O4 - HKCU\..\Run: [loader] c:\WINNT\loader.exe O4 - Global Startup: RealDownload.lnk = C:\Program Files\Real\RealDownload\Realdownload.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.exe O4 - Global Startup: Cisco Systems VPN Client.lnk = C:\Program Files\Cisco Systems\VPN Client\ipsecdialer.exe O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html O8 - Extra context menu item: Backward &Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html O8 - Extra context menu item: Cac&hed Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html O8 - Extra context menu item: Si&milar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html O8 - Extra context menu item: Translate Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html O9 - Extra button: Create Mobile Favorite (HKLM) O9 - Extra 'Tools' menuitem: Create Mobile Favorite... (HKLM) O9 - Extra button: Related (HKLM) O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = netdecisions.local O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = netdecisions.local O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = netdecisions.local