Help - Search - Members
Full Version: Blekko Virus Hijacked My Home Pages
Kaspersky Lab Forum > English User Forum > Virus-related issues
RtBt
I thought I was downloading a PDF Manual for a home appliance and I inadvertently downloaded a virus that changed my Home Page in all three browser to mystart.com. I think it's the Blekko [spelling?] virsu which stopped me from manually resetting the home pages. So far, I edited the registry and removed every mention of Blekko and got my home pages restored. But something tells me the next time I reboot the problem will return.

What suggestions, if any, do you have which will enable me to get rid of this virus?

Thanks
richbuff
Settings > Advanced settings (cardboard box icon) > Threats and exclusions > Detection types > Settings > enable Other > ok>ok, and do a scan.
After that, please uninstall any and all junk toolbars > reboot, and uninstall/disable any and all junk browser add-ons, then remove any and all junk search providers in your browsers, then change your home page.

If still no go after that, please see the first Important topic of the Virus section of this forum.
Berny
QUOTE(RtBt @ 14.05.2012 11:07) *
changed my Home Page in all three browser


In addition to Richbuff's suggestions
please also check if your HOSTS file hasn't been modified.

A Hosts file can control all the browsers that are installed on your system !

If this is the case you will have to reset your Hosts file back to the default values.
RtBt
QUOTE(Berny @ 14.05.2012 19:37) *
In addition to Richbuff's suggestions
please also check if your HOSTS file hasn't been modified.

A Hosts file can control all the browsers that are installed on your system !

If this is the case you will have to reset your Hosts file back to the default values.


Berny, thanks for the advice. I searched the Registry and there must have been around 50 entries with the word Host or Hosts. I didn't see anything unusual or suspicious.

It's been another 24 hours and all three browsers seem to be working properly again.

Thanks guys for your help. I'm hoping this is the end of a problem caused by my fatigue and stupidity over the weekend.
Berny
Hello,

Hosts file is located under "C:\windows\system32\drivers\etc"
Please check following MS FAQ concerning Hosts file http://support.microsoft.com/kb/972034

If any further issue please submit a Gsi log.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2014 Invision Power Services, Inc.