Chm reader windows 8
So CWS appears to present only a part solution and by deleting my start.chm file, which I have marked as read only, it's opening the door for this hijacker to set-up a new start.chm. I can watch it delete from the Windows directory and appear in my recycle bin when CWS is run. Even though CWS reports no infection it is deleting my start.chm file. On further investigation I found that CWShredder removes the start.chm file to the recycle bin. Registry Location: HKLM\Software\Microsoft\Internet Explorer\Main\ On 09:39:41 a browser page change was detected. New Value: Action Taken: RESTORE OLD VALUE Registry Location: HKCU\Software\Microsoft\Internet Explorer\Main\ On 09:39:36 a browser page change was detected. I'm not sure if this will help you guys but here's the SpyGuard log from this morning when the attempt occurred to change my homepage:īROWSER HIJACK ALERT - BROWSER PAGE CHANGED Again I have deleted it's contents and made the file read only. From the SpyGurad messge alert, I opted to revert to my previous homepage, and notice that start.chm is back. When my wife used the PC this morning she fired up Outlook, which connects automaticlly to our hotmail account and SpyGuard popped up the warning that the IE homepage was being changed. I went to bed thinking maybe it's sorted. I rebooted the PC several times yesterday evening and each time all was well. Deleted the R0 entries that show within HijackThis.Īd-Aware showed some other registry entries so I got rid of them.
#CHM READER WINDOWS 8 SOFTWARE#
But at some point the file as deleted - I think it may be as a result of running one of the many pieces of Spyware software above but can't say for sure. I tried deleting the contents yesterday and setting the file to read only. NOTEPAD.exe was gone but there was a in it's place. Like many other before me the usual signs were there. Yesterday I downloaded SpyBlaster and SpyGuard. I've been running CWShredder, Ad-aware, and SpyBot for several months since I previously contracted CWS. I run NAV with latest updates as a matter of course (not that this will touch this type of critter). No one seems to know where this hacker hides itself but it's on my PC waiting for my start.chm file to be removed so it can write a new one and fill it with it's garbage to redirect me to a useless website.
#CHM READER WINDOWS 8 FULL#
There's a lot of help on various BBs but I haven't yet found a full solution for eradicating this beast from my PC. I was infected with the hijack a few days ago and have been trying to get rid of this pesky thing.