Linus' House of IT: 15 cents please

[Linus]

Originally Posted by Bit

Hi Linus, thanks for the quick response!

The home page button is the standard one on Firefox, next to the address bar.

The other two toolbars on the browser are the bookmarks toolbar and the yahoo toolbar, but they don't seem to be affected; the only time this happens is when we click the home button on the Firefox tool bar--if we use a different link to get to the homepage, the wizard doesn't open at all.

Our homepage is linked to our ISP, which is att.net. Gryph's email is yahoo, but that doesn't seem to be affected at all.

I don't think this hacker is after website passwords; I think they're after our ISP password. Does that make sense?

The computer was totally clean according to Housecall on Tuesday; then yesterday after this happened we had the 6 root kits. I haven't run Housecall today; I have to close everything down for over an hour to run it, and I thought I should talk to you first.

It does make that they are after your ISP password. Go to the preferences of your browser and double check as to what is set for the homepage.

Additionally, download http://free.antivirus.com/hijackthis/

Do a scan with a log.

Copy and paste the contents of the log to me in a private message.