Results 1 to 8 of 8
  1. #1
    Join Date
    Sep 2004
    Posts
    1

    search hijacked IE

    Well I have tried searching for this on the forums and didnt seem to turn up anything. I have had this spyware before jijack my IE explorer and I was able to get rid of it. Now I cant seem to remember and am at a loss of how to get rid of it. I can use AdAware which will find and get rid of the spyware. Although when I do restart the computer the spyware is back. So this has me thinking it is stuck in the startup files somewhere. I have ran spybot and CWshredder and neither help any further. Also have use hijackthis and delelted some entrys, but of coarse they return when the pc is rebooted. Basically its a search spyware. When I open up IE it will just have the search with all those links on the background eager for me to click them. I of coarse can use mozilla which I do use from now on. I would just like to completly get rid of this crap cause any spyware is not good to leave on the computer.

  2. #2
    Join Date
    Apr 2002
    Location
    Toronto, Canada
    Posts
    20,002
    try http://www.giantcompany.com/home-antiSpyware.aspx

    i had some spyware recently that neither giant, nor adaware, nor spybot could successfully remove

    however, they did identify which folders it was stored in

    so i booted the machine in SAFE mode, which allowed me to use the good old DOS command "erase *.*" for the files in the folder

    then reboot normally and re-run giant and spybot a few times to remove the registry entries
    rudy.ca | @rudydotca
    Buy my SitePoint book: Simply SQL

  3. #3
    Join Date
    Sep 2003
    Location
    New York, NY
    Posts
    136
    try http://www.spywareinfo.com/downloads/bhod/

    i tried it for a hijack problem and it works sweet

  4. #4
    Join Date
    Sep 2004
    Location
    Tampa, FL
    Posts
    520
    If you see the name of the spyware in question try googling it. Oft times various companies will have information on exactly what files spyware hides where and what registry entries it makes.

    Just be sure to always back up your registry before you go playing in it
    Darasen

  5. #5
    Join Date
    Sep 2003
    Location
    MN US
    Posts
    313
    This is a nice freeware program that might help you clean up the registry. There are a lot of forum type sites that you can paste the logs into...and get help with what to remove. (Remember to back up the registry). I had to manually remove a hijacker a month ago called My Daily Horoscope, and this worked great:

    http://www.spychecker.com/program/hijackthis.html

    Chris

  6. #6
    Join Date
    Sep 2004
    Location
    Tampa, FL
    Posts
    520
    cpgospi, I had the same piece of crap pop on to my machine. I have no idea how either I had not installed anything and NEVER trust any site for downloading to my PC other than easily recognizable companies such as Microsoft Macramedia or Adobe.

    Did yours have the annoyin Begin2Search bar also appear ?

    I removed mine manually. Thanks for the link I will check that one out.
    Darasen

  7. #7
    Join Date
    Sep 2003
    Location
    MN US
    Posts
    313
    Yeah, what a pain that was. It was actually my parents' pc. Older couple thought they'd buy a new computer and see what the internet was all about and along come these bastards. They were pretty well protected at the time too.
    Begin2Search was there, with God knows what else...porn, gambling, crack sites.
    Also, Giant came out with a cleaner since then in case you didn't get it all. (the link from r937)

    This is from the Author's Description:
    "My Daily Horoscope is provided free of charge by Enconfidence, Inc. As a means to keeping My Daily Horoscope free for all who wish to receive the service, Enconfidence’s TEAM Network will occasionally display a pop-up ad on your computer screen."

    I actually sent a bill to them. They haven't responded.

    Sorry for the rant.
    Have a good one,

    Chris

  8. #8
    Join Date
    Sep 2003
    Location
    MN US
    Posts
    313
    Quote Originally Posted by vschaos
    Also have use hijackthis
    Sorry, didn't catch that.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •