I-Appliance BBS
The Official Source for Internet Appliance Upgrades and Mods
Click Here!
BBS Main List | Sign In | Sign Up | Search | Help | Linux-Hacker.netReply to Thread | Printer |

Home / I-Opener Areas / I-Opener General Posts
Browser Hijacked
getting rid of a home page hijacker

New MessageBrowser Hijacked (modified 0 times) Rezz
Profile | Email
My home page keeps getting hijacked by a web page called findthewebsiteyouneed.com This is getting irritating as all hell. I've been fighting this thing for about a month now. The closest thing to a successfull removal of what ever is hijacking my home page has been accomplished by a software program call spybot. But it can only hold it at bay for one day. How do I clean out this hijacker once and for all?
02-25-2004 22:20:48

New MessageRE:Browser Hijacked (modified 0 times) Lincoln_man
Profile
A thirty second google search, I found a pest patrol site that says it is a cookie and
they can remove it. Google is always the first to go to.
02-26-2004 07:34:01

New MessageRE:Browser Hijacked (modified 0 times) oldman
Profile | Email
Rezz:

Often those hijack programs are covertly downloaded to you as .exe files that are easy to find and remove. they can change your internet settings every time you turn on your computer or start your brouser.

if you do a search for a file that contains the web page name as text, or search for all files that have been changed on a certain date or time period, you can find the file.

most people are afraid of digging into the widows registry, but Regedit also has search capability. the record of your homepage is kept in the registry and will appear within quotation marks ". any registry entry within quotation marks can be removed without hurting your computer functions. all registry entries can be edited with Regedit. I leave all numeric entries alone, but often change text entries that are within quotation marks. you can learn a lot just using Regedit to read the registry without making any changes. it is amazing what junk Bill Gates puts in your registry as default values.

take a look at the registry on your machine. you will probably find your problem buried in there somewhere.

have fun,

oldman
02-26-2004 22:04:35

New MessageRE:Browser Hijacked (modified 0 times) KneuB_2
Profile | Email
In the forums section of ComputerCops under the spyware section there are references to an application called Hijackthis. I have not yet got a copy to try but I intend to since I also am being plauged with this one.

If that does not work here is another one that looks interesting.

Browser Helper Objects

02-27-2004 20:17:13

New MessageBrowser Hijacked AGAIN (modified 1 times) Rezz
Profile | Email
Well I did the cookies thing again and the browser still got hijacked. After resetting the home page I ran spybot again and then snooped around the registry, there were no occurances of the dreaded findthewebsiteyouneed. Then i rebooted and opened the browser and got hijacked again. Then I snooped around the registry again and found lots of entries for findthewebsiteyouneed. manually changed them to the search engine and home page of my choice. then ran spybot again plus I ran hijackthis and CWshredder (both from the spywareinfo.com site) and installed the BHO tracker software. Now I'm going to log off and shut down for the night. If I do not get hijacked over the next few days (or even if I do) I shall report back to let you know what Happened.
02-27-2004 23:27:37

New MessageRE:Browser Hijacked (modified 0 times) Rezz
Profile | Email
Hijacked again and again and again....AAARRRGGGGHHH.

I'm overlooking something, but I just can't figure out what!

03-01-2004 14:00:05

New MessageRE:Browser Hijacked (modified 0 times) Lincoln_man
Profile
Try this web site. http://vil.nai.com/vil/content/v_100916.htm
Need to look for easywww in the register.
Found this with a GOOGLE search again.
03-01-2004 17:09:49

New MessageRE:Browser Hijacked (modified 0 times) oldman
Profile | Email
Rezz:

go back to the first paragraph of my reply of 2/26.

clean out your documents list, clean out your cookies and history folders.

click on 'start'

click on 'Search' ... 'Files or Folders'.

in the space titled 'containing text' enter 'findthewebsiteyouneed'.

click on the 'Search Now' button.

watch what happens.

changing the registry only corrects what the file that is hijacking your browser is doing to your registry.

if you fix the registry, every time you start up your computer or start your browser, the settings are changed again.

you still need to find the file that is doing this for it to stop.

keep having fun,

oldman
03-01-2004 22:18:40

New MessageRE:Browser Hijacked (modified 0 times) Kludgemeister
Profile
Or switch to Mozilla.

Kludgemeister

03-02-2004 01:09:31

New MessageRE:Browser Hijacked (modified 0 times) Rezz
Profile | Email
It did not come back last night! YES!
I read through the computercops "how to" on using the HijackThis application and did a step by step review of everything in the registry list that it pulled up. A few hours later I had identified no less than four such malicious spyware entities on my machine, one of which was the easywww that lincoln_man pointed out. I let HijackThis clean it out and it has not come back in the last 24 hours. My next shot would have been the cleaner that lincoln_man last posted.

Thank you all

03-03-2004 13:27:25

New MessageRE:Browser Hijacked (modified 0 times) Lincoln_man
Profile
Your Welcome.
A google search has usually pulled my bacon out of the fire.
Happy hunting.
Lincon_man as in 1953 Lincoln,red and fully restored.
03-03-2004 15:06:38

Reply to Thread | Printer |
All times are PSTPowered by UltraBoard v1.62


Copyright © 2000, Netmake Inc. All Rights Reserved.
See Terms and Conditions for more information.




i-opener opener laptop notebook computer help drivers dll free windows dos repair fix linux mac macintosh 2000 95 98 nt pc configure hardware software sound video netscape explorer network networking lan wan software cmos fat bios printer card mouse modem ide scsi cd rom controllers scanner tape hard drive cgi scripts source code mp3