Browser Hijacked

Forum General Networking : Network General Discussions - Browser Hijacked

Tom's Hardware: Over 1.4 million members in 6 different countries available to answer all your high-tech questions. Sign up now! Its free!
Word :    Username :           
 

I know that this must be a common problem, but I have been unable to find a solution that works. My computer is running Windows XP, and the browser is Internet Explorer 6.0. All updates and service packs are current.

Somewhere along the line my browser got hijacked and now I have this unwanted homepage that I cannot get rid of no matter what I try. I believe that I need to go into the registry and take out the website address for the unwanted page and put the one I want in place of it. I did that, but it went back to the unwanted page again.

I am thinking that there is somewhere else a file is hidding that I need to go and weed it out. I have done file/folder searches and tried to locate by the info on the website, and looked for *.hta files. I cannot find how to remove this item permanently.

I have done a virus scan with Norton 2003, and used Adaware, and downloaded Spybot Search and Destroy to try to remove the hijacker. After using all these items, the browser is still hijacked, with no solution in sight. I belive the Spybot program has identified the registry settings but seems unable to change the settings. Information on the registry settings as well as the webpage of the hijacker follows:

Common hijacker: Prefix change (Registry change, nothing done)
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\URL\Prefixes\www=http://

Common hijacker: Prefix change (Registry change, nothing done) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\URL\DefaultPrefix\=http://

http://www.smart-finder.biz/
http://nkvd.us

I must be missing something simple I think. I would appreciate any information on removing this or if there is another program that works good at removing the hijacker.
Thanks




What.....what the hell??

Sponsored Links
Register or log in to remove.

Just wondering....have I posted this in the wrong forum? If the above message should be posted on a different section, could someone please advise me. Thank you.

What.....what the hell??

Reply to Anonymous

I'm having the same exact problem, and i've tryed everything you have.

SOMEONE HELP!!! :)

Reply to Nivek

Ive had a problem similar, For me it was just a toolbar in IE that wouldent go away. But I never got rid of it.
I think this would be the right place to post?

Reply to uud40

Dude, I have the EXACT same problen, same website and everything. I dont know wtf to do? Please help anyone?

PIV 2.8 @ 3.57, 2X256 Geil Platinum PC4000 @ 1:1, 255fsb, RBX water cooled, IC7, (2)Raptors in raid 0, BFG5900nu flashed to 5950ultra bios, 500 watt psu.

Reply to Lando95

Sounds like you have a variant of a browser hijacker known as Coolwebsearch.

Try downloading CWshredder and run it to to see if you can rid yourself of this problem.....Hope it works for you.

http://www.merijn.org/files/cwshredder.zip

Reply to 00HTIMAN00

I second that. CWShredder rocked for me, few months ago. Found stuff nothing else found. Two thumbs up.

Here's clickies:
<A HREF="http://www.spywareinfo.com/~merijn/downloads.html" target="_new">Page with info</A>
<A HREF="http://www.spywareinfo.com/~merijn/files/CWShredder.exe" target="_new">CWShredder</A>

<font color=blue>War</font color=blue> <font color=orange>Eagle</font color=orange>
"I am not a role model." - Charles Barkley
{FTM}

Reply to Auburn9698

Just wanted to let everyone know that I ran the CWShredder, and it "appears" that my problem has been solved. I will see if it sticks for the next couple of days as I have read that it can reappear sometimes. I will post again if the problem comes back. Give the CWShredder a try.

What.....what the hell??

Reply to Anonymous

Seems to be working for now, thanks alot guys, I appreciate it. If anything comes up, I will let you know. THANKS :)

PIV 2.8 @ 3.57, 2X256 Geil Platinum PC4000 @ 1:1, 255fsb, RBX water cooled, IC7, (2)Raptors in raid 0, BFG5900nu flashed to 5950ultra bios, 500 watt psu.

Reply to Lando95
Tom's Hardware > Forum > General Networking > Network General Discussions > Browser Hijacked
Go to:

There are 1304 identified and unidentified users. To see the list of identified users, Click here.

Please mind

You are about to answer a thread that has been inactive for more than 6 months.
If you still wish to proceed, please ensure that your posting is original and does not duplicate or overlap any prior responses to this thread.

Add a reply Cancel
Sponsored links
  • Ask the community now
  • Publish
Ad
They won a badge
Join us in greeting them