PDA

View Full Version : HIJACK!


protein
28-10-2004, 13:27:08
My internet explorer has been hijacked. Whenever I click on my ie icon or click "home" I get directed to "fastsearchweb . com" which offers me casinos, hair loss products, viagra etc. I can't get rid of it.

I've found the dll file responsible but I can't delete it because it's in use.

What should I do - other than change to a different browser?

btw, which browser is best for not getting hijacked?

Funkodrom
28-10-2004, 13:29:18
I just downloaded the new firefox today. Working very well so far.

http://www.mozilla.org/products/firefox/

King_Ghidra
28-10-2004, 14:02:38
rob are you sure your ie has been hijacked or has something just reset your home page?

this has happened to me before, i just go back to google, click set google as your homepage and bob's your uncle

Funkodrom
28-10-2004, 14:04:45
Good point. Go to Tools - Internet Options and change your homepage.

protein
28-10-2004, 14:08:09
That was the first thing I tried. I had to fix it by fiddling with regedit and using a program to delete locked system files.

I DON'T WANT VIAGRA YOU ARSEHOLES! MY ERECTIONS ARE PERFECTLY SOLID AND STABLE! I DON'T WANT TO GAMBLE! I DON'T WANT TO BE FORCED INTO LEARNING GEEKY COMPUTER STUFF TO FIX THE PROBLEMS YOU'VE SOMEHOW INSTALLED ON MY PC EVEN THOUGH I HAVE THREE PROGRAMS THAT CLAIM TO STOP THAT KIND OF THING!!!

AAARGH! CUNTING HIJACKING BAAARRRRSTAAAAADS!

Funkodrom
28-10-2004, 14:12:22
Download Firefox! IE = Shit.

Asher
28-10-2004, 14:36:42
Originally posted by Funkodrom
I just downloaded the new firefox today. Working very well so far.

http://www.mozilla.org/products/firefox/
Did you download the 1.0PR on that link, or the 1.0RC1 that came out yesterday with some new features and 250 bug fixes?

Funkodrom
28-10-2004, 14:45:25
The new one that came out yesterday, is that not on that link? Whoops.

Asher
28-10-2004, 16:47:07
1.0RC1 is available for "testing", and won't be on their main site. They're trying to preserve bandwidth.

1.0RC1 was out yesterday, 1.0RC2 is out in a week, and 1.0 final is out the following week. 1.0 final will be the next build on the Mozilla.org main page.

1.0RC1 can be downloaded here (http://ftp.mozilla.org/pub/mozilla.org/firefox/releases/1.0rc1/Firefox%20Setup%20(1.0rc1,%20en-US).exe).

Asher
28-10-2004, 16:49:44
For our international friends, there are now ~24 localized builds.

French 1.0RC1 (http://ftp.mozilla.org/pub/mozilla.org/firefox/releases/1.0rc1/Firefox%20Setup%20(1.0rc1,%20fr-FR).exe)
Dutch 1.0RC1 (http://ftp.mozilla.org/pub/mozilla.org/firefox/releases/1.0rc1/Firefox%20Setup%20(1.0rc1,%20nl-NL).exe)
Swedish(?) 1.0RC1 (http://ftp.mozilla.org/pub/mozilla.org/firefox/releases/1.0rc1/Firefox%20Setup%20(1.0rc1,%20sv-SE).exe)

Scabrous Birdseed
28-10-2004, 17:00:10
protein: run AdAware and Spybot: Search & Destroy on your PC.

protein
28-10-2004, 17:18:39
Did both of those first, and a virus scan. Then fiddled with my ie settings, then discovered a new locked dll file in my system 32 folder.

The most annoying thing is that I can't contact the bastards that are responsible.

zmama
28-10-2004, 17:24:56
Don't ever try to contact them! That just tells em they have a live monkey

protein
28-10-2004, 19:45:33
Interestingly the file has reappeared and now occasionally my ie redirects to some weird casino site.

So there's a file somewhere on my computer telling my computer to create the file that does this. Or there's a file somewhere that is using one of the vital windows internet components to download and install this software.

Would this happen with another browser?

Asher
28-10-2004, 19:59:06
Nope.

protein
28-10-2004, 20:42:05
Well, I'm using Firefox now. I'm a little pissed off that I have to. I wonder how long it will be before people start hijacking this.

zmama
28-10-2004, 20:45:44
Don't be pissed off...it's a better faster browser than IE anyway.

protein
28-10-2004, 20:55:43
I'm pissed off because I keep going to click the ie icon instead of the firefox one. Is there anyway I can change the icon to the ie one?

I'm, also pissed off that there are companies/people willing to do such underhanded evil things. It's like putting heroin in your coffee to make sure you keep coming back. Or something.

zmama
28-10-2004, 21:01:56
Just drag the ie icon into the trash.

fp
28-10-2004, 21:03:13
And drag the Firefox one to the same place the IE one used to be.

Resource Consumer
28-10-2004, 21:55:33
just drag your whole desktop the way of the oozelum bird

Qaj the Fuzzy Love Worm
29-10-2004, 05:22:00
I recommend this: http://lynx.browser.org/

Funkodrom
29-10-2004, 08:24:59
Originally posted by protein
Well, I'm using Firefox now. I'm a little pissed off that I have to. I wonder how long it will be before people start hijacking this.

Don't be pissed off you've got yourself a much better browser. You wouldn't record someone on a 4 track now you have your new studio set up. Same thing. :)

fp
29-10-2004, 11:20:42
I wonder how long it'll be before his cool new studio set up becomes obsolete?

MDA
29-10-2004, 11:21:28
I had to make manual changes to my registry when this happened to me. Sucks. I'll try and find the website that had instructions.

MDA
29-10-2004, 11:28:16
http://forums.spywareinfo.com/index.php?b=1

http://forums.spywareinfo.com/index.php?showtopic=227

Gary
29-10-2004, 15:24:32
Some of the links I posted here may help, if you wish to take the risk :D (http://www.counterglow.com/forum/showthread.php?s=&threadid=19599)

Mr. Bas
31-10-2004, 14:32:23
I had the same problem recently, though my computer redirected to some other site. The (free) programs that seem to have solved the problem are Ad-Aware (http://www.lavasoftusa.com) , CoolWebShredder (http://www.intermute.com/spysubtract/cwshredder_download.html), Spybot Search & Destroy (http://www.safer-networking.org/index.php?page=download) and HiJack This (http://www.spywareinfo.com/~merijn/files/HijackThis.exe). Combined, they seem to have removed everything. Be cautious with HiJack This though, besides the shit you want to delete, it also finds all kinds of extensions and stuff that are not spyware-related but are just normal, legitimate files. Use the tutorial (http://www.spywareinfo.com/~merijn/htlogtutorial.html) for more information on what you should delete and what you should keep.