Name: vivacia Date: September 28, 2007 at 09:31:25 Pacific Subject: Internet Explorer has '-Haha' at th OS: XP CPU/Ram: Pentium(R) 4 CPU 2.40GHz, Model/Manufacturer: Asus
Comment:
My IE title bar on the top has '- Haha' at the back for every page I open. Eg. Yahoo! - Haha, Google - Haha, Computing.Net - Haha. I scanned in normal and safemode with Lavasoft Ad-aware, AVG, Bit Defender and it still didn't fix. Registry cleaning didn't do anything either. I did not do anything with my internet options either. Has anyone encounter this before? It's making me paranoid thinking that someone is watching my everymove. Any help would be appreciated. Thanks.
Here is the screenshot. http://i106.photobucket.com/albums/... I actually reformatted yesterday. But guess what? It is still there!!! I guess it has infected my backuped files too. I really have no idea what to do with it since none of my anti-virus could detect it. And I can't possibly delete all my backup files, they are important stuff.
Yes it was a clean install. I backup'ed all my files on an external HDD (pictures, setups, work) and I moved it back onto my comp after I reformatted. So I reckon whatever it was, was brought over with my backup files.
Oh and something suspicious happened just now. I thought maybe its just a script problem on IE so I used Firefox instead to access my online bank account. And on the login page after I tried once, it said I coulndn't login anymore because I exceeded the number of attempts to login. I don't know, it's making me really paranoid now =( is it possible that this is a spyware?
p/s: I did the scan with the x-cleaner micro edition and the 'haha' is still there. sigh
I believe the virus is very new, that even anti-viruses don't have time to put in in its definitions. But don't worry, I found a site which shows a step by step instructions to remove the virus. http://mydigitalnetwork.blogspot.co...
You may found out that even after doing all the instructions given, "Haha" is still there. It's OK, by doing the following instructions I'm sure that "Haha" stuff will be gone.
1. Go to Start -> Run 2. Type regedit and click OK. 3. Navigate to: HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main 4. Right click, New and select String Value. 5. Type the string value as Window Title 6. Double click the Window Title and type the title you want in the value data.
By default the title should be Windows Internet Explorer. But you can change it to any title you want without causing any harm to your PC.
After you've done with the whole stuff, I'd recommend scanning the PC again with the latest definitions, just to make sure that the virus is gone for good.
I followed the instructions from the link you sent me and it worked and now the 'Haha' is gone. BUTTTTTTTT!!! I can't open my C or F drive from My computer. It says: 'Can not find script file "F:\Haha.js"' or 'Can not find script file "C:\Haha.js"' The only way I can access my stuff from C drive is to go to start menu and go to My documents, there is no way to access my external HDD. I can't open my drives directly from My computer.
So I put back the haha.js into my drives and lo and behold it worked, I can open them now. Er so what should I do now? If i delete it, my drives won't work, if I don't it keeps changing my title bar back to 'Haha'
My computer has been getting laggier and laggier and just now all of a sudden a IE just popped up with this website, it is in chinese. I don't read chinese!!! http://bbs.44cn.com/index.php Sigh I need help fast
Hmm... Possibly the autorun.inf file is still in the drive. You have to enable viewing hidden folders first, though. To do so, open My Computer, on the menu bar select Tools > Folder Options. Click on the View tab, select Show hidden files and folders, and uncheck Hide protected operating system files (Recommended). Click OK.
Right-click on a drive, select Explore. Find autorun.inf in the drive, and Shift+Delete it to delete it permanently.
I don't guarantee it will work 100% though.
Anyway, if you still can't open using the Explore command, you'll have to find an alternative way to open the drive such as using the address bar in Windows Explorer.
About that chinese site, I have no idea why does it happen, or how to stop it. Was your homepage was changed to that site or it comes up as popups occasionally?
Yay! Fixed it. I searched it up more online and came about a forum where someone had the same problem. So I downloaded Combofix, http://download.bleepingcomputer.co... (for those who need it) some scan that doesn't look fancy (MSDOS style) but it did the job. Everything is back to normal now.
The information on Computing.Net is the opinions of its users. Such
opinions may not be accurate and they are to be used at your own risk.
Computing.Net cannot verify the validity of the statements made on this site. Computing.Net and Computing.Net, LLC hereby disclaim all responsibility and liability for the content of Computing.Net and its accuracy.
PLEASE READ THE FULL DISCLAIMER AND LEGAL TERMS BY CLICKING HERE