I recently mysteriously got a worm or some type of virus called freednshost. At first it was horrible. It would redirect all the web adresses i typed in, million of popups, and all that. Well i used programs like CWshreeder, spybot, and adaware multiple times and i got rid of most of those problems. But not i am having trouble when i go to certain websites. For example: I went to mapquest.com - worked fine, i click on driving diretions. The mapquest url remains at the top but the screen just says "Worth A visit :)" and the below it indicated it was from freednshost. Adaware, spybot, and CWShredder say there are no more problems, but obviously there are. Does anyone have any suggestion on what i might do to rid my computer of this? and one other thing. It added some options under the "tools" drop menu in internet explorer between "internet options" and "windows update" Any help would be appreciated. Thankyou Flech

I found the solution, and for future reference to anyone else who ever has this problem use a program called "hijackthis" (search for it on download.com) as well as the program "the cleaner" (www.moosoft.com) and that should pretty much clear everything out in addition to using some antispyware programs such as Spybot S&D. Flech

I just got the same worm problem today. I did a scan with Norton anitvirus, a scan with adaware and a run on hijackthis. hijackthis found a large number of entries placed by the worm and I deleted them all. On restarting the machine thay all came back. Then I found that they came back over a time span of about 15 minutes or when ever I started IE. The only thing that saved me was a system restore on the Win XP Pro computer system. Try that and go back to a date before you had the problem if at all possible.

I was able to get rid of this scum using hijack this, but it all came back. Then I figured that there are 2 .exe files svchost.exe and sysupd.exe (in C:\windows\ ) directory thats causing it to come back. so, I disconnected my m/c from internet. renamed these 2 exes and killed these programs from Task Manager and made sure that these 2 exes are not getting recreated. I used hijackthis and The Cleaner (from moosoft.com ) programs

Got it tonight. Deleted the six Registry entries which added three things to the Tools menu and the right-click menu (stuff about Refinancing and such), moved svchost.exe elsewhere, and used Hijack This to figure out that the reason about 15% of my favorites were being redirected was that there was a STYLE SHEET doing it. Went into Tools-->Internet Options-->Accessibility and unchecked the "Format documents using my style sheet" button. Got rid of the offending style sheet as well. Oh, I also had trouble before this with my home page being hijacked (I use the "about:blank" setting), I can't remember quite how I did it all, but I deleted "secure.html" from the Windows directory, ran Ad-Aware and Spybot a couple times, deleted everything new from MSConfig (I'm on 98SE, but not for long), restarted a few times, ran Regclean, deleted a few Registry entries, used Internet Options from the Settings folder instead of from IE itself, and finally used CWShredder 1.56.3, and finally got rid of it (CWS didn't take out freednshost though). Good luck!

Today i got the same virus. I went to hijack this and whenever i bring it up it shuts down. Can anyone help me fix the worm without having to re-format my computer

Kevinaura Thank you!!! I thought I'd got rid of this little (*&^%. but no!! it was still there on some of my favourites. Now I've deleted the style sheet as you say, everything is fine. A million thanks I know these guys think they are getting at Microsoft but they are a bunch of mindless idiots who really annoy us in the world who LIKE the fact Microsoft made computing easy. Go away and grow up idiots!!!