Computing.Net > Forums > Windows XP > IEBrowser hijacker

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

IEBrowser hijacker

Reply to Message Icon

Name: Mike Madd
Date: August 21, 2007 at 08:18:58 Pacific
OS: XPHome SP2
CPU/Ram: P4 768 Mb
Product: Home built
Comment:

I have a browser hijacker which renders IE 6 unusable. I have been using Firefox.

I really don't want to do a reformat at this time so I was wondering if the XP repair option would eliminate it. Or would the hijacker survive and resume it's nefarious activities?



Sponsored Link
Ads by Google

Response Number 1
Name: XpUser
Date: August 21, 2007 at 08:23:14 Pacific
Reply:

How do you know your IE6 is hijacked? Symptoms?

i_Xp/VistaUser


0

Response Number 2
Name: Mike Madd
Date: August 21, 2007 at 08:46:58 Pacific
Reply:

Because it never goes to the site I selected when I click on a Google Search Link. Sometimes I can get it to go by copying and pasting but frequently even that gets hijacked.

The same search result and clicking when using Firefox takes me to the site I selected.


0

Response Number 3
Name: aegis
Date: August 21, 2007 at 08:47:56 Pacific
Reply:

I'm also curious as to how you know that IE6 was hijacked.

Using add/remove software (Windows components) in the Control Panel, you can remove IE and reinstall it.


0

Response Number 4
Name: XpUser
Date: August 21, 2007 at 08:51:23 Pacific
Reply:

aegis -

FYI - IE6 is a core component of Windows XP operating system. There is no option to remove it. If you upgrade to IE7, the kernels used by IE6 will be replumbed to close it thus making IE7 standalone but if you decide to uninstall IE7 (via Add & Remove Programs) the replumbed IE7 will be de-replumbed.

Why is IE6 made a core component? M$ designed it that way to have a permanent foothold in XP browser. In other words keep the monopoly alive.

i_Xp/VistaUser


0

Response Number 5
Name: XpUser4Real
Date: August 21, 2007 at 09:02:21 Pacific
Reply:

I had some clients where IE6 was not functioning properly and at times wouldn't even go on-line...an up-grade to IE7 fixed the problem, IE7 is a safer more secure browser and has many better features than IE6.
I presume you already have SP2 installed?
Make sure to get ALL the critical updates.
I would also suggest you trying winpatrol...a great free program that will monitor your PC and alert you when things try to get loaded on and it also lets you lock your hosts file.

Some HELP in posting on Cnet plus free progs and instructions Glad to Help!


0

Related Posts

See More



Response Number 6
Name: aegis
Date: August 21, 2007 at 10:54:58 Pacific
Reply:

I have IE6 and it's removeable. ???

In fact I just removed and reinstalled it earlier today, trying to fix a problem.


0

Response Number 7
Name: XpUser
Date: August 21, 2007 at 12:02:56 Pacific
Reply:

IE6 is never uninstalled per se in Windows XP. The first note immediately after Summary in the following MSKB explain it all.

http://support.microsoft.com/kb/293907

i_Xp/VistaUser


0

Response Number 8
Name: aegis
Date: August 21, 2007 at 12:22:05 Pacific
Reply:

"IE6 is never uninstalled per se"

I agree that it's not 'completely' uninstalled. It's well known that IE is intertwined with Explorer and shares 'many' files.


0

Response Number 9
Name: XpUser
Date: August 21, 2007 at 12:38:40 Pacific
Reply:

Exactly. It's all because M$ was very spiteful during the heightened Browser Wars of the early-late 90s. They then tied IE6 into the next generation of Windows (XP).

i_Xp/VistaUser


0

Response Number 10
Name: Abnormal
Date: August 21, 2007 at 13:48:31 Pacific
Reply:

This tool should remove your DNS hijacker rootkit.

http://forums.majorgeeks.com/showth...


0

Response Number 11
Name: Mike Madd
Date: August 24, 2007 at 11:17:46 Pacific
Reply:

Thanks to ABNORMAL!!

I ran that Fixwareout Tool and it seems to have done the trick!

I was unable to find a place on the Major Geeks Site to post the Fixawareout log as specified.


0

Response Number 12
Name: Abnormal
Date: August 24, 2007 at 20:33:53 Pacific
Reply:

Glad it helped Mike. I can take a look at it
when I get chance, just post it here.


0

Response Number 13
Name: Mike Madd
Date: August 26, 2007 at 17:53:30 Pacific
Reply:

Username "***" - 2007-08-24 13:59:01 [Fixwareout edited 2007/07/05]

»»»»»Prerun check
HKLM\SOFTWARE\~\Winlogon\ "System"="kdrex.exe"

Successfully flushed the DNS Resolver Cache.


System was rebooted successfully.

»»»»» Postrun check
HKLM\SOFTWARE\~\Winlogon\ "system"=""
....
....
»»»»» Misc files.
....
»»»»» Checking for older varients.
....
»»»»» Other
C:\WINDOWS\Temp\kdrex.ren 65910 08/04/2004

»»»»» Current runs (hklm hkcu "run" Keys Only)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast!"="C:\\PROGRA~1\\ALWILS~1\\Avast4\\ashDisp.exe"
"SmcService"="C:\\PROGRA~1\\Sygate\\SPF\\smc.exe -startgui"
"HPDJ Taskbar Utility"="C:\\WINDOWS\\system32\\spool\\drivers\\w32x86\\3\\hpztsb07.exe"
"Dimension4"="C:\\Program Files\\D4\\D4.exe"
"SoundMan"="SOUNDMAN.EXE"
"BCWipeTM Startup"="\"C:\\Program Files\\Jetico\\BCWipe\\BCWipeTM.exe\" startup"
"TkBellExe"="\"C:\\Program Files\\Common Files\\Real\\Update_OB\\realsched.exe\" -osboot"
"Share-to-Web Namespace Daemon"="C:\\Program Files\\Hewlett-Packard\\HP Share-to-Web\\hpgs2wnd.exe"
"HPHmon04"="C:\\WINDOWS\\system32\\hphmon04.exe"
"HPHUPD04"="\"C:\\Program Files\\HP Photosmart 11\\hphinstall\\UniPatch\\hphupd04.exe\""

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="\"C:\\Program Files\\Common Files\\Ahead\\lib\\NMBgMonitor.exe\""
"TClockEx"="C:\\Program Files\\TClockEx\\TCLOCKEX.exe"
"StartCCC"="C:\\Program Files\\ATI Technologies\\ATI.ACE\\Core-Static\\CLIStart.exe"
....
Hosts file was reset, If you use a custom hosts file please replace it
»»»»» End report »»»»»


0

Sponsored Link
Ads by Google
Reply to Message Icon






Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Windows XP Forum Home


Sponsored links

Ads by Google


Results for: IEBrowser hijacker

hijacking of homepage. www.computing.net/answers/windows-xp/hijacking-of-homepage/99446.html

Searchfind.info Hijack www.computing.net/answers/windows-xp/searchfindinfo-hijack/113448.html

Pesky virus and hijack NEED HELP www.computing.net/answers/windows-xp/pesky-virus-and-hijack-need-help/133264.html