| Computing.Net: Over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to sign up now, it's free! |
whazit.com virus
|
Original Message
|
Name: Josh Lange
Date: May 22, 2003 at 00:22:55 Pacific
Subject: whazit.com virus OS: Windows XP CPU/Ram: 1400/256
|
Comment: Whazit.com (powered by easysearch.com) has taken over internet explorer on my computer. Every time I load IE it resets its search page. Along with sending what i do to its servers, it also convieniently blocks webpages for me (including this one, I had to load it through megaproxy.com) it does that by redirecting the page to the search page. I dont believe it set the urls in the HOSTS file because it actually loads the page, and just redirects it in less than 1/10th of a second so i cant even hit stop. What ive tried: Mcafee Virus Scan 7 (not detected) Ad-Aware 6 (not detected) Searched for .exe files created in last day (not detected) Looked in Window's list of installed programs Checked IE's Plugin folder (not detected) Looked in the registry, and changed all search/start page entrys and deleted search assistant keys. Yet, it STILL COMES BACK!!! I am not enthustiastic about the system restore, are there any other ideas? Thanks in advance
Josh Lange
Report Offensive Message For Removal
|
|
Response Number 1
|
|
Reply: (edit)Hi Josh, Here is what I would try. Restart your computer and DO NOT connect to the internet. Then open IE and go to Tools>Internet Options... 1. Delete Cookies 2. Delete Files (be sure to check the box that says "Delete all offline content") 3. Clear History Restart the computer, connect to the internet and then see what happens. This is what I thought would be a good starting place to help fix this problem. Good luck! Wayne
Report Offensive Follow Up For Removal
|
|
Response Number 2
|
Name: suzi
Date: May 22, 2003 at 01:27:17 Pacific
|
Reply: (edit)After you do what Wayne said, download Spybot Search & Destroy, update it and close it. Close IE, then run Spybot and let it fix all the things found checked in red. If that does not get rid of it, go to http://www.spywareinfo.com, their download page and download HijackThis. Run it and copy and paste the log it generates into a post on the forum there and ask someone to review it. I guarantee they will be able to fix your problem if Spybot doesn't work. To get Spybot: http://patrick.kolla.de/ You have to get the updates, otherwise it might not work. More info here about browser hijacking which is what you have: http://www.spywareinfo.com/articles/hijacked/
Report Offensive Follow Up For Removal
|
|
Response Number 3
|
Name: martin16v
Date: May 22, 2003 at 02:34:43 Pacific
|
Reply: (edit)i thought spybot was a good bit of kit, but it did't detect a homepage hijacker on my start up list. i'm thinking of trying something else, any other good programs??.
Report Offensive Follow Up For Removal
|
|
Response Number 4
|
Name: Josh Lange
Date: May 22, 2003 at 23:57:33 Pacific
|
Reply: (edit)Thank you very much! I used Hijack this and found out that my problem was (windows)\bho.dll (I think it was dll)
Report Offensive Follow Up For Removal
|

Post Locked
This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
Go to Windows XP Forum Home