Hijacker?



Starman
07-10-2005, 12:43 AM
My homepage keeps getting set and forced to startsearhes.net. How do i
remove this hijacker?

Thanks.

Nepatsfan
07-10-2005, 12:43 AM
"Starman" <iknowbutidontknow@yahoo.com> wrote in message
news:ioRke.211$BR4.191@news-server.bigpond.net.au...
> My homepage keeps getting set and forced to startsearhes.net.
> How do i
> remove this hijacker?
>
> Thanks.
>
>

Download HijackThis here:

http://www.spychecker.com/program/hijackthis.html

Run the program and post your log to any of the web sites listed
here:

http://www.merijn.org/forums.html

Don't post your log to these newsgroups. Rely on the experts on
those forums to help you get this problem fixed.

Good luck

Nepatsfan

Li'l Roberto
07-10-2005, 12:43 AM
"Starman" <iknowbutidontknow@yahoo.com> wrote in message
news:ioRke.211$BR4.191@news-server.bigpond.net.au...
> My homepage keeps getting set and forced to startsearhes.net. How do i
> remove this hijacker?
>
> Thanks.
>
>
Run these utilities from safemode , make sure you update them first

AD-Aware www.lavasoftusa.com
Spybot Search & Destroy www.safer-networking.org
Sysclean www.trendmicro.com

If all fails and you are still infected, you may have to run
hijackthis http://www.spywareinfo.com/~merijn/downloads.html
and post the log to http://forum.aumha.org/

rgds
Li'l Roberto

Rock
07-10-2005, 12:43 AM
Starman wrote:

> My homepage keeps getting set and forced to startsearhes.net. How do i
> remove this hijacker?
>
> Thanks.

Run these programs to check for spyware/malware. After installing
update them, then boot into safe mode and run them. You should update
and run them weekly.

Cwshredder
http://www.intermute.com/spysubtract/cwshredder_download.html

Ad-aware SE
http://www.lavasoftusa.com

Spybot Search and Destroy
http://www.safer-networking.org

Bazooka Adware and Spyware Scanner
http://download.com.com/3000-2144-10247783.html

Pest Patrol Free Pest Scanner
http://store.ca.com/dr/v2/ec_main.entry25?page=FindOutWhosWatchingYou&client=ComputerAssociates&sid=35715

If you’re still having problems after running these then run HijackThis
and post the log to one of the specialty forums, _NOT_ this one.

HijackThis
http://www.majorgeeks.com/download.php?det=3155

Forums to Interpret HijackThis Logs:

http://www.spywareinfo.com/forums/
http://forum.aumha.org/viewforum.php?f=30
http://forums.tomcoyote.org/
http://www.wilderssecurity.com/

After your system is clean use these programs to help keep it clean:

Spywareblaster
www.javacoolsoftware.com/sbdownload.html

Spywareguard
http://www.javacoolsoftware.com/sgdownload.html

IE-SPYAD
http://www.staff.uiuc.edu/~ehowes/resource.htm

--
Rock
MS MVP Windows - Shell/User

Starman
07-10-2005, 12:43 AM
I ran all of these and though it cleared up a lot of the pests, there are
three DSO Exploits still infecting my system which is making my homepage
still "startsearch". I ran all in safe mode and normal, they all claim to
have cleared it up but upon re-launching the scans "three DSO exploits"
still come up. Is there a way where I can track down the .exe file and
delete it from the system thus clearing the pest? Sometimes I have read this
could work, provided the correct .exe file is found.


"Rock" <rock@mail.nospam.net> wrote in message
news:#AIUObNYFHA.2560@TK2MSFTNGP10.phx.gbl...
> Starman wrote:
>
> > My homepage keeps getting set and forced to startsearhes.net. How do i
> > remove this hijacker?
> >
> > Thanks.
>
> Run these programs to check for spyware/malware. After installing
> update them, then boot into safe mode and run them. You should update
> and run them weekly.
>
> Cwshredder
> http://www.intermute.com/spysubtract/cwshredder_download.html
>
> Ad-aware SE
> http://www.lavasoftusa.com
>
> Spybot Search and Destroy
> http://www.safer-networking.org
>
> Bazooka Adware and Spyware Scanner
> http://download.com.com/3000-2144-10247783.html
>
> Pest Patrol Free Pest Scanner
>
http://store.ca.com/dr/v2/ec_main.entry25?page=FindOutWhosWatchingYou&client
=ComputerAssociates&sid=35715
>
> If you’re still having problems after running these then run HijackThis
> and post the log to one of the specialty forums, _NOT_ this one.
>
> HijackThis
> http://www.majorgeeks.com/download.php?det=3155
>
> Forums to Interpret HijackThis Logs:
>
> http://www.spywareinfo.com/forums/
> http://forum.aumha.org/viewforum.php?f=30
> http://forums.tomcoyote.org/
> http://www.wilderssecurity.com/
>
> After your system is clean use these programs to help keep it clean:
>
> Spywareblaster
> www.javacoolsoftware.com/sbdownload.html
>
> Spywareguard
> http://www.javacoolsoftware.com/sgdownload.html
>
> IE-SPYAD
> http://www.staff.uiuc.edu/~ehowes/resource.htm
>
> --
> Rock
> MS MVP Windows - Shell/User
>

Li'l Roberto
07-10-2005, 12:43 AM
"Starman" <iknowbutidontknow@yahoo.com> wrote in message
news:bUVke.421$BR4.344@news-server.bigpond.net.au...
>I ran all of these and though it cleared up a lot of the pests, there are
> three DSO Exploits still infecting my system which is making my homepage
> still "startsearch". I ran all in safe mode and normal, they all claim to
> have cleared it up but upon re-launching the scans "three DSO exploits"
> still come up. Is there a way where I can track down the .exe file and
> delete it from the system thus clearing the pest? Sometimes I have read
> this
> could work, provided the correct .exe file is found.

If all fails and you are still infected, you may have to run
hijackthis http://www.spywareinfo.com/~merijn/downloads.html
and post the log to http://forum.aumha.org/

rgds
Li'l Roberto

AL
07-10-2005, 12:43 AM
Usually the hijacker will take you to their start page. Scroll down to the
bottom of the new home page and see if there is a "contact us" link, or an
"about us" link. Click on it to find out more about it. If not seach your pc
for spyware/adware and remove it. If this doesn't help, do a search on the
net for the offening hijacker by name and read up on it to find removal
tool.





"Starman" <iknowbutidontknow@yahoo.com> wrote in message
news:ioRke.211$BR4.191@news-server.bigpond.net.au...
> My homepage keeps getting set and forced to startsearhes.net. How do i
> remove this hijacker?
>
> Thanks.
>
>

AL
07-10-2005, 12:43 AM
Go here for more information:

http://www.geekstogo.com/forum/Problems_with_startsearchesnet-t27061.html



"Starman" <iknowbutidontknow@yahoo.com> wrote in message
news:ioRke.211$BR4.191@news-server.bigpond.net.au...
> My homepage keeps getting set and forced to startsearhes.net. How do i
> remove this hijacker?
>
> Thanks.
>
>

Rock
07-10-2005, 12:43 AM
Starman wrote:

> I ran all of these and though it cleared up a lot of the pests, there are
> three DSO Exploits still infecting my system which is making my homepage
> still "startsearch". I ran all in safe mode and normal, they all claim to
> have cleared it up but upon re-launching the scans "three DSO exploits"
> still come up. Is there a way where I can track down the .exe file and
> delete it from the system thus clearing the pest? Sometimes I have read this
> could work, provided the correct .exe file is found.
>
>
> "Rock" <rock@mail.nospam.net> wrote in message
> news:#AIUObNYFHA.2560@TK2MSFTNGP10.phx.gbl...
>
>>Starman wrote:
>>
>>
>>>My homepage keeps getting set and forced to startsearhes.net. How do i
>>>remove this hijacker?
>>>
>>>Thanks.
>>
>>Run these programs to check for spyware/malware. After installing
>>update them, then boot into safe mode and run them. You should update
>>and run them weekly.
>>
>>Cwshredder
>>http://www.intermute.com/spysubtract/cwshredder_download.html
>>
>>Ad-aware SE
>>http://www.lavasoftusa.com
>>
>>Spybot Search and Destroy
>>http://www.safer-networking.org
>>
>>Bazooka Adware and Spyware Scanner
>>http://download.com.com/3000-2144-10247783.html
>>
>>Pest Patrol Free Pest Scanner
>>
>
> http://store.ca.com/dr/v2/ec_main.entry25?page=FindOutWhosWatchingYou&client
> =ComputerAssociates&sid=35715
>
>>If you’re still having problems after running these then run HijackThis
>>and post the log to one of the specialty forums, _NOT_ this one.
>>
>>HijackThis
>>http://www.majorgeeks.com/download.php?det=3155
>>
>>Forums to Interpret HijackThis Logs:
>>
>>http://www.spywareinfo.com/forums/
>>http://forum.aumha.org/viewforum.php?f=30
>>http://forums.tomcoyote.org/
>>http://www.wilderssecurity.com/
>>
>>After your system is clean use these programs to help keep it clean:
>>
>>Spywareblaster
>>www.javacoolsoftware.com/sbdownload.html
>>
>>Spywareguard
>>http://www.javacoolsoftware.com/sgdownload.html
>>
>>IE-SPYAD
>>http://www.staff.uiuc.edu/~ehowes/resource.htm
>>
>>--
>>Rock
>>MS MVP Windows - Shell/User
>>
>
>
>

If it's Spybot S&D giving the DSO exploits that's a false issue. There
is a way to tell it not to advise of that. I don't remember how off the
top of my head.

For your problem I would recommend running HijackThis and posting the
log to one of the specialty forums, NOT this one:

HijackThis
http://www.majorgeeks.com/download.php?det=3155

Forums to Interpret HijackThis Logs:

http://www.spywareinfo.com/forums/
http://forum.aumha.org/viewforum.php?f=30
http://forums.tomcoyote.org/
http://www.wilderssecurity.com/

--
Rock
MS MVP Windows - Shell/User

Li'l Roberto
07-10-2005, 12:44 AM
"Rock" <rock@mail.nospam.net> wrote in message
news:%23PA%23J1TYFHA.612@TK2MSFTNGP12.phx.gbl...
> If it's Spybot S&D giving the DSO exploits that's a false issue. There is
> a way to tell it not to advise of that. I don't remember how off the top
> of my head.
> Rock
> MS MVP Windows - Shell/User

Rock
The new version [1.4.2] will fix the DSO problem that was apparent in
Version 1.3
http://forums.net-integration.net/index.php?showtopic=28120

In any event you can tell Spy Bot to ignore the DSO reference in
future scans, you need to run in advanced mode.

rgds
Li'l Roberto


Hijacker?