• Hi Guest - Come check out all of the new CP Merch Shop! Now you can support CigarPass buy purchasing hats, apparel, and more...
    Click here to visit! here...

Browser Hijacked

P

PuroBrat

I am not here :^)
Joined
Apr 2, 2002
Messages
4,227
I have been working through different sites, trying to find out where I am going that keeps installing a Hijacker on my system.

Whenever I start IE, it doesn't go to CP like I had it set to do, it goes instead to http://here4search.com/hp.htm?id=131.

So, I run Ad-Aware spyware removal tool and everything is ok, Ad-aware gets rid of 1 Registry key, 4 registry values and 8 files.

Today, my system was xlean and doing exactly as it should, the only site I had been to was CP, and now the Hijacker is back. What is going on?
 
Looking now, thanks. I am also downloading SpySweeper as it has a background component that watches for, and reports attempted installations.

We shall see :D
 
PB,

Sounds like you have spyware. Spysweeper is an ok tool. I use ad-aware to keep the spyware off my computer.

By the way, I noticed you said CP is your homepage. Once we launch the new site, you're gonna like the newly added feature -- it makes having it your homepage worthwhile... I'll leave it at that without giving away the surprise. :)
 
I cleaned the system off with Ad-Aware and Spysweeper in tandam last night, it was squeeky clean. Spy sweeper running in the background to let me know if an attempt is made to jack my browser, and as soon as I hit Internet Explorer, Spy Sweeper allerted me that an attempt had been made to change my homepage ???

I am next going to set my homepage to Blank, and then come here after IE is running, instead of instantly and see what that does. If all else fails, I will format and restore my PC, but geeze I hate to do that. :angry:
 
You got to stay off the porn sites PB, you can pick up all kinds of things there. :0 :sign:
 
I use both Ad-Aware and SpyBot Search and Destroy and never have any issues with spyware or IE hijackers :thumbs:

But I also don't go to porn sites!!!! That's what newsgroups are for ;)
 
ricmac25 said:
I take it nothing on google helped?
Click to expand...
I did what was suggested in the link you sent, and I thought that got it, but it came back. Thanks for the tip though :thumbs:



Fast> Spybot will be my next aquisition, I suspect
 
Wascal said:
You got to stay off the porn sites PB, you can pick up all kinds of things there. :0 :sign:
Click to expand...
Hello, my name is Purobrat and I am a porn site addict...... :0 :p


Man, this is freeky, I typed the joke above and when I clicked on the emoticon to add the :p my browser went to a search site at (http://66.250.130.200/main/k.php?key=PORN) :(

This is getting serious :(
 
If Spybot and Ad-Aware don't kill it off you really have some problems. I'd do a scan from here too just to cover all the bases.
 
Format it, your computer is far too infected...
 
detected and removed:
troj_esepor.b in file trnksrvu.exe
troj_nex.b in file 503089.exe

also detected and cleaned 84 traces and 15 files found by a combo of Ad-Aware, Spy Sweeper and Spybot s&d

All appears to be working fine now.

Thanks for all the tips guys, much appreciated :)
 
I recently had some issues with SpyWare for the first time in a looooooooooong time. Adaware and Spybot S&D kept finding issues with my system.

I tried safe mode, running Adaware and S&D... disabling all unknown startup items, services, etc.... I lived with it for about a week, then adaware updated their reference file- re-ran adaware, and now its all gone.

I guess it was just something new and adaware didn't know exactly how to successfully remove it. My issue was where I ever I surfed to, a pop-up appears (yes, it got passed my pop-up blocker) from dealtime or something like that, with links to places selling related products! :(

Frustrating I know, but thank goodness its gone now. :thumbs:

Oh yeah, CWshredder is another good app to have.
 
PuroBrat said:
detected and removed:
troj_esepor.b in file trnksrvu.exe
troj_nex.b in file 503089.exe

also detected and cleaned 84 traces and 15 files found by a combo of Ad-Aware, Spy Sweeper and Spybot s&d
Click to expand...
Holy Smokies! No wonder you were having problems!

LMAO - glad you got it all working again.

Dave
 
Yeah, News groups are the best source of specific pern. On the ship it is pern, I dunno why, but it is pern.
 
emodx said:
Yeah, News groups are the best source of specific pern. On the ship it is pern, I dunno why, but it is pern.
Click to expand...
Glad no one on board has a lisp.... ;)
 
I have a problem with my browser too. It keeps going to this page every time I turn on the computer. I haven't figured out how to stop it yet or if I really want to. :p
 
AVB said:
I have a problem with my browser too. It keeps going to this page every time I turn on the computer. I haven't figured out how to stop it yet or if I really want to. :p
Click to expand...
I have that same exact problem, but I decided it was one I could live with :D
 
Please try and rectify that problem. No links should point to that address. You should only goto www.cigarpass.com/forums
 
You must log in or register to reply here.
Top