PDA

View Full Version : My homepage has been hijacked!! Help


hssc11045
04-15-2004, 04:14 PM
I have bluyonder as my home page but whenver I type a web address in my address bar this site (http://nkvd.us/1507/) hijacks my requests and links me to search everything website. I have changed my homepage back to blueyonder but this bl**dy thing keeps redirecting my searches back to its webpage.
Can anyone tell me how to stop this please? I have adaware running but when I add it to targets it stops me launching my webpages??

Nice simple explanations please as I'm not the brightest!!

Thanks:)

CHR15
04-15-2004, 04:28 PM
These Hijacking posts are getting ridiculous now.

Tools you will need (should have anyway):

HijackThis:

http://www.spychecker.com/program/hijackthis.html

Spybot Search & destroy:

http://download.com.com/3000-2144-10194058.html?tag=lst-0-1

And CWShredder:

http://www.spywareinfo.com/~merijn/files/cwshredder.zip


CWShredder should be able to fix it but run hijack this afterwards and post up your logfile.

also run Spybot search and destroy and let it do its thing, fixing all it finds.




[edit]

Just found this little lot from someone else with the same prob:

Hey

First of all in C:\Program Files make a folder and call it hijackthis..by going up to FILE-NEW-FOLDER. Then get the hijackthis.exe and cut and paste it in the folder you made.

Then in my signature click CWShredder and download it to the desktop. Open it up..uncheck the box about the recycling bin. Then click Fix--> with all browser windows closed. Restart your computer.

have hijackthis fix the following..most should have been removed by cwshredder, im just making sure:

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://nkvd.us/1507/ (http://nkvd.us/1507/)
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://nkvd.us/1507/ (http://nkvd.us/1507/)
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://nkvd.us/1507/ (http://nkvd.us/1507/)
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://nkvd.us/1507/ (http://nkvd.us/1507/)
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://nkvd.us/1507/ (http://nkvd.us/1507/)
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://nkvd.us/1507/ (http://nkvd.us/1507/)
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://nkvd.us/1507/ (http://nkvd.us/1507/)
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://nkvd.us/1507/ (http://nkvd.us/1507/)
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://nkvd.us/1507/ (http://nkvd.us/1507/)
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://nkvd.us/1507/ (http://nkvd.us/1507/)
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://nkvd.us/1507/ (http://nkvd.us/1507/)
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://nkvd.us/1507/ (http://nkvd.us/1507/)
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://nkvd.us/1507/ (http://nkvd.us/1507/)

R1 - HKCU\Software\Microsoft\Internet Explorer,Search = http://nkvd.us/1507/ (http://nkvd.us/1507/)
R1 - HKLM\Software\Microsoft\Internet Explorer,Search = http://nkvd.us/1507/ (http://nkvd.us/1507/)
O13 - DefaultPrefix: http://www.nkvd.us/1507/ (http://www.nkvd.us/1507/)
O13 - WWW Prefix: http://www.nkvd.us/1507/ (http://www.nkvd.us/1507/)
O13 - Home Prefix: http://www.nkvd.us/1507/ (http://www.nkvd.us/1507/)
O13 - Mosaic Prefix: http://www.nkvd.us/1507/ (http://www.nkvd.us/1507/)

O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52/200305...meInstaller.exe (http://a1540.g.akamai.net/7/1540/52/200305...meInstaller.exe)
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/19bcb3f638c47b...ip/RdxIE601.cab (http://software-dl.real.com/19bcb3f638c47b...ip/RdxIE601.cab)


REBOOT

hssc11045
04-15-2004, 04:51 PM
thanks for the help my friend :)