browser hijack repair recommendations

PeteMcK · 16th November 2008, 08:17 PM

Can anyone recommend software (preferably free) to deal with a browser hijack? Any hints on how to proceed appeciated too...

Thanks,
Pete McK

grimberg · 16th November 2008, 09:33 PM

Pete,

There are different browsers and several products that hijack them. If you are running Windows and using IE, hijacking is usually done thru hooks provided for add-on modules, like Google, Ebay or Yahoo bars. In the case of a malicious add-on it requires manually editing the registry and removing file(s). If you are not familiar with that, it is better to look up instructions for the specific attack you suffered.

Vix · 16th November 2008, 09:57 PM

Hope this helps:

http://www.pcstats.com/articleview.cfm?articleID=1579

PeteMcK · 16th November 2008, 10:00 PM

Thanks for the response Grimberg,
this attack appears to affect all browsers (IE, Firefox, Opera) and both Google & Yahoo seaches. I removed Google toolbar, have scanned with AVG & Ad-aware. Ad-aware removed 3 things from the registry, but I'm still getting the problem.
I'm OK to edit the registry manually, but don't know what I need to remove...

PeteMcK · 16th November 2008, 10:03 PM

Thanks Vix, I'll work my way through that article now...

grimberg · 16th November 2008, 10:04 PM

Could you be more specific about the hijacking? What is the behavior? Does it point to a web site trying to sell you a product?

PeteMcK · 16th November 2008, 10:16 PM

Grimberg, It doesn't go to one specific site, but (and not always) to sites selling a product unrelated to the search. These sites won't allow the 'back' button to work. When I had the google toolbar running, when a seach was typed in, the hijack would add a different seach of it's own.

grimberg · 16th November 2008, 10:43 PM

Have you tried HijackThis? If not go to www.download.com a look for it. It is free.

PeteMcK · 16th November 2008, 11:16 PM

I've just run Hijack this, having a look at the report now

lineup · 17th November 2008, 01:38 AM

I use HighJackThis regulary.
I recommend version 1.99.1
This is THE Original freeware version by the author
before he sold his rights to commercial Trend Micro (versions 2.xx)

1. Read this information first:
http://forums.majorgeeks.com/showpos...87&postcount=2

2. Download HiJackThis 1.99.1 from Majorgeeks
http://majorgeeks.com/download3155.html

3. Click to UnZip into any folder you wish.
Because hijackthis does not need to be installed.
Can be run from anywhere

4. Create a Shortcut and put at your Desktop

16th November 2008, 08:17 PM	#1
PeteMcK diyAudio Member Join Date: Feb 2002 Location: Sydney	browser hijack repair recommendations Can anyone recommend software (preferably free) to deal with a browser hijack? Any hints on how to proceed appeciated too... Thanks, Pete McK __________________ ‘today… there lives alongside the twentieth century the tenth or thirteenth. A hundred million people use electricity and still believe in the magic power of signs and exorcisms” Trotsky

16th November 2008, 10:00 PM	#4
PeteMcK diyAudio Member Join Date: Feb 2002 Location: Sydney	Thanks for the response Grimberg, this attack appears to affect all browsers (IE, Firefox, Opera) and both Google & Yahoo seaches. I removed Google toolbar, have scanned with AVG & Ad-aware. Ad-aware removed 3 things from the registry, but I'm still getting the problem. I'm OK to edit the registry manually, but don't know what I need to remove... __________________ ‘today… there lives alongside the twentieth century the tenth or thirteenth. A hundred million people use electricity and still believe in the magic power of signs and exorcisms” Trotsky

16th November 2008, 10:03 PM	#5
PeteMcK diyAudio Member Join Date: Feb 2002 Location: Sydney	Thanks Vix, I'll work my way through that article now... __________________ ‘today… there lives alongside the twentieth century the tenth or thirteenth. A hundred million people use electricity and still believe in the magic power of signs and exorcisms” Trotsky

16th November 2008, 10:16 PM	#7
PeteMcK diyAudio Member Join Date: Feb 2002 Location: Sydney	Grimberg, It doesn't go to one specific site, but (and not always) to sites selling a product unrelated to the search. These sites won't allow the 'back' button to work. When I had the google toolbar running, when a seach was typed in, the hijack would add a different seach of it's own. __________________ ‘today… there lives alongside the twentieth century the tenth or thirteenth. A hundred million people use electricity and still believe in the magic power of signs and exorcisms” Trotsky

16th November 2008, 11:16 PM	#9
PeteMcK diyAudio Member Join Date: Feb 2002 Location: Sydney	I've just run Hijack this, having a look at the report now __________________ ‘today… there lives alongside the twentieth century the tenth or thirteenth. A hundred million people use electricity and still believe in the magic power of signs and exorcisms” Trotsky


	Please consider donating to help us continue to serve you. Ads on/off / Custom Title / More PMs / More album space / Advanced printing & mass image saving

16th November 2008, 09:33 PM	#2
grimberg diyAudio Member Join Date: Oct 2002 Location: California, USA	Pete, There are different browsers and several products that hijack them. If you are running Windows and using IE, hijacking is usually done thru hooks provided for add-on modules, like Google, Ebay or Yahoo bars. In the case of a malicious add-on it requires manually editing the registry and removing file(s). If you are not familiar with that, it is better to look up instructions for the specific attack you suffered.

16th November 2008, 09:57 PM	#3
Vix diyAudio Member Join Date: Nov 2003 Location: Somewhere on Planet Earth	Hope this helps: http://www.pcstats.com/articleview.cfm?articleID=1579

16th November 2008, 10:04 PM	#6
grimberg diyAudio Member Join Date: Oct 2002 Location: California, USA	Could you be more specific about the hijacking? What is the behavior? Does it point to a web site trying to sell you a product?

16th November 2008, 10:43 PM	#8
grimberg diyAudio Member Join Date: Oct 2002 Location: California, USA	Have you tried HijackThis? If not go to www.download.com a look for it. It is free.

17th November 2008, 01:38 AM	#10
lineup diyAudio Member Join Date: Dec 2005 Location: the north	I use HighJackThis regulary. I recommend version 1.99.1 This is THE Original freeware version by the author before he sold his rights to commercial Trend Micro (versions 2.xx) 1. Read this information first: http://forums.majorgeeks.com/showpos...87&postcount=2 2. Download HiJackThis 1.99.1 from Majorgeeks http://majorgeeks.com/download3155.html 3. Click to UnZip into any folder you wish. Because hijackthis does not need to be installed. Can be run from anywhere 4. Create a Shortcut and put at your Desktop __________________ lineup

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
They HiJack your Browser!	lineup	The Lounge	2	20th February 2007 10:12 AM
Free Opera browser registrations	AudioFreak	Everything Else	0	31st August 2005 03:38 PM
Free Opera browser registrations	AudioFreak	The Lounge	0	31st August 2005 03:37 PM
Opera Browser Experts?	Bill Fitzpatrick	Everything Else	9	18th April 2005 03:23 AM

New To Site?	Need Help?
Register to Participate Search Privacy Statement Contact Us	Frequently Asked Questions Did you forget your password? Mark Forums Read