[thelist] Weird IE6 Hijacking

Administrative HQ english_offline at yahoo.com
Tue Sep 16 07:16:37 CDT 2003


Sorry, I think I forgot to include the URL's for
Hijack This. They are as follows:

http://www.spywareinfo.com/~merijn/files/hijackthis.zip
http://www.spywareinfo.com/~merijn/index.html

--- Administrative HQ <english_offline at yahoo.com>
wrote:
> Hi.
> 
> I had a similar problem not long ago. BHOD and
> Spybot
> were unable to solve it. They couldn't even identify
> the creature that was behind the mess.
> 
> Try this.
> 
> 1. Download Hijack This (it will create a scan log
> of
> your system).
> 
> 2. Run the scan, create a log, save it and copy it
> to
> the clipboard.
> 
> 3. Go to http://boards.cexx.org/viewforum.php?f=1.
> It's a spyware help forum.
> 
> 4. Bookmark the page, so you can get back when you
> need to.
> 
> 5. Open a ticket there and request help - describing
> the problem AND pasting in your HijackIt scan log
> (properly identified) at the end of your message.
> 
> 6. Keep checking for answers.
> 
> My problem was solved completely - along with a
> couple
> of others I hadn't asked about - when one of their
> kind-hearted, volunteer experts posted an answer
> with
> detailed instructions. It only took a couple of
> hours
> to get the problem solved.
> 
> I think everyone reading this should bookmark the
> above URL's...just in case.
> 
> Good luck.
> 
> David
> 
>
http://www.spywareinfo.com/~merijn/files/hijackthis.zip
> http://www.spywareinfo.com/~merijn/index.html
> --- David Travis <dwork at macam.ac.il> wrote:
> > check in your add/remove programs, and see whether
> > an unfamiliar program was
> > installed there, sometimes when you install an
> > application additional
> > applications are installed with it (sponsors and
> > stuff).
> > 
> > David.
> > 
> > ----- Original Message ----- 
> > From: "Andrew" <andrew at humanbehaviour.co.uk>
> > To: <g3nic at lycos.co.uk>; <thelist at lists.evolt.org>
> > Sent: Tuesday, September 16, 2003 1:20 PM
> > Subject: RE: [thelist] Weird IE6 Hijacking
> > 
> > 
> > > I ahve just encountered a similar problem, my
> > machine is running slower
> > and if I
> > > reboot I get a regedit warning can't remember
> > without rebooting the exact
> > > message.
> > >
> > > Then when I launch IE6 my home page has been
> reset
> > to a search engine in
> > the
> > > states and I cant remember that until I reboot
> > again.
> > >
> > > This must be an IE6 problem, because I have only
> > just upgraded from IE5
> > wait for
> > > it... for security reasons!
> > >
> > > Never had any problems previously, for 18
> months.
> > >
> > > Andrew
> > >
> > > >-----Original Message-----
> > > >From: thelist-bounces at lists.evolt.org
> > > >[mailto:thelist-bounces at lists.evolt.org]On
> Behalf
> > Of Andre Genic
> > > >Sent: 16 September 2003 12:04
> > > >To: Thelist at Lists. Evolt. Org
> > > >Subject: [thelist] Weird IE6 Hijacking
> > > >
> > > >
> > > >Help!!!
> > > >
> > > >Seems as though someone has hijacked my IE6,
> for
> > some reason when I visit
> > a
> > > >site that uses pop ups, a second one opens up
> and
> > goes to this IP address
> > > >66.250.57.226 which goes back to a hosting
> > company in NYC.
> > > >
> > > >The site itself http://66.250.57.226 is like
> one
> > of those spammy search
> > > >engine pages called 8ad.com strange thing is
> they
> > offer a link "Uninstall
> > > >WinShow PopUps", how the hell did their WinShoW
> > PopUps get on my machine
> > in
> > > >the first place, I don't download anything
> > remotely dodgy or go on porn
> > > >sites.
> > > >
> > > >A whois shows just how serious these people are
> > about business, they
> > display
> > > >this as there contact number +1.123456789
> > > >
> > > >It's the source of the same 3 ads that are
> > driving me nuts, now I've done
> > > >everything I know to get rid of this, but it's
> > still happening, cleared
> > > >cache, cookies, reset IE6, the only thing left
> is
> > the registry, is it
> > even
> > > >possible to get into the registry through the
> > browser? well what I mean
> > is,
> > > >is it possible for embedded code to even get
> from
> > the browser into the
> > > >registry?
> > > >
> > > >Any help here would be great, because I'm real
> > close to pulling IE6, plus
> > I
> > > >want to report these clowns for all the hassle
> > It's causing me any
> > > >suggestions.
> > > >
> > > >Andre...
> > > >
> > > >--
> > > >* * Please support the community that supports
> > you.  * *
> > > >http://evolt.org/help_support_evolt/
> > > >
> > > >For unsubscribe and other options, including
> the
> > Tip Harvester
> > > >and archives of thelist go to:
> > http://lists.evolt.org
> > > >Workers of the Web, evolt !
> > > >
> > > >---
> > > >Incoming mail is certified Virus Free.
> > > >Checked by AVG anti-virus system
> > (http://www.grisoft.com).
> > > >Version: 6.0.518 / Virus Database: 316 -
> Release
> > Date: 11/09/2003
> > > >
> > >
> > > -- 
> > > * * Please support the community that supports
> > you.  * *
> > > http://evolt.org/help_support_evolt/
> > >
> > > For unsubscribe and other options, including the
> > Tip Harvester
> > > and archives of thelist go to:
> > http://lists.evolt.org
> > > Workers of the Web, evolt !
> > 
> > -- 
> > * * Please support the community that supports
> you. 
> > * *
> > http://evolt.org/help_support_evolt/
> > 
> > For unsubscribe and other options, including the
> Tip
> > Harvester 
> > and archives of thelist go to:
> > http://lists.evolt.org 
> > Workers of the Web, evolt ! 
> 
> 
> __________________________________
> Do you Yahoo!?
> 
=== message truncated ===


__________________________________
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com


More information about the thelist mailing list