DaniWeb IT Discussion Community

DaniWeb IT Discussion Community (http://www.daniweb.com/forums/index.php)
-   Viruses, Spyware and other Nasties (http://www.daniweb.com/forums/forum64.html)
-   -   http://www.th.msie.cc/ index.php?aid=579 (http://www.daniweb.com/forums/thread6095.html)

quinkky May 17th, 2004 4:51 am
http://www.th.msie.cc/ index.php?aid=579
 
Hello to one and all! Am new here and I have a problem with ( :evil: http://www.th.msie.cc/index.php?aid=579 :evil: ) I would like to know anybody else has this same problem and if so I would be much obliged if you could teach me as how to get rid of it. At the same time a strong recommendation to the best anti-spyware to be downloaded.

Thanks

quinkky

jannes May 17th, 2004 5:33 am
Re: http://www.th.msie.cc/ index.php?aid=579
 
I go for spybot myself, although Ad-aware, Hijackthis and Regseeker are useful to have round when SD fail...

The link didn't work for me, was that what you wanted to know?

quinkky May 17th, 2004 8:19 am
Re: http://www.th.msie.cc/ index.php?aid=579
 
Thanks jannes, I'm not too sure but does it help remove the above when spybot or any other software is downloaded?

Thanks

crunchie May 17th, 2004 10:27 am
Re: http://www.th.msie.cc/ index.php?aid=579
 
You have a coolwebsearch infection.
Download CWShredder from here & run it. Select the fix button & it will get rid of everything related to CoolWebSearch that is stored in it's database. Close ALL windows, including IE, before running CWShredder.

To help prevent this from happening again, install the patches for the vulnerabilities that this hijacker exploits by going here for your critical updates.

quinkky May 17th, 2004 11:51 am
Re: http://www.th.msie.cc/ index.php?aid=579
 
Thanks a MILLION crunchie. I have done as per your instructions that include downloading Microsoft security updates and I have gotten rid of that silly hijacker, however I have another problem i.e I cannot sign-in to Yahoo to read my mail. I have also downloaded spywareblaster and I experienced error in the download but as for the registry machanic and Spywareguard its not of a problem. I feel that I should uninstall this software and go for another. Any recommendations?

Thanks a MILLION again

crunchie May 18th, 2004 6:22 am
Re: http://www.th.msie.cc/ index.php?aid=579
 
Yahoo may be a cookie problem. Clear all of the old ones & try again. Spywareblaster & guard are two of the better protection tools that you can install.
I use easycleaner from ToniArts for a registry cleaner.

quinkky May 23rd, 2004 1:37 am
Re: http://www.th.msie.cc/ index.php?aid=579
 
I have a problem installing SpywareBlaster, however I have been able to install guard! Everytime I install and after vclicking finished an error message appears stating that "unable to install because of a virus in the sector or sector damaged and please re-install." I have scanned with pc-cillin, Spybot but this sector has not been detected. Has pc-cillin or spybot got something to do with the installation of SpywareBlaster? (maybe there is a clash!)

I still have the DSO Exploit problem even after I have downloaded all Microsoft security update including Microsoft SP 1a. How do I fill up this hole..........

Thank you in anticipation

crunchie May 23rd, 2004 1:44 am
Re: http://www.th.msie.cc/ index.php?aid=579
 
I think from here it is best if you post a HijackThis log.
Download HijackThis from here & unzip it into it's own, permanent folder, (Not a temporary folder or the desktop & not directly on your hard drive). Start HJT & with all browser windows closed, press the scan button. When the scan is finished the scan button will change to save. Save the log to a text file, copy the entire contents of the text file & paste it into the body of your post. DO NOT FIX ANYTHING YET. Most of what is there is harmless & even necessary to the running of your system.

crunchie May 23rd, 2004 7:22 am
Re: http://www.th.msie.cc/ index.php?aid=579
 
You never mentioned the DSO exploit until your last post either. You should go here & install ALL critical updates required for your system. Get everything on offer for your system & install them.
Also you can download DSO stop from http://www.nsclean.com/dsostop.html

funkatron May 23rd, 2004 2:23 pm
Re: http://www.th.msie.cc/ index.php?aid=579
 
i have pretty much exactly tha same problem - had tha initial home page redirect thing - got rid of that now when i try logging into lycos - it wants to redirect to http:://www.s5.th.msie.cc/index.php
- Have deleted all cookies etc and still no go....

So would be interested to find out how you get to fix this!


All times are GMT -4. The time now is 3:16 am.

Forum system based on vBulletin Copyright ©2000 - 2009, Jelsoft Enterprises Ltd.
©2003 - 2009 DaniWeb® LLC