Browser Hijack

[redhead]

For the last two weeks I've been getting this stupid MSN search screen and when I type my search in the box I'm taken to a website called FindWhatEverNow.com. (I let my friend 'borrow' my computer *brilliant*). I've tried Ad Aware, Spy Doctor and Spy Bot and all these programs find all kinds of 'problems' but nothing is getting rid of FinWhatEverNow.com. AARGGH

Has anyone else ever had this problem or any suggestions to fix it? I'm at my wits end.

[Cedric]

Always use mozilla if you aren't now. And use ad-aware remover. If it's a bad trojan you might have to try something else. That is probably a trojan and you might have to change the windows registry , but you better know what you are doing.

Oh, and quit downloading porn :)

[RBA]

Busted! Someone downloading Porn. :eek:

Follow Cedric instruction. If that doesn't work, do "System Restore"

[Red Heeler]

Somewhere on the FinWhateverNow site, there should be directions for removing it. What has happened is that you have accidentally installed a search engine sort of like the Google toolbar. On the site they should disclose the program name. Then you can go into Add/Remove Software in your Control Pannel and remove it.

[TeamCasey]

This search turned up some removal titles.

http://www.google.com/search?hl=en&q=Findwhatevernow&spell=1

[dman]

I downloaded the free editions of AdAware SE and the new AVG anti-virus. Running both of these on a regular basis keeps my system clean of any spyware.

[Red Leader]

My favorite spyware removal tool is SpySubtract with the CWshredder. Those two things kill everything even remotely harmful. It works great. Someone on this site suggested it to me when I posted about a problem and it works great.

[Spring~Fields]

Oh, and quit downloading porn :)

:eek: :MandJ:

[TRF]

I use spybot, adaware, spysubtract and ewido. one at a time. and each one finds something the other misses. i had been using adaware and spybot, and neither could get rid of the adware redirect problem i was having. i eventually had to edit my registry to remove it.

Ewido has an inline scanner that blocks a lot of spyware from coming in. free for fourteeen days, then it's something like $25. worth it imo.

[westofyou]

i eventually had to edit my registry to remove it.

This tool is a must IMO, especially if you install games, deinstall, etc.

Costs 29 bucks

http://www.registry-clean.net/

[CTA513]

You could try using Microsofts new AntiSpyware program.
http://www.microsoft.com/athome/security/spyware/software/default.mspx

I downloaded it the other day and it found a bunch of stuff that Ad-Aware didnt find. Some of the stuff it found were browser hijack programs.

[SunDeck]

There's porn on the Internet?

[TRF]

There's porn on the Internet?

who knew?

BTW thanks woy. i just downloaded the free trial, and will purchase it next week for my house.

[RedsFan75]

Something I've been using is CCleaner, it's not a spyware/adware type thing, but it's been very useful. Cleans up the tmps, cache, etc... stuff left around by window.

[Cant Touch This]

I switched to Mozilla (Firefox) and have been happy as a clam. I was infected with the about:blank browswer hijacker with Internet Explorer and used every single one of the above mentioned methods of removal - AND MORE! All of them would work temporarily, but IE would soon be hijacked again.

Mozilla is the answer for me. No more annoying phantom search pages.

[wolfboy]

I would suggest using firefox as well. Doesn't help the damage already done though. If you're still having problems (I know the response is a bit late), try a program called hijackthis
http://www.spychecker.com/program/hijackthis.html

HijackThis is a tool, that lists all installed browser add-on, buttons, startup items and allows you to inspect, and optionally remove selected items. The program can create a backup of your original settings and also ignore selected items. Additional features include a simple list of all startup items, default start page, online updates and more. Intended for advanced users.
This is a very good freeware program that gets rid of some pesky programs. It will get more complex things that adaware can't remove. If this program is unable to delete any components, locate them (the path will appear in the hijackthis log), restart in safe mode, and delete them.


EDIT: Be very careful of what you delete via hijackthis. Some components and add-ons that appear are legitimate. Deleting legitimate items could screw up your browser even more. If you are unsure whether something is legit or not, google it first.

[redhead]

Thanks guy for all your advice. I haven't actually decided what to do yet, I have to proceed with caution, I have a lot of stuff I don't want to lose. Oh yeah, and it wasn't me that was downloading porn :eek: . LOL. As you notice, in my original message, I stated I let a friend borrow my computer. Now I know what my friend was doing and I was an idiot to loan it to her in the first place. :dflynn:

Oh and wolfboy, no response to me is ever too late. I probably won't even get around to actually trying to fix this thing (if that's possible) for at least a couple of weeks. I'm the worst procrastinator in the world.

Thanks again, guys.

[Aceking]

Just wanted to add one thing. Microsoft just added a free Spyware removal program to Microsoft.com. I used it on my dad's computer over the weekend and found it much better than Ad-Aware. Found more stuff.

[RedsFan75]

I use Spybot S&D, Ad-Aware, and Firefox. Tried Microsofts program, and found nothing. ! :D Firefox helps me keep my system clean.

[SunDeck]

I still can't believe it. Porn? On the Internet?
Gotta make a list of things I don't know.

[Sinister Urge]

also you might want to try a free virus scan from Pandascan or TrendMicro. Both find worms and such that play into these type things.

[LawFive]

Would anyone be willing to PM or EM one of the links above? I have the "about: blank" infection on IE, and I can't even click on the links above. I cannot get anywhere from the IE address bar; I can only access items from my "favorites" list. Good thing RedZone is on there! Many Thanks in advance.

[GAC]

I've always had success removing spyware running Norton's anti-virus software while in Safe Mode.

[GAC]

This tool is a must IMO, especially if you install games, deinstall, etc.

Costs 29 bucks

http://www.registry-clean.net/

My 16 yr old loves to go to gaming sites and download enumerators and various other games. He picks up some really nasty spyware in doing so woy.

Does this do a god job at removing them, or is AD-Aware and Spybot just as sufficient?

Thanks

[GAC]

Would anyone be willing to PM or EM one of the links above? I have the "about: blank" infection on IE, and I can't even click on the links above. I cannot get anywhere from the IE address bar; I can only access items from my "favorites" list. Good thing RedZone is on there! Many Thanks in advance.

about:blank is a nasty one. Here is one link where you can get SpySubract, along with CW Shredder for free for 30 days to see if you like it. I think it works the best of all that I've tried up top this point.

But you can Google CW Shredder and get a free download. It will remove about:blank and some other nastys.