Open Tech Support
Open Tech Support Archives
Back to HomeCommunityReviewsGuidesDownloadsTech LinksMarketplaceContact Us
 »  SITE NAVIGATION
»  OTS Home
»  OTS Forums
»  OTS Archives

»  About our site
»  Search our site
»  Support our site

»  What is this site?
»  Who are we?
 
 
 »  ADVERTISMENT
 
  Pages: 1

I've been hijacked.

(Click here to view the original thread with full colors/images)


Posted by: Mathias

Alright, here's the thing. I was online surfing one day when I came across a site that spammed me to death. I close all the pop-ups, etc. and then continue surfing. I right click and I notice that in the menu, there is a link to that site. I believe it is called a BHO (browser hacker object). I managed to delete any and all files that were downloaded onto my computer and I deleted all temporary internet files and cookies, but it is still there. I even did a Norton System Scan and cleared my computer of all viruses, still nothing.

I consulted others about this and they said to download software such as Browser Hijack Blaster. I did that, but unfortunately it seems like these programs only prevent BHOs and don't delete existing ones. Does anyone know how to delete existing ones?



Posted by: redwench

http://security.kolla.de



Posted by: Mathias

It's not spyware. I downloaded Ad-Aware and that didn't get rid of the extra thing on the right click menu. Oh and this link only appears when I right click on an internet window.



Posted by: Mathias

Forgive me for double posting, but I've downloaded Ad-Aware, the Spybot S&D and Spyware Guard. I've also updated them all as much as possible. None of these programs have been able to delete the hijack object on the secondary (right) mouse button menu.

If you don't know what I mean, open up internet explorer and right click within the window on the background or something, not on a button or object. Now look between the "refresh" and "properties" options. That is where the unwanted link shows up.

If I have to go into DOS and edit it somehow, I will, you'd just have to instruct me somehow.



Posted by: trekpsycho

I did a google on "bho" and it came up as "browser helper object". you can try it yourself, from what few I read it sounds like that is what is causing your problem. Here is one of the articles I found, there were many more. I think if you do a little research you may find a solution to your problem. (not critizing, I just don't have time to wade through them right now). Hope this helps!



Posted by: Mathias

Well, that sounds like it could help me, but unfortunately they require you to pay to download it, *grumble*

Well, guess I'll just have to live with this then and maybe format my hardrive sometimes in the future... and also learn how to format.



Posted by: trekpsycho

the problem with that is that some of these programs can gather info about you. Keep spybot killers updated maybe one of them will find it eventually. Good Luck!



Posted by: blackhalo15

Go to refedit, and navigate to run, i believe its hkey local machine-software-microsoft-windows-currentversion, and then run, what do you see there?



Posted by: Mathias

Refedit? In what?

Either way I've kinda fixed the problem by blockin the site that the unwanted BHO goes to, so it's kinda fixed. Thanks for you help anyways.



Posted by: trekpsycho

He means "Regedit"



Posted by: Bix VT

Yeah and you get into it by clickin the run menu and just typing in "Regedit"



Posted by: Mathias

Ok, I followed the man's directions and in the "run" folder is this...

(Default)
ccApp
DownloadAccelerator (I downloaded this on purpose)
QuickTime Task
SunJavaUpdateSched (I also downloaded this on purpose)



Posted by: redwench

nothing wrong with quicktime, unless its infected. ccapp is one of the very many norton's sub programs.
you probably dont have a program running, the link has just been added to a file somewhere. as long as you have a firewall up, i would just ignore it if you cant get rid of it reasonably easily. if youre determined, run either hijackthis, or a registry cleaner set to find entries for that site.



Posted by: Wpgman

try cwshredder,download link on this page
http://www.majorgeeks.com/download4086.html



Posted by: redwench

that utility is only for use with cool web search and its variants. it does nothing for any other problem.



 
Copyright 2000-2008 Open Tech Support.  All Rights Reserved.  Site Design and Development by Tolitz Rosel.