Daughter of the Nine Moons
Aug 5 2004, 12:24 PM
Over the weekend I downloaded Mozilla FireFox and MSN Plus. I now keep getting booted off the net on my home computer. When I log back on, my home page is changed to something called "My search" I have now dumped Firefox, thinking that might be the problem. (Probably MSN plus related ) My virus protection/firewall definitions are current. So are my Microsoft updates. I ran a scan and everything checks out. I ran Ad-Aware and it identified a data miner and that there was a "possible browser hijack attempt". I also ran Spybot D & D came up with something that was "Alexa related". I cleaned everything out but I think that I am missing something. Can anybody help?
Thanks
Dot
Janiel
Aug 5 2004, 12:56 PM
i dont think it has anything to do with either Dot9M its just a simple spyware but if it didnt go away with adaware or spybot then i think its a virus, try running norton (if you have it) or any other equvilent oh and try staying away from really obscure websites...they tend to carry lots of stuff like that
Daughter of the Nine Moons
Aug 5 2004, 12:59 PM
I did last night. No virus was found and all my virus definitions are current.
| QUOTE |
| oh and try staying away from really obscure websites...they tend to carry lots of stuff like that |
Hmmm, you think?
Janiel
Aug 5 2004, 01:07 PM
oh fine i see how it is

im sorry i cant help you further
thats all i know
Universal Absurdity
Aug 5 2004, 02:42 PM
i hate those annoying search bars and browser hijack attempts
As far as my experience has gone with these things, ive found that the best way to get rid of them is to first, go into add/remove programs and locate any searchbar that you did not install and remove it. Second, right click start, click explore and go into program files (not programs under the start menu) Find any folder for the programs uninstalled that might remain and delete them. Run ad aware after getting on the internet, see if it finds anything.
AliceCoopersGirl
Aug 5 2004, 02:52 PM
Dot,your problem sounds similar to mine(except mine freezes and the home page it is trying to get me on is "whenusearch".
If you solve yours please could you let me know what you did so I can try the same.
Daughter of the Nine Moons
Aug 5 2004, 09:41 PM
Hmmm. Whatever it was it is now gone. I looked for the searchbar like you said UA. Found nothing. I ran both Spybot and Ad-Aware again (after looking for more updates), got nothing this time. The search bar is now gone. So whatever I did last night must of worked but never realized it *shrugs* Thanks for your help

Dot
Maybe AliceCoopersGirl you can try the same?
Daughter of the Nine Moons
Aug 5 2004, 10:08 PM
Update: It's still on the limited profile on my computer

so I am not sure what to do now

New update: rebooted and when I opened my browser it was high-jacked again by
http://mysearchnow.com/passthrough/index.html?I ran Ad-Aware and this is what I got:
Possible browser hijack attempt : Software\Microsoft\Internet Explorer\MainStart Pagemysearchnow.com
Possible Browser Hijack attempt Object recognized!
Type : RegData
Data : "http://mysearchnow.com/passthrough/index.html?http://www.nickjr.com/"
Rootkey : HKEY_CURRENT_USER
Object : Software\Microsoft\Internet Explorer\Main
Value : Start Page
Data : "http://mysearchnow.com/passthrough/index.html?http://www.nickjr.com/"So I am back to where I started.
Subtemperate
Aug 6 2004, 05:42 AM
You should be able to go and change this manually by typing in regedit in the run box.... Just follow th path shown above and change the settings.... Hopefully that will fix the issue if you havent tried this already....
Daughter of the Nine Moons
Aug 6 2004, 10:19 AM
Um ok. What does that mean?
wunarmdscissor
Aug 6 2004, 12:27 PM
U do have the patch for the blaster virus dont you??
Daughter of the Nine Moons
Aug 6 2004, 12:29 PM
I do all my updates regularly. My Norton /virus definitions are showing updated
Dowdy
Aug 6 2004, 12:41 PM
download a program call "Hijack this". Run it and it will show you all the progams that load when you startup, just delete anything you think you dont need. I know it sounds the same and the System configuration utility in window but it's not - Trust me

here is the link
Hijack this!don't worry what the discription says, it's easy to use (but you do need to run the virus and spyware programs, but you've already done that). Anything you remove it backed up anyways. If you're 100% certain you dont need it delete the backup and it will never bother you again
Daughter of the Nine Moons
Aug 6 2004, 12:47 PM
Thanks Dowdy I'll try that when I get home
Daughter of the Nine Moons
Aug 7 2004, 11:47 AM
Dowdy I tried what you said but because I wasn't sure I never took off enough stuff.
Out of desperation I removed the MSN Plus. Everything went back to normal. I later found out that I clicked to accept the sponsor programs. I downloaded MSN Plus again but this time refused the sponsor programs. So the moral to my story is better read what I am clicking on.
Thanks everybody
Dot
Janiel
Aug 7 2004, 01:29 PM
| QUOTE (Daughter of the Nine Moons @ Aug 7 2004, 01:47 AM) |
Dowdy I tried what you said but because I wasn't sure I never took off enough stuff.
Out of desperation I removed the MSN Plus. Everything went back to normal. I later found out that I clicked to accept the sponsor programs. I downloaded MSN Plus again but this time refused the sponsor programs. So the moral to my story is better read what I am clicking on. Thanks everybody
Dot |
well im glad i helped get rid of/ give you the problem
Blood Angel
Aug 7 2004, 08:19 PM
GAH i had the exact same problem! I found the sob and killed it, dot9m if you have anymore trouble gimme a shout i can help ya. Mysearch is a program that was probably installed when you dled a program (usually a freeware), i recieved mine via a freeware dvd player ¬_¬...
Daughter of the Nine Moons
Aug 7 2004, 08:32 PM
| QUOTE (Blood Angel @ Aug 7 2004, 04:19 PM) |
| GAH i had the exact same problem! I found the sob and killed it, dot9m if you have anymore trouble gimme a shout i can help ya. Mysearch is a program that was probably installed when you dled a program (usually a freeware), i recieved mine via a freeware dvd player ¬_¬... |
Thanks BA

Mysearch is as evil as Hot Bar.
Dot
The Raven
Aug 9 2004, 02:10 PM
| QUOTE (Daughter of the Nine Moons @ Aug 5 2004, 08:24 AM) |
Over the weekend I downloaded Mozilla FireFox and MSN Plus. I now keep getting booted off the net on my home computer. When I log back on, my home page is changed to something called "My search" I have now dumped Firefox, thinking that might be the problem. (Probably MSN plus related ) My virus protection/firewall definitions are current. So are my Microsoft updates. I ran a scan and everything checks out. I ran Ad-Aware and it identified a data miner and that there was a "possible browser hijack attempt". I also ran Spybot D & D came up with something that was "Alexa related". I cleaned everything out but I think that I am missing something. Can anybody help?
Thanks
Dot |
My friend has something like this and it won't be destroyed, it's a HUGE pest and he runs 3 spyware programs about once a day. I HOPE you don't have the same thing, cause' I even went in and killed it from the registry, used anti-hijack programs, and it still got through.
I don't know if it will help your case, but search the web for a program called "Hijack This!" it kills spyware and any annoying things you want to get rid of.
EDIT: Sorry, I didn't see Hijack This was already posted.
If you have Spybot Search and Destroy (newest edition) you can use Tea Timer which helps block any changes to your PC at all, it asks if you want to let it change or block it, it works for me!
Daughter of the Nine Moons
Aug 9 2004, 02:18 PM
Thanks Raven, Dowdy recomended
Hijack This too. I just didn't know what to look for when I tried to use it. I don't think that I took off enough stuff.
Actually solving this one was easier than I thought. Once I removed MSN Plus, the problem was gone. I re-installed it but chose the option not to accept the "Sponsor Programs". (Thanks Janiel) No problems since then. Everything is working well now.
Thanks again everybody
Dot
Daughter of the Nine Moons
Aug 9 2004, 02:19 PM
Never heard of Tea Timer
The Raven
Aug 9 2004, 02:35 PM
| QUOTE (Daughter of the Nine Moons @ Aug 9 2004, 10:19 AM) |
| Never heard of Tea Timer |
It's part of spybot search and destroy...Don't look for teatimer thats just the process list name, "Spybot SD Resident"
Heres how to turn it on: (saying that you have the newest version)
-Load Spybot Search and Destroy
-Click on the MODE tab, and select ADVANCED.
-Go to TOOLS
-Go to Resident
-Enable
There are also a lot of other useful things in advanced mode if you want to fool around with stuff.
Daughter of the Nine Moons
Aug 9 2004, 02:42 PM
I currently use Spybot S & D, Lavasofts Ad-Aware, and SpywareBlaster. I've had no problems in months except for that horrid Mysearch.com and that was my own fault.
(btw every thing is current)
AliceCoopersGirl
Aug 10 2004, 09:10 PM
Mine is now preety much sorted ouyt,have the odd pop up and every once in a while the screen freezes.But on the whole it is a lot better.
Daughter of the Nine Moons
Aug 10 2004, 09:31 PM
AliceCoopersGirl do you use anything to block the popups?
AliceCoopersGirl
Aug 11 2004, 03:05 PM
| QUOTE (Daughter of the Nine Moons @ Aug 10 2004, 10:31 PM) |
| AliceCoopersGirl do you use anything to block the popups? |
I have a pop up blocker that is as high as I can get it Dot,all my pop ups are now from Microsoft.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please
click here.