Forum Home
Press F1
 
Thread ID: 56202 2005-03-30 01:22:00 IE 6 and Hijacking Obelix (752) Press F1
Post ID Timestamp Content User
339594 2005-03-30 01:22:00 Heya all,

Came back to work this morning to find the boss's PC had been hijacked.

I have ran adaware and Spybot and believe that I have successfully removed all f*%#ing problems.

The only problem I now have is that I cannot access any site on the web.

Connection : Jetstream
Browser : IE 6 and Firefox 1.0.2

All other computers on the network can access the net.

Anyone got any bright/intelligent/semi-intelligent/dumb suggestions to make as to what to look at next.......
Obelix (752)
339595 2005-03-30 01:25:00 download and run the winsock2 fix.

Presuming its an xp machine.
Metla (12)
339596 2005-03-30 01:32:00 Sounds like something mucked up your hosts file.

You can either get the winsock fix, or get hijackthis and post a log of whats in it here.
Speedy Gonzales (78)
339597 2005-03-30 01:40:00 download and run the winsock2 fix.

Presuming its an xp machine.

Download here
www.spychecker.com

You could also check in Add/Remove programs and remove new.net if it is listed there.
Reboot and check if web sites load.
Safari (3993)
339598 2005-03-30 02:08:00 While we are on the subject, does anyone know the origin of new.net?

As I mentioned earlier in the last month or so it’s been on nearly every unit that has come in for service....
Metla (12)
339599 2005-03-30 02:15:00 new.net ? (http://www.new.net/)

"174,661,619 New.net enabled Internet users worldwide*"

"New.net Plug-in

Software that installs on computers running (1) a Windows operatingsystems versions 98, 2000, or XP (or higher) and (2) a Netscape Navigator/Communicator or Internet Explorer v4.5 or higher Internet browser. The software is designed to enable an Internet user using the computer to resolve a New.net domain."

i.e. spyware on them
KiwiTT_NZ (233)
339600 2005-03-30 02:17:00 well yes, I was really asking about the delivery method, How it infected machines. Metla (12)
339601 2005-03-30 02:20:00 Dont know the origins of it, but by the looks of it it was downloadable from

www.download.com

According to this site, it was a way to access websites with new domain name extensions. Which in fact it created havoc.

And here's some more info about it www.cexx.org
Speedy Gonzales (78)
339602 2005-03-30 02:20:00 edited my response KiwiTT_NZ (233)
339603 2005-03-30 02:22:00 While we are on the subject, does anyone know the origin of new.net?

As I mentioned earlier in the last month or so it’s been on nearly every unit that has come in for service....

Some info here
www.cexx.org
Safari (3993)
1 2