Forum Home
Press F1
 
Thread ID: 38583 2003-10-11 22:46:00 Hijacked Homepage fat_jack (4717) Press F1
Post ID Timestamp Content User
182417 2003-10-11 22:46:00 Hi there,
Is there anyone out there who can help me with a problem. About 2 days ago, my homepage on IE just suddenly switched to a porn site. It starts out as http://www.searchv.com and then changes to 05p or something .com and brings up pictures and free pornographic sites to visit. Is there any thing that can be done as i have run Ad-Aware and Spybot S&D and it is still there
Many thanks
Nick
tovarischt@yahoo.com
fat_jack (4717)
182418 2003-10-11 23:00:00 Hello fat_jack Welcome To Press F1 :)

> Hi there,
> Is there anyone out there who can help me with a
> problem. About 2 days ago, my homepage on IE just
> suddenly switched to a porn site. It starts out as
> http://www.searchv.com and then changes to 05p or
> something .com and brings up pictures and free
> pornographic sites to visit. Is there any thing that
> can be done as i have run Ad-Aware and Spybot S&D and
> it is still there

Have you updated Ad-Aware and Spybot S&D ???

Also it is not wise to post your e-mail address on a forum, because they is a good change that you will get spam!
stu140103 (137)
182419 2003-10-11 23:46:00 Thanks for the advice
Yes i have updated them both. Still nothing.
fat_jack (4717)
182420 2003-10-12 00:37:00 Stu. it is not necessary to copy and past every time you reply, we are quite capable of reading the original.

It is getting quite annoying.
Jim B (153)
182421 2003-10-12 00:52:00 > Stu. it is not necessary to copy and past every time
> you reply, we are quite capable of reading the
> original.
>
> It is getting quite annoying.

sorry :8}, but I was in a rush.....
stu140103 (137)
182422 2003-10-12 01:09:00 Hi again,
I ran an online spyware checker and it gave me this mesage:
"Warning!
Your browser appears to have the "Winshow" parasite installed . This software can present you with unwanted advertising and compromise your computer's security . It might have been installed without your knowledge . "

I clicked the link for removal and it said:

"Removal
No uninstall feature has been seen .

Manual removal
Open a DOS command prompt window (from Start->Programs->Accessories), and enter the following commands:

cd "%WinDir%\System"
regsvr32 /u " . . \winshow . dll"
Restart the computer and you should be able to delete the files winshow . dll, winshow . cfg and dict . dat from the Windows folder . "

Is this a safe thing thing to do or am i delving to far . I dont know much about computers apart from the basics and am not sure if i should do this . Are there any other sites you know of where i can double check this?

Regards and thanks again,
Nick
fat_jack (4717)
182423 2003-10-12 02:00:00 Just get the program called hijackthis,google will find it for you.

run it and delete any entry with winshow listed in it.

It will also show up the searchrv or whatever it is and u can get rid of it thru the same process.
metla (154)
182424 2003-10-12 02:54:00 Hijackthis shows heaps of entries. DONT delete willy-nilly as it will include valid entries. Tick the boxes of ONLY those that mention the winshow. Pheonix (280)
182425 2003-10-12 03:39:00 Hi
i downloaded and used hijackthis, it worked fine, so i restarted and hey presto i get teen porn and other such "niceties" as my start page. So i have come to the conclusion that the problem may now be khooker, as in the info section on hijackthis, it says that the khooker can be used to reset hackers/hijackers pages on the IE start page.
So my question is, does anyone know wtf khooker is? I am loathe to just delete it as part of its name is SiS and my PCI Graphics Card is an SiS 315_315E and it might be part of that.
Once again, thanks for your very much appreciated assistance
fat_jack
fat_jack (4717)
182426 2003-10-12 03:40:00 Sorry... didnt read any of the posts but here goes...

Have a look at "Zero Popup" ...
Its a nice pop up stoper that stops all the web nasties...
and also locks your home page so it cant be changed by any of these little nastie programs....

Zero Popup...

later
00falcon (3801)
1 2 3