Anyone know what to do....?

Collapse
X
Collapse
 
  • Page of 1
  • Time
  • Show
Clear All
new posts
Previous template Next
  • Hands
    Confirmed User
    • Apr 2004
    • 344
    #1

    Anyone know what to do....?

    My browser has been hijacked, and I have run my spy-bot and I've searched on the net but to no avail. Every time I open my browser it goes to here "res://eokiq.dll/index.html#96676" and I can't get rid of it. It's a nasty one.
    Anyone got any Ideas??
    SIG TOO BIG! Maximum 120x60 button and no more than 3 text lines of DEFAULT SIZE and COLOR. Unless your sig is for a GFY top banner sponsor, you may use a 624x80 instead of a 120x60. Let me repeat... A 120 x 60 button and no more that 3 lines of DEFAULT SIZE AND COLOR text.
    Tags: None
    • fusionx
      Confirmed User
      • Nov 2003
      • 4618
      #2
      That is fucked.. even google doesn't know about the dll file in your post. Must be really new, or, someone is fucking with you

      I'd check the obvious - look at your browser's home page setting and of course change it.

      Search your system for that dll file. If you find it, delete it or rename it. If you can't rename or delete it, boot into safe mode and delete it - it might be loaded and locked.

      Then, check your "hosts" file in c:\windows\system32\drivers\etc and see if there are any bogus entries (for most people the only line you'll see is for 127.0.0.1 localhost). The actual top directory might be windows or winnt, depending on your system.

      If none of those options fix the problem, open up your registry and search for that dll file. Anything you find with that same name, delete.

      Warning: back up your registry first unless you really know what you are doing. Actually, back it up anyway - can't hurt

        Comment

        • Mr. M. Meat
          Registered User
          • Jun 2004
          • 31
          #3
          Hands, that is a variant of the coolwebsearch adware. Do a search for "cwshredder" & "hijackthis". They will help you to remove that. Good luck.
          ICQ: 723-288

            Comment

            • Hands
              Confirmed User
              • Apr 2004
              • 344
              #4
              Well, I tried every fix under the sun & I had to completely strip my system and reload it coz nothing worked.
              So if you get it... Save you rself the headache and go straight to F-disc, LOL!
              SIG TOO BIG! Maximum 120x60 button and no more than 3 text lines of DEFAULT SIZE and COLOR. Unless your sig is for a GFY top banner sponsor, you may use a 624x80 instead of a 120x60. Let me repeat... A 120 x 60 button and no more that 3 lines of DEFAULT SIZE AND COLOR text.

                Comment

                • zzgundamnzz
                  Confirmed User
                  • Apr 2002
                  • 6102
                  #5
                  Originally posted by Hands
                  Well, I tried every fix under the sun & I had to completely strip my system and reload it coz nothing worked.
                  So if you get it... Save you rself the headache and go straight to F-disc, LOL!
                  Why didn't you just Restore from the day that you didn't have it?


                    Comment

                    • bruce_lee
                      Registered User
                      • May 2003
                      • 30
                      #6
                      My browser was hijacked when I click on some sponsors or after some fucking softwares automatic installed. I can't avoid this situation unless I'm offline everyday, so now I put all my important files to D:,E:,F: leaving C: for windows and softwares. I format the c: about once a month, it can help to clean the systems, virus, regain resources.... I was adopted to format c: it become so easy for me to reinstall everything within half an hour.

                        Comment

                        • dominous138
                          Registered User
                          • Jun 2004
                          • 3
                          #7
                          http://www.safer-networking.org/
                          This Store Sucks

                            Comment

                            • MegWhite
                              Confirmed User
                              • Mar 2003
                              • 207
                              #8
                              i don't know if that'll do for you and your trouble but try it

                              "CWShredder - CoolWebSearch browser hijacker removal tool"

                              i had many shits like yours and with this + spybot i could find and erase them
                              SEE MY ARS BYOTS !!!!

                              SEE MY XXX PORTFOLIO

                              ICQ > 321277443

                                Comment

                                • jabula
                                  Confirmed User
                                  • Jan 2003
                                  • 1037
                                  #9
                                  Hijack This will remove it
                                  Need A Great Adult Host?

                                    Comment

                                    • Cman
                                      Confirmed User
                                      • Jun 2004
                                      • 697
                                      #10
                                      I've found Pest Patrol to be a really good anti-spyware program. Especially the corporate version.

                                      I will leave it up to you as to how you want to "obtain" a copy haha
                                      I could put stuff here, but you don't care.

                                        Comment

                                        • Hands
                                          Confirmed User
                                          • Apr 2004
                                          • 344
                                          #11
                                          Originally posted by jabula
                                          Hijack This will remove it
                                          Nope.. That was one of the first things I tried... Slippery little sucker, huh.
                                          SIG TOO BIG! Maximum 120x60 button and no more than 3 text lines of DEFAULT SIZE and COLOR. Unless your sig is for a GFY top banner sponsor, you may use a 624x80 instead of a 120x60. Let me repeat... A 120 x 60 button and no more that 3 lines of DEFAULT SIZE AND COLOR text.

                                            Comment

                                            • Hands
                                              Confirmed User
                                              • Apr 2004
                                              • 344
                                              #12
                                              Originally posted by zzgundamnzz
                                              Why didn't you just Restore from the day that you didn't have it?
                                              Ahhh Interesting question... I tried to do a "System Restore" (Coz I'm on XP) and I was unable to restore my system to dates previous to infection. It's like, the author had blocked the road at every turn, Spybot, Hijack This, PC Cillan, Norton, System restores, deleting from registery, Spy kill, and a whole host of other efforts to fix the problem failed myserably.

                                              I hope noone gets it. But if you see your net home page change to a 'Microsoft Home Search Page', be afraid..... Be very afraid.
                                              It's fixed now but only after wasting alot of time trying to kill it, and then eventually having to Completely wipe my computer and start again. HUGE HASSEL.
                                              SIG TOO BIG! Maximum 120x60 button and no more than 3 text lines of DEFAULT SIZE and COLOR. Unless your sig is for a GFY top banner sponsor, you may use a 624x80 instead of a 120x60. Let me repeat... A 120 x 60 button and no more that 3 lines of DEFAULT SIZE AND COLOR text.

                                                Comment

                                                • Khun
                                                  Confirmed User
                                                  • Jun 2004
                                                  • 1239
                                                  #13
                                                  Well, if have truely trued everything, there is always the good ole wipe and re-image.
                                                  Sig is on vacation... (I wish I could vacation as long as my sig has...)

                                                    Comment

                                                    • wyldblyss
                                                      Confirmed User
                                                      • Nov 2003
                                                      • 5779
                                                      #14
                                                      I basically had the same problem, although it was a different name. I used almost every spyware removal program to no avail. I tried every manual fix I could find...nothing.

                                                      I was just about to friggen reformat....and then I remembered about "Restore". I never tried it before but I thought ..what the hell, it's worth a shot. I restored my system to the the day before it showed up. End result? Gone!

                                                        Comment

                                                        Previous template Next
                                                        Working...