my home page on IE is jacked - GoFuckYourself.com

chowda · 06-16-2004, 11:11 PM

dont know how to get ride of it

always sends me to http://easy-search.biz/

change the internet options and it goes back. what to do?

fr8 · 06-16-2004, 11:12 PM

I had to deal with this on a couple of machines at work. One NT machine and another 2000 machine. Its called the CWSHijack. Ill dig up the remove info for it.

sid275 · 06-16-2004, 11:14 PM

wow ! how do the do that ?

VIPimp · 06-16-2004, 11:14 PM

SpyBot should get rid of it.

fr8 · 06-16-2004, 11:14 PM

Damn wasnt fast enough on the edit feature.

here is the site.
http://www.spywareinfo.com/articles/cws/

and a direct link to the shredder.
http://www.spywareinfo.com/~merijn/files/cwshredder.zip

chowda · 06-16-2004, 11:26 PM

thanks, i got rid of it

this is what i get for surfing tgps.

SleazeQueen · 06-17-2004, 12:53 AM

I got hit with the same thing this weekend. Cleaned it up with that shredder program, but one thing remains. They changed my wallpaper to an ad for some Evidence Eliminator program. It's a html file. I found it, deleted it and the images it called. Now I just have a white/gray flashing screen over my usual wallpaper picture.

Can't figure out where it's at so I can change it!

marttali · 06-17-2004, 01:45 AM

A friendly suggestion - use firefox/ bird instead or better yet - opera. No more spyware, malware, viruses etc. Plus those browsers are faster than ie and they are highly customizable. What else could a webmaster want ?

pornstar2pac · 06-17-2004, 02:25 AM

Bill Gates is up to all this. he wants us crying and begging to MS to save us fromthis world of spyware...

cluck · 06-17-2004, 02:28 AM

Quote:

Originally posted by SleazeQueen
I got hit with the same thing this weekend. Cleaned it up with that shredder program, but one thing remains. They changed my wallpaper to an ad for some Evidence Eliminator program. It's a html file. I found it, deleted it and the images it called. Now I just have a white/gray flashing screen over my usual wallpaper picture.

Can't figure out where it's at so I can change it!

You have to disable the active desktop, but it has to be done via the registry. That's the spyware porngraph uses. Annoying as shit, I know.

HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer

Add a DWORD value called NoActiveDesktop and set the data to 1.

Restart, you're set.

Peacemaker · 06-17-2004, 02:34 AM

internet explorer is such a open hole.. while i was checking gal submissions my IE was hijacked.. i installed alot of "anti spyware etc" software but they could remove it. the hijacker programm did not only set my default homepage to a local (on my hd) file (.dll) but also overwrite the IE .exe stored at my hd. i have seen alot of hijackers but this one was the most agressive.. no chance to remove it, as there was no programm out there able to do it.

evl4fun · 06-17-2004, 02:35 AM

use system restore set it back a day

Peacemaker · 06-17-2004, 02:38 AM

didnt work..
because that hijacker patched some .dll and .exe that windows loads up while starting.

ListYourPorn · 06-17-2004, 02:38 AM

This has been a pest to me all week. I in the end formated both my machines I got them up and was almost ready to pick up from where I left off and bang I got it again - I realy pissed

evl4fun · 06-17-2004, 02:40 AM

Quote:

Originally posted by Peacemaker
didnt work..
because that hijacker patched some .dll and .exe that windows loads up while starting.

start in safe mode...go into your host file and reset it

Scootermuze · 06-17-2004, 04:27 AM

Spy Sweeper Is a decent spyware removal program that records your home page.. and if it gets changed, S.S. will let you know and change it back.

Hank_Heartland · 06-17-2004, 06:20 AM

Quote:

Originally posted by Scootermuze
Spy Sweeper Is a decent spyware removal program that records your home page.. and if it gets changed, S.S. will let you know and change it back.

Who are the ISEARCH motherfuckers anyway...I could kill those bastards

Ian · 06-17-2004, 06:45 AM

I had to go to the Hun to get rid of a particular group of annoying assholes:

http://www.thehun.net/gazette/

http://www.spywareinfo.com/~merijn/downloads.html

Cool-search.net was hard to get rid of.

ATL_Ryan · 06-17-2004, 07:08 AM

Why don't you just click the contact link at the bottom of the page. It has a remove link.

http://easy-search.biz/contact.html

Most all of these types of pages have a remove link. Always check at the bottom of page for a contact or remove link.

Pretty simple huh?

nojob · 06-17-2004, 07:11 AM

the restore is you best option then installing a good spy ware removal program

chowda · 06-17-2004, 07:33 AM

fuck this thing keeps writing to my registry and adding in their fucking url

ATL_Ryan · 06-17-2004, 07:35 AM

Quote:

Originally posted by chowda
fuck this thing keeps writing to my registry and adding in their fucking url

Is everyone missing this?

Why don't you just click the contact link at the bottom of the page. It has a remove link.

http://easy-search.biz/contact.html

Most all of these types of pages have a remove link. Always check at the bottom of page for a contact or remove link.

Pretty simple huh?

chowda · 06-17-2004, 07:45 AM

Quote:

Originally posted by CJ_Ryan
Is everyone missing this?

Why don't you just click the contact link at the bottom of the page. It has a remove link.

http://easy-search.biz/contact.html

Most all of these types of pages have a remove link. Always check at the bottom of page for a contact or remove link.

Pretty simple huh?

yeah i just did it.
just that they fucked up my computer.. its kinda hard to trust it.
but it worked.

ATL_Ryan · 06-17-2004, 07:51 AM

Quote:

Originally posted by chowda
yeah i just did it.
just that they fucked up my computer.. its kinda hard to trust it.
but it worked.

This same thing has happened to me 4 or 5 times. After trying everything for days I finally started looking around on the page and found a remove link. I've never run into a browser hi-jack search page that didn't have a remove link. They are hard to find but they are there. No one ever looks for these things. They always start with the spyware/adware stuff and reinstalling browsers. I'm sure people have reformatted their comps because of this when the solution is provided and right in front of them.

MiSsBeHeaDReSs · 06-17-2004, 07:52 AM

Here's a tip, don't use IE, use Mozilla!

ATL_Ryan · 06-17-2004, 07:52 AM

Quote:

Originally posted by ListYourPorn
This has been a pest to me all week. I in the end formated both my machines I got them up and was almost ready to pick up from where I left off and bang I got it again - I realy pissed

It takes 30 seconds to fix.

SleazeQueen · 06-17-2004, 09:03 AM

Quote:

Originally posted by cluck
Add a DWORD value called NoActiveDesktop and set the data to 1.

That fixed it. Thanks!

06-16-2004, 11:11 PM	#1
chowda Confirmed User Join Date: Jun 2003 Location: Gooch city Posts: 9,527	my home page on IE is jacked dont know how to get ride of it always sends me to http://easy-search.biz/ change the internet options and it goes back. what to do? __________________ Someone finds you... 2007 PS: Nationalnet is the best host I've ever had. And i tried alot of them.

06-16-2004, 11:26 PM	#6
chowda Confirmed User Join Date: Jun 2003 Location: Gooch city Posts: 9,527	thanks, i got rid of it this is what i get for surfing tgps. __________________ Someone finds you... 2007 PS: Nationalnet is the best host I've ever had. And i tried alot of them.

06-17-2004, 12:53 AM	#7
SleazeQueen Confirmed User Join Date: Jun 2002 Location: Western WA Posts: 634	I got hit with the same thing this weekend. Cleaned it up with that shredder program, but one thing remains. They changed my wallpaper to an ad for some Evidence Eliminator program. It's a html file. I found it, deleted it and the images it called. Now I just have a white/gray flashing screen over my usual wallpaper picture. Can't figure out where it's at so I can change it! __________________ Bush can no more fire Rove than Charlie McCarthy could fire Edgar Bergen.

06-17-2004, 02:25 AM	#9
pornstar2pac Omaha Hi/Lo Join Date: Nov 2003 Posts: 17,380	Bill Gates is up to all this. he wants us crying and begging to MS to save us fromthis world of spyware... __________________ Trump haters gonna hate. that's all they can do

06-17-2004, 02:34 AM	#11
Peacemaker Confirmed User Join Date: Feb 2002 Location: Mars Posts: 897	internet explorer is such a open hole.. while i was checking gal submissions my IE was hijacked.. i installed alot of "anti spyware etc" software but they could remove it. the hijacker programm did not only set my default homepage to a local (on my hd) file (.dll) but also overwrite the IE .exe stored at my hd. i have seen alot of hijackers but this one was the most agressive.. no chance to remove it, as there was no programm out there able to do it. __________________ SEO since 2002 - Google Index Record: 32 minutes. - Selling SEO services and tools

06-16-2004, 11:12 PM	#2
fr8 Confirmed User Industry Role: Join Date: Mar 2003 Posts: 5,074	I had to deal with this on a couple of machines at work. One NT machine and another 2000 machine. Its called the CWSHijack. Ill dig up the remove info for it.

06-16-2004, 11:14 PM	#3
sid275 So Fucking Banned Join Date: May 2004 Posts: 396	wow ! how do the do that ?

06-16-2004, 11:14 PM	#4
VIPimp Marina WILL have my babies! Industry Role: Join Date: May 2003 Posts: 9,234	SpyBot should get rid of it.

06-17-2004, 01:45 AM	#8
marttali Confirmed User Join Date: May 2003 Posts: 265	A friendly suggestion - use firefox/ bird instead or better yet - opera. No more spyware, malware, viruses etc. Plus those browsers are faster than ie and they are highly customizable. What else could a webmaster want ?

06-17-2004, 02:35 AM	#12
evl4fun Confirmed User Join Date: Jul 2003 Location: hell,uhhh errr nebraska Posts: 372	use system restore set it back a day __________________ If you spend all day worrying about what happened yesterday.....then tommorow will suck too.

06-17-2004, 02:38 AM	#13
Peacemaker Confirmed User Join Date: Feb 2002 Location: Mars Posts: 897	didnt work.. because that hijacker patched some .dll and .exe that windows loads up while starting. __________________ SEO since 2002 - Google Index Record: 32 minutes. - Selling SEO services and tools

06-17-2004, 02:38 AM	#14
ListYourPorn Confirmed User Join Date: Jan 2004 Posts: 791	This has been a pest to me all week. I in the end formated both my machines I got them up and was almost ready to pick up from where I left off and bang I got it again - I realy pissed __________________ Sex Add your sites Click Here

06-17-2004, 04:27 AM	#16
Scootermuze Confirmed User Join Date: Dec 2001 Posts: 4,513	Spy Sweeper Is a decent spyware removal program that records your home page.. and if it gets changed, S.S. will let you know and change it back.

06-17-2004, 06:45 AM	#18
Ian Confirmed User Join Date: Oct 2002 Posts: 1,259	I had to go to the Hun to get rid of a particular group of annoying assholes: http://www.thehun.net/gazette/ http://www.spywareinfo.com/~merijn/downloads.html Cool-search.net was hard to get rid of.

06-17-2004, 07:08 AM	#19
ATL_Ryan Confirmed User Join Date: Sep 2002 Posts: 1,519	Why don't you just click the contact link at the bottom of the page. It has a remove link. http://easy-search.biz/contact.html Most all of these types of pages have a remove link. Always check at the bottom of page for a contact or remove link. Pretty simple huh?

06-17-2004, 07:11 AM	#20
nojob The Original NoJob Join Date: Feb 2004 Location: Jerzzey Posts: 3,682	the restore is you best option then installing a good spy ware removal program

06-17-2004, 07:33 AM	#21
chowda Confirmed User Join Date: Jun 2003 Location: Gooch city Posts: 9,527	fuck this thing keeps writing to my registry and adding in their fucking url __________________ Someone finds you... 2007 PS: Nationalnet is the best host I've ever had. And i tried alot of them.

06-17-2004, 07:52 AM	#25
MiSsBeHeaDReSs Confirmed User Join Date: May 2004 Location: I'm the girl next door ;) ICQ~ 338579597 Posts: 534	Here's a tip, don't use IE, use Mozilla! __________________ Why geeks like computers: unzip, strip, touch, finger, grep, mount, fsck, ram, more, yes,fsck,fsck,fsck,umount, sleep.