I picked up a rather nasty Hijack yesterday, that coughed up the whole
start.chm mis-direct. After the normal attacks on it, I got Spybpt S&D, an had
it help finish the job. Now, however, if I don't type the "http://" before the
"www", I get "Cannot find <site-url>. Make sure the path or Internet address
is correct".

When I first noticed this, the hijack was in place and I was looking up
www.google.com, so I don't think it was Spybot S&D. I assumed it was the damn
hijack's way of preventing me from finding a fix for it.

However, ALL sites are acting this way, even though I am (pretty) sure the
hijack is gone. I have installed SP2, looked for new IE updates (I am current)
and dropped security settings low. Still no luck.

I know it is a trivial thing, and I will spend more time and effort to find the
solution than I will by typing "http:" for the next year or so. However, I'd
like to fix it so I don't worry something is still lurking out there, or have
whatever it did cause more problems.


Any ideas?

Think I fixed it-- the COCKSUCKING BASTARDS at:

http://www.heretofind.com/show.php?id=14&q=

Had hijacked me....

You know, to those of you who write this kind of crap, I strongly suggest you
never, ever, tell people what you do for a living. I know that if I ever meet
one of you at a party who are drunk enough to talk about your work, I am going
pick up the nearest lamp and rearrange your face over and over.

It will be worth a few days in jail.

I'm having the same problem. I just picked up my
computer from the shop, where everything was wiped clean
and reinstalled. I have to enter http:// in the address
bar to get it to work. Can you help?


>-----Original Message-----
>Think I fixed it-- the COCKSUCKING BASTARDS at:
>
>http://www.heretofind.com/show.php?id=14&q=
>
>Had hijacked me....
>
>You know, to those of you who write this kind of crap, I
strongly suggest you
>never, ever, tell people what you do for a living. I
know that if I ever meet
>one of you at a party who are drunk enough to talk about
your work, I am going
>pick up the nearest lamp and rearrange your face over
and over.
>
>It will be worth a few days in jail.
>
>
>.
>

On Sat, 21 Aug 2004 04:08:30 -0700, "David Surles"
<(E-Mail Removed)> wrote:

>I'm having the same problem. I just picked up my
>computer from the shop, where everything was wiped clean
>and reinstalled. I have to enter http:// in the address
>bar to get it to work. Can you help?
>

Well, to find the fix, I pulled a full years worth of messages from this group,
and found this one:


On Wed, 27 Aug 2003 06:36:49 -0400, "Mike Burgess" <(E-Mail Removed)>
wrote:

>comerhop,
>Some program (usually spyware\parasite) may have overridden the URL prefix
>setting?
>Open Regedit to the following locations and verify the below default
>entries:
>Start | Run (type) "regedit" (no quotes)
>
>[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\DefaultPre
>fix]
>@="http://"
>
>[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\Prefixes]
>"ftp"="ftp://"
>"gopher"="gopher://"
>"home"="http://"
>"mosaic"="http://"
>"www"="http://"
>
>[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
>"{CFBFAE00-17A6-11D0-99CB-00C04FD64497}"=""
>
>Note: edit as needed, *always* Export before editing.
>_______________________________________
>Mike Burgess http://www.mvps.org/winhelp2002/
>Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
>http://www.mvps.org/winhelp2002/hosts.htm [updated 8-26-03]
>Please post replies to this Newsgroup, email address is invalid


In effect, MY registry entries looked like this:


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\DefaultPrefix]
@="http://"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\Prefixes]
"ftp"="ftp://"
"gopher"="http://www.heretofind.com/show.php?id=14&q="
"home"="http://www.heretofind.com/show.php?id=14&q="
"mosaic"="http://www.heretofind.com/show.php?id=14&q="
"www"="http://www.heretofind.com/show.php?id=14&q="

with the address for the start.chm file on my HD appended. The end result was
if I typed "www" got their ****ing spam page. When I deleted the spam page off
my HD and blocked out their internet address as an option, since the page
could not be found, it errored out. If I typed the http://, however, it skipped
the virtual mis-direct and gave me the right page.

As Burgess pointed out, always back up the registry before mucking with it.
(Ask me about the time I disabled .exe and .com extensions from running one
time.... *shudder*)

Let me know if this works



>
>>-----Original Message-----
>>Think I fixed it-- the COCKSUCKING BASTARDS at:
>>
>>http://www.heretofind.com/show.php?id=14&q=
>>
>>Had hijacked me....
>>
>>You know, to those of you who write this kind of crap, I
>strongly suggest you
>>never, ever, tell people what you do for a living. I
>know that if I ever meet
>>one of you at a party who are drunk enough to talk about
>your work, I am going
>>pick up the nearest lamp and rearrange your face over
>and over.
>>
>>It will be worth a few days in jail.
>>
>>
>>.
>>

There is a fix on this page scroll down to Various Registry Fixes

http://mvps.org/winhelp2002/unwanted.htm



"David Surles" <(E-Mail Removed)> wrote in message
news:a82701c4876f$30d19e20$(E-Mail Removed)...
> I'm having the same problem. I just picked up my
> computer from the shop, where everything was wiped clean
> and reinstalled. I have to enter http:// in the address
> bar to get it to work. Can you help?
>
>
> >-----Original Message-----
> >Think I fixed it-- the COCKSUCKING BASTARDS at:
> >
> >http://www.heretofind.com/show.php?id=14&q=
> >
> >Had hijacked me....
> >
> >You know, to those of you who write this kind of crap, I
> strongly suggest you
> >never, ever, tell people what you do for a living. I
> know that if I ever meet
> >one of you at a party who are drunk enough to talk about
> your work, I am going
> >pick up the nearest lamp and rearrange your face over
> and over.
> >
> >It will be worth a few days in jail.
> >
> >
> >.
> >

how did you fix your problem? I have run Norton, adaware, and spybot,
yet none of those fix it - damn page keeps coming back.

thanks,
hillyo

NoSpamAllowed <NoSpamAllowed> wrote in message news:<(E-Mail Removed)>...
> Think I fixed it-- the COCKSUCKING BASTARDS at:
>
> http://www.heretofind.com/show.php?id=14&q=
>
> Had hijacked me....
>
> You know, to those of you who write this kind of crap, I strongly suggest you
> never, ever, tell people what you do for a living. I know that if I ever meet
> one of you at a party who are drunk enough to talk about your work, I am going
> pick up the nearest lamp and rearrange your face over and over.
>
> It will be worth a few days in jail.

Wow! It worked. Thank you.


>-----Original Message-----
>There is a fix on this page scroll down to Various
Registry Fixes
>
>http://mvps.org/winhelp2002/unwanted.htm
>
>
>
>"David Surles" <(E-Mail Removed)>
wrote in message
>news:a82701c4876f$30d19e20$(E-Mail Removed)...
>> I'm having the same problem. I just picked up my
>> computer from the shop, where everything was wiped
clean
>> and reinstalled. I have to enter http:// in the
address
>> bar to get it to work. Can you help?
>>
>>
>> >-----Original Message-----
>> >Think I fixed it-- the COCKSUCKING BASTARDS at:
>> >
>> >http://www.heretofind.com/show.php?id=14&q=
>> >
>> >Had hijacked me....
>> >
>> >You know, to those of you who write this kind of
crap, I
>> strongly suggest you
>> >never, ever, tell people what you do for a living. I
>> know that if I ever meet
>> >one of you at a party who are drunk enough to talk
about
>> your work, I am going
>> >pick up the nearest lamp and rearrange your face over
>> and over.
>> >
>> >It will be worth a few days in jail.
>> >
>> >
>> >.
>> >
>
>
>.
>