Have I been hijacked

[Heather Lee]

Using Windows XP Home and IE 6.00 SP1
I suddenly discovered that every time I try to open a non existing web-page
(or temporarily out of serivce web-page) Explorer immediatly goes to
WWW.MARSFIND.COMX (I put the xtra x after .com so nobody will accidently
access this page It did not use to do this before. Have I been hijacked
by one of those java applet viruses similar to global-finder/Bootconf etc.?

If so where in the registry do I remove this string to get back to my old
settings?
Do you think it has modified other things on my computer?

I do not know when this happened (maybe a month ago) so restoring to an
older registry may not be the solution!?
Is it possible to set WinXP to a month old registry? How? Maybe it causes
more problems than it solves?

Thanks H

 

[wsb1234null]

Using Windows XP Home and IE 6.00 SP1
I suddenly discovered that every time I try to open a non existing web-page
(or temporarily out of serivce web-page) Explorer immediatly goes to
WWW.MARSFIND.COMX (I put the xtra x after .com so nobody will accidently
access this page It did not use to do this before. Have I been hijacked
by one of those java applet viruses similar to global-finder/Bootconf etc.?

If so where in the registry do I remove this string to get back to my old
settings?
Do you think it has modified other things on my computer?

I do not know when this happened (maybe a month ago) so restoring to an
older registry may not be the solution!?
Is it possible to set WinXP to a month old registry? How? Maybe it causes
more problems than it solves?

Thanks H

Go to download.com and get a program called "Hijack This".

 

[Gabriele Neukam]

On that special day, (e-mail address removed), ([email protected])
said...

Go to download.com and get a program called "Hijack This".

Better look for the most actualized version at tomcoyote.org. It is the
home of Hijack This!

http://www.tomcoyote.org/hjt/


Gabriele Neukam

(e-mail address removed)

 

[Heather Lee]

I tried to run Hijack-This downloaded from ( http://www.tomcoyote.org/hjt/ )
but all I get is a message that says,
"Can't find the necessary DLL file MSVBVM60.DLL" !

Is this file a legitimate part of Windows 98 or is this a sign that I really
have been hijacked?

If MSVBVM60.DLL is a legitimate windows file how do I reinstall it?
Do I need to reinstall the entire Win98?
Any help is appreciated
Thanks H

 

[Bart Bailey]

In Message-ID:<[email protected]> posted on Tue, 18

I tried to run Hijack-This downloaded from ( http://www.tomcoyote.org/hjt/ )
but all I get is a message that says,
"Can't find the necessary DLL file MSVBVM60.DLL" !

Is this file a legitimate part of Windows 98 or is this a sign that I really
have been hijacked?

If MSVBVM60.DLL is a legitimate windows file how do I reinstall it?
Do I need to reinstall the entire Win98?
Any help is appreciated
Thanks H

Yes it's a legit runtime file, and one that is used by many
applications, so it's a little surprising you don't have it.
In any case it's here:
http://w1.401.telia.com/~u40118856/msvbvm60.zip
Unzip and put it in your system folder.