Browser hijacked with no answer ???

  • Thread starter Thread starter mitsu1
  • Start date Start date
M

mitsu1

I am having a most aggrevating time with a browser hijack that keeps
referring to some website called www.loadingwebsite.com . This thing
makes all kinds of ads open up in a new window even when you don't have
a browser open. It comes when it wants to. I've used all the usual ad
aware, and others .. still no luck. I can't find it listed in the
registry. I searched on Google, and only found one mention of it
....someone like me, begging for help. Does anyone have the solution for
this ?
 
Hi

Have you tried using lavasoft Ad-Aware 6 and updating it and running that on
your pc?? That seems to be a really good program to use. Checked for
viruses?? If Lavasoft does not detect anything (which I am sure it will),
try the spybot search and destroy.

Hope that helps things come right!
 
I am having a most aggrevating time with a browser hijack that keeps
referring to some website called xxx.loadingwebsite.com . This thing
makes all kinds of ads open up in a new window even when you don't have
a browser open. It comes when it wants to. I've used all the usual ad
aware, and others .. still no luck. I can't find it listed in the
registry. I searched on Google, and only found one mention of it
...someone like me, begging for help. Does anyone have the solution for
this ?
Click to expand...

The site delivers "transponder" Spyware variant.
SpyBot Search & Destroy scans for and detects these.

Download SpyBot here: http://www.safer-networking.org
*Update immediately* as the application is not updated 'out-of-the-box'.
Delete all found in Red, all else may be safely ignored until you are familiar
with the application.

Please post back your findings to this thread.

Silj

--
siljaline

MS - MVP Windows (IE/OE) & Security (AH-VSOP)
__________________________________________
Security Tools Updates
http://aumha.net/viewforum.php?f=31

(Reply to group, as return address
is invalid - that we may all benefit)
 
Well, I've tried a little bit of everything, and still no luck. I did
download and run Spybot, and it found a lot of stuff, and I had most of
it removed, but there were 5 entries that it could not move. They all
were listed as "Coolwwwsearch.XXXX" There were 5 variants of this, they
were loadbat, Bootconf, Msconfd, Oslogo, Tapicfg, and Xmlmimefilter.
Spybot and destroy could not do anything with them. I still don't know
if they are the culprits for this aggravating ad launch I'm getting.

When this screen pops up, it has in the address bar
"www.loadingwebsite.com/normal/yyy20.html" This pops up whenever you
try to go anywhere, then it starts connecting with somewhere and
transfering data! If you try to close the window by clicking on it's
X, it closes, but pops up another small window that tells you ...
"VBScript: Advertisement Warning, you closing the security wizard
while your computer still has potential security vulnerabilities. (I
should memtion the page that I closed always has some type of scan
service they are trying to sell). Now, this smaller window has only a
Yes and No option,(No "X", and right button clicking doesn't bring up a
close option either) ... and they ask if you want to see a list of
vulnerabilities? I figured clicking either of the buttons would bring
more crap on you, so I've been bringing up Tasak Manager, and closing
it there, however whenever this is done .. it wipes all your icons and
task bar off your desktop, .. kinda like when you close explorer.exe
from the task Manager. Can't do anything but force a reboot at this
point, then it all starts over again, the first time you open your
browser.

I should also note that when ever I close the popup, my Panda Antivirus
pops up a notice that it just neutralized a spyware called
Adware.PurityScan. I have looked this up on Google and downloaded and
run a removal tool, .. not sureif it worked, cause I still get the same
crap, but Panda now says it nuetralized Adware.look2me spyware. It also
refers to "NicTechNetworks" from time to time.

I even tried deleting iexplore.exe so Internet Explorer couldn't start,
and made Firefox the default broweser, but it didn't matter, it popped
up there too. So, I installed XP SP2 over my SP1 hoping that would plug
some holes and help somehow, but that brought internet Explorer back,
but it was no difference since it pops up on all browsers. .... So,
does anyone have any idea how to rid this mess? I've spent all day on
this.
 
Well, I've tried a little bit of everything, and still no luck. I did
download and run Spybot, and it found a lot of stuff, and I had most
of it removed, but there were 5 entries that it could not move. They
all were listed as "Coolwwwsearch.XXXX" There were 5 variants of
this, they were loadbat, Bootconf, Msconfd, Oslogo, Tapicfg, and
Xmlmimefilter. Spybot and destroy could not do anything with them. I
still don't know if they are the culprits for this aggravating ad
launch I'm getting.

When this screen pops up, it has in the address bar
"www.loadingwebsite.com/normal/yyy20.html" This pops up whenever you
try to go anywhere, then it starts connecting with somewhere and
transfering data! If you try to close the window by clicking on it's
X, it closes, but pops up another small window that tells you ...
"VBScript: Advertisement Warning, you closing the security wizard
while your computer still has potential security vulnerabilities. (I
should memtion the page that I closed always has some type of scan
service they are trying to sell). Now, this smaller window has only a
Yes and No option,(No "X", and right button clicking doesn't bring up
a close option either) ... and they ask if you want to see a list of
vulnerabilities? I figured clicking either of the buttons would bring
more crap on you, so I've been bringing up Tasak Manager, and closing
it there, however whenever this is done .. it wipes all your icons and
task bar off your desktop, .. kinda like when you close explorer.exe
from the task Manager. Can't do anything but force a reboot at this
point, then it all starts over again, the first time you open your
browser.

I should also note that when ever I close the popup, my Panda
Antivirus pops up a notice that it just neutralized a spyware called
Adware.PurityScan. I have looked this up on Google and downloaded and
run a removal tool, .. not sureif it worked, cause I still get the
same crap, but Panda now says it nuetralized Adware.look2me spyware.
It also refers to "NicTechNetworks" from time to time.

I even tried deleting iexplore.exe so Internet Explorer couldn't
start, and made Firefox the default broweser, but it didn't matter,
it popped up there too. So, I installed XP SP2 over my SP1 hoping
that would plug some holes and help somehow, but that brought
internet Explorer back, but it was no difference since it pops up on
all browsers. .... So, does anyone have any idea how to rid this
mess? I've spent all day on this.
Click to expand...

Try running CWShredder (newest version) from
http://www.intermute.com/products/cwshredder.html
after booting to Safe Mode.

First, get LSP-Fix - a free program to repair damaged Winsock 2 stacks
http://www.cexx.org/lspfix.htm
save it because you might need to repair the Winsock 2 stacks after removing
the culprit.

Or run MSAS beta twice while in Safe Mode:
http://www.microsoft.com/athome/security/spyware/default.mspx
System requirements:
http://www.microsoft.com/athome/security/spyware/software/requirements.mspx

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup only. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com./athome/security/protect/default.aspx
http://defendingyourmachine.blogspot.com/
 
Back
Top