Cannot search and cannot download

  • Thread starter Thread starter Trip
  • Start date Start date
T

Trip

About 2 days ago, I was surfing the web, when I clicked a
link and several popups appeared. Norton antivirus (2004
professional) then displayed that a high risk trojan had
been found somewhere in "C:/Documents and Settings" but
that it couldn't be deleted.

The next day, my browsers search function has been
hijacked, redirecting every address
to "http://nkvd.us/1507/". Which is a somewhat useless
search engine.
I went to regedit and searched for "1507" and several
things came up. The trojan had rewritten a lot of the
homepage and search strings to this site. I have since
tried to delete them.
After deleting them, I now have the ability to view web
pages and the default search engine has returned.

But, every so often, on a 404 error and with some other
web pages (I think its random), the browser redirects to
this "http://nkvd.us/1507/".
Also, if I follow any download link, to download .exe's
and such, the browser keeps being redirected to this
other site.

I've tried to follow some of the tips in the other
threads with similar problems, but most involve
downloadibng a spyware detection programme. However, I
cannot download the programme as my browser keeps being
redirected.
Is there anything I could do to stop this?
 
Just to update, I got a friend to download Spybot S&D and
Ad-aware 6 for me. I ran them both, they both detected
something initially, but I told it to delete the files. I
rebooted and ran both of them again and they came up
clear.

I reconnected and typed a few page, but the pages still
keep being redirected! Including any downloads I want.

In particular, I keep finding "mswhirl.dll" in the
registry along with "http://nkvd.us/1507" in other parts,
even though I keep deleting them.
They were both in a folder called "ACMRU". I don't know
if that helps to narrow down the problem?
 
Download SpyBot-Search & Destroy update first!
Download Ad-aware update first
Download CWShredder
Download center http://www.majorgeeks.com/downloads31.html

----- Trip wrote: -----

About 2 days ago, I was surfing the web, when I clicked a
link and several popups appeared. Norton antivirus (2004
professional) then displayed that a high risk trojan had
been found somewhere in "C:/Documents and Settings" but
that it couldn't be deleted.

The next day, my browsers search function has been
hijacked, redirecting every address
to "http://nkvd.us/1507/". Which is a somewhat useless
search engine.
I went to regedit and searched for "1507" and several
things came up. The trojan had rewritten a lot of the
homepage and search strings to this site. I have since
tried to delete them.
After deleting them, I now have the ability to view web
pages and the default search engine has returned.

But, every so often, on a 404 error and with some other
web pages (I think its random), the browser redirects to
this "http://nkvd.us/1507/".
Also, if I follow any download link, to download .exe's
and such, the browser keeps being redirected to this
other site.

I've tried to follow some of the tips in the other
threads with similar problems, but most involve
downloadibng a spyware detection programme. However, I
cannot download the programme as my browser keeps being
redirected.
Is there anything I could do to stop this?
 
http://www.best-search.info/1507/uninstall.ht

----- Trip wrote: ----

Just to update, I got a friend to download Spybot S&D and
Ad-aware 6 for me. I ran them both, they both detected
something initially, but I told it to delete the files. I
rebooted and ran both of them again and they came up
clear

I reconnected and typed a few page, but the pages still
keep being redirected! Including any downloads I want

In particular, I keep finding "mswhirl.dll" in the
registry along with "http://nkvd.us/1507" in other parts,
even though I keep deleting them
They were both in a folder called "ACMRU". I don't know
if that helps to narrow down the problem
 
Arnold said:
*Download SpyBot-Search & Destroy update first!
Download Ad-aware update first
Download CWShredder
Download center http://www.majorgeeks.com/downloads31.html

----- Trip wrote: -----

About 2 days ago, I was surfing the web, when I clicked a
link and several popups appeared. Norton antivirus (2004
professional) then displayed that a high risk trojan had
been found somewhere in "C:/Documents and Settings" but
that it couldn't be deleted.

The next day, my browsers search function has been
hijacked, redirecting every address
to "http://nkvd.us/1507/". Which is a somewhat useless
search engine.
I went to regedit and searched for "1507" and several
things came up. The trojan had rewritten a lot of the
homepage and search strings to this site. I have since
tried to delete them.
After deleting them, I now have the ability to view web
pages and the default search engine has returned.

But, every so often, on a 404 error and with some other
web pages (I think its random), the browser redirects to
this "http://nkvd.us/1507/".
Also, if I follow any download link, to download .exe's
and such, the browser keeps being redirected to this
other site.

I've tried to follow some of the tips in the other
threads with similar problems, but most involve
downloadibng a spyware detection programme. However, I
cannot download the programme as my browser keeps being
redirected.
Is there anything I could do to stop this?
Click to expand...


-
iamfredpowel
 
Trip said:
*About 2 days ago, I was surfing the web, when I clicked a
link and several popups appeared. Norton antivirus (2004
professional) then displayed that a high risk trojan had
been found somewhere in "C:/Documents and Settings" but
that it couldn't be deleted.

The next day, my browsers search function has been
hijacked, redirecting every address
to "http://nkvd.us/1507/". Which is a somewhat useless
search engine.
I went to regedit and searched for "1507" and several
things came up. The trojan had rewritten a lot of the
homepage and search strings to this site. I have since
tried to delete them.
After deleting them, I now have the ability to view web
pages and the default search engine has returned.

But, every so often, on a 404 error and with some other
web pages (I think its random), the browser redirects to
this "http://nkvd.us/1507/".
Also, if I follow any download link, to download .exe's
and such, the browser keeps being redirected to this
other site.

I've tried to follow some of the tips in the other
threads with similar problems, but most involve
downloadibng a spyware detection programme. However, I
cannot download the programme as my browser keeps being
redirected.
Is there anything I could do to stop this? * Try run / regedit /Hkey-classes-root\ clsid\ (find
Click to expand...
ffibf4c7-4e08-4a28-a43f-9d60a9f7a880 and delete it. this is for x
only. if you have 95/98 i think you will find the same file unde
hkey-local-machine\software\microsoft\windows\curren
version\explorer\browser\helper objects. i have xp so i cant verif
this for 95/98


-
iamfredpowel
 
Back
Top