Hijacked!

[Chrissy Michelle Strawn]

I have IE 6.0.2800.1106.

It keeps getting high jacked by the following:

http://out.true-counter.com/a/?101 about:blank

This take me to Global Finder, a purported search engine.
Half the time I get rid of that in Internet Options it
just comes back or send me to a site that will give me a
virus if I click thier virus warning window. I have tried
looking everywhere for this to no avail.

Please help, I am at my wits end.

Chrissy Michelle Strawn

Life is an Adventure!

 

[Arnold]

-----Original Message-----
I have IE 6.0.2800.1106.

It keeps getting high jacked by the following:

http://out.true-counter.com/a/?101 % 20about:blank

This take me to Global Finder, a purported search engine.
Half the time I get rid of that in Internet Options it
just comes back or send me to a site that will give me a
virus if I click thier virus warning window. I have tried
looking everywhere for this to no avail.

Please help, I am at my wits end.

Chrissy Michelle Strawn

Life is an Adventure!
.
Hello Chrissy

Download CWShredder
http://www.spywareinfo.com/~merijn/files/cwshredder.zip

 

[GG]

You have the qhost virus maybe.

Go to 24.213.60.67 for more info.

Copy a sample microsoft hosts file to c:\winnt\system\drivers\etc and
c:\winnt\help
You can copy and paste this info to a hosts file if you don't have another
pc to compare with.

# Copyright (c) 1993-1999 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost


Also, I did a search for hosts on my pc and delete any hosts files with a
Sept. 30th date.
I guess that's the day my pc got the qhost virus.
An original Microsoft hosts file for xp should have the date 12/7/99

 

[Michael Howarth]

Sounds like you have 'Spyware' on your computer, Chrissy.

Do a search for 'Spyware' in any search engine and all
will be explained. You'll have to download a piece of
software (similar to a virus checker) that will search
your computer for Spyware components and allow you to
remove them.

www.majorgeeks.com has links to a few.
http://www.lavasoftusa.com/software/adaware/ AdAware is
perhaps the most well known spyware remover, but as some
people have posted here, it's having problems deleting one
particular piece of spyware (not yours by the sounds of
things).

In a nutshell Spyware is software that is installed on
your computer either without your knowledge or using
questionable tactics, Spyware can do a number of things,
such as (in your case) forceably taking you to a given
webshite or collecting marketing infomation about the
sorts of sites you visit.

 

[siljaline]

I have IE 6.0.2800.1106.

It keeps getting high jacked by the following:

http://out.true-counter.com/a/?101 about:blank

This take me to Global Finder, a purported search engine.
Half the time I get rid of that in Internet Options it
just comes back or send me to a site that will give me a
virus if I click thier virus warning window. I have tried
looking everywhere for this to no avail.

Please help, I am at my wits end.

Chrissy Michelle Strawn

Life is an Adventure!

Please run "Hijack This" with the instructions here:
http://mvps.org/winhelp2002/unwanted.htm

HTH


--

siljaline MS MVP IE/OE


"Arguing with anonymous strangers on the Internet is a sucker's game
because they almost always turn out to be -- or to be indistinguishable from
-- self-righteous sixteen-year-olds possessing infinite amounts of free time."
- Neil Stephenson, _Cryptonomicon_