IE 6 Browser hijacker 0x90-team.com

[Guest]

One of our cpus running Win2000 and IE 6 has been browser hijacked by this
rotten 0x90-team.com qwickclick.com popup ad nightmare program.

I have searched the web and can't find a way to get rid of it - only info on
how bad it is.
On our cpus runnin6 XP and IE 6 we can click on Tools - manage addons - to
remove any foreign plugins - but that option doesn't show on our cpus running
Win2000 with IE6.

Is there a way to manage browser plugins using win2000/IE6 ?

Can someone tell me how to remove this browser hijacker?

Thanks much

 

[Jon Kennedy]

Use Ad-Aware, Windows Defender and/or Spybot Search & Destroy to remove it.

Windows Defender (beta)
http://www.microsoft.com/athome/security/spyware/software/default.mspx
Ad-Aware: http://www.lavasoftusa.com/
Spybot: http://www.safer-networking.org/en/index.html
Good sites on how to install and use Spybot -
http://www.safer-networking.org/en/tutorial/index.html
http://tomcoyote.com/SPYBOT/index1.php

Also download a winsock repair tool, to have just in case cleaning up
anything found breaks it -

Winsock repair tools:
LSPFix- all versions of Windows http://www.cexx.org/lspfix.zip
Winsock2 Fix- Win98, ME
http://www.bu.edu/pcsc/internetaccess/winsock2fix.html
LavaSoft- all versions of Windows-
http://digital-solutions.co.uk/lavasoft/whndnfix.zip

More information here:
http://www.spywareinfo.com/
http://inetexplorer.mvps.org/tshoot.html
http://spywarewarrior.com/sww-help.htm

If no joy, in IE go to Tools...Internet Options...Advanced tab, Browsing
section, uncheck "Enable third-party browser extensions", click Apply, click
Okay, reboot. If that solves your problem, then more troubleshooting is
needed to find out exactly which program, or Browser Helper Object (BHO) is
causing this problem. You don't want to leave it at that, as some BHOs are
useful or necessary - like Adobe Acrobat for reading .pdf files or an
essential component of Norton AV. Get BHODemon -
http://www.definitivesolutions.com/bhodemon.htm - read all about BHOs.
Disable all items, and then gradually replace one or two at a time to narrow
down the culprit.

Or if you have IE 6 SP-2 you can do this within the browser:
How to manage Internet Explorer add-ons in Windows XP Service Pack 2
http://support.microsoft.com/default.aspx?scid=kb;en-us;883256

If all the above fails, then the problem could be something new that the
spyware cleaners above don't have in their databases yet. In that case....
HijackThis direct download:
http://www.spywareinfo.com/~merijn/files/hijackthis.zip
Tutorial on how to use HijackThis:
http://www.spywareinfo.com/~merijn/htlogtutorial.html
Then post it's output log to the forum here for analysis and feedback by the
parasite experts:
http://www.spywareinfo.com/forums/
Or the other HijackThis Logs forums listed here:
http://www.spywareinfo.com/~merijn/forums.html

Or try this program to get some of the most nasty malware:
CWShredder direct download:
http://aumha.org/downloads/cwshredder.zip

An alternate resource for all of this and more:
http://www.aumha.org/secure.htm

 

[Guest]

Jon

this evil program seems to be blocking spybot and adaware from removing it
and also causing other problems.

I'll try downloading a couple of the other programs you mentioned here -
thanks

 

[Don Varnau]

Hi,
Many of these hijackers burrow in deeper than a BHO or add-on.

You should post a HijackThis log for analysis. Start at
http://forum.aumha.org/viewtopic.php?t=4075 Then go to
http://www.aumha.org/a/quickfix.htm Work through the preliminary cleaning
steps then post a HijackThis log to the forum at
http://forum.aumha.org/viewforum.php?f=30

Be patient. It's a busy forum.

HijackThis logs are also analyzed at these (and other) forums. Look for the
proper forum and an "Important- Read This First" message so that you follow
proper procedure.
http://castlecops.com/forums.html
http://tomcoyote.com/forums/
http://www.bleepingcomputer.com/forums/
http://forums.spywareinfo.com/
http://forum.iamnotageek.com/index.php
http://www.spywarewarrior.com/index.php

Other useful sites:
Dealing with Unwanted Spyware and Parasites:
http://mvps.org/winhelp2002/unwanted.htm
Malware Removal and Prevention Overview - CastleCopsWiki:
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Overview
Bugs, Glitches & Stuffups: http://www.mvps.org/inetexplorer/Darnit.html
Removing Malware:
http://www.elephantboycomputers.com/page2.html#Removing_Malware
What you can do about spyware and other unwanted software:
http://www.microsoft.com/athome/security/spyware/spywarewhat.mspx

Hope this helps,
Don
[MS MVP- IE]