Warning

 

Close
Confirm Action

Are you sure you wish to do this?

Cancel Confirm
AR15.COM
6/23/2004 10:18:02 AM EDT
Alright, I have Windows 2000 and IE 6.  For some reason, every time I open IE, it is getting redirected off of my start page and going to a Home Search website.  It has the following location in the address bar:

res://djixx.dll/index.html#1163284302

I have found and deleted the djixx.dll file but something is redirecting it there.  

I have a Home Search Assistant in my Programs list when I go to the Add/Remove Programs List.  When I go to uninstall it, it just gives me an error message that it is looking for a website that it can't find.

Any ideas????
6/23/2004 10:20:18 AM EDT
[#1]
forums.spywareinfo.com/
6/23/2004 10:22:05 AM EDT
[#2]
You been Hijacked

Download "HijackThis" and run it along with Spybot-search and Destroy.
6/23/2004 10:22:59 AM EDT
[#3]
nevermind
6/23/2004 10:42:35 AM EDT
[#4]
i have been hijacked for a week now, and no spyware removal program has killed it yet
6/23/2004 10:51:55 AM EDT
[#5]

Quoted:
i have been hijacked for a week now, and no spyware removal program has killed it yet



Did you do what I suggested in your other thread?
EXACTLY as I suggested.
6/23/2004 10:53:22 AM EDT
[#6]
Use MS IE only for trusted sites, for all others use Opera Mozilla etc.
6/23/2004 11:08:55 AM EDT
[#7]

Quoted:
Alright, I have Windows 2000 and IE 6.  For some reason, every time I open IE, it is getting redirected off of my start page and going to a Home Search website.  It has the following location in the address bar:

res://djixx.dll/index.html#1163284302

I have found and deleted the djixx.dll file but something is redirecting it there.  

I have a Home Search Assistant in my Programs list when I go to the Add/Remove Programs List.  When I go to uninstall it, it just gives me an error message that it is looking for a website that it can't find.

Any ideas????



Everything you need can be found in these two links:


Go to this site, and download "HijackThis", and "CWshredder".
After downloading them, update BOTH online.
www.spywareinfo.com/~merijn/downloads.html

then Run CWshredder, specify for it to fix any problems it finds.

next Run Hijackthis...it will give you a list of potential "hijackers" in your system.
Click "save log"...and remember where you saved it.


then go to this website, and post a copy of your saved hijack log in the forum for "hijackthis problems and logs" (the title of the forum is something like that...its about halfway down through the list of forums if I remember corectly)
forums.tomcoyote.com/index.php?s=442048e0e60610992a02ff08912903bd&act=idx
When you post your hijack log, Make the title of your post something like "My I.E. has been hijacked, could someone please review this hijackthis log".

It may take some time, but eventually someone will reply, and tell you which parts of your hijack log need to be deleted.

last run Hijackthis again...but, when the log comes up this time...put a check next to all the things you were instructed to delete, and press the button that says "clean all checked files" (or something like that)

This should fix you up.

"cool web search" is one of the biggest hijackers...it disguises itself as a tool to help your search engine (like google)...but it installs a buttload of hijackers on your system.

NEVER!...NEVER! click "YES" when prompted: "Would you like to set your homepage to whatever website, because it is likely a hijacker.

Do all of this stuff EXACTLY as I posted...and you should be all fixed.
6/23/2004 11:12:33 AM EDT
[#8]
And once you are done with that, go to www.mozilla.org and download Firefox...
6/23/2004 11:14:38 AM EDT
[#9]
If you can't  reset your home page due to being hijacked, copy this:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Control Panel]
"HomePage"=dword:00000000

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel]
"HomePage"=dword:00000000

[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\LocalUser\Software\Policies\Microsoft\Internet Explorer\Control Panel]
"HomePage"=dword:00000001

[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\LocalUser\Software\Policies\Microsoft\Internet Explorer\Control Panel]
"**del.HomePage"=" "

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoSaveSettings"=dword:00000000

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\LocalUser\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoSaveSettings"=dword:00000000



paste it into notepad, save it as "unlock.reg" then right click the icon for the file and click "merge."
You can then set your home page.  If you want to lock it so as to not get hijacked again, copy this:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Control Panel]
"HomePage"=dword:00000001

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel]
"HomePage"=dword:00000001


save that as lock.reg, right click, merge.
Done.

But really...use Firefox.

Scott
6/23/2004 2:17:04 PM EDT
[#10]

Quoted:





Go to this site, and download "HijackThis".....
After downloading them, update BOTH online.






How do you update Hijack This online?  I've opened HT and see no menu selection for updating the program.

Please advise.

Thanks,

Merlin
6/23/2004 2:22:48 PM EDT
[#11]


I'll sit this one out.

6/23/2004 2:24:13 PM EDT
[#12]

Quoted:

I'll sit this one out.






Me too.
6/23/2004 2:25:28 PM EDT
[#13]
Lots of these questions lately. I downloaded Mozilla yesterday because of all the threads regarding this.
6/23/2004 2:29:09 PM EDT
[#14]
And just to reiterate, after you've cleaned up IE

GET MOZILLA FIREFOX!!!

I think this needs to be a sticky at the top of the forum or something.
6/23/2004 2:46:03 PM EDT
[#15]
Both Mozilla/Firefox and Opera are no-compromise browsers that remove the issues of IE (forever) including browser hijacks and pop-ups.

They are also easy to use, install, and customize. I liked Opera so much that I bought it ($39). I really like the re-wind button and the ability to "skin" the thing.
6/23/2004 2:53:52 PM EDT
[#16]

The only problem I have with browsers other than IE is it takes too long for them to load. Has that changed yet?  I love my half a second load time for a IE window.
6/23/2004 2:55:50 PM EDT
[#17]

Quoted:
The only problem I have with browsers other than IE is it takes too long for them to load. Has that changed yet?  I love my half a second load time for a IE window.



Really? I haven't had that problem. Of course I have a pretty fast computer, but I have noticed that firefox loads webpages faster than IE.
6/23/2004 3:02:17 PM EDT
[#18]

Its not the page load time bothers me. Its the starting up of the program its self.
6/23/2004 3:45:10 PM EDT
[#19]

Quoted:
i have been hijacked for a week now, and no spyware removal program has killed it yet



+1, 3 months now, tried everything, every spybot killer, ad-aware, spy sweeper

hell, even my Firefox has been hijacked
6/23/2004 4:10:26 PM EDT
[#20]

Quoted:

Quoted:
i have been hijacked for a week now, and no spyware removal program has killed it yet



+1, 3 months now, tried everything, every spybot killer, ad-aware, spy sweeper

hell, even my Firefox has been hijacked



Follow the instructions I posted for sydney7629
6/23/2004 4:13:07 PM EDT
[#21]

Quoted:

Quoted:





Go to this site, and download "HijackThis".....
After downloading them, update BOTH online.






How do you update Hijack This online?  I've opened HT and see no menu selection for updating the program.

Please advise.

Thanks,

Merlin



Click "config" in the lower right corner.
Click "misc tools" at the top.
Click "check for updates online".

Obviously...do all of this while you are online.
6/23/2004 4:16:00 PM EDT
[#22]

Quoted:

Quoted:
i have been hijacked for a week now, and no spyware removal program has killed it yet



+1, 3 months now, tried everything, every spybot killer, ad-aware, spy sweeper

hell, even my Firefox has been hijacked



Um....time for a reformat and reinstall of your operating system then if you really have tried everything else and are still hijacked.
6/23/2004 5:07:05 PM EDT
[#23]
This program wrote a line into your registry.  You need Hijack-this.  Run HT and find the line that has this website in it and correct it.  thiat will isolate the line in the registry.  If you go back to the site whrere you contracted this, you will get it again.  If it keeps coming back, you may have to restore from your original windows disks.

You may also want to get CWshredder.  It will prevent a number of others like this.

Ren.
6/23/2004 6:04:32 PM EDT
[#24]
i have done it all, and i still be jacked
6/26/2004 2:04:10 PM EDT
[#25]

Quoted:
i have done it all, and i still be jacked



Ran a Norton virus scan this morning. Found 2 .class viruses which were causing my pop-ups,
tool bars, etc in my i.e.  Smoothest running i.e. day I've had in months.

I was fighting it with spyware programs the whole time and never thought about virus file.

Update your virus definitions and do a complete system scan if you haven't already.