MAC-NET

How to

Network Security

Do more with Firefox^NEW

Hijacked Browser Analysis

4-counter.com 3721

C2.lop browser hijacker

CWShredder

Edmond.exe

Intercom.exe Spyware

MWSOEMON.EXE - MyWebSearch

SearchPage CC Spyware

Spin4Dough Spyware

Sqwire.com home page hijack

Home » Spyware Protection »

Oh my gosh, my browser was hijacked !

It's a sad truth is there is no standard hijacking technique and there is no standard repair technique. If your browser has been hijacked, a significant chance exists that the repairs that worked for one might will not work for you. Here is one of the repair technique which you can use:

Download Stinger and scan your computer. The stinger software would be able to identify and remove newer common viruses. Restart the computer.
Use Control Panel > Add or remove programs, to remove any application software that you no longer use or those that you don't recognized.
Download CWShredder and proceed to fixing the typical components that might have stopped the computer from operating properly due to ad-wares or Trojans.
Download and run Microsoft Anti Spyware Software.
Download HijackThis and perform your scan and analysis. Click the save Log. Perform you analysis. Highlight the key and click "Info on select item..." button and study the prompt. Check the box to remove the offending key, click it and click the "Fix checked" button.

Here are examples of some of the approach used to fix broken browsers. You can use them to compare with your log.

Re: HijackThisLog Analysis - Lou 15-Sep-2004
... browserhelper2.dll winactive.exe NHelper.dll

Re: HijackThisLog Analysis - Carole 9-Sep-2004
... flag.exe loud pop.exe filmlinkjump.exe

Re: HijackThisLog Analysis - MarkM 8-Sep-2004
... MS32.exe

Re: HijackThisLog Analysis - Rob 5-Sep-2004
... IEHOST.exe TVMBHO.dll WO.exe WTOOLSA.exe DP-HIM.exe

Re: HijackThisLog Analysis - Carol 4-Sep-2004
... AutoUpdate.exe cashback.exe cdlsp.dll

Re: HijackThisLog Analysis - Tipp87 31-Aug-2004

Re: HijackThisLog Analysis - Varish 31-Aug-2004

Re: HijackThisLog Analysis - Nkoffroth 11-Aug-2004
... WIN.exe mstaskss.exe

Re: HijackThisLog Analysis - Baraboon 11-Aug-2004

Re: HijackThisLog Analysis - Todds 3-Aug-2004

Re: HijackThisLog Analysis - Larsy 3-Aug-2004
... IMAD.EXE GMSoft downloadv3.com

Re: HijackThisLog Analysis - Bigtarbri 30-Jul-2004
... BackWeb 8876480.exe

Re: HijackThisLog Analysis - lsli 30-Jul-2004
... SM1BG.EXE wupdt.exe

Re: HijackThisLog Analysis - Matimon 30-Jul-2004
... wsaupdater.exe

Re: HijackThisLog Analysis - Chuck 26-Jul-2004
... ngsw31.dll

Re: HijackThisLog Analysis - Spastictroll 20-Jul-2004
... fsg_4104.exe MYBAR.DLL updmgr.exe

Re: HijackThisLog Analysis - Bluedaze 20-Jul-2004
... Winload.exe dlhelperexe.exe

Re: HijackThisLog Analysis - Jsinger 19-Jul-2004
... ipbq32.exe apphd.exe

Re: HijackThisLog Analysis - Jdenton 19-Jul-2004
... netdc.exe netdc.exe szchost.exe ttuh.exe NDrv.exe

Re: HijackThisLog Analysis - BicycleSS2 19-Jul-2004
... CSIE.DLL alchem.exe mscache.exe optimize.exe

Re: HijackThisLog Analysis - Didan 19-Jul-2004
... Paltalk pnetaware.exe

Re: HijackThisLog Analysis - Jeff 19-Jul-2004

Re: HijackThisLog Analysis - Rwmoore 18-Jul-2004
... dpi.exe ototqn.exe LgnJ8V3.exe

Re: HijackThisLog Analysis - Rob 15-Jul-2004
... THotkey.exe WINDOWS\TEMP\sp.html 111116.exe

Re: HijackThisLog Analysis - Optionstradr 15-Jul-2004
... netqz32.dll mdjir.dll wincc32.exe

Re: HijackThisLog Analysis - Roubzjan 15-Jul-2004
... any-find.com winlgn.exe MSN Apps

Re: HijackThisLog Analysis - Justin 12-Jul-2004
... oldsuki.com msopt.dll sdkqh32.dll

Re: HijackThisLog Analysis - Brown 12-Jul-2004
... my.netzero.net

Re: HijackThisLog Analysis - Wampanosap 12-Jul-2004
... bridge.dll

Re: HijackThisLog Analysis - Grnrch 12-Jul-2004
... flashget.exe fgiebar.dll

Re: HijackThisLog Analysis - Sally 9-Jul-2004
... midaddle.dll mybar.dll sep.dll msh42.exe

Re: HijackThisLog Analysis - Jack 8-Jul-2004
... Sep.dll NDrv.exe NDrv.dll ZtmK.exe

Re: HijackThisLog Analysis - Danielle 8-Jul-2004
... Sex.exe "Click Me" 66.98.199.15

Re: HijackThisLog Analysis - Kpierce 8-Jul-2004
... Funwebproducts

Re: HijackThisLog Analysis - Pistachio 8-Jul-2004
... RICO.exe SnuQDC65.exe DHRX.EXE RMU.EXE

Re: HijackThisLog Analysis - Conner 8-Jul-2004
... mvffw.dll systa.dll mfcdw32.exe

Re: HijackThisLog Analysis - Brech 8-Jul-2004
... msph32.exe ntid.exe cnbuz.dll ipsz.exe zg.exe

Re: HijackThisLog Analysis - Chris 8-Jul-2004
... NPBelv32.dll

Re: HijackThisLog Analysis - Bobbing 6-Jul-2004
... Free-popup-killer, Rewards Network, Wildtangent

Re: HijackThisLog Analysis - Rod 6-Jul-2004
... L.MHTMLRedir.exploit msreg.exe

Re: HijackThisLog Analysis - Tom 5-Jul-2004
... seaglw2h.ocx

Re: HijackThisLog Analysis - Lily 3-Jul-2004
... XupiterStartup2003.exe E2G CommonName Websearch

Re: HijackThisLog Analysis - DPerry 3-Jul-2004
... bridge.dll

Re: HijackThisLog Analysis - BicycleSS 3-Jul-2004
... MediaTicketsInstaller.cab

Re: HijackThisLog Analysis - Nick 1-Jul-2004
... W32/Deloder.worm

Re: HijackThisLog Analysis - Edaniel 30-Jun-2004
... NDrv.exe NDrv.dll

Re: HijackThisLog Analysis - Jim 30-Jun-2004
... Zedd4 WToolsB

Re: HijackThisLog Analysis - Bill 28-Jun-2004
... UCSearch.CAB sp.html

Re: HijackThisLog Analysis - Jstanton 28-Jun-2004
... submithook.dll

Re: HijackThisLog Analysis - Dyanira 28-Jun-2004
... LzioMediaUpdater.exe

Page1 2 3

Post your comment

I think the seaWDurlIE.exe may be the source of the annoying fasterhomepage.com web page. Remove this file with HiJackThis. More info:

http://www.kephyr.com/spywarescanner/pus-practices
/index.phtml#fasterxp-2005-06-08

In reply to Larry:
I´m getting nowhere trying to remove the "www.fasterhomepage.com" browser hijacking. It keeps coming back. I can´t find any information on it. Can anyone give me a hand with this one. Thanks. Larry

Roger
2/5/2008 7:04:04 PM - SG |

I had the same problem, i waited ower 44 days and my computer needed to format.
This is really bad so try getting the virus of.
It is a virus that comes in 7 days after making another home page.
Its a trojan that hacks the NAV data of internet and replaces the Windows NAV to www.fasterhomepage.com and makes pop ups when internet starts
If im wrong your computer is safe, if im right:
Get the ***** ( automatically deleted ) trojan out of your computer or it will make more viruses.
And what i mean in format;
All of your computer files, Games, Jpg,s.etc will need to be deleted Inculding all files like msn, skype . This is a bad virus.
I dont know how to delete it but i finded a keylogger on my "Own computer" C:Program Files/Valve/Steam/SteamApps/****/Keylogger/
It will go to all folders and destroy the main
RAW D.A.T.A of your computer and it will delete all of your files in that folder.
How i deleted it:
I used C++ to edit the keylogger from my broswer, !!!!WARNING!!!! THIS MAY CAUSE A PROBLEM: YOUR INTERNET WILL NOT ANYMORE OPEN.
So i used C++ to edit the Keylogger, Deletd 55 words of the keyloggers main txt. and deleted all Dlls of keylogger:
Here is a site for C++ virus free,They got their own department:
http://www.bloodshed.net/dev/devcpp.html
Download.
This is the only way i know how to edit keyloggers and trojan folders,Files,JPGS.
They can hide anywhere.
Like that happened to you they can go to internet and get the www.fasterhomepage.com

Daniel, USA
10/17/2005 6:19:09 PM - FI | reply

DIDN´T HAVE FILE SEAWDURLIE.EXE. FASTERXP COMES BACK EVER 7 DAYS. WHAT WINDOWS PROGAM RUNS ANY FILE/PROGRAM ON A RECURRING BASES I.E. EVERY 7 DAYS?

In reply to Roger:
I think the seaWDurlIE.exe may be the source of the annoying fasterhomepage.com web page. Remove this file with HiJackThis. More info: http://www.kephyr.com/spywarescanner/pus-practices /index.phtml#fasterxp-2005-06-08

CLIFF
6/13/2005 9:46:02 AM - US |

also check unused desktop shortcuts and at last check your config (win.ini) this is, i think where it starts. then run hijackthis and to see if any thing is stil out there.

In reply to CLIFF:
GOT AHEAD OF MY SELF. ALL DOS HAS DONE IS REMOVE THE HOME PAGE. BUT DOSE NOT REMOVE WHAT EVER STARTS THE PROCESS. YOU ALSO NEED TO LOOK INTO YOUR PROGRAM FILES AND I386 FILE FOR SOME OF THE HOMEPAGE FILES. THESE NEED TO BE REMOVED. SORRY FOR NOT HAVING ALL THE INFORMATION YET. STILL WORKING THIS PROBLEM.

Anonymous
5/20/2005 4:12:55 PM - US |

GOT AHEAD OF MY SELF. ALL DOS HAS DONE IS REMOVE THE HOME PAGE. BUT DOSE NOT REMOVE WHAT EVER STARTS THE PROCESS. YOU ALSO NEED TO LOOK INTO YOUR PROGRAM FILES AND I386 FILE FOR SOME OF THE HOMEPAGE FILES. THESE NEED TO BE REMOVED. SORRY FOR NOT HAVING ALL THE INFORMATION YET. STILL WORKING THIS PROBLEM.

In reply to Larry:
Thank you very very much. I found the FasterXP "Dir" and am now in the process of removing it. Thanks again for the help. Larry

CLIFF
5/16/2005 6:26:36 AM - US |

Thank you very very much. I found the FasterXP "Dir" and am now in the process
of removing it.

Thanks again for the help.

Larry

In reply to :
if you know dos. look in program files for fasterxp sud dir. delete files then remove the sud dir. so far this has worked for me.

Larry
5/9/2005 1:55:14 AM - US |

if you know dos. look in program files for fasterxp sud dir. delete files then remove the sud dir. so far this has worked for me.

In reply to Larry:
I´m getting nowhere trying to remove the "www.fasterhomepage.com" browser hijacking. It keeps coming back. I can´t find any information on it. Can anyone give me a hand with this one. Thanks. Larry

Anonymous
5/4/2005 4:31:25 PM - US |

if you know dos. look in program files. find the sub dir fasterxp. delete the files then remove the sub dir. it may be named different. so far this has worked for me.
Anonymous
5/4/2005 4:28:22 PM - US | reply

I´m getting nowhere trying to remove the "www.fasterhomepage.com" browser hijacking.
It keeps coming back.

I can´t find any information on it. Can anyone
give me a hand with this one.

Thanks.

Larry

Larry
4/26/2005 2:52:42 AM - US | reply

This link is no good.
http://www.spywareinfo.com/~merijn/files/hijackthis.exe
D.H. Cesare
11/1/2004 11:36:27 PM - US | reply

Mail this page