Jump to content


Photo

morefinders.com - been hijacked


  • Please log in to reply
3 replies to this topic

#1 hopjed

hopjed

    Member

  • New Member
  • Pip
  • 2 posts

Posted 25 May 2004 - 09:40 PM

my friend's browser has been hijacked, it seems. i told him to download and run spybot 1.3 and adaware 6.0 and then get the windows updates. he did all that, but his homepage still comes up as "www.morefinders.com" - some search engine. redirecting the homepage from internet options does not do it either.

please advise. thanks!

#2 ChaoGuy

ChaoGuy

    Member

  • Full Member
  • Pip
  • 18 posts

Posted 25 May 2004 - 09:45 PM

Well i just looked up the URL, with out the scripts on, for sure it is another CWS Virant of searchmeup.com, that is all I can say at this time.

#3 hopjed

hopjed

    Member

  • New Member
  • Pip
  • 2 posts

Posted 25 May 2004 - 10:19 PM

a virant of CWS? perhaps i should tell him to download and run CWShredder and/or Hijackthis? then post the log?

#4 MercuryMan

MercuryMan

    Member

  • New Member
  • Pip
  • 1 posts

Posted 31 May 2004 - 12:48 PM

Hello, New to this forum. The morefinders.com problem lies with scvhost in c:\windows\system. The proper windows version is svchost. Remove this from the c:\windows\system folder and delete the appropriate run entry in the registry.
Problem solved!

This one doesn't seem to be caught by any of the tools, Hijack This does show it up however.

Hope this helps.
MM :D




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

Member of ASAP and UNITE
Support SpywareInfo Forum - click the button