home hardware prices news articles forums photos user reviews
Go Back   Tech Support Forums - TechIMO.com > PC Hardware and Tech > Security and Privacy Issues
Ask a Tech Support Question (free)!

hijacked by nowfind

Reply
Get bargains at  »  Dealighted.com
 
Thread Tools Search this Thread
Currently Active Users: 1720
Discussions: 200,509, Posts: 2,374,410, Members: 245,832
Old March 12th, 2005, 02:02 PM   Digg it!   #1 (permalink)
Junior Member
 
Join Date: Nov 2002
Posts: 23
hijacked by nowfind

Some POS installed a monstrosity called nowfind as my default page.

When I use regedit to cut the entries pointing to nowfind, they come back within 30 seconds. I'm guesing there is a program running that overwrites the registry over and over.

Anybody know what that program might be?
ad5mb is offline   Reply With Quote
Old March 12th, 2005, 02:05 PM     #2 (permalink)
A hero in training
 
GroundZero3's Avatar
 
Join Date: Oct 2001
Location: Norfolk, VA
Posts: 26,679
Blog Entries: 14
have you run the usual spybot and adaware programs to see if it catches it?
GroundZero3 is offline   Reply With Quote
Old March 12th, 2005, 02:31 PM     #3 (permalink)
Banned
 
pphalan's Avatar
 
Join Date: Nov 2004
Location: BACK in the USA
Posts: 1,823
http://www.allaboutviruses.com/24292...-hijacker.html
Re: nowfind.net hijacker
pphalan is offline   Reply With Quote
Old March 12th, 2005, 02:34 PM     #4 (permalink)
Supporting our military
 
Bill in SD, CA's Avatar
 
Join Date: Oct 2002
Location: Bottom left of U.S.
Posts: 9,197
__________________
*****
It is easy to be conspicuously "compassionate" if others are being forced to pay the cost. – Murray N. Rothbard
Bill in SD, CA is offline   Reply With Quote
Old March 12th, 2005, 11:40 PM     #5 (permalink)
Junior Member
 
Join Date: Nov 2002
Posts: 23
Ran the usual suspects, Ad-Aware, Spybot Search & Destroy, the MS Antispyware beta. I haven't been to the site listed by pphalan, that's next.

Antispyware keeps popping up messages asking:

Can 4.exe access the ninnynet?
click3.exe ditto

And it asks if a.bat can run

After far too much grief and aggravation, I found a hidden folder in a hidden system folder.

C:\Documents and Settings\AD5MB\Local Settings\Temp

In your computer, of course, AD5MB would be your login name. Local Settings is a hidden system file that belongs there. \Temp, installed last night, does not. It contained all these executables and 3 .tmp files.

I keep deleting it. It keeps coming back. The .tmp files reappear, indicating that something else is putting it back on.

I have to wonder if the self propelled snotrag who put so much effort into making this arrogant, conceited program ever considered the possibility of encountering a vast, nasty tempered, Wheaties-eating joker like me in an alley.
ad5mb is offline   Reply With Quote
Old March 13th, 2005, 01:18 AM     #6 (permalink)
Supporting our military
 
Bill in SD, CA's Avatar
 
Join Date: Oct 2002
Location: Bottom left of U.S.
Posts: 9,197
Ahhh, did you ....... ahhh never mind.

Bill
Bill in SD, CA is offline   Reply With Quote
Reply
Thread Tools Search this Thread
Search this Thread:

Advanced Search

Similar Threads
Thread Thread Starter Forum Replies Last Post
if 90% believe it...can the braindead still say "conspiracy theory"? John Prophet IMO Community 218 October 30th, 2007 11:52 PM
Airline Security - Is there a solution? brandon184 IMO Community 26 December 6th, 2004 08:12 PM
BUSH CONTINUES TO MISLEAD ABOUT 9/11 TOAD6147 IMO Community 31 March 12th, 2004 09:29 AM
Same web page no matter what address I type jamesy505 Networking and Internet 9 January 17th, 2004 05:23 PM
let my brother use my laptop... (big pic) AzKidd69 General Tech Discussion 4 November 10th, 2003 08:34 PM


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Most Active Discussions
Is It Just Me? (1635)
FT HOOD attack: 7 killed 12 injured (67)
Review My Build (6)
HELP!!! What do you think of this s.. (16)
Looking for a graphic card that wil.. (30)
Assosiations (21496)
My 1st pc build (40)
PC Modern Warfare 2: it's much wors.. (12)
Aero in Vista (7)
core i7 extreme 975, nvidia 9400gt (9)
How to Ship a PC (16)
Building my first computer (13)
[F@H SPAM 11/1/09]New month . . . n.. (33)
slaving laptop drive (7)
Recent Discussions
windows 7 retail and rtm (3)
boot from CD-ROM in chipset via P4M80.. (1)
Windows Experience Index is screwed u.. (3)
Review My Build (6)
FAT32 to NTFS file system in Win2kpro (4)
Internet very slow since updating AVG.. (8)
Motherboards and my curse... (25)
HELP!!! What do you think of this sys.. (16)
New Processor, Monitor will not turn .. (2)
2009 Build (4)
My 1st pc build (40)
Freezing During Music/Movies (1)
ext. sound card laptop to stereo syst.. (2)
Remote Desktop via SSH and error mess.. (2)
Help and Support disappeared from my .. (0)
[F@H SPAM 11/1/09]New month . . . new.. (33)
Basic applications needed for "r.. (1)
core i7 extreme 975, nvidia 9400gt (9)
hard drive problem (2)
Win7 TrustedInstaller Permissions (2)
Speed up Win 7 boot time a bit (1)
Hard Drive test program (2)
wireless westell versalink model 327w (1)
New build 10 second reboot cycle! Won.. (3)
New Linksys Routers (2)


All times are GMT -4. The time now is 08:02 AM.
TechIMO Copyright 2008 All Enthusiast, Inc.



1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28