Hi all

I think I've got some bug in my system that keeps changing my homepage (in
Tools/Internet Options/Homepage) to http://freednshost.info/ .

Even if I go in and change the address to something else, it is reverting to
this page.  It's also adding links to my favourites and posting shortcuts to
my desktop

It is highly annoying - can someone help?

Sean

[ Post a follow-up to this message ]

chuckonetwo wrote:
> Hi all
>
> I think I've got some bug in my system that keeps changing my homepage (in
> Tools/Internet Options/Homepage) to http://freednshost.info/ .
>
> Even if I go in and change the address to something else, it is reverting 
to
> this page.  It's also adding links to my favourites and posting shortcuts 
to
> my desktop
>
> It is highly annoying - can someone help?
>
> Sean
>
>

First use Google, then stop using IE, try Mozilla, Opera or some other
browser.

You have installed and run the free Spybot and Adaware? You have looked
in the list of starting programs to see if it is running at startup?

Have you looked at
http://www.computing.net/windowsxp/...rum/101891.html or
http://www.mcse.ms/message559778.html

g-w

[ Post a follow-up to this message ]

thanks for the lead.  How do i see what programs happen on windows startup?

"zzz" <zzz@nospam.com> wrote in message
news:Fl5ic.1131$Cy2.669@newssvr15.news.prodigy.com...
> chuckonetwo wrote: 
(in[vbcol=seagreen] 
reverting to[vbcol=seagreen] 
shortcuts to[vbcol=seagreen] 
>
> First use Google, then stop using IE, try Mozilla, Opera or some other
> browser.
>
> You have installed and run the free Spybot and Adaware? You have looked
> in the list of starting programs to see if it is running at startup?
>
> Have you looked at
> http://www.computing.net/windowsxp/...rum/101891.html or
> http://www.mcse.ms/message559778.html
>
> g-w

[ Post a follow-up to this message ]

chuckonetwo wrote:
> thanks for the lead.  How do i see what programs happen on windows startup
?
>
> "zzz" <zzz@nospam.com> wrote in message
> news:Fl5ic.1131$Cy2.669@newssvr15.news.prodigy.com...
>

For most windows besides Win2000 just use START|RUN and enter MSCONFIG.
The Startup tab in the new window lists what is starting. You can then
compare your list with http://www.sysinfo.org/startuplist.php database
to see what each program is if the name is not descriptive enough to
know what program uses it. For Win 2000 download StartupCop from PC
Magazine.

http://www.spywareinfo.com/ can be a good source for spywrae info.

g-w

[ Post a follow-up to this message ]

You have a hijacker, and it has a dropper that is going
to infect your system over and over. Spybot and AdAware will only remove the
infection after it "unpacks".
You also have to remove the "dropper". The only way to
do that is look for it by date and delete it by hand. Also
look for services that not dated properly, and track down
the .exe and delete it. More than likely there will be quite
a bit of this stuff spread around your system, and it will
take a day or two of hunting this crap down. What I do
is: first I have a very large hard drive .. 160 gig .. split
C: - D:  I run a disk imaging program that keeps an
image on the D-drive. If I get infected like this, I simply
reimage the C-drive and I'm back to normal in about
an hour. It is generally a good idea to use your D-drive
to store valuable data, and email backup, etc. These
trojans and "droppers" don't speak D-drive, and
a simple reimage will wipe them quickly. The best program out there I've
found is DriveImage2002.
Ghost from Symantec is probably OK, but I tested it
and thought it was crap.

johns

[ Post a follow-up to this message ]

On Fri, 23 Apr 2004 08:23:20 GMT, "chuckonetwo"
<seanhelmot@dodo.com.au> wrote:

>Hi all
>
>I think I've got some bug in my system that keeps changing my homepage (in
>Tools/Internet Options/Homepage) to http://freednshost.info/ .
>
>Even if I go in and change the address to something else, it is reverting t
o
>this page.  It's also adding links to my favourites and posting shortcuts t
o
>my desktop
>
>It is highly annoying - can someone help?
>
>Sean
>

lotsa info on:
http://www.nondisputandum.com/html/anti_spyware.html
http://www.nondisputandum.com/html/system_cleaner.html
greetz

[ Post a follow-up to this message ]

"chuckonetwo" <seanhelmot@dodo.com.au> wrote in message
news:4088d277$1@news.comindico.com.au...
> Hi all
>
> I think I've got some bug in my system that keeps changing my homepage (in
> Tools/Internet Options/Homepage) to http://freednshost.info/ .
>
> Even if I go in and change the address to something else, it is reverting
to
> this page.  It's also adding links to my favourites and posting shortcuts
to
> my desktop
>
> It is highly annoying - can someone help?
>
> Sean
>

If it keeps returning after you may have the latest version of CWS.  Very
persistent.

Go here for removal instructions
http://www.spywareinfo.com/forums/i...opic=41843&st=0

[ Post a follow-up to this message ]

Remove freednshosting from the registry manually , as well as removing
all the temporary files, list all .exe files that's recently been
installed.. delete unknowns.. then.. check your IE settings under
Accessiblity make sure that nothing is selected.. you'll find which
file is running under system32.. simply delete it.

[ Post a follow-up to this message ]

<snip>


--
Install, then immediately update and run, at least, the first four.

Ad-aware
http://www.lavasoftusa.com/

Spybot S&D
http://www.safer-networking.org/

Spyware Blaster
http://www.wilderssecurity.net/spywareblaster.html
http://www.javacoolsoftware.com/spywareblaster.html

CoolWebShredder
http://www.spywareinfo.com/~merijn/files/cwshredder.zip
http://www.spywareinfo.com/~merijn/cwschronicles.html

HijackThis
http://tomcoyote.com/hjt/

A-spy For trojans hiding in startup entries.
http://vipmeister.com/dl/aspy/aspy.html

Info on above and more.
http://www.generation.net/~hleboeuf/spyware.htm

Parasites: Cookies, Dialers, Keyloggers, Trackers
http://www.generation.net/~hleboeuf/bhoindex.htm

~ Spyware Information ~
http://www.mvps.org/inetexplorer/Darnit.htm
http://www.cexx.org/adware.htm
http://www.mvps.org/winhelp2002/unwanted.htm

--
"°Mike°'s" Basic computer maintenance
http://uk.geocities.com/personel44/maintenance.html

[ Post a follow-up to this message ]

Life with computers shouldnt be like this!

Thanks everyone for all the educating.  I tried a few different things but
ended up doing a systems restore as the easiest option,

Sean

"Kagan" <thelivingpoet@yahoo.com> wrote in message
news:95e8a4db.0404271821.b60dbaa@posting.google.com...
> Remove freednshosting from the registry manually , as well as removing
> all the temporary files, list all .exe files that's recently been
> installed.. delete unknowns.. then.. check your IE settings under
> Accessiblity make sure that nothing is selected.. you'll find which
> file is running under system32.. simply delete it.

[ Post a follow-up to this message ]