Help Me Get Rid Of This

[miccheck1516]

Not 100% sure if this is the right place for this, but its not a k-lite problem so i put it here anyway.

When i type in an incorrect url by browser (internet explorer 6) tries to redirect me to a page beginning with 'apps.webservicehost.com' It only started one night after a friend was on my computer so i dont know whats going on, ive tried spybot S&D but its still happening, please help me fix this its really pissing me off.

I just found this http://spyblocker-software.com/IPB/index.p...st=0&#entry1537 (http://spyblocker-software.com/IPB/index.php?showtopic=368&st=0&#entry1537) and im give it a try, il report back soon

[[B][O][T]]

Re-Install IE 6

BOT

[miccheck1516]

back soon!

[[B][O][T]]

Eummm Your avatar is way over the limit for what We accept!
Yours is ~530KB (Maximum is 100KB, for both avatar and sig)

Please remove Your avatar ASAP, or We mods will.

Thanks for understanding,
BOT

[miccheck1516]

ok i feel really wick now, how the hell do i uninstall ie 6??????

[[B][O][T]]

In Add/Remove Programs, should be there....which OS are You running?

BOT

[miccheck1516]

im using windoze xp i went to add remove programs, add/remove windows components, removed ie, went back, added it again, and i still have this horrible problem its driving me nuts!!

ps. did u remove my avatar? ty if u did sorry bout that

[[B][O][T]]

First no I did not remove Your avatar, another moderator did....

If You do a search on Your harddrive for webservicehost will it give You any results?

BOT

[miccheck1516]

a string with 'http://apps.webservicehost.com/' is in
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TypedURLs


and in HKEY_CURRENT_USER\Software\Microsoft\Search Assistant\ACMru\5603 is a string with 'webservicehost'

A hard drive search shows nothing :(

[Marius24]

go to C:/Windows and a html file is in there under the name wbservice host or something simmilar (if it isnt in your windows folder try System or sytem32 folder) and just delete the file and ur browser is fixed B)

[miccheck1516]

hmm i cant seem to find that file.........

[Marius24]

it could be under a different file name :unsure:

[miccheck1516]

:( :angry:

[nikita69]

Originally posted by Marius24@7 September 2003 - 17:54
go to C:/Windows and a html file is in there under the name wbservice host or something simmilar (if it isnt in your windows folder try System or sytem32 folder) and just delete the file and ur browser is fixed B)
are u thalking about hosts file? or this directory?
C:\WINDOWS\system32\drivers\etc

[sharedholder]

Browser Hijack Blaster

Browser Hijack Blaster protects your system from browser hijackers and spyware that alters your Internet Explorer settings.


Running silently in the background, Browser Hijack Blaster only springs into action when an attempt is made. It watches and protects the following items:
IE Homepage, IE Default Page, IE Search Page, BHOs

Whenver one of the above items is changed, or a BHO is added, you are immediately provided with information on the item, along with the option to keep the change, or revert to your previous settings.

Browser Hijack Blaster also can detect changes between the times it is run. If a spyware application tries to install its BHO at boot-up, and change settings at boot-up, before Browser Hijack Blaster is activated, you will be notified and (like the situation above) given the option to keep the change or to revert to your previous settings.

Browser Hijack Blaster also has a database of values common to spyware programs. If, for example, your homepage is changed to lop.com (a known hijacker) you will not only be notified, but a special notice will be displayed that you probably have Lop.com on your system (and that you should run an anti-spyware program such as Ad-Aware or Spybot S & D).


Download Browser Hijack Blaster from HERE (Installer is approx. 394 kb.)
Compatible with Windows 95, 98, ME, NT 4, 2000, XP.


http://www.wilderssecurity.com/bhblaster.html

[sharedholder]

Or go to my site and look on Freeware Rocks for a soft called HijackThis ,here the description.



A general homepage hijackers detector and remover.The program can create a backup of your original settings and also ignore selected items. Additional features include a simple list of all startup items, default start page, online updates and more. Intended for advanced users.

[miccheck1516]

that stops things happening, no good, as the problem is allready there can anyone else help???

[ultimatejester]

igetnet

Sets the MSN and Netscape search engines to ignkeywords.com and rspsearch.com, also uses searchresult.net, apps.webservicehost.com (qcksearch.com)

Installed files (you probably won't have all of them): bho.dll, rsp.dll, winstart.exe, bho001.dll, rsp001.dll, winstart001.exe, install_all.dll, update_hosts.dll, update_com.dll, update_bho.dll, update_rsp.dll, update_remove.dll, rules.dat. Rename.

Registry:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Run

Delete references to: winstart, winstart002, winstart001.exe

Delete HKEY_CURRENT_USER\Software\VB and VBA Program Settings\Ie Rsp

Open the hidden HOSTS file using Notepad. Remove entries referring to auto.search.msn.com, search.netscape.com, ieautosearch

[miccheck1516]

ill try that now, thanks very much for the info

[miccheck1516]

i dont have any of those registry keys........

[ultimatejester]

Originally posted by miccheck1516@8 September 2003 - 17:15
i dont have any of those registry keys........
visit this then and lemme no if it helps

http://www.doxdesk.com/parasite/IGetNet.html

[miccheck1516]

nope its still here, but it goes straight to the page without acting like it is refreshing constantly, is it possible to change what page ie goes to when an incorrect url is typed? if i could set it to the 404 file not found page then i would be happy.......

[ultimatejester]

did u try using spybot, cuz it can remove both variants

[ultimatejester]

http://www.igetnet.com/downloads/uninstall_igetnet.asp

this shud help 2

[miccheck1516]

ive tried spybot and adaware..... :(

[ultimatejester]

did u try the link i gave u

http://www.igetnet.com/downloads/uninstall_igetnet.asp

[miccheck1516]

just tried it, it said that it removed it but when i type 'ralewig gi' (random things) i still get sent to 'http://apps.webservicehost.com/apps/epa/epa?cid=nave9882&s=ralewig+gi'

This is so annoying

[miccheck1516]

ok brb reebooting i mite have it fixed

[ultimatejester]

hmm try restarting ur pc, we dont have ne other options left. dat site i gave u was the offical site of iGetnet, that shud have worked

[miccheck1516]

alright i got rid of that shit at last at teh bottom of http://apps.webservicehost.com/apps/epa/ep...82&s=ralewig+gi (http://apps.webservicehost.com/apps/epa/epa?cid=nave9882&s=ralewig+gi)

Was a link to removal of a program called 'nav helper' it was as easy as going to add/remove programs :lol:

Now i get redirected to the msn search site, which is bearable but can i not change where my browser goes in the event of me typing shite in the address bar?