Help Me Get Rid Of This

Printable View

09-07-2003, 05:09 PM
miccheck1516

Not 100% sure if this is the right place for this, but its not a k-lite problem so i put it here anyway.

When i type in an incorrect url by browser (internet explorer 6) tries to redirect me to a page beginning with 'apps.webservicehost.com' It only started one night after a friend was on my computer so i dont know whats going on, ive tried spybot S&D but its still happening, please help me fix this its really pissing me off.

I just found this http://spyblocker-software.com/IPB/index.p...st=0&#entry1537 and im give it a try, il report back soon
09-07-2003, 05:10 PM
[B][O][T]

Re-Install IE 6

BOT
09-07-2003, 05:20 PM
miccheck1516

back soon!
09-07-2003, 05:29 PM
[B][O][T]

Eummm Your avatar is way over the limit for what We accept!
Yours is ~530KB (Maximum is 100KB, for both avatar and sig)

Please remove Your avatar ASAP, or We mods will.

Thanks for understanding,
BOT
09-07-2003, 05:29 PM
miccheck1516

ok i feel really wick now, how the hell do i uninstall ie 6??????
09-07-2003, 05:35 PM
[B][O][T]

In Add/Remove Programs, should be there....which OS are You running?

BOT
09-07-2003, 05:39 PM
miccheck1516

im using windoze xp i went to add remove programs, add/remove windows components, removed ie, went back, added it again, and i still have this horrible problem its driving me nuts!!

ps. did u remove my avatar? ty if u did sorry bout that
09-07-2003, 05:46 PM
[B][O][T]

First no I did not remove Your avatar, another moderator did....

If You do a search on Your harddrive for webservicehost will it give You any results?

BOT
09-07-2003, 05:52 PM
miccheck1516

a string with 'http://apps.webservicehost.com/' is in
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TypedURLs

and in HKEY_CURRENT_USER\Software\Microsoft\Search Assistant\ACMru\5603 is a string with 'webservicehost'

A hard drive search shows nothing :(
09-07-2003, 05:54 PM
Marius24

go to C:/Windows and a html file is in there under the name wbservice host or something simmilar (if it isnt in your windows folder try System or sytem32 folder) and just delete the file and ur browser is fixed B)
09-07-2003, 06:01 PM
miccheck1516

hmm i cant seem to find that file.........
09-07-2003, 06:10 PM
Marius24

it could be under a different file name :unsure:
09-07-2003, 06:24 PM
miccheck1516

:( :angry:
09-07-2003, 06:33 PM
nikita69

Quote:

Originally posted by Marius24@7 September 2003 - 17:54
go to C:/Windows and a html file is in there under the name wbservice host or something simmilar (if it isnt in your windows folder try System or sytem32 folder) and just delete the file and ur browser is fixed B)

are u thalking about hosts file? or this directory?
C:\WINDOWS\system32\drivers\etc
09-07-2003, 06:35 PM
sharedholder

Browser Hijack Blaster

Browser Hijack Blaster protects your system from browser hijackers and spyware that alters your Internet Explorer settings.

Running silently in the background, Browser Hijack Blaster only springs into action when an attempt is made. It watches and protects the following items:
IE Homepage, IE Default Page, IE Search Page, BHOs

Whenver one of the above items is changed, or a BHO is added, you are immediately provided with information on the item, along with the option to keep the change, or revert to your previous settings.

Browser Hijack Blaster also can detect changes between the times it is run. If a spyware application tries to install its BHO at boot-up, and change settings at boot-up, before Browser Hijack Blaster is activated, you will be notified and (like the situation above) given the option to keep the change or to revert to your previous settings.

Browser Hijack Blaster also has a database of values common to spyware programs. If, for example, your homepage is changed to lop.com (a known hijacker) you will not only be notified, but a special notice will be displayed that you probably have Lop.com on your system (and that you should run an anti-spyware program such as Ad-Aware or Spybot S & D).

Download Browser Hijack Blaster from HERE (Installer is approx. 394 kb.)
Compatible with Windows 95, 98, ME, NT 4, 2000, XP.

http://www.wilderssecurity.com/bhblaster.html
09-07-2003, 06:38 PM
sharedholder

Or go to my site and look on Freeware Rocks for a soft called HijackThis ,here the description.

Quote:

A general homepage hijackers detector and remover.The program can create a backup of your original settings and also ignore selected items. Additional features include a simple list of all startup items, default start page, online updates and more. Intended for advanced users.
09-08-2003, 12:01 AM
miccheck1516

that stops things happening, no good, as the problem is allready there can anyone else help???
09-08-2003, 12:25 AM
ultimatejester

igetnet

Sets the MSN and Netscape search engines to ignkeywords.com and rspsearch.com, also uses searchresult.net, apps.webservicehost.com (qcksearch.com)

Installed files (you probably won't have all of them): bho.dll, rsp.dll, winstart.exe, bho001.dll, rsp001.dll, winstart001.exe, install_all.dll, update_hosts.dll, update_com.dll, update_bho.dll, update_rsp.dll, update_remove.dll, rules.dat. Rename.

Registry:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Run

Delete references to: winstart, winstart002, winstart001.exe

Delete HKEY_CURRENT_USER\Software\VB and VBA Program Settings\Ie Rsp

Open the hidden HOSTS file using Notepad. Remove entries referring to auto.search.msn.com, search.netscape.com, ieautosearch
09-08-2003, 04:48 PM
miccheck1516

ill try that now, thanks very much for the info
09-08-2003, 05:15 PM
miccheck1516

i dont have any of those registry keys........
09-08-2003, 08:38 PM
ultimatejester

Quote:

Originally posted by miccheck1516@8 September 2003 - 17:15
i dont have any of those registry keys........

visit this then and lemme no if it helps

http://www.doxdesk.com/parasite/IGetNet.html
09-08-2003, 08:59 PM
miccheck1516

nope its still here, but it goes straight to the page without acting like it is refreshing constantly, is it possible to change what page ie goes to when an incorrect url is typed? if i could set it to the 404 file not found page then i would be happy.......
09-08-2003, 09:02 PM
ultimatejester

did u try using spybot, cuz it can remove both variants
09-08-2003, 09:04 PM
ultimatejester

http://www.igetnet.com/downloads/uninstall_igetnet.asp

this shud help 2
09-08-2003, 09:12 PM
miccheck1516

ive tried spybot and adaware..... :(
09-08-2003, 09:13 PM
ultimatejester

did u try the link i gave u

http://www.igetnet.com/downloads/uninstall_igetnet.asp
09-08-2003, 09:14 PM
miccheck1516

just tried it, it said that it removed it but when i type 'ralewig gi' (random things) i still get sent to 'http://apps.webservicehost.com/apps/...alewig+gi'

This is so annoying
09-08-2003, 09:16 PM
miccheck1516

ok brb reebooting i mite have it fixed
09-08-2003, 09:17 PM
ultimatejester

hmm try restarting ur pc, we dont have ne other options left. dat site i gave u was the offical site of iGetnet, that shud have worked
09-08-2003, 09:22 PM
miccheck1516

alright i got rid of that shit at last at teh bottom of http://apps.webservicehost.com/apps/epa/ep...82&s=ralewig+gi

Was a link to removal of a program called 'nav helper' it was as easy as going to add/remove programs :lol:

Now i get redirected to the msn search site, which is bearable but can i not change where my browser goes in the event of me typing shite in the address bar?