|
Ever since this morning I've
been having quite a time trying to remove this hijacker. Basically, it changes
my homepage, instantly overrides any attempt of mine to change it back, adds
unnecessary buttons to the Tools menu, creates numerous popups (most annoying -
some FBI one), creates links on my desktop and makes surfing the net harder by
creating a red bar across the top of the page which is yet another ad.
Basically, at the start of every address bar, it adds its own section
(http://freednshost.info/) before everything else. I've tried AdAware, SpyBot,
HijackThis (to an extent) and msconfig, but it comes back the minute I get rid
of it. Below is a logfile I ran just a few minutes ago.
Logfile of
HijackThis v1.97.7
Scan saved at 5:14:35 PM, on 07/04/2004
Platform:
Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1
(6.00.2800.1106)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec
Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec
Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program
Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton Internet
Security\NISUM.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\Program
Files\Norton AntiVirus\SAVScan.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Norton Internet Security\SymProxySvc.exe
C:\Program
Files\Norton Internet Security\NISSERV.EXE
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\carpserv.exe
C:\Program Files\Compaq\Easy Access
Button Support\StartEAK.exe
C:\Program Files\Analog
Devices\SoundMAX\Smtray.exe
C:\Program Files\Labtec\Labtec Mouse
Software\1.0\lwbwheel.exe
C:\Program Files\Norton Internet
Security\IAMAPP.EXE
C:\Program Files\QuickTime\qttask.exe
C:\Program
Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
C:\PROGRA~1\PANICW~1\POP-UP~1\dpps2.exe
C:\Program Files\Common
Files\Real\Update_OB\evntsvc.exe
C:\Program Files\Messenger Plus!
2\MsgPlus.exe
C:\Program Files\Hewlett-Packard\Digital
Imaging\Unload\hpqcmon.exe
C:\Program Files\Compaq\Easy Access Button
Support\CPQEAKSYSTEMTRAY.EXE
C:\Program Files\Common Files\Symantec
Shared\ccApp.exe
C:\Program Files\Hewlett-Packard\HP
Share-to-Web\hpgs2wnf.exe
C:\WINDOWS\svchost.exe
C:\Program
Files\Compaq\Easy Access Button Support\CPQEADM.EXE
C:\Compaq\EAKDRV\EAUSBKBD.EXE
C:\PROGRA~1\Compaq\EASYAC~1\BttnServ.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program
Files\Hewlett-Packard\AiO\hp psc 700 series\Bin\hpobrt07.exe
C:\Program
Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
C:\PROGRA~1\HEWLET~1\AiO\Shared\Bin\hpoevm07.exe
C:\Program
Files\Hewlett-Packard\AiO\Shared\bin\hpOSTS07.exe
c:\Program Files\Microsoft
Money\System\urlmap.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Documents and Settings\All
Users\Start Menu\Programs\HijackThis\hijackthis.exe
R1 -
HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://freednshost.info/page/
R1 -
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://freednshost.info/page/
R1 -
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://freednshost.info/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://freednshost.info/page/
R1 -
HKLM\Software\Microsoft\Internet Explorer,SearchURL = http://freednshost.info/page/
R0 -
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://freednshost.info/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://freednshost.info/page/
R1 -
HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet
Explorer provided by Compaq
O1 - Hosts: 213.159.118.226 1-se.com
O1 -
Hosts: 213.159.118.226 58q.com
O1 - Hosts: 213.159.118.226 aifind.cc
O1
- Hosts: 213.159.118.226 aifind.info
O1 - Hosts: 213.159.118.226
allneedsearch.com
O1 - Hosts: 213.159.118.226 approvedlinks.com
O1 -
Hosts: 213.159.118.226 auto.ie.searchforge.com
O1 - Hosts: 213.159.118.226
awebfind.biz
O1 - Hosts: 213.159.118.226 best.royalsearch.net
O1 -
Hosts: 213.159.118.226 cracks.am
O1 - Hosts: 213.159.118.226
default-homepage-network.com
O1 - Hosts: 213.159.118.226 find.microgirls.com
O1 - Hosts: 213.159.118.226 find4u.net
O1 - Hosts: 213.159.118.226
freshvideogals.com
O1 - Hosts: 213.159.118.226 i-lookup.com
O1 - Hosts:
213.159.118.226 ie-search.com
O1 - Hosts: 213.159.118.226 in.webcounter.cc
O1 - Hosts: 213.159.118.226 itseasy.us
O1 - Hosts: 213.159.118.226
just.find-itnow.com
O1 - Hosts: 213.159.118.226 link.startmake.com
O1 -
Hosts: 213.159.118.226 mysearchnow.com
O1 - Hosts: 213.159.118.226
nativehardcore.com
O1 - Hosts: 213.159.118.226 qwertysearch123.biz
O1 -
Hosts: 213.159.118.226 search.ieplugin.com
O1 - Hosts: 213.159.118.226
search.psn.cn
O1 - Hosts: 213.159.118.226
searchbar.findthewebsiteyouneed.com
O1 - Hosts: 213.159.118.226
searchcentrix.com
O1 - Hosts: 213.159.118.226 searchmyrequest.com
O1 -
Hosts: 213.159.118.226 super-spider.com
O1 - Hosts: 213.159.118.226
t.rack.cc
O1 - Hosts: 213.159.118.226 teen-biz.com
O1 - Hosts:
213.159.118.226 teenhqpics.com
O1 - Hosts: 213.159.118.226
tits.hardcore4ever.net
O1 - Hosts: 213.159.118.226 webcoolsearch.com
O1
- Hosts: 213.159.118.226 wmmse.com
O1 - Hosts: 213.159.118.226 www.008i.com
O1 - Hosts:
213.159.118.226 www.2fastsearch.net
O1 - Hosts: 213.159.118.226 www.8095.com
O1 - Hosts:
213.159.118.226 www.alfa-search.com
O1 - Hosts: 213.159.118.226 www.boredlife.com
O1 -
Hosts: 213.159.118.226 www.couldnotfind.com
O1 - Hosts: 213.159.118.226 www.cracks.am
O1 - Hosts:
213.159.118.226 www.daum.net
O1 - Hosts: 213.159.118.226 www.dreamwiz.com
O1 - Hosts: 213.159.118.226 www.find-itnow.com
O1 -
Hosts: 213.159.118.226 www.find-itnow.com
O1 - Hosts: 213.159.118.226 www.find4u.net
O1 - Hosts:
213.159.118.226 www.firstbookmark.com
O1 - Hosts: 213.159.118.226 www.gajai.com
O1 - Hosts:
213.159.118.226 www.hand-book.com
O1 - Hosts: 213.159.118.226 www.hao123.com
O1 - Hosts:
213.159.118.226 www.hotsearchbox.com
O1 - Hosts: 213.159.118.226 www.hotwebsearch.com
O1
- Hosts: 213.159.118.226 www.hugesearch.net
O1 - Hosts: 213.159.118.226 www.iquicksearch.com
O1
- Hosts: 213.159.118.226 www.lookfor.cc
O1 - Hosts: 213.159.118.226 www.maxxxhosters.com
O1
- Hosts: 213.159.118.226 www.naver.com
O1 - Hosts: 213.159.118.226 www.nkvd.us
O1 - Hosts:
213.159.118.226 www.novafuck.com
O1 - Hosts: 213.159.118.226 www.ohcorea.com
O1 - Hosts:
213.159.118.226 www.omega-search.com
O1 - Hosts: 213.159.118.226 www.onet.pl
O1 - Hosts:
213.159.118.226 www.power-search.info
O1 - Hosts: 213.159.118.226 www.rightfinder.net
O1 -
Hosts: 213.159.118.226 www.search-1.net
O1 - Hosts: 213.159.118.226 www.search-and-go.com
O1 - Hosts: 213.159.118.226 www.search-dot.com
O1 - Hosts: 213.159.118.226 www.search-space.com
O1
- Hosts: 213.159.118.226 www.searchforge.com
O1 - Hosts: 213.159.118.226 www.searching-the-net.com
O1 - Hosts: 213.159.118.226 www.searchv.com
O1 - Hosts:
213.159.118.226 www.searchxl.com
O1 - Hosts: 213.159.118.226 www.seznam.cz
O1 - Hosts:
213.159.118.226 www.slotch.com
O1 - Hosts: 213.159.118.226 www.spidersearch.com
O1 - Hosts: 213.159.118.226 www.startium.com
O1 -
Hosts: 213.159.118.226 www.therealsearch.com
O1 - Hosts: 213.159.118.226 www.ttjj.com
O1 - Hosts:
213.159.118.226 www.viewpornkey.com
O1 - Hosts: 213.159.118.226 www.wazzupnet.com
O1 -
Hosts: 213.159.118.226 www.websearch.com
O1 - Hosts: 213.159.118.226 www.windowws.cc
O1 - Hosts:
213.159.118.226 www.xgmm.com
O1 - Hosts: 213.159.118.226 xwebsearch.biz
O1 - Hosts: 213.159.118.226
yourbookmarks.ws
O2 - BHO: (no name) -
{53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1.1\SDHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program
Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) -
{FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - c:\Program Files\Microsoft
Money\System\mnyviewer.dll
O3 - Toolbar: Norton AntiVirus -
{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton
AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE
C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [CARPService]
carpserv.exe
O4 - HKLM\..\Run: [WCOLOREAL] "C:\Program
Files\COMPAQ\Coloreal\coloreal.exe"
O4 - HKLM\..\Run: [CPQEASYACC]
C:\Program Files\Compaq\Easy Access Button Support\StartEAK.exe
O4 -
HKLM\..\Run: [srmclean] C:\Cpqs\Scom\srmclean.exe
O4 - HKLM\..\Run: [Smapp]
C:\Program Files\Analog Devices\SoundMAX\Smtray.exe
O4 - HKLM\..\Run:
[Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers
O4 - HKLM\..\Run: [LWBMOUSE] C:\Program Files\Labtec\Labtec Mouse
Software\1.0\lwbwheel.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4
- HKLM\..\Run: [iamapp] C:\Program Files\Norton Internet Security\IAMAPP.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe"
-atboottime
O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program
Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
O4 - HKLM\..\Run: [Pop-Up
Stopper] "C:\PROGRA~1\PANICW~1\POP-UP~1\dpps2.exe"
O4 - HKLM\..\Run:
[TkBellExe] C:\Program Files\Common Files\Real\Update_OB\evntsvc.exe -osboot
O4 - HKLM\..\Run: [MessengerPlus2] "C:\Program Files\Messenger Plus!
2\MsgPlus.exe"
O4 - HKLM\..\Run: [CamMonitor] C:\Program
Files\Hewlett-Packard\Digital Imaging\\Unload\hpqcmon.exe
O4 - HKLM\..\Run:
[ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 -
HKLM\..\Run: [cakecurb] C:\PROGRA~1\SIZERD~1\gpl math ace.exe
O4 -
HKLM\..\Run: [Network Service] C:\WINDOWS\svchost.exe -sr -0
O4 -
HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKCU\..\Run: [Microsoft NetMeeting] "C:\Program
Files\NetMeeting\conf.exe" -Background
O4 - HKCU\..\Run: [MessengerPlus2]
"C:\Program Files\Messenger Plus! 2\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run:
[msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 -
HKCU\..\Run: [Network Service] C:\WINDOWS\svchost.exe -sr -0
O4 - Global
Startup: HPAiODevice(hp psc 700 series) - 1.lnk = C:\Program
Files\Hewlett-Packard\AiO\hp psc 700 series\Bin\hpobrt07.exe
O4 - Global
Startup: Microsoft Works Calendar Reminders.lnk = ?
O8 - Extra context menu
item: &Define - C:\Program Files\Common Files\Microsoft Shared\Reference
2001\A\ERS_DEF.HTM
O8 - Extra context menu item: Debt Solutions - http://213.159.118.226/tools.php?qq=Debt+Solutions
O8 -
Extra context menu item: Look Up in &Encyclopedia - C:\Program Files\Common
Files\Microsoft Shared\Reference 2001\A\ERS_ENC.HTM
O8 - Extra context menu
item: Party Poker - http://213.159.118.226/tools.php?qq=Party+Poker
O8 - Extra
context menu item: Party Poker.com - http://213.159.118.226/tools.php?qq=Party+Poker.com
O9 -
Extra 'Tools' menuitem: Party Poker.com (HKLM)
O9 - Extra 'Tools' menuitem:
Party Poker (HKLM)
O9 - Extra button: Encarta Encyclopedia (HKLM)
O9 -
Extra 'Tools' menuitem: Encarta Encyclopedia (HKLM)
O9 - Extra button:
Define (HKLM)
O9 - Extra 'Tools' menuitem: Define (HKLM)
O9 - Extra
button: Researcher (HKLM)
O9 - Extra button: AOL Instant Messenger (TM)
(HKLM)
O9 - Extra button: Real.com (HKLM)
O9 - Extra 'Tools' menuitem:
Debt Solutions (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra
'Tools' menuitem: Messenger (HKLM)
O13 - DefaultPrefix: http://freednshost.info/page/
O13 - WWW Prefix: http://freednshost.info/page/
O16 - DPF:
{02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com/qtactivex/qtplugin.cab
O16 - DPF:
{166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shoc.../swdir.cab
O16 -
DPF: {1954A4B1-9627-4CF2-A041-58AA2045CB35} (Brix6ie Control) - http://a19.g.akamai.net/7/19/7125/1267/...rix6ie.cab
O16 -
DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/Shar...vSniff.cab
O16 -
DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} (Office Update Installation Engine)
- http://office.microsoft.com/officeupdate/content/opuc.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/C...4353587963
O16 -
DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information
Class) - http://security.symantec.com/sscv6/Shar.../cabsa.cab
O16 -
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.macromedia.com/pub/sh...wflash.cab
O16 -
DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab
O19 - User
stylesheet: C:\WINDOWS\system32\g36ad.ti4
Like I said, I tried
HijackThis before and removed all the R1, R0, O1 plus a few other ones that had
the link. But, they all came back within 5 minutes. Any help would be greatly
appreciated. | |
| Back to top |
|
 |
Windbrand
Cadet
Joined:
Apr 07, 2004
Posts: 3
Location: Canada
|
 Posted: Wed Apr 07, 2004 9:53 pm Post subject: |
|
|
This is a bump, but only because
I need serious help. This thing is like my brother - comes back when its uwanted
and unexpected.  | |
| Back to top |
|
|
Windbrand
Cadet
Joined:
Apr 07, 2004
Posts: 3
Location: Canada
|
| Posted: Wed Apr 07, 2004 10:56 pm Post subject: |
|
|
Never mind, all taken care of.
It was iMesh all along. After reading the license agreements where it
said it supports Cydoor, MySearch, Gator and god knows what else, I removed the
program, and with it went all the spyware.
Case in point: never never
get iMesh. | |
| Back to top |
|
|
alialiii
Cadet
Joined:
Apr 11, 2004
Posts: 1
Location: Finland
|
| Posted: Sun Apr 11, 2004 4:42 pm Post subject: |
|
|
I dont believe it is iMesh. I
have the same problem and i cant find a cure. I have a laptop that has
practically nothing installed yet. Just winxp and word and that's it.
The thingy is the most annoying thing i've ever met in computers. What
kind of lifeless looser makes this kind of stuff. | |
| Back to top |
|
|
innocent_victim
Cadet
Joined:
Apr 11, 2004
Posts: 7
Location: USA
|
| Posted: Sun Apr 11, 2004 7:16 pm Post subject: I am stuck with
freednshost |
|
|
I do not have imesh or any other
softwares installed on my computer. i used to have kazaa which had gain
advertising. i removed kazaa and all its components but still could not get rid
of this freednshost. its in my tooks of the internet explorer along with
messenger. i am also unable to get rid of poker.com which opens when ever i try
to open a new explorer window. from then on i am stuck with it.
if any
one knows how to get rid of it please post it here.
innocent
victim | |
| Back to top |
|
|
7777777
Cadet
Joined:
Apr 11, 2004
Posts: 2
Location: USA
|
| Posted: Sun Apr 11, 2004 10:04 pm Post subject: |
|
|
| This must be a fun new one...
this is the only place I can find the name in searches. I got this after
morpheus was loaded onto my CPU and after I thought I wiped it, this stuff
started showing up. I can't even find the "official" freednshost.com or wherever
it comes from. Would love some help as well. | |
| Back to top |
|
|
awsl
Cadet
Joined:
Apr 11, 2004
Posts: 1
Location: Singapore
|
| Posted: Sun Apr 11, 2004 11:13 pm Post subject: |
|
|
| Hi.. I have managed to get rid
of the freednshost bug.. other than clearing all the unwanted links with
Hijackthis, I use Xoftspy to scan the registry, found those pest and clear them
too. hope u can find a solution. | |
| Back to top |
|
|
innocent_victim
Cadet
Joined:
Apr 11, 2004
Posts: 7
Location: USA
|
| Posted: Mon Apr 12, 2004 1:22 am Post subject: |
|
|
i found that hijackthis could
remove the components from the browser. but it did not remove the freednshost
completely. still need to find the full antidote to it.
thanx for your
replies. | |
| Back to top |
|
|
jav
Cadet
Joined:
Apr 12, 2004
Posts: 1
Location: Australia
|
| Posted: Mon Apr 12, 2004 7:43 am Post subject: freednshost
removal |
|
|
Here is what I've found.
The freednshost hijacker creates a file svchost.exe in c:\Windows\, the
real svchost.exe lives in System32.
To remove it:
1. Disconnect your
internet connection
2. Get the create date of c:\Windows\svchost.exe
3.
Rename c:\Windows\svchost.exe to something else. On XP I then killed the svchost
process running under my logged in user as no services should have been running
under me.
4. Search your hard drive for all files created on the date from 2
and get rid of any you can. My system had a couple of DLLs injvoy.dll and
wiadr.dll which I renamed. There are other suspicious files in
c:\Windows\prefetch and one in C:\Program Files\Internet Explorer
5. Search
the registry for c:\Windows\svchost.exe and delete these keys. They are in run
sections. Do NOT delete keys for the real version in System32
6. Search the
registry for freednshost and replace with a URL like http://www.google.com
I've been an hour without it!
Just another innocent
victim | |
| Back to top |
|
|
innocent_victim
Cadet
Joined:
Apr 11, 2004
Posts: 7
Location: USA
|
| Posted: Mon Apr 12, 2004 12:24 pm Post subject: still under the
spell |
|
|
thanx for the reply,
i
tried to find the svchost.exe file and the only place i found it was in
c:\windows\system32 and it was created way back. the only other reference i
found was the SVCHOST.EXE-2F7BD2AF.pf file located in C:\WINDOWS\Prefetch which
was created in the last 2 days.
before i ran the hijackthis, the
freednshost was all over the place, but now it replaces selective pages like
when i try to log in thru my mail.com email account and other important
government sites. its very frustrating not knowing wat to do since i am no
computer wizz..
thanx | |
| Back to top |
|
|
crack2K4
Cadet
Joined:
Apr 11, 2004
Posts: 2
Location: USA
|
| Posted: Mon Apr 12, 2004 12:28 pm Post subject: Thanks jav! |
|
|
Thank you it worked for the most
part. One thing, like innocent_victim is it still redirects me when I'm trying
to look at members.msn.com msn profiles.
Thanks though  | |
| Back to top |
|
|
crack2K4
Cadet
Joined:
Apr 11, 2004
Posts: 2
Location: USA
|
| Posted: Mon Apr 12, 2004 12:57 pm Post subject: spybot |
|
|
Yo, I downloaded spybot and did
all the updates and immunization. I scanned too and it cleared me of all of the
problems.
Try that innocent_victim | |
| Back to top |
|
|
innocent_victim
Cadet
Joined:
Apr 11, 2004
Posts: 7
Location: USA
|
| Posted: Mon Apr 12, 2004 2:35 pm Post subject: |
|
|
thanx craxk2k4
spybot
was able to get rid of all the components after doing all the updates and
immunization. i am gonna donate some money to spybot.
thanks Patrick
- educated innocent victim | |
| Back to top |
|
|
7777777
Cadet
Joined:
Apr 11, 2004
Posts: 2
Location: USA
|
| Posted: Mon Apr 12, 2004 8:41 pm Post subject: |
|
|
| Wanted to thank jav that totally
fixed me up. Is this freednshost something new? This is the only place I've seen
it posted on the web. It looks like it lurks in P2P programs. | |
| Back to top |
|
|
bigdrag
Cadet
Joined:
Apr 12, 2004
Posts: 2
Location: USA
|
| Posted: Mon Apr 12, 2004 11:44 pm Post subject: freednshost |
|
|
| THANKS!. I just found this site
and was going CRAZY trying to get rid of this. I haven't tried getting rid of it
but will ASAP. I tried everything too, and AOL was NO HELP AT ALL!. I told them
their gung ho over viruses and infections yet they allow this worm(?) to take
over our computers and then told me to get a hold of the computers
MANUFACTURER!. How can the "web police" allow this damn thing to EXIST!. How
many others are infected?. I picked it up in the last 3 days anad haven't a clue
on how to get rid of it. I signed up for McAfee virus scan/protection, but will
this help?. How can I get it off and KEEP it off!. Prevent it from reinfecting
me?. | |
