Computer help.....

Box and one

Registered User
Forum Member
Feb 26, 2000
10,329
441
83
Hudson Valley area.....NY
I have a problem with my Internet Explorer. There is a "hijacker" virus that I cannot get rid of called "freednshost"
"Freednshost" automatically adds a prefix to any website I type in on the address bar and takes me to other sites, it is also adding icons to my desktop. The icons are links to websites for such things like "Tramadol" and "Brain Injury Lawyer"
Other websites say you can use CWShredder to get rid of it, but that didn't work. Also I used a program called "HijackThis!"
HijackThis! deletes the files temporarily, but the files keep coming back. I dont know how to permanetly delete "freednshost"

The above was typed by the "son" of box.
If someone can explain to him how to get rid of this hijacker virus I would apprecaite it.Thank you
 

KMA

Registered User
Forum Member
May 25, 2003
745
2
0
Freednshost Hijacker Removal:


The freednshost hijacker masquerades as svchost.exe. It creates a file:
svchost.exe in c:\Windows\, the real one lives in System32.


To remove it:

1. Disconnect your internet connection

2. Get the create date of c:\Windows\svchost.exe

3. Rename c:\Windows\svchost.exe to something else. On XP then kill the svchost process running under your logged in user as no services should have been running under you.

4. Search your hard drive for all files created on the date from 2 and get rid of any you can. Check a couple of DLLs injvoy.dll and wiadr.dll and rename. There are other suspicious files in c:\Windows\prefetch and one in C:\Program Files\Internet Explorer. There are also a bunch of shortcuts.

5. Search the registry for c:\Windows\svchost.exe and delete these keys. They are in run sections. Do NOT delete keys for the real svchost in System32

6. Search the registry for freednshost and replace with a URL like
http://www.msn.com.
 
Bet on MyBookie
Top