I will. I'm very very very thankful for all your help! Thanks for using so much time helping with this hijack-thing :D
IE seems to be fixed now. I typed www.google.com in the adressbar, and I didn't get hijacked. :) Thanks!! Here's the prefixs.txt attached
OK. Thanks!
Oh? Anything seriously wrong?
OK. I can manage that
I have to learn more about computers... :) Found it and attaced it
I followed your instruction, but after I clicked "OK" nothing happened.
Sorry for this stupid question, but what shall I run? regedit /e c:\prefixes.txt or regedit /e c:\prefixes.txt...
I'm not sure if I have done a search for nkvd before. REGEDIT4 ; RegSrch.vbs © Bill James ; Registry search results for string "nkvd"...
Hi again! searchpage.cc is the page the hijack puts in front of the adress I try to go to. Did you find anything in the last Registry search...
REGEDIT4 ; RegSrch.vbs © Bill James ; Registry search results for string "searchpage" 15.04.2004 17:24:47 ; NOTE: This file will be deleted...
There's no services in the system32 folder. And yes, we reinstalled the WMP.
OK. I could not understand where the explorer.bat and version.bat had gone.. lol ;D I won't do a thing unless you suggest or approve it :)...
I found this on the net. Is ser7673 fix a thing to try out or? http://computercops.biz/modules.php?name=Forums&file=viewtopic&p=137864
How do I run explorer.bat? When I run runme.bat and clicks explorer dll's nothing happens. Another question: If I uninstall IE and then...
I don't understand what intentions anyone have by making such a bug as this. One question: Back yesterday when I started in safe mode, I could...
Thanks, I'm getting closer. Now the hijacking only has an effect when I don't type http:// or https:// before the adress I want to go to. Here's a...
That's great! I'm very thankful for all your help and that you're jusing so much time trying to help me. I'll be back in the afternoon to morrow,...
Hi Pieter! I just ran Spybot, and it only found and registration for WMP. More about the IE problem: When I type in an adress and clicks...
OK. Now WMP works. Back to IE. nkvd.us still overrides any adresses(execept this sites adress) I type in the adressbar. What shall I do?
I've allways thought it was version 9.0, but now I'm not sure. In wmplayer properties it says file version 8.0.0.4490? I belive it's 9.0
It won't send with the results pasted into a message, so I have attatched the results in a text file. I have not deleted Stream yet, nor have I...
When I ran RegSrch.vbs and an Norton Antivirus message poped up. It's in Norwegian so I have problems with translating it into english.....
CWShedder is version 1.56.02. HJT log: Logfile of HijackThis v1.97.7 Scan saved at 19:39:20, on 14.04.2004 Platform: Windows XP SP1 (WinNT...
OK. This is strange. I tried to open wmp. But nothing happens. The funny thing is that this scumware hijacked my browser while I was away on...
Separate names with a comma.
