Author Topic: Q: can't remove Win32:NetsrchHijack [Trj]  (Read 6273 times)

0 Members and 1 Guest are viewing this topic.

mykolas

  • Guest
Q: can't remove Win32:NetsrchHijack [Trj]
« on: November 24, 2003, 08:54:29 PM »
 ??? can't remove Win32:NetsrchHijack [Trj]???
What steps i must to do after Avast show that i have it on computer???

Hornus Continuum

  • Guest
Re:Q: can't remove Win32:NetsrchHijack [Trj]
« Reply #1 on: November 25, 2003, 07:51:06 AM »
mykolas.

First I searched the avast! forums for "NetsrchHijack [Trj];" the only post it found was yours.  Second, I searched the rest of Alwil's web site for "NetsrchHijack" using its search feature without results. Manually looked around under the Viruses Menu.  Again no luck.

Then I searched about a half dozen virus databases without any hits, searching first for "NetsrchHijack" (no joy) then for various combinations of "network," "search," "hijack," and "trojan."  As expected, I got hundreds of hits and looked at a lot of them, but nothing I saw looked applicable.

Finally, I did a similar series of searches at Google, first in their discussion groups (a bust) followed by a websearch, getting 2 hits.  The first search result looked promising, it contained the text "Win32:NetsrchHijack [Trj]" along with "How to remove ... ," and it was at, guess where, Alwil's web site.  Go figure.  After clicking the link, I was taken to the VPS history page, which only displays the lists of malware included in each update -- nothing at all about dealing with the trojan.  The second was at a security website and linked to a thread announcing variaous signature updates, including avast!'s.

At this point,  mykolas, you're going to have to gives us some more info so we can help you.  In what file did the scanner detect the trojan, and in what directory was it?  What information is displayed on the file's property page -- Comments, Company, Internal Name, Original file name, and Product Name?

Have you tried to verify that it's not a false positive with an online scanner.  If a few online scans turn up empty, it may be nothing to worry about.  But if the online scans detect a trojan in the same file, you'll get instructions for removal or at least an alias you can use to search for more information.

 Search the forum for online scanner, you'll get plenty of hits, or go to the sticky topic Links (for almost everything ...) in the General Topics forum.  Technical has done an excellent job of listing software that is compatible with avast!, including online scanners, organized by software category.

Regards,
Hornus

Offline raman

  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 1062
Re:Q: can't remove Win32:NetsrchHijack [Trj]
« Reply #2 on: November 25, 2003, 09:42:26 AM »
??? can't remove Win32:NetsrchHijack [Trj]???

AFAIK that is a Browser "Hijacker". You could try Spybot (security.kolla.de) or adaware(www.lavasoft.com). Maybe they are able to do it for you. Or you can post a hijackthis log here and we could see what we can do:
Look here how to do it: http://www.net-integration.net/cgi-bin/forum/ikonboard.cgi?s=eb14e1ff642cabf6795db3dd7efd34c0;act=ST;f=32;t=6624
but you may ask there too, because it is the Spybot supportforum and the guys there are really good!
MfG Ralf

Hornus Continuum

  • Guest
Re:Q: can't remove Win32:NetsrchHijack [Trj]
« Reply #3 on: November 25, 2003, 10:36:10 AM »
mykolas, raman,

I forgot to mention in my post that I did look for it in Spybot Search & Destroy.  It wasn't listed.

Regards,
Hornus

Offline raman

  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 1062
Re:Q: can't remove Win32:NetsrchHijack [Trj]
« Reply #4 on: November 25, 2003, 10:44:37 AM »
Because  Avast invented this name!:)  We will see, what file Avast reports as NetsrchHijack. I think it could be a Cool-websearch hijacker!;)
MfG Ralf

mykolas

  • Guest
Re:Q: can't remove Win32:NetsrchHijack [Trj]
« Reply #5 on: November 25, 2003, 11:10:08 PM »
Thanks for all  ;)
I will try to explain my problem.This was start about a half month ago with very strange action: when i was opening internet explorer,he's all time starting with start page www.idgsearch.com (inteligent decision guide search).Also after that i found two terrible links in my favorites (best free porn and updated daily adult galeries) and two links on my desktop (diet pils and play online)  >:( You can imaging how i was hungry when i was try to get this off from my computer but no one program don't help me.From this time Avast4 often show me that i have NetsrchHijack [Trj] on my computer but .... I was use "delete" "remove" and all other available actions.Also i was trying to use some spy- and addware scaners such as "Spyware killa" and similars.For today i lost any hope to do something  :-\ When i was trying to get some info about  Win32:NetsrchHijack [Trj]  with Google i also find only  Alwil's web site.After clicking the link, I was taken to the VPS history page, which only displays the lists of malware included in each update-nothing at all about dealing with the trojan.Can it be that avast on my computer don't have this update???Is it possible if i have broadband internet??? Thanks to yours replies now i have some minds and must to try some ways but if somebody have  to say something more i'm will check this forum often and, off course, promise to inform about...
Wishez . . .

Offline raman

  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 1062
Re:Q: can't remove Win32:NetsrchHijack [Trj]
« Reply #6 on: November 26, 2003, 04:45:51 AM »
I is Coolwebsearch. Read this carefully: http://www.spywareinfo.com/~merijn/cwschronicles.html

After that be sure to update your Windows/IE Explorerr
MfG Ralf

mykolas

  • Guest
Re:Q: can't remove Win32:NetsrchHijack [Trj]
« Reply #7 on: December 08, 2003, 01:03:53 PM »
thank you  ;D (for raman especially  ;))
now i can use my computer again...
and come back to normal life  8)