Desktop

Ask something
Discussion Locked

Help! -> (http://%6e%6b%76%64%2e%75%73/)

0 helpful
5 replies

by sysengineer

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
Every time I start IE this (http://%6e%6b%76%64%2e%75%73/) appears in the browser and when I type a URL such as www.google.com the above address puts itself automatically in front of the URL. I have tried spy-bot, ad-ware, & cwshredder and I can still not get rid of this problem. I have even made registry to delete this info but as soon as I go back into the registry its there again...!

5 replies

by joenmr

Sounds like you have a trojan horse.

Check the following links:

http://support.microsoft.com/default.aspx?scid=kb;en-us;320159

http://search.netscape.com/ns/boomframe.jsp?query=nkvd.us&page=1&offset=0&result_url=redir%3Fsrc%3Dwebsearch%26requestId%3D5aa148883ac187f2%26clickedItemRank%3D2%26userQuery%3Dnkvd.us%26clickedItemURN%3Dhttp%253A%252F%252Fwww.experts-exchange.com%252FSecurity%252FQ_20954926.html%26invocationType%3D-%26fromPage%3DnsBrowserRoll%26amp%3BampTest%3D1&remove_url=http%3A%2F%2Fwww.experts-exchange.com%2FSecurity%2FQ_20954926.html

http://www.computercops.biz/postitle49941-0-0-.html

http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_HARNIG.Q

Good Luck

Jose

by kuryous1

I got this once and it was a tool search of all things. I tried all you did and ended up with the same thing. Even went the registry route. Try all the things listed above and goodluck! I eventually got rid of it by simply restoring a backup prior to it's appearance. You do back up?? If you have XP, try a previous system restore. Hope this works for you and goodluck.

by computersolutions

At the bottom of the page, on that site is a link that says "if problem click here" There is a tool and instructions to remove this link.

by civril1

there is uninstaller on this page, and it works.
This is sad, but i think that there is no other way. first i have few domains in hosts.deny list and it was ok, i think some firewall is good idea or blocking this type of trojans :]

by guenzler

It is not a virus all though it should be calssified as one. It is Spyware. Get a few tools from the web if you can, if not then use a seperate machine to get them. Get Ad-Aware and the latest refrence files. Get SpySweeper, the tiral of that works great. Also do a search for CWSshreder and HiJackThis. When scanning with Ad-aware make sure you do a custom scan, and select the hard drive, and all of the "Memroy & Registy" options. Once that is done scan the machine, dont forget to update or copy the refrence file into the ad-aware directory. Make sure CWSshreder is the latest version 1.5.9 or later. I run into this stuff all the time, also make sure you kill explorer.exe when running cwsshreder, it is also good to do when using ad-aware and spysweeper. This trick only works on 2k/xp. Hopefully those tricks will help remove that pesky bug.

This discussion is closed to new replies.