yo.netster.com Spyware/Adware?

[Simon]

Me and my friends have been struck with this particular pest, and for the life of me I can not get rid of it. I have ran various Spy and Adware killers and no luck.

What it seems to do is if you type a URL wrong, it'll goto the search engine of the above address. Which isn't a huge bother, what is annoying is that if you are logging into certain sites and pages (like a news posting system) it intercepts the login and takes you to the search page. It's completely bizzare!

Anyone got any ideas, or have you stumbled onto this pest too?

[snowmonkey]

first get a copy of Spy Sweeper from this link:
http://downloads-zdnet.com.com/3000-2144-10200144.html
and run it on that computer (even the trail version works perfectly)

Then you search the registry for the name that pops up on your IE and remove the entry for it... what happens is, basically these fake search managed to tag an extension of their URL to the IE setting in the registry and that's how they get around it.


cheers

[Azn_tweaker]

or u could download ad-aware.
after downloading ad-aware follow these instructions:

Please can you make sure that you are using Build 181
Then use the WebUpdate to get the latest reference file
Then Open Ad-aware
Click the WebUpDate
button at the top right hand side of the Ad-aware screen (The world globe).
Click "Connect"
Ad-aware will then download the latest reference file for you.
To make sure it is updated , look at the main
Ad-aware screen, and look under "Initialization Status"
then scan doing a "Full Scan" (Custom)
Post ur Log- When the scan is complete, click "Show Log", then highlight all of the text in the logfile with your mouse. On your keyboard, press Ctrl + C, which will copy the text to your clipboard. Now be online, logged in and ready to post your logfile. Press Ctl and V and that will copy your logfile to the post!

[Simon]

I will try what you mentioned, but basically no spyware/adware remover has been able to remove this pain in the ass!

[Play_The_0dds]

if you set the custom scan options of spybot or adaware to include the host file and scann all files you should get it.

[Simon]

Here is my log file: http://www.pixelghetto.com/logfile.txt

Here is the URL that it throws me to, its only when I login to something that after loggin in takes me to a new page such as a news posting system: http://yo.netster.com/Index.asp?Site...NlLmNvbQ%3D%3D

[snowmonkey]

roing17.ocx is a virus too, you got to remove it from your system.

http://www.mcse.ms/archive177-2004-5.html

Roings Object recognized!
Type : File
Data : roing17.ocx
Category : Malware
Comment :
Object : c:\windows\downloaded program files\
FileSize : 72 KB
FileVersion : 1.00
ProductVersion : 1.00
CompanyName : df
InternalName : roing17
OriginalFilename : roing17.ocx
<snip>

Virus Check On Line:
http://www3.ca.com/virusinfo/

AntiVirus DOS boot disks:
http://qqsoftware.xs4all.nl/fprot/F-PROT.htm

Free AntiVirus Solution:
http://www.grisoft.com/us/us_dwnl_free.php

cheers