BuffaloHELP
Aug 6 2006, 07:33 AM
Recently, I don't know when, I realized that my browser was opening some weird pages. It would either open to what it seemed to be a valid webpage but it always looked the same. But the contents will be text only but always with adult related links... so I was curious but never paid any attention since these pages were coming up only when I mistyped an URL address. But the pages popped up were always the same and it got me curious. So I started to click on refersh and see how far it will lead. At the end, it led to a site called "SearchAtHand.com" After few minutes of internet searching, this is what I came to know: QUOTE SearchAtHand is a Ukrainian company that hi-jacks your DNS server settings. Once they have control of your browser, they can re-direct you to whatever website they want. When you type in an incorrect web address, their search box appears. They want you to try your search again with them. When you do search, they make money by brokering your search result to pay-per click advertisers. Freakin' clever Ukrainians! The full method of how to remove this DNS hijacker can be found here http://www.freesecuritytools.com/free-sear...and-removal.htm and the direction is very simple. Thank god! But the nutshell of it all is to check your TCP/IP setting for your network, make sure it's set to "Obtain DNS server address automatically" This DNS hijack seems to be fairly new and thus I recommend to all that you check your settings. My Spybot S&D did not catch this issue, nor any of my anti-browser hijack programs.
Reply
Albus Dumbledore
Aug 6 2006, 11:36 AM
good catch buffaloHELP! although ive never had any prooblems with this before.... i think i will still check my settings, as well as the 5 other computers in my house  thanx for letting us know
Reply
alexviii
Aug 6 2006, 11:54 AM
BUFALO: You are an angel!! I had problems with this, and now everything is ok. 10x a lot... PS: What knid of anti-browser hijack programs do you use?
Reply
Plenoptic
Aug 6 2006, 04:03 PM
lol Who would have thought that Ukranians would be so smart. You should never underestimate them. You know you gotta watch out for those Brazilians too. But seriously that has happened to me before and lucily Spy Sweeper fixed it for me. The funny thing is it only attacked Internet Explorer and Not Firefox so I was ok because I don't use Internet Explorer unless necessary. I use IE tabs in Firefox if I need to I only use IE for hotmail because that is what it opens up to in MSN. Thanks for the tip Buffalo I'll have to watch out for it.
Reply
FirefoxRocks
Aug 6 2006, 11:26 PM
So far a lot of browsers are not common targets for hijacking. Internet Explorer 6 and older are prime targets for attack. IE 7, Firefox, Netscape, Opera, Mozilla, Avant Browser, Maxthon, SeaMonkey and other less common browsers are not targets for attack, even though Internet Explorer 7 BETA is more common for a target. By the way, can you manually change your DNS server?
Reply
khan11
Aug 7 2006, 08:26 AM
oh my goodness!! see how the world is earning money lolz hehehe, im really shocked to hear this,i think after some time every internet user in the world will be browsing each others pc without telling them lolz, im afraid of these type of technologies,its not good way to earn money,see how much people work to make browser and the hijackers just hack em,alas! anyways thanks for sharing the solution buffalohelp.Cheers.
Reply
iGuest
May 16 2008, 11:23 PM
URL update
DNS Hijack SearchAtHand.com Browser Result Removal
Just thought I'd let you know: freesecuritytools.Com website has moved. Their search@hand removal page is now located at http://www.Encryptomatic.Com/securitytools/free-searchathand-removal.Htm -reply by Darren
Reply
Recent Queries:--
dns hijacked - 0.06 hr back. (1)
-
searchathand - 0.52 hr back. (1)
-
"dns hijacker" - 3.08 hr back. (1)
-
xp dns hijack - 14.30 hr back. (2)
-
dns hijack - 3.27 hr back. (5)
-
"dns hijack" - 21.69 hr back. (1)
-
searchathand.com - 21.74 hr back. (2)
-
hijack browser dns - 22.06 hr back. (1)
-
browser hijack dns - 21.92 hr back. (2)
-
searchathand trojan - 25.08 hr back. (1)
-
dns highjacker 83.149 - 26.67 hr back. (2)
-
dns highjacker - 27.69 hr back. (1)
-
dns .my hijack - 32.78 hr back. (1)
-
xp dns hijacked - 44.20 hr back. (1)
Similar Topics
Keywords : dns, hijack, searchathand, browser, result, removal, browser, hijack, method, removing
- Hackers Hijack A Half-million Sites: Phpbb Forum Users Must Read
(8)
Is There An Exploit In Vista Home Premium To Make Firefox Permanant Default Browser?
(4) I just got a new laptop, and of course it's loaded with vista. Everything works awesomly!
(my last PC was from 2001, BIG DIFF.) But the damned thing compulsivly and automatically sets
Internet Explorer to my default browser and won't let me change certain things which browsers
will typically handle. 've manually changed it so Firefox handles all the stuff except HTTPS
and what not (CANNOT CHANGE W/O HACK!), but IE just bumps in every time I want to click a link
from a non-browser based file /sad.gif" style="vertical-align:middle" emoid=":(" border="....
Hijack This Log
Pop up problems (2) My sis's computer is having pop up issues. (even in firefox)I dealt with this problem myself a
while back but forget exactly how I fixed it. I ran hijack this. could someone take a look at my
log file pls. QUOTE Logfile of HijackThis v1.99.1 Scan saved at 11:23:20 PM, on 07/03/2007
Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.5730.0011) Running
processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\s....
Could You Be Infected With Hidden Trojan?
continuation of DNS hijack (9) This post is the continuation of my previous post DNS Hijack SearchAtHand.com Browser Result
Removal but deserves its own topic. This trojan, not new but something that's been going
around the web for few years, seems to be quite strong and hard to get rid of. The reason is that it
randomly changes its full file name when a weak anti-spyware attempts to remove it improperly. I
have been using Spybot Search & Destroy and Norton Anti-Virus Corporate Edition for many years and
have never seen such a resilient torjan. Recently I have tried AVG Anti-Spyware but it too....
Searchathand Tryed Freesecuritytools Need Help
(2) Hi I've being having alot of problem recwently with this. I tryed freesecuritytools, but i
hasn't solved the problem. So now im using Highjackthis Here are my log files QUOTE
Running processes: C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.....
Adware Still Resides In My Computer After Removal Tool
(6) I have picked up 13,856 adware infections on my computer, and I got them from erm... Downloading
photoshop off limewire. At first, I got pop-upss like mad. Then I uninstalled the adware with the
tool they gave ne. I am still getting popups. I need help badly, what should I do.....
Spyware / Virus Removal Help Needed
(10) Hey guys all of a sudden in the last two days my computer has just been attacked by all types of
malicous software! and im not even kidding when almost instantly it went from running with out a
hitch to so much slow down and so many pop ups i had to run avg. 648 virus and trojans! All
deleted or moved to the vault, thought i was out of the woods than i ran adaware 202 Critical and
malicous objects I deleted them then i ran adaware again got over a hundred bad things again after
the restart and then ran adaware as well and after deleting over 1000 bad things I wa....
Browser Spy
BrowserSpy can tell you all kinds of detailed information about you an (1) /smile.gif" style="vertical-align:middle" emoid=":)" border="0" alt="smile.gif" /> Browser Spy
-------------------------- Wow, this makes me feel rather exposed..... a browser spy that can find
countless little bits of information, I'm sure something evil could be devised out of this.
And it's also not even one of those things that work only in IE (except for some of the
features). Take a look Browser Spy /cool.gif" style="vertical-align:middle" emoid="B)"
border="0" alt="cool.gif" /> have a nice day! ....
Manual Virus Removing And Security.
(0) Talking about manual removals of viruses I thought I better be a pioneer of this by sharing my
knowledge about a virus. I would like to tell the effects and manual removing technique of a very
common and irritating virus, that is HTML Redoff. First I would like to discuss its effects, HTML
Redoff virus infects kernel32.dll file which is installed in your “WINDOWS\SYSTEM” directory in
case you have Windows 98 and “WINDOWS\SYSTEM32” directory in case you have Windows XP and all
the .htm, .html, folder.htt and desktop.ini files on your PC thus it slows down your....
Firefox's Answer To Ie's Phishing Filter?
users of the sacred browser can breathe once more! (5) SiteAdvisor - Firefox's Answer To IE's Phishing Filter? A site-warning plugin
for ie and firefox Name: Site Advisor Url: http://siteadvisor.com Download:
http://www.siteadvisor.com/download/ff.html Rating: 9.75/10 Improvements: Not all sites are on
their database but many of the popular ones are so index all webistes. SiteAdvisor is a simple and
easy to install extension created for firefox which checks to see if the site you are on is "bad"
from its database of urls. Once the results have reached your browser a notificatio....
Web Browser
Which Browser do you use? (2) Which web browser do you use? Personally, I use Firefox 1.5. Firefox is from a trusted provider,
Mozilla. For more information on Mozilla, and if you want to download Firefox for your own computer,
visit either Mozilla.com or Mozilla.org. If you do not want to remember Mozilla, you can visit their
newly-obtained domain, firefox.com. You? Stephen....
Latest Ie Exploit
does anyone still use this browser? (10) For Internet Explorer users, please note that there is a new exploit in the wild that is capable of
compromising a fully patched and updated WinXP machine:
http://www.eweek.com/article2/0,1759,18917...3119TX1K0000594 Microsoft has not released a fix yet.
From the article: QUOTE IE users should immediately disable Active Scripting via the Tools >
Internet Options > Security tab > Custom Level feature. Firefox and other alternative web
browsers are not affected. You would have to be tricked into going to a malicious website to have
any chance of being affecte....
Trojan Removal
How to/Best software for removal (11) On this topic: http://www.trap17.com/forums/Help-Running-...mize-t8569.html I was told that I
have a Trojan. I downloaded a program called ScanSpyware and am scanning for Trojans. Is this a
good program for me to keep, or is there something better?....
Looking for dns, hijack, searchathand, browser, result, removal, browser, hijack, method, removing
|
|
Searching Video's for dns, hijack, searchathand, browser, result, removal, browser, hijack, method, removing
|
advertisement
|
|