Printable View
I went to one of my client to find out that every time he opens IE6 there is this FREESERVERS homepage, even that i see his original homepage address in the address bar.
He have win98 with firewalled router connected to the net.
I've tried to run SPYBOT and ADAWARE but they didn't removed it.
I didn't find in google any page regarding this specific problem and i wonder if someone can help me.
Thank you
You could try the free trial of Counterspy or Ewido
http://www.sunbelt-software.com/
http://www.ewido.net/
Both are far more powerfull then Adaware or Spybot
I will try them tommorow on my client computer.
Thank you
hijack this will take care of it
The ewido did not installed because it's win98 and it needs 2k and up.
Now i have new problem.
When i try to get to some pages (hotmail.com i.e.) i get DIRECTNIC page.
I tried any spyware software on the planet and even removed some items with hijack this, but i can't find a solution.
please helppppppppppppppppp
Well....it returned.....the freeservers page......
i found out during the week that there was a dns redirection problem that was solved yesterday (the browser gave DirectNic page when you loaded hotmail for example....)
but i've fixed that today and the client called me after few hours with this free servers problem....(i've installed SPYBOT 1.4 including it's resident program but without help....)
please help
Freeservers is just a free web host ... get your client to do a hijack this log.
Thanks NooNoo, I've used several Antispyware products for the win98 my client has,
Spybot didn't find a thing, But adaware and trendmicro housecall found some stuff and removed it.
I haven't heard from the client all day, if i won't hear from him within the next few days, i consider his computer is DONE !!!
Its no coincidence that DIRECTNIC.com shows up when you tried Hotmail or Symantec or others.
They [DIRECTNIC] are KNOWN to hijack websites and point them wherever. They are KNOWN to steal domains and demand a huge ransom for their "recovery" posing as a service that can get the domain back for a 'fee'. They are KNOWN to lift WHOIS search data and register names before people can register the name themselves AND THEN they put that name up for sale and demand a LOT of money for a name you could bought for $8 or so.
They have TONS of negative press and they have LOADS of complaints and lawsuits against them. And NOW there are investigations by federal and state authorities, IRS all which are soon to begin.
They are KNOWN also as kenyatech.com, kentech.com, intercosmos media group, domaincontender, noldc.com as well as 'spiral matrix', 'orion web' and many other aliases.
They are crooked to say the least and say it in the nicest way possible. They have internation connections which may lead investigators into other areas.
Read up on these sites for more disgusting details about these losers.
http://www.komonews.com/stories/40223.htm
http://www.rederon.net/category/noldc/
http://www.rootfest.net/squatters.html
After i fixed my client DNS configuration, i haven't saw that DIRECTNIC problem again....
It seems that the FREESERVERS site was cause by a spyware.
It is 2 weeks from then and my client is problem free.
Thank you