My computer is infected with a nasty file or program . . I desperately need help!

[onthegogal]

While researching information about Las Vegas, somehow some kind of bug zapped my computer. I have a Pentium III, running Win 98 and use MSN search engine as the default.

Some program or file re-write (??? I'm not a techie) has invaded something on my system and is causing my default search engine "MSN" to redirect to a "gambling search" engine and only bring back gambling and "other" inappropriate websites. Somehow accessing either the MSN search engine provided by Internet Explorer or even when I go to the ?MSN.COM" website, causes me to revert to this same "gambling-themed search engine" and receive the same results. It is also causing "pop-ups" of x-rated material. Periodically it warns and asks if I would like to install a porno tool bar.

Also, when this occurs, a file called "Rapid Blaster" (or something close to this) appears in my "History."

I have run Norton Antivirus and it detected no viruses. I upgraded my IE from 5.0 to 5.5 and I loaded the "Lavasoft" which quarantined a couple of bugs. I've cleared Cookies, Temporary Internet files and reset Web settings, all with no success.

Can someone please help diagnose and help me remedy this? I have young children whom cannot be exposed to this.

 

[Zepper]

What has happened is called "hijacking". You already have AdAware from Lavasoft so also download and run Spybot. It is another way to remove more ad related nasties that AdAware doesn't catch.
Also do a google search on- search engine hijack -to see if someone has specific advice. I think Kim Komando's Web site has some info on hijacking - www.komando.com - be careful not to misspell her site name or you will end up at a porno site.
.bh.
:moon:

 

[whovous]

Open Control Panel, then go to Add/Remove Programs and remove it from there. You may also have to tweak the registry slightly. I did a Google search for "Rapid Blaster removal" and found www.allentech.net/parasite/RapidBlaster.html which a contained a brief explanation of what it does.

Good luck.

 

[whovous]

I was writing while Zepper was replying. I second the votes for Spybot and AdAware. It seems a shame to have to use both, but for now each seems to catch some things the other does not.

 

[redbeard1]

There is a new hijack program out there. When I ran into it, both adaware and spy bot could not remove it. It installs itself as a randomly generated name as in: wjhbdsllsvc. The goofy name is found in the internet explorer toolbars drop down menu. Looking in the normal places to find where it is loading, like the run statements in the registry, didn't turn up anything. I finally did a registry search for the goofy program name, and found four or five references to it. One of the references was located under a toolbar heading. In another it was pointing to an odd .dll file loading from the windows directory. I made a note of all the references to other files, and then deleted the registry entries and the other files it was looking for. The pop ups were gone after that.

 

[onthegogal]

 

[onthegogal]

While trying to find where this stuff is buried in on my machine, I have searched files with the same names as the gambling search engine (http://search.xrenoder.com/----DON'T GO HERE--IT MAY INFECT YOU) and found that they show up in "Windows" and "User" files and I feel certain it is in the registry files, but I lack the knowledge on how to correct or make changes to the registry. I use this computer for my business and my children use it for games and school research. I am terrified that they will see it and that I will screw it up and be unable to use it for my business.

I greatly appreciate everyone's help in this . . . it's extremely disturbing to me. I can't let my family be exposed to this.

 

[onthegogal]

Thanks to Zepper, whovous and redbeard1 for responding.

I downloaded Spybot and ran it and found several "hijackings" It seems to have fixed my problem for now.

I can't thank you enough for taking the time to help me!!!!!!!!!!!!!!!!