WSearch-service ERROR-DSN redirector

[frankdubbe]

Heb de melding-
DCOM kreeg foutmelding '1084' bij het starten van de WSearch-service met de argumenten '' om de server
{9E175B6D-F52A-11D8-B9A5-505054503030} te starten

En een blauw scherm BSOD verschijnt

Voor de format had de PACKARD BELL PC-wel virussen
na een full format- een volledige viruscheck gedaan-no infections
ik denk dat deze na de format verwijdert zijn
Deze error komt na een tijdje

Is dit een driver error-sound related
of een virus die ergens blijven hangen is, na de format
-----------------------------------------------------------------------------------------------------------------------------------Na enkele uurtjes op Google kwam ik het volgende tegen over DSN -changer- Virus
die zou in de modem actief zijn ??????
ik heb een D-link-dwl -router
Hier de topic
Shortcuts: Shortcuts are all directing me to wsearch.net
Bottom of Page
1 to 6 of 6
CommentAuthorjatycreCommentTimeJul 18th 2009 permalink
Hey everyone. I'm a very happy new user of OpenDNS. This is a really great service. However, I do have one problem I can't seem to figure out. I use Firefox browser. I've been trying to get my shortcuts set up, but I can't seem to get anything I put in to work. Everytime I set a shortcut up and try it out, I just get directed to that crappy WSearch website. Anyone have any idea what the problem could be?
CommentAuthormaintenanceCommentTimeJul 18th 2009 permalink
Yes, it's a crappy piece of adware redirecting your browser.
Download this and run it.
http://www.malwarebytes.org/mbam.php
Or a decent adware/spyware/malware tool of your choice.
CommentAuthorjatycreCommentTimeJul 18th 2009 edited permalink
Thanks, that helped. But there was actually more to it than just that. Anyone who uses an SMC router from their ISP, could have the same problem. You need to get into the advanced router settings (using the advanced login and password) and change the domain name. It's set to something like mygateway.net or something similar. For whatever reason having that default domain name (which was set by my ISP) was causing me to get NUMEROUS redirects to wsearch.net, and was infecting my computer with the wsearch adware over and over again. I have no idea why in the world ANY ISP would do that to us, but apparently they would.



For reference, if anyone needs that advanced login name and password it is

Login: mso
Pass: msopassword

That's the default "advanced login" for most SMC routers. Which lets you access ALL the settings for the router, instead of just the basic settings that you get into with the "basic login". Basic login being either "cusadmin" or "smcadmin" depending on the router.


SMC routers are pretty good equipment, but FAR too complicated. I miss the old days of using a Linksys WRT54GS lol.
Thankful People: maintenance
CommentAuthormaintenanceCommentTimeJul 18th 2009 permalink
How odd.
I suppose it is remotely possible that the router had a vulnerability exploited, or the redirect from the ISP's default domain name is some sort of exploit.

Thanks for the additional info.
CommentAuthorjatycreCommentTimeJul 18th 2009 permalink
No problem. I thought it might be useful to know that the SMC routers have different logins which allow access to different options. That's not particularly easy information to find. Even PortForward doesn't have it in their tutorials.


You may even want to make a note of it in the site's tutorial for SMC routers, since the advanced options may be needed. Just a suggestion though.


Thanks again for the help. If you hadn't given me the first bit of info, I wouldn't have been able to work the problem out at all.
CommentAuthormaintenanceCommentTimeJul 18th 2009 permalink
Hey, if I could make a note of it in the tutorial, I would.

For now, I'll keep a link to your post for future reference. Thanks again - and nice detective work.
1 to 6 of 6


This discussion has been inactive for longer than 30 days, and is thus closed.

thanks