http://ehttp.cc?/ What is this? Please someone help

  • Thread starter Thread starter Iggy
  • Start date Start date
Iggy,
"ehttp.cc" has modified several Registry entries so that they can track your
movements.

They offer an "uninstall" here:
http://ehttp.cc/ehttp.html
[or]
Some program (usually spyware\parasite) may have overridden the URL prefix
setting?
Dealing with Unwanted Spyware, Parasites, Toolbars and Search Engines
http://mvps.org/winhelp2002/unwanted.htm

Includes: Repair the corrupted or altered (spyware) HTTP prefixes
See section: Various Registry Fixes = "RepairDefaultPrefix.reg"
[or - manually]
Open Regedit to the following locations and verify the below default
entries:
Start | Run (type) "regedit" (no quotes)

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\DefaultPre
fix]
@="http://"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\Prefixes]
"ftp"="ftp://"
"gopher"="gopher://"
"home"="http://"
"mosaic"="http://"
"www"="http://"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{CFBFAE00-17A6-11D0-99CB-00C04FD64497}"=""

Note: edit as needed, *always* Export before editing.
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 11-04-03]
Please post replies to this Newsgroup, email address is invalid
 
Iggy,

I found the instructions at the website below very helpful in removing
the ehttp.cc/? spyware virus from my Windows Internet Explorer.
The Spybot, Ad-Ware did not seem to help to remove the ehttp
and if I manually repaired the registry, then after
I rebooted, the ehttp hijack came back.

http://www.phonecalculator.com/removespy.html

Best of Luck,
David
http://www.phonemacro.com


Mike Burgess said:
Iggy,
"ehttp.cc" has modified several Registry entries so that they can track your
movements.

They offer an "uninstall" here:
http://ehttp.cc/ehttp.html
[or]
Some program (usually spyware\parasite) may have overridden the URL prefix
setting?
Dealing with Unwanted Spyware, Parasites, Toolbars and Search Engines
http://mvps.org/winhelp2002/unwanted.htm

Includes: Repair the corrupted or altered (spyware) HTTP prefixes
See section: Various Registry Fixes = "RepairDefaultPrefix.reg"
[or - manually]
Open Regedit to the following locations and verify the below default
entries:
Start | Run (type) "regedit" (no quotes)

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\DefaultPre
fix]
@="http://"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\Prefixes]
"ftp"="ftp://"
"gopher"="gopher://"
"home"="http://"
"mosaic"="http://"
"www"="http://"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{CFBFAE00-17A6-11D0-99CB-00C04FD64497}"=""

Note: edit as needed, *always* Export before editing.
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 11-04-03]
Please post replies to this Newsgroup, email address is invalid
--

Iggy said:
When i got site using IE i always get
http://ehttp.cc?/www.siteiamgoingto.com. This is odd
because before i always got the regular
http://www.siteiamgoingto.com. Also 2 sites keep
bookmarking themselves even tough i keep deleting them
and never use them. PLEASE someone help me out here! How
can I fix this, please e-mail me back thank you.
Click to expand...
Click to expand...
 
This site in my opinion is trying to get some traffic, get your address
etc...



David Jung said:
Iggy,

I found the instructions at the website below very helpful in removing
the ehttp.cc/? spyware virus from my Windows Internet Explorer.
The Spybot, Ad-Ware did not seem to help to remove the ehttp
and if I manually repaired the registry, then after
I rebooted, the ehttp hijack came back.

http://www.phonecalculator.com/removespy.html

Best of Luck,
David
http://www.phonemacro.com


"Mike Burgess" <[email protected]> wrote in message
Iggy,
"ehttp.cc" has modified several Registry entries so that they can track your
movements.

They offer an "uninstall" here:
http://ehttp.cc/ehttp.html
[or]
Some program (usually spyware\parasite) may have overridden the URL prefix
setting?
Dealing with Unwanted Spyware, Parasites, Toolbars and Search Engines
http://mvps.org/winhelp2002/unwanted.htm

Includes: Repair the corrupted or altered (spyware) HTTP prefixes
See section: Various Registry Fixes = "RepairDefaultPrefix.reg"
[or - manually]
Open Regedit to the following locations and verify the below default
entries:
Start | Run (type) "regedit" (no quotes)

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\DefaultPre
fix]
@="http://"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\Prefixes]
"ftp"="ftp://"
"gopher"="gopher://"
"home"="http://"
"mosaic"="http://"
"www"="http://"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{CFBFAE00-17A6-11D0-99CB-00C04FD64497}"=""

Note: edit as needed, *always* Export before editing.
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 11-04-03]
Please post replies to this Newsgroup, email address is invalid
--

Iggy said:
When i got site using IE i always get
http://ehttp.cc?/www.siteiamgoingto.com. This is odd
because before i always got the regular
http://www.siteiamgoingto.com. Also 2 sites keep
bookmarking themselves even tough i keep deleting them
and never use them. PLEASE someone help me out here! How
can I fix this, please e-mail me back thank you.
Click to expand...
Click to expand...
Click to expand...
 
Back
Top