Web Hosting Talk : Other Forums : Web Hosting Lounge : DerBiz.com

[SupaJ]

This just installed on my PC and disconnected my internet. It then opened up my Dial Up window (which I used 4 months ago, I now use Broadband) and added a connection to my PC.

I deleted it, and connected through my Broadband pass and username.

It's changed my homepage and it's generally annoying.

Can anyone tell me what to do and how to get rid of it? Also - is it dangerous? Does it affect my connection?

[Mike V]

It's a very bad thing. Premium dialer of some kind for old-style modems. See this thread:

http://forums.techguy.org/t346735.html

[SupaJ]

I thought once I had Broadband that this nonsense would stop connecting me to connections other than the correct one.

Are you saying I could be on this premium connection right now?

[SupaJ]

Can anyone help me? I'm really worried about this.

[Mike V]

If your modem is plugged in it could be dialing out to premium numbers. If your modem is unplugged (old-style, not broadband) then you don't have much to fear. A broadband connection can't call phone number using your normal phone line.

That thread explains that you must boot into Safe Mode and remove specific programs to fix this issue.

[Tyler]

If you want to be sure please follow these directions:

Please download HijackThis http://www.greyknight17.com/spy/HijackThis.exe - this program will help us determine if there are any spyware/malware on your computer. Create a folder at C:\HJT and move HijackThis.exe there. Double click on the program to run it.

1. If it gives you an intro screen, just choose 'Do a system scan and save a logfile'.
2. If you don't get the intro screen, just hit Scan and then click on Save log.
3. Get HijackThis Analyzer http://www.greyknight17.com/spy/KRC%...20Analyzer.zip and save it to the same folder as the hijackthis.log file. Run HijackThis Analyzer and type in 'y' if you agree. The 'result.txt' file will open up in Notepad. Copy the whole result.txt log and post it in the forum. You don't need to post the original hijackthis.log (unless we ask for it). Do not fix anything in HijackThis since they may be harmless.

[SupaJ]

I just checked with BT and I'm not connected to a premium rate.

I searched for DerBiz on my pc, but there was no results... And I changed my Homepage back to normal and it's stayed like that.

I never got rid of it, but it seems to have disappeared.

[Barti1987]

Next time make sure you use Fire Fox

Peace,

[SupaJ]

I'm not sure how to put the analyser in the same folder as the scanner so will I just post up my original logfile?