GIDForums  

Go Back   GIDForums > Computer Forums > Computer Software Forum - Windows
User Name
Password
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

View Poll Results: how useful was this thread?
Very 0 0%
A bit 1 100.00%
Not really 0 0%
Useless 0 0%
Voters: 1. You may not vote on this poll

 
 
Thread Tools Search this Thread Rate Thread
  #1  
Old 16-May-2004, 12:33
Hood's Avatar
Hood Hood is offline
Junior Member
 
Join Date: Oct 2003
Location: South West England
Posts: 87
Hood is on a distinguished road
Angry

cant remove adware arrghhhh!!!!!!!


i was wondering if anyone can help me with an adware problem.......
.......
my homepage is currently set to my own page i made, but since visting a bastard site its been set to about:default - but goes to a search page! i cant make it go to anyhting else for my home,
i know whats doing it as awaware found this ::

ArchiveData(auto-quarantine- 16-05-2004 15-25-21.bckp)
================================================== ====

COOLWEBSEARCH
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
obj[0]=RegValue : SOFTWARE\Microsoft\Internet Explorer\Main
obj[1]=RegKey : PROTOCOLS\Filter\text/html
obj[2]=RegKey : PROTOCOLS\Filter\text/plain

TRACKING COOKIE
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
obj[3]=File : c:\documents and settings\owner\cookies\owner@atdmt[2].txt



ie everythime i load internet explorer this adware thing takes me away from my homepage to thier.
i dfelted the thing using adaware so many times but it keeps coming back!
its not a virus...
it points to the following regestry key:
HKEY_CLASSES_ROOT\interface\{57aoe747-3863-4d20-a811-950c84f1db9b}

here is its description:
Homepage Hijacker. May redirect page to [link to searchv removed]. May also send information back to its parent company.


its called "seekseek" and "cool web search"
is also described as malware
thats all th info i can find on it
how can i safely remove it???
is it ok to fully delete all the above regestry ? i wud presume not??

thanks for any help
__________________
HOOD
Last edited by JdS : 17-May-2004 at 05:23. Reason: Please do NOT link to sites with objectionable content
  #2  
Old 16-May-2004, 13:20
Div's Avatar
Div Div is offline
Moderator
 
Join Date: May 2002
Posts: 996
Div has a spectacular aura aboutDiv has a spectacular aura about
Have you tried installing some of the more popular anti-spyware tools (Adaware, Spybot Search & Destroy, Spywareguard, etc)?

I recently had a bad case of spyware/malware that hijacked my Google searches - adding its own search results in the first page. I finally found a fix that was a utility specifically created for it. I will look for this tool to see if it was for cool web search.
__________________
Web Hosting Tips | Career Advice
  #3  
Old 16-May-2004, 16:05
Div's Avatar
Div Div is offline
Moderator
 
Join Date: May 2002
Posts: 996
Div has a spectacular aura aboutDiv has a spectacular aura about
Angry

I just wasted a couple of hours fighting spyware. Found that notepad.exe had been hijacked...thanks to my firewall that didn't like notepad.exe trying to access systemredirect.com. A look inside the bogus notepad.exe with a hex editor found traces of it trying to download an app from 217.116.233.191.

Damn bastards...here's a good link for helpful downloads, forums and general info.

http://spywareinfo.com/~merijn/downloads.html
__________________
Web Hosting Tips | Career Advice
  #4  
Old 16-May-2004, 16:56
jrobbio's Avatar
jrobbio jrobbio is offline
Regular Member
 
Join Date: Jan 2003
Location: Loughborough, England
Posts: 840
jrobbio will become famous soon enough
One bit of advice is not to use Internet Explorer or Outlook EVER AGAIN! Do yourself a favour and go over to Mozilla and download Firefox 0.8 and Thunderbird 0.6 for free. They are much more protected from Spyware than most of their competition.

Rob
 
 

Recent GIDBlogUS Elections and the ?Voter?s Responsibility? by crystalattice

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Time to remove your phpinfo pages? JdS MySQL / PHP Forum 3 09-Jun-2003 05:08
Which adware / spyware program do you use? jrobbio Computer Software Forum - Windows 1 17-Mar-2003 14:49
Remove your Private Messages admin GIDForums™ 0 06-Sep-2002 18:16

Network Sites: GIDNetwork · GIDWebHosts · GIDSearch · Learning Journal by J de Silva, The

All times are GMT -6. The time now is 02:36.


vBulletin, Copyright © 2000 - 2008, Jelsoft Enterprises Ltd.