Cool-search.net as homepage

[Marieve]

Hi!

I continuously have to change back my home page. It
changes by itself to http://t.rack.cc/hp.php and i gt
redirected to www.cool-search.net. I've tried SpyBoot,
Ad-ware, CWShredder. I've went to delete all entries in
regedit that had that adresse. None of it worked. Can
someone help me out on this one?

Thanks

Marie-Eve

 

[PA Bear]

If you have ever downloaded HijackThis or CWShredder, it is urgent that you
upgrade to the latest versions before using them again. Due to a new
variant of the CWS Trojan, using either HijackThis or CWShredder on an
infected Win98 or WinME computer may lead to severe damage to that computer.
You must update to the very newest versions of these programs before using
either of them again, and you should get a new copy of CWShredder before
each and every use.

Dealing with Hijackware
http://mvps.org/winhelp2002/unwanted.htm
http://www.mvps.org/inetexplorer/Darnit.htm#tshoot
http://aumha.org/a/parasite.htm

You *must* seek updates for Ad-Aware, Spybot, etc., before each and every
use, even "right out of the box". But even then, they can't catch
everything. HijackThis (http://www.merijn.org/files/hijackthis.zip; [new
URL] ) is the preferred tool to use these days. It will help to both
identify and remove any hijackware/spyware. **Post your files to
http://forums.spywareinfo.com/, not here.**

Also update your virus definitions and then run a full system scan. From
now on, do both daily.
--
HTH...Please post back to this thread

~Robear Dyer (aka PA Bear)
MS MVP-Windows (IE/OE), AH-VSOP

Protect Your PC
http://www.microsoft.com/security/protect/default.asp

 

[H Leboeuf]

I suggest you dowload the latest CWShredder and run it. This parasite is
very active and changes day by day.

If still no joy get help from this forum.

Go to http://www.spywareinfo.com/downloads.php#det
Download "Hijack This!" [freeware] or download direct (below):
http://www.spywareinfo.com/~merijn/files/hijackthis.zip

If you get a 404 error or Access denied, try:
http://216.180.252.218/~spywareinfo.com/downloads/tools/hijackthis.zip

Unzip, double-click "HijackThis.exe" and Press "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log"
button.
Click: "Save Log" (generates "hijackthis.log")

Next, HijackThis | Config [button] | Misc Tools [button]
Click: Generate StartupList log [button] (generates "startuplist.txt")

Next, go to the below location:
http://www.spywareinfo.com/forums/

Sign in, then copy and paste both files in your message.

HijackThis Quick Start Help
http://www.tomcoyote.org/hjt/

 

[PA Bear]

Henri, some new/updated URLs for you (new server):

Hijack This
http://www.merijn.org/files/hijackthis.zip

CoolWebSearch Chronicles & CWShredder
http://www.merijn.org/cwschronicles.html
http://www.merijn.org/files/cwshredder.zip
--
~PA Bear

I suggest you dowload the latest CWShredder and run it. This parasite is
very active and changes day by day.

If still no joy get help from this forum.

Go to http://www.spywareinfo.com/downloads.php#det
Download "Hijack This!" [freeware] or download direct (below):
http://www.spywareinfo.com/~merijn/files/hijackthis.zip

If you get a 404 error or Access denied, try:
http://216.180.252.218/~spywareinfo.com/downloads/tools/hijackthis.zip

<snip>

 

[H Leboeuf]

Yes thank you I saw the post only this morning.

Henri, some new/updated URLs for you (new server):

Hijack This
http://www.merijn.org/files/hijackthis.zip

CoolWebSearch Chronicles & CWShredder
http://www.merijn.org/cwschronicles.html
http://www.merijn.org/files/cwshredder.zip
--
~PA Bear

I suggest you dowload the latest CWShredder and run it. This parasite is
very active and changes day by day.

If still no joy get help from this forum.

Go to http://www.spywareinfo.com/downloads.php#det
Download "Hijack This!" [freeware] or download direct (below):
http://www.spywareinfo.com/~merijn/files/hijackthis.zip

If you get a 404 error or Access denied, try:
http://216.180.252.218/~spywareinfo.com/downloads/tools/hijackthis.zip

<snip>