searchforfree.info won't go away

  • Thread starter Thread starter David
  • Start date Start date
D

David

i think i posted this in the wrong section before:

I get a notice saying it's blocked the change from my
regular home (about: blank) to searchforfree.info. But
then, guess what: the homepage's changed anyway. Then I
run a scan, and a bunch of eXact stuff comes up. I remove
it. It comes back, and then homepage stuff starts all
over again.

What the hell? HELP!
 
Send a suspected Spyware report from the Tools Menu.
Get HijackThis from

http://tomcoyote.org/hjt/hjt199//HijackThis.exe

and let it Scan your system and Save Log. (Save it where
you can find it again.) then send the log to:

You cannot submit the log to any of the below Forums for expert analysis.
Note that all Forums require Registration prior to posting

(http://aumha.net/viewforum.php?f=30)
(http://www.bleepingcomputer.com/forums/forum22.html)
(http://castlecops.com/forum67.html)
(http://forums.maddoktor2.com/index.php?showforum=17)
(http://www.spywarewarrior.com/viewforum.php?f=2)
(http://forums.spywareinfo.com/index.php?showforum=18)
(http://www.wilderssecurity.com/forumdisplay.php?f=24)
(http://boards.cexx.org/viewforum.php?f=1)
(http://www.malwarebytes.biz/forums/index.php?showforum=5)
(http://forum.gladiator-antivirus.com/index.php)
(http://www.dslreports.com/forum/security)
--
Andre
Extended64 | http://www.extended64.com
Blog | http://www.extended64.com/blogs/andre
http://spaces.msn.com/members/adacosta
FAQ for MS AntiSpy http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm
 
Go with Andre's advice,as far as i know thats the only
way to remove this.

The R0 + R1 hijacks are easy to see

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL
= http://searchforfree.info/browser/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start
Page = http://searchforfree.info/?sid=u001


but you need to find the file thats reinstalling each
time you delete it,It will possibly be listed as a F3
entry and will typically be in the system32 or Windows
folder but get advise before fixing anything if your
unsure.

Andy
 
Back
Top