Very "hard to kill web search varmint"

[Hawaiian Tim]

After recently geting my browser attacked by some sort of
cool web search and trying to get rid of it I found it
very hard to kill It woulkd not let me access Mcaffe web
site downloads, changed registry values that shut down
virus controlls,spy bot, ad aware, coolweb shreader,
hijack this, Everything I could think of Finally wasting
so much time I wiped my hard drive,reinstalled windows,And
it got me again before I had time to download mcaffe again!
(online purchase) so I bought the cd and Installed first
but still had to sign on via internet, Blasted again!
finaly was able to do it fast enough on 3rd try. This
varmint is good.Any more help on this subject would be
appreceiated.Mcaffe shows 26 blocked events in one hour!

 

[Don Varnau]

See the security tips at:
http://www.aumha.org/a/parasite.htm
http://mvps.org/winhelp2002/unwanted.htm
http://mvps.org/winhelp2002/security.htm

Don
--
MVP IE/OE
Please reply to the newsgroup so that others may participate.

"Hawaiian Tim" wrote in message
news:[email protected]...

 

[mac]

After recently geting my browser attacked by some sort of
cool web search and trying to get rid of it I found it
very hard to kill It woulkd not let me access Mcaffe web
site downloads, changed registry values that shut down
virus controlls,spy bot, ad aware, coolweb shreader,
hijack this, Everything I could think of Finally wasting
so much time I wiped my hard drive,reinstalled windows,And
it got me again before I had time to download mcaffe again!
(online purchase) so I bought the cd and Installed first
but still had to sign on via internet, Blasted again!
finaly was able to do it fast enough on 3rd try. This
varmint is good.Any more help on this subject would be
appreceiated.Mcaffe shows 26 blocked events in one hour!

Download, update and run:
http://www.spywareinfo.com/~merijn/files/cwshredder.zip

Regards Steve.
MS-MVP. IE/OE.

 

[HAWAIIAN tim]

YES,I did think of that but the bho or whatever its
called rewrote my registry so i couldnt use the version
installed on my computer and the browser helper directed
me to there own version of fake downloads( I assume )That
could not or did not kill. also when I would try virus
scan online from Mcaffe It dirrected me to, page
anavalible. It pretty much just shut down all recorces
avallible. And please donate to the wonderfull people out
there that help us with such things!!!...Tim

 

[HawaiianTim]

Thanks for the links. Ihave learned 95% of what I know
about windows from these news groups, have paid attention
to and thank those who participate...Tim

 

[Guest]

get firefox from mozilla.org and get rid of using
internet explorer for anything other than windows update.

 

[Donald McDaniel]

After recently geting my browser attacked by some sort of
cool web search and trying to get rid of it I found it
very hard to kill It woulkd not let me access Mcaffe web
site downloads, changed registry values that shut down
virus controlls,spy bot, ad aware, coolweb shreader,
hijack this, Everything I could think of Finally wasting
so much time I wiped my hard drive,reinstalled windows,And
it got me again before I had time to download mcaffe again!
(online purchase) so I bought the cd and Installed first
but still had to sign on via internet, Blasted again!
finaly was able to do it fast enough on 3rd try. This
varmint is good.Any more help on this subject would be
appreceiated.Mcaffe shows 26 blocked events in one hour!

Too bad there's not a utility to remove Yahoo's hijacking of the browser
home page. Once you set My Yahoo as your home page, you can't reclaim the
home page for another site unless you delete your Yahoo account.

--
Donald L McDaniel
Post all replies to the Newsgroup,
so that all may be informed.
Remove the obvious to reply by email.
+++++++++++++++++++++++++++++++++++++

 

[mac]

Too bad there's not a utility to remove Yahoo's hijacking of the browser
home page. Once you set My Yahoo as your home page, you can't reclaim the
home page for another site unless you delete your Yahoo account.

"Some ISP's provide a customised version of IE. Some Web pages will also
reset your home page and do this. One of the customisations they might make
is to disable the ability to change the home page, so that you are forced to
use their home page. You can re-enable this by making a small change in the
Windows registry.

In Regedit, navigate to this key:

HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control
Panel

In the right-hand pane, right-click the "HomePage" value, then select
Modify. Change it to: 00 00 00 00

Also change either or these to zero 0 instead of 1 if present:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explo
rer] - DWORD "NoSetHomePage"=dword:00000001

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet
Explorer\Restrictions] - DWORD "NoSetHomePage"=dword:00000001


If you don't have this key, browse to:

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main

and in the right hand pane, double click "Local Page" and set equal to
"C:\WINDOWS\System\blank.htm" (no quotes) which will hopefully set your Home
Page to blank and then allow you to subsequently modify it using Internet
Options.

Exit regedit and reboot.

When you reboot, you should be able to change the home page again.

Some pages will also download a program which keeps changing it back. Go to
Start | Run and type:
msconfig
and press <Enter> or click OK. Go to the Startup tab.
See if you can identify any suspicious programs. If you can, uncheck it, If
you can't, change the home page to what you want and then uncheck one and
then reboot. Try IE. If the Web page changed, change it back and then try
msconfig again, rechecking the last one and unchecking the next. Keep doing
this until you find the culprit.

 

[mac]

YES,I did think of that but the bho or whatever its
called rewrote my registry so i couldnt use the version
installed on my computer and the browser helper directed
me to there own version of fake downloads( I assume )That
could not or did not kill. also when I would try virus
scan online from Mcaffe It dirrected me to, page
anavalible. It pretty much just shut down all recorces
avallible. And please donate to the wonderfull people out
there that help us with such things!!!...Tim

Try pasting the link into windows explorer?

 

[Donald McDaniel]

Too bad there's not a utility to remove Yahoo's hijacking of the
browser home page. Once you set My Yahoo as your home page, you
can't reclaim the home page for another site unless you delete your
Yahoo account.

I got the sucker, tho I had to delete all Yahoo values in the Registry,
delete my Yahoo account, and delete Yahoo Messenger. Yahoo burrows deep
into the system and doesn't let any changes be made to it.

--
Donald L McDaniel
Post all replies to the Newsgroup,
so that all may be informed.
Remove the obvious to reply by email.
+++++++++++++++++++++++++++++++++++++