Web all find.org IE redirect

  • Thread starter Thread starter W. Mark
  • Start date Start date
W

W. Mark

Tough IE Home page redirect similar to CoolWebSearch
called "Web all find.org" Ran MaCafee, Spybot S&D, CW
Shredder, Stinger, and Ad-Aware after update multiple
times w/o success. Also have muliple unwanted "Favorites"
entries that reinstall themselves after deletion. PLEASE
HELP!! I'd rather not have to reformatt. WMW
 
) Open up AntiSpyware
2) Click Tools at the top
3) Click "Submit a Suspected Spyware Report"
4) Fill out the form with as much detail so they can
analyze quickly

Boot to Safe Mode.
http://tinyurl.com/pfca

Empty your IE cache and your other temporary file
folders, eg: c:\temp, c:\windows\temp or C:\Documents and
Settings\<name>\Local Settings\Temp (the path to your temp
folder will change depending on your name) - sometimes
programmes can be hidden in there - watch out for
mysterious *.exe files or *.dll files in those folders.

Have you tried scanning with Microsoft Antispyware in safe
mode?
Run a FULL SYSTEM SCAN, check the 3 boxes

Assuming that the installation is on drive C:
1. In "My Computer", right click on the icon for drive C:,
select "Properties".
2. Click tab "Tools".
3. Click button "Check Now".
3. Check both "Automatically fix file system errors"
and "Scan for and attempt recovery of bad sectors".
4. Click "Start".

Follow the instructions to allow system shut-down and
restart. The disk checks will run after restart and
before Windows loads. This scan for bad sectors might
take few minutes if you have a large hard disk: be patient.

Assuming that the installation is on drive C:
1. In "My Computer", right click on the icon for drive C:,
select "Properties".
2. Click tab "Tools".
3.Click button "Defragment Now".
4.Click Defragment.


Run your updated antivirus

Reboot.


If the malware problem comes back further specialised
assistance is available via Ron Kinner

Get HijackThis.exe from
http://tomcoyote.org/hjt/hjt199//HijackThis.exe

Save it to C:\hjt (new folder) then Open it and select
Scan and Save Log. Note where you saved the log then send
it to Ron Kinner as an attachment. He can probably
identify the problem and tell you how to get rid of it for
good.

Ron email address. (e-mail address removed)
He will tell you what to do next. Put Hijack in the
subject so he will know it's not spam.

For information
HijackThis tutorial:
http://www.bleepingcomputer.com/forums/index.php?
showtutorial=42
 
Hi there , Ive not heard of this redirect so cannot help
that much on this but runnin Hijack this or Microworlds
Escan might help as there is some malware installed
causing you the problems,

Hijack this would show the registry or file entry in most
cases and Microworlds Escan is a great scanner,It doesnt
remove unless you buy it but theres no need to buy it as
you just need to know where the malware files are saved
then you can manually remove them.

Microworld takes forever to scan or the best part of a
hour anyway but its very precise and could help you out.



Microworld's Escan :

http://www.mwti.net/antivirus/mwav.asp



Hijack This :

http://www.spywareinfo.com/~merijn/files/hijackthis.zip



Microworld will tag riskware/adware & all suspicious
files as a virus so please double check if things are
genuine before deleting them or post the results back on
here(copy the results by left clicking mouse and covering
the results page then pressing control and c together)


Hijack this is a great but powerfull tool and removing
genuine entries could seriously affect your system so
again you should check all the entries or post the
results if possible.

With you saying youve tried all the usual scanners these
2 are probably the best of the rest and hopefully will
show the cause

Good Luck Andy
 
Back
Top