Teccie HELP Needed

[anonymous-user]

I've asked this before but I still haven't solved it so if anyone can help I would be really grateful.

On startup my browser homepage reverts to some search engine that I've never heard of. Rather more worryingly the privacy setting in Internet Options also switches to custom and over rides automatic cookie handling. I've got Adaware and Spybot and I've cleared the cache out but it just keeps coming back.

Any idead?

Thanks

Paul

[docevi1]

have you updated both to have the latest scans?

try looking through add/remove programs in settings to see what is installed and what you can remove.

have you installed something like kazaa or similar recently?

[Sparks]

I had this, and neither adaware or spybot clears it fully (OK until reboot).

You need to do a search for it on google, run spybot to remove, but before rebooting, there are other file(s) to remove, that spybot & adaware don't remove.

If I get a chance I will have a look

Sparks

[anonymous-user]

Thanks guys. I should have added that I am technically illiterate!

[arcturus]

Before going into details, are you being re-directed to a website called 'Search-Space'?

If not can you tell us where you are being 'hijacked' to?

[simpo two]

The problem URL will be in your registry, which is why it keeps coming back. When I had this problem I managed to fix it by searching the registry for the offending URL and replacing it with the URL I wanted.

Start/Run
Type: regedit
Ctrl/F
Enter problem URL in search field and hunt away until finished.

Note: I'm strictly an amateur and although it worked for me, don't poke about in the registry unless you feel confident.

[andyf007]

The path in regedit is

HKEY_CURRENT_USER/Software/Microsoft/Internet Explorer/Main

Look for the "search page" and "Start page" settings, edit the values to your requirements.

Andy


>> Edited by andyf007 on Wednesday 31st March 15:28

[anonymous-user]

arcturus said:

Before going into details, are you being re-directed to a website called 'Search-Space'? If not can you tell us where you are being 'hijacked' to?

It is something called linklist.cc (no www)

[j_s_g]

It's usually actually some randomly named DLL in the root of user's profile that's being run. If it can't be detected via any of the automated tools, manually removing it will work (search page still needs doing as mentioned above). That's not much help to someone that's not au fait with technology - knowing what version of Windows, which crappy adware it is, etc. would help.

[warmfuzzies]

Find yourself going to www.spywareinfo.com
and then follow the instrctions for using Hijack this, my guess would be a BHO object embedded in i.e causing you to be re-directed.

kevin.

[anonymous-user]

andyf007 said:

The path in regedit is HKEY_CURRENT_USER/Software/Microsoft/Internet Explorer/Main Look for the "search page" and "Start page" settings, edit the values to your requirements. Andy >> Edited by andyf007 on Wednesday 31st March 15:28

Done that, changed everything. The next time I start up, it's back.

It's driving me nuts.

[XM5ER]

Keep updating from Spybot, I alerted them to something similar yesterday so they are looking at it.

Run Spybot in advanced mode, go to Tools in the left column, pick Browser pages, pick the browser page that it is being redirected to and change to your usual home page. Then pick Immunize and Robert should be your fathers brother.

[arcturus]

It's a bit technical, but you can find removal instructions for this pest here:

http://forum.avast.com/index.php?board=4;action=display;threadid=3414

[arcturus]

Just digressing slightly, whilst everyone sings the praises of Ad Aware and Spybot, I would like to also recommend Pest Patrol. (www.pestpatrol.com)

I have been using it for two years to keep out pests, spyware, unwanted cookies etc and it has proved to be 100% effective. I am not claiming it would have kept this little blighter out, but it is just another tool in the armoury.

This is their info on the CoolWebSearch (CWS) pest: http://pestpatrol.com/pestinfo/c/cws.asp