Warning

 

Close
Confirm Action

Are you sure you wish to do this?

Cancel Confirm
AR15.COM
3/17/2005 12:02:52 PM EDT
I have a problem with my computer.  While looking for some information on a job site (not porn) I was infected with some spyware or virus.  Whatever the problem is, it resets my homepage and I get alot of pop-ups (many selling pop-ups and spyware blockers).  I have tried removing the software using Registry Mechanic, Spybot Search and Destroyer, and Spyhunter.  When I re-boot it comes back.


Any suggestions  
3/17/2005 12:04:13 PM EDT
[#1]
What does the homepage set itself to?
3/17/2005 12:04:22 PM EDT
[#2]
www.mozilla.org/products/firefox/
3/17/2005 12:04:46 PM EDT
[#3]
Make sure you have the latest Ver of Spybot and Adaware...


ByteTheBullet  (-:
3/17/2005 12:04:54 PM EDT
[#4]
www.lavasoftusa.com/software/adaware/

And if that doesn't work:
fedora.redhat.com/

3/17/2005 12:05:42 PM EDT
[#5]

Quoted:
Make sure you have the latest Ver of Spybot and Adaware...


ByteTheBullet  (-:



If this is what I think it is, Spybot and Adaware won't take care of it.
3/17/2005 12:08:01 PM EDT
[#6]

Quoted:

Quoted:
Make sure you have the latest Ver of Spybot and Adaware...


ByteTheBullet  (-:



If this is what I think it is, Spybot and Adaware won't take care of it.



Learn us...spread the wealth!


ByteTheBullet  (-:
3/17/2005 12:08:37 PM EDT
[#7]

Quoted:

Quoted:
Make sure you have the latest Ver of Spybot and Adaware...


ByteTheBullet  (-:



If this is what I think it is, Spybot and Adaware won't take care of it.



I haven't tried Adaware yet but everything else is current.


THe Homepage is reset to "about:blank"

What do you think it is?
3/17/2005 12:11:18 PM EDT
[#8]
Ok, I think it is a variation of the CWS trojan.

Check this forum out for instructions on clearing it out: www.daniweb.com/techtalkforums/thread7507.html

ETA: www.daniweb.com/techtalkforums/thread7609.html
3/17/2005 12:33:14 PM EDT
[#9]
I have two programs that I can't delete


coolwebsearch

IBIS Toolbar


3/17/2005 12:35:48 PM EDT
[#10]

Quoted:

Quoted:

Quoted:
Make sure you have the latest Ver of Spybot and Adaware...


ByteTheBullet  (-:



If this is what I think it is, Spybot and Adaware won't take care of it.



I haven't tried Adaware yet but everything else is current.


THe Homepage is reset to "about:blank"

What do you think it is?



Ouch, that one sucks bad.  I spent weeks trying to get rid of it, had to recore.  Adaware and Spybot usually take care of everything, but not this problem.
3/17/2005 12:41:35 PM EDT
[#11]
CoolWeb Shredder

Specific instructions on removing this bastard of a program (CWS)

daniweb.com/techtalkforums/thread5531.html

Removing CWS can take a while - be patient.

IBIS Should go away once CWS is taken care of, I believe.
3/17/2005 12:45:05 PM EDT
[#12]
You will have to run CWShredder, Spybot, and Adaware each several times.  One pass will not do it.

But CWShredder fixed my kids computer which did the same thing.
3/17/2005 12:50:24 PM EDT
[#13]
You might want to turn off system restore if your running XP.Then make make a new point when done
3/17/2005 12:50:27 PM EDT
[#14]
HijackThis is the best program fro removing spyware after all the others fail. You do need to know how to interpret the scan before deleting anything though.

www.tomcoyote.org/hjt/

www.spywareinfo.com/~merijn/
3/17/2005 1:20:03 PM EDT
[#15]
Thanks WiDUker.

I restored my system to the set-up from a few days ago.  So far no problems.


3/17/2005 1:43:10 PM EDT
[#16]
Be careful about using the system restore function as you can create additional problems that are more serious then what you're trying to fix.
3/17/2005 1:45:34 PM EDT
[#17]
tag
3/17/2005 1:54:06 PM EDT
[#18]
download the 30 day trial spysubtract

go to download.com and do a search for pestpatrol. its made by  computer associates install and update that

also to a search on download.com for spysweeper..  this should take care of it
3/17/2005 2:19:25 PM EDT
[#19]
Does this mean you don't want a job in Pron?



nonetheless try:

AdAware 6
and
Spybot is also good.

Both are free . . .
You need to regularly use them.  Unfortunately pops are here to stay and not going away.  Deal with it as its equivalent to driving down the freeway.  No choice on what signs you see.
Hope this helps
3/17/2005 3:34:31 PM EDT
[#20]
I have the exact same problem.
3/17/2005 3:41:48 PM EDT
[#21]
CoolWeb search is the hardest spayware and adware program to remove.  spybot and adware did not do it.  works well with most

Coolsheeder work on two computers but failed 5 others.  

I just gave up, format and install w2k and winxp.  it took less time to reinstall 5 computers than to remove it from 2
3/17/2005 3:43:33 PM EDT
[#22]
this web site tells you what spyware programs are legit and those that do just the opposite.  spyhunter is not  legit  uninstall it!     Run only the Trustworthy Anti-Spyware Products:

Ad-aware
GIANT AntiSpyware (now available as Microsoft AntiSpyware Beta)
Pest Patrol
Spybot Search & Destroy
Webroot Spy Sweeper




 hope this helps more!!!


link
3/17/2005 5:27:40 PM EDT
[#23]
in addition to using firefox instead (or even linux/firefox but eww not redhat) of IE, and along with spybot s&d, ad-aware, and spysweeper, get 'hijackthis'

HijackThis is a very simple tool that just shows you the registry settings for browser helper objects, startup programs, start page for IE and a few other things. It doesn't know what's spyware and what's not, it just shows you the settings. You have to figure out what you have installed that's good (google toolbar, for example) and what's bad (coolweb or whatever) and delete the bad. As with all registry edits, backups are good (and can be made from within the program).

Oh, and one more thing about Spybot S&D, make sure you get it from http://www.safer-networking.org/en/index.html and not a google sponsored search. It's free and anyone charging you money for something called 'spybot' is both not the real thing and is actually spyware itself.

After updating Spybot S&D, make sure you immunize!!!!!! Scanning and removing isn't worth a darn if you can accidentally get the same things all over again.

I don't know wether you want to take the Linux plunge, but I do heartily recommend Mozilla Firefox on windows for browsing (and Thunderbird for email) to keep things like this from happening in the future. There's tweaks for Firefox in the mozilla forums that can make it run quite fast.
3/17/2005 5:31:45 PM EDT
[#24]
i've been using the free microsoft anti-spyware beta.. available off their website..

seems to work for me...
3/17/2005 6:16:16 PM EDT
[#25]

Quoted:
CoolWeb search is the hardest spayware and adware program to remove.  spybot and adware did not do it.  works well with most

Coolsheeder work on two computers but failed 5 others.  

I just gave up, format and install w2k and winxp.  it took less time to reinstall 5 computers than to remove it from 2



Yup, I tried just about everything, no luck.

The crappy thing is you think you got is removed, but a day or two later (or a couple reboots) and it's back.
3/18/2005 9:33:56 AM EDT
[#26]
The Microsoft anti-spyware program actually did get lots of high marks on independent reviewers sites.
So sure as sin they will start making people pay for it pretty soon.
.....
Some antivirus programs now have additional protection that overlaps spyware.
I got F-Secure antivirus for instance and it has a "registry protector" that monitors the registry for changes, halts some forms of spyware infection.

For antivirus, F-Secure and Kaspersky are two highly regarded among geeks.
~
3/18/2005 9:38:53 AM EDT
[#27]

Quoted:
The Microsoft anti-spyware program actually did get lots of high marks on independent reviewers sites.
So sure as sin they will start making people pay for it pretty soon.



Bill Gates has stated that it will remain free to non-corporate users who have legal copies of WinXP SP2.
3/18/2005 9:46:41 AM EDT
[#28]
Remember to do your removal in safe mode and turn off your restore.  I'm currently dealing with trojan:dropper.  This is one bad bitch!