[Durwood]

I have never been so frustrated with computers as i am right now. My computer has been hijacked by some program and i can't get it back. My homepage keeps getting changed to some in-search.com deal. I have downloaded programs to keep it from getting hi-jacked but every 2 minutes a window pops up and tells me my homepage has been changed to in-search and do i want to change it back. I realize this program somehow got in my registry ,but how do i get it out? One website shows how to get it out but it would take me forever to do all that. This is really frustrating and i need some help bad!

Thanks...Durwood

 

[memmurphy]

You might try downloading and running this free program. It has worked well for me.

Ad-Aware

Mark

 

[Durwood]

Well Keweenaw4310 , i've downloaded every litte program under the sun now i think, including all those you mentioned. Hijack would show it on the search and then say it deleted it but it comes right back up, so it isn't digging it out completely i guess. I ain't never seen anything like this before. Guess i'm gonna have to go into the registry and figure out how to manually remove it. The only thing i have going for me is spy sweeper keeps asking me about the homepage change and keeps putting it back for me. This happens every 2 minutes and is driving me nuts.

Thanks, Durwood

 

[Archdean]

Open tools in your browser, select INTERNET options , select view objects, delete all that look like it could be a suspect some are obvious so you do not need to delete them like Java or something! Close , set homepage to blank, reboot should be good to go reinstall home page , reboot!!!!
Dean

 

[Durwood]

There is no view objects button Dean.

 

[MowHoward2210]

Originally posted by Durwood
There is no view objects button Dean.

I think Dean left out a step..Try Tools>Internet Options>Temporary Internet Files>Settings>View Objects ...and go from there.

 

[Durwood]

I tried it and it didn't work. This thing is into my registry and gonna be hell to get out it looks like.

 

[steventhomas42]

This may be a bit screwy, but after you have all your handy dandy removal tools downloaded and updated, disconnect your computer from the internet. Hang up the dialup, unhook the cable modem, disconnect the LAN cable, whatever.

Run the tools again.

If that doesn't work, then you may have to follow the lengthy advice of the original website you found.

Steve

 

[Durwood]

Well, i just spent $40.00 on the highest recommended software i could find for removing this virus/trojan whatever it is. And guess what , it still comes back after this program deletes it. I tried removing it in safe mode and also with the system restore turned off to no avail. I guess $40.00 buys me some support as i sent them the saved logs of what's going on. They tell me this is one of the most viscious and infecting files there is because it keeps changing itself. Hopefully none of you ever get this and when i get rid of it the IE won't be used by me anymore. I just want to make sure my registry is clean first which is what it keeps changing. It is coolwebsearch and on-search which are both the same i guess. Do a google of coolwebsearch"hijacked"
and you'll see what it is. Also my youngest son seems to have picked it up from a porn site which is where most of these originate.

 

[Durwood]

Ok, one support team of the software i bought had me do hijackthis in safe mode and delete what they told me. That didn't work so i used their software in safe mode and that didn't work either. This is frustrating me to no end. But, on the positive side, if i buy a new boat i'll already have the anchor.

 

[MowHoward2210]

Maybe you should just wipe your hardrive and reinstall.

A fresh install with all the extra software you've aquired should give your a pretty secure machine.

 

[Stewart]

Wow Durwood that stinks, sounds like a wipe is in order! Bad news I think you have to buy that program as well!!!

Sorry man I feel for you! Good luck, let us know what works besides shooting it!:truth:

 

[Durwood]

Well, i'm cautiously saying this ( VERY Cautiously). But, i think i might have gotten it out. What a learning experience this has been. I took 3 or 4 spyware programs and got into the registry myself. Looking for things that didn't look right and what the spyware programs said to look for. I went into safe mode and deleted what i needed to and then ran 3 or 4 of the spyware programs while still in safe mode. And so far my homepage is still back. I have just made a new restore point for future reference also. It seems like no one spyware program had the answer, but getting info from them all and then running them all seems to have done the trick. It is amazing what one spyware program would catch and not another. I guess this computer may not wind up a boat anchor after all. Thanks for all your suggestions. It seems i needed them all to figure this out. And i guess i'll stay away from the Midget Sex Sites now.

NANA

Durwood

 

[guest]

Originally posted by Durwood
i guess i'll stay away from the Midget Sex Sites now.

Durwood

Wow!!!
Who knew such little organs could cause such a big problem...
:furious: :furious:

 

[bigl22]

durwood, when you encounter a nasty like thgis again, you need to shut off the system restore feature before you attempt yo get rid of the bugger- it sounds as if it attached itself to that system restore feature-- you might also want to go to tools, internet options, and under security -- reset all active x controls to disable or prompt-- and cookie settings under privacy also so that you get a prompt whenever some a -hole place wants to place a cookie on your Pc when it prompts and ask - always say no--

 

[Archdean]

Originally posted by MowHoward2210
I think Dean left out a step..Try Tools>Internet Options>Temporary Internet Files>Settings>View Objects ...and go from there.

Thanks Mow your right just had too much to do and Durwood those sexy Midgets will get you one way or the other Glad you got it !!

Dean

 

[Durwood]

Originally posted by bigl22
durwood, when you encounter a nasty like thgis again, you need to shut off the system restore feature before you attempt yo get rid of the bugger- it sounds as if it attached itself to that system restore feature-- you might also want to go to tools, internet options, and under security -- reset all active x controls to disable or prompt-- and cookie settings under privacy also so that you get a prompt whenever some a -hole place wants to place a cookie on your Pc when it prompts and ask - always say no--

Actually it was in my registry and start program and several other places it seems. That is why it was so hard to get rid of.I feel good about it because our resident computer geek at work got it and couldn't figure out how to get rid of it, so he ended up wiping out his hard drive and started over. I think he was kind of shocked to hear i got rid of it myself. It does bother me that he might have been going to the same midget sights though. I'll have to have a talk with him about that.

 

[Toolman]

Sometimes when you install new spyware software you have to run the scan 10-12 times before it sniffs out ALL the registry issues. I learned this the hard way. Just keep scanning your computer, it will eventually get them all.

 

[Neil_nassau]

Here is the best "all things spyware" .site I know of. It just took me 2 hours to completely clean up my daughter's computer .All she did was download "free" wallpaper for her desktop. It was LOADED with sh!%.

Also for you HijackThis users...........here is a great analysis tool that you can do yourself instead of posting on a forum and waiting to get told what to do.

And other poster was right.....do it in SAFE MODE,and scan,scan,scan,scan....
I got her computer working again (it wouldn't even OPEN ie explorer without all the nasties bringing her computer to its knees).......used adaware SE,HIjack this.......and STILL found 16 baddies with latest version of Spybot.
Just be sure you use latest versions with updated files. Also followup with a good scan from pandasoftware.



:elephant:

 

[Durwood]

Here is a good website to test how safe your computer is from parasites like i had and how to protect yourself from them.





http://mvps.org/winhelp2002/unwanted.htm