I have been getting this message that pops up on all of my xp computers. I
can find about it if I do a gen search, about how to "remove it," etc., but
not of that stuff works. I have the common spyware programs, spybot, etc.,
installed, but it will not remove it. It slows my computer down until it
comes up and I acknowledge it. I cannot believe that I am the only person
out here that is experiencing this problem, AND I AM NOT A NEWBIE BY ANY
MEANS.

Would apppreciate some help with this.

Richard

Rich,

Is it a 404 Page Cannot Be Displayed error?

Sounds like you've been hijacked

In Spybot you have the ADVANCED mode then selecting BHO's & BROWSER PAGES &
STARTUP PROGRAMS

The about blank should be set to your SYSTEM32 directory as follows:

C:\Windows\System32\blank.htm

(where C:\ is your bootable drive)

Do you also see any signs in Spybot for your homepage or seach assistants
etc being changed?

In the BHO section I would suggest only keeping the the Spybot GUID
'{53707962-6F74-2D53-2644-206D7942484F}' & deleting the others

In Spybot you have the STARTUP PROGRAMS. Do you see any peculiar entries
there?

Are there any rogue processes you see running?

Best thing you can do is run Spybot & 'attach' (see below) the log file to
your reply then I can then download the log file, look through it & do my
best to help you. You could do the same with HiJackThis 1.99 logs, which can
be downloaded here:

http://www.merijn.org/files/hijackthis.zip (developer's site)

I say ATTACH because some people in this newsgroup throw their toys out of
their prams if you copy/paste so much data

Lastly, Spybot has an update out today

Awaiting your response,

--
Newbie Coder
(It's just a name)

"rich1136" <(E-Mail Removed)> wrote
>I have been getting this message that pops up on all of my xp computers. I
> can find about it if I do a gen search, about how to "remove it," etc.,
> but
> not of that stuff works. I have the common spyware programs, spybot,
> etc.,
> installed, but it will not remove it. It slows my computer down until it
> comes up and I acknowledge it. I cannot believe that I am the only person
> out here that is experiencing this problem, AND I AM NOT A NEWBIE BY ANY
> MEANS.

Run HijackThis and post the log to one of the specialty forums for it, not
this one.

HijackThis
http://www.majorgeeks.com/download.php?det=3155

Forums to Interpret HijackThis Logs:

http://forums.spywareinfo.com/
http://forum.aumha.org/viewforum.php?f=30
http://forums.tomcoyote.org/
http://www.wilderssecurity.com/

--
Rock [MS-MVP User/Shell]

Thanks,soon as i get a min or two, I will chek out ALL you said, etc., and
then will let you know.

Its not a 404.

Almost certain it is the “about blank homepage hijacker” advanced COOL WEB
SERCHER HIJACK.

I have read, as I said several ways to “get rid of it,” but it gets way to
involved for me.

The program that is recommended to get rid of it automatically doesn’t work
any more (adware away) I have the recommended standard programs, re:
adaware, spybot search and destroy, etc. and they don’t remove it. Can not
find one that really does… If you know how to pass on the .jpg to others,
please do.

I am attaching a screen-capture .jpg file called "screen capture file" that
shows everyone what it looks like when it pops up. (to the email)

choosing my “send by Outlook” option, as I don’t know how to include the
image in the reply here. If you know how to show the others the .jpg screen
capture image here, I am sure it will help someone else.

Thanks, again.

Rich1136


"Newbie Coder" wrote:

> Rich,
>
> Is it a 404 Page Cannot Be Displayed error?
>
> Sounds like you've been hijacked
>
> In Spybot you have the ADVANCED mode then selecting BHO's & BROWSER PAGES &
> STARTUP PROGRAMS
>
> The about blank should be set to your SYSTEM32 directory as follows:
>
> C:\Windows\System32\blank.htm
>
> (where C:\ is your bootable drive)
>
> Do you also see any signs in Spybot for your homepage or seach assistants
> etc being changed?
>
> In the BHO section I would suggest only keeping the the Spybot GUID
> '{53707962-6F74-2D53-2644-206D7942484F}' & deleting the others
>
> In Spybot you have the STARTUP PROGRAMS. Do you see any peculiar entries
> there?
>
> Are there any rogue processes you see running?
>
> Best thing you can do is run Spybot & 'attach' (see below) the log file to
> your reply then I can then download the log file, look through it & do my
> best to help you. You could do the same with HiJackThis 1.99 logs, which can
> be downloaded here:
>
> http://www.merijn.org/files/hijackthis.zip (developer's site)
>
> I say ATTACH because some people in this newsgroup throw their toys out of
> their prams if you copy/paste so much data
>
> Lastly, Spybot has an update out today
>
> Awaiting your response,
>
> --
> Newbie Coder
> (It's just a name)
>
>
>

Thanks, I am old and tired, so I need a little time now to do all that and
get back with you folks. Thank you for your almost "immediate" help-
response. It is refreshing to see that someone is willing to help without
being "full of it," if you know what I mean. . . You see, i am a
gentleman, and I expect every one else to be as well, and sometimes am very
disappointed on line. Anyway, thats off subject. Thanks... No more required
till I get all this checked out.

rich1136

"Rock" wrote:

> "rich1136" <(E-Mail Removed)> wrote
> >I have been getting this message that pops up on all of my xp computers. I
> > can find about it if I do a gen search, about how to "remove it," etc.,
> > but
> > not of that stuff works. I have the common spyware programs, spybot,
> > etc.,
> > installed, but it will not remove it. It slows my computer down until it
> > comes up and I acknowledge it. I cannot believe that I am the only person
> > out here that is experiencing this problem, AND I AM NOT A NEWBIE BY ANY
> > MEANS.
>
> Run HijackThis and post the log to one of the specialty forums for it, not
> this one.
>
> HijackThis
> http://www.majorgeeks.com/download.php?det=3155
>
> Forums to Interpret HijackThis Logs:
>
> http://forums.spywareinfo.com/
> http://forum.aumha.org/viewforum.php?f=30
> http://forums.tomcoyote.org/
> http://www.wilderssecurity.com/
>
> --
> Rock [MS-MVP User/Shell]
>
>

Sounds like you need to get CWshredder.

Galen

"rich1136" <(E-Mail Removed)> wrote in message
news:B69642A5-703F-4FD1-9040-(E-Mail Removed)...
>
> Thanks,soon as i get a min or two, I will chek out ALL you said, etc., and
> then will let you know.
>
> Its not a 404.
>
> Almost certain it is the "about blank homepage hijacker" advanced COOL
> WEB
> SERCHER HIJACK.
>
> I have read, as I said several ways to "get rid of it," but it gets way to
> involved for me.
>
> The program that is recommended to get rid of it automatically doesn't
> work
> any more (adware away) I have the recommended standard programs, re:
> adaware, spybot search and destroy, etc. and they don't remove it. Can
> not
> find one that really does. If you know how to pass on the .jpg to others,
> please do.
>
> I am attaching a screen-capture .jpg file called "screen capture file"
> that
> shows everyone what it looks like when it pops up. (to the email)
>
> choosing my "send by Outlook" option, as I don't know how to include the
> image in the reply here. If you know how to show the others the .jpg
> screen
> capture image here, I am sure it will help someone else.
>
> Thanks, again.
>
> Rich1136
>
>
> "Newbie Coder" wrote:
>
>> Rich,
>>
>> Is it a 404 Page Cannot Be Displayed error?
>>
>> Sounds like you've been hijacked
>>
>> In Spybot you have the ADVANCED mode then selecting BHO's & BROWSER PAGES
>> &
>> STARTUP PROGRAMS
>>
>> The about blank should be set to your SYSTEM32 directory as follows:
>>
>> C:\Windows\System32\blank.htm
>>
>> (where C:\ is your bootable drive)
>>
>> Do you also see any signs in Spybot for your homepage or seach assistants
>> etc being changed?
>>
>> In the BHO section I would suggest only keeping the the Spybot GUID
>> '{53707962-6F74-2D53-2644-206D7942484F}' & deleting the others
>>
>> In Spybot you have the STARTUP PROGRAMS. Do you see any peculiar entries
>> there?
>>
>> Are there any rogue processes you see running?
>>
>> Best thing you can do is run Spybot & 'attach' (see below) the log file
>> to
>> your reply then I can then download the log file, look through it & do my
>> best to help you. You could do the same with HiJackThis 1.99 logs, which
>> can
>> be downloaded here:
>>
>> http://www.merijn.org/files/hijackthis.zip (developer's site)
>>
>> I say ATTACH because some people in this newsgroup throw their toys out
>> of
>> their prams if you copy/paste so much data
>>
>> Lastly, Spybot has an update out today
>>
>> Awaiting your response,
>>
>> --
>> Newbie Coder
>> (It's just a name)
>>
>>
>>

Rock,

I originally posted that suggestion

--
Newbie Coder
(It's just a name)

"Newbie Coder" <(E-Mail Removed)> wrote
> Rock,
>
> I originally posted that suggestion

I don't know what you're talking about since you haven't quoted any of the
message to which you reply (nor, frankly, do I care what you are talking
about).

--
Rock [MS-MVP User/Shell]

Rock,

You gave a link to HiJackThis (Major Geeks) which I done from the developers
site on the original reply

Last night, I watched a webcast on Tech Net & the host was slating MSCONFIG
& HiJackThis. He said if you try to fight Spyware... with MSCONIG you do it
with both hands tied behind your back. He also said that HiJackThis doesn't
know as many locations as software he was demonstrating & MSCONFIG is blind
to these locations

Furthermore, he talked about RootKits that Bypass Task Manager, MSCONFIG etc
& makes the processes look invisible.

If you say you are an MVP with Shell then if you want me to rip you apart
because I know the shell from Shell programming then we'll see how
knowledgeable you really aren't. I can even remember proving Microsoft
Coders in UK/France & USA wrong with the Shell in XP etc.

So, put your toys back in your pram & keep sucking your dummy.

--
Newbie Coder
(It's just a name)
MCSD MCSE MCP BSc

"Newbie Coder" <(E-Mail Removed)> wrote
> Rock,
>
> You gave a link to HiJackThis (Major Geeks) which I done from the
> developers
> site on the original reply
>
> Last night, I watched a webcast on Tech Net & the host was slating
> MSCONFIG
> & HiJackThis. He said if you try to fight Spyware... with MSCONIG you do
> it
> with both hands tied behind your back. He also said that HiJackThis
> doesn't
> know as many locations as software he was demonstrating & MSCONFIG is
> blind
> to these locations
>
> Furthermore, he talked about RootKits that Bypass Task Manager, MSCONFIG
> etc
> & makes the processes look invisible.
>
> If you say you are an MVP with Shell then if you want me to rip you apart
> because I know the shell from Shell programming then we'll see how
> knowledgeable you really aren't. I can even remember proving Microsoft
> Coders in UK/France & USA wrong with the Shell in XP etc.
>
> So, put your toys back in your pram & keep sucking your dummy.

Get lost. You have no credibility. Lol, you don't even know how to quote
properly; your spouting all this bull and thumping your chest shows exactly
what you are, hot air. Run along little boy, as I said before I don't
care what you have to say.

--
Rock [MS-MVP User/Shell]