HERE IS THE CWS LOG. HELP IN DECIPHER. THANKS GUYS
VRAMK
CWShredder v1.44.2 scan only report
Windows XP (5.01.2600 SP1)
Windows dir: F:\WINNT
Windows system dir: F:\WINNT\system32
AppData folder: F:\Documents and
Settings\vramk\Application Data
Username: vramk
Infected Registry value:
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar
Infected data:
http://www.couldnotfind.com/search_page.html?
&account_id=132156
Infected Registry value:
HKCU\Software\Microsoft\Internet
Explorer\Search,SearchAssistant
Infected data:
http://www.couldnotfind.com/search_page.html?
&account_id=132156
Found Hosts file: F:\WINNT\system32\drivers\etc\hosts
(45091 bytes, A)
Shell Registry value: HKLM\..\WinLogon [Shell]
Explorer.exe
UserInit Registry value: HKLM\..\WinLogon [UserInit]
F:\WINNT\system32\userinit.exe,
Found Win.ini file: F:\WINNT\win.ini (1964 bytes, A)
Found System.ini file: F:\WINNT\system.ini (1992 bytes, A)
Enumerating HKCU policies (Internet Explorer):
remove netscape help = dword:1
- END OF REPORT -
>-----Original Message-----
>
>"vramk" <(E-Mail Removed)> wrote in
message
>news:0b3201c3dc52$81597b60$(E-Mail Removed)...
>> Help, can't Surf!!! My IE 6.0 always starts redirecting
>> to er.searchsprint.com. I have tried searching registry
>> for this string.Also I have run Ad aware software which
>> listed out a few programs like bonzi buddy. But my
>> problem still remains. I have tried reseting to default
>> settings in explorer. Also I tried Uninstalling and
>> Installing againg, IE 6.0. Still the first web page IE
>> tries to access is always the same, which is indicated
in
>> my status bar. Even that page does not load.
>> searchspint.com seems to be some pay for referrin site.
>> Other browser like MSN is working. Any white knight out
>> there?
>
>Run the "Cool Web Shredder"
>check for update first.
>http://www.merijn.org/files/CWShredder.exe
>Close all instances of Internet Explorer and Outlook
Express,
>click on the executable above and follow the prompts.
>
>
>.
>