Highjacked homepage

[Frustrated with pop-ups]

My homepage has been hijacked to
res://trwzo.dll/index.html#28129
I hvae cwshredder and highjack this.
Everytime I change my registry settings back to the page I
want everything is ok until I close internet explorer and
re-open internet explorer.I get this search page and 2
popups about spyware being on my computer. I have NOD32
for virus scanning and it is upto date and has found no
trojan horses.
I have run adaware and that removed some of the spyware,
and I have cleaned out my temperary interent folder.
I have looked for trwzo.dll on my computer and cannot find
out.
How can I fix this problem and keep it from happening in
the future

 

[Jim Byrd]

Hi - I'm informed that the 01R325 AdAware update of 6/28 or later supposedly
completely removes this for some variants/malware implimentations; however,
I haven't been able to independently verify this and have also heard
contrary info. Try it first (UPDATED and then from Safe mode), and if it
doesn't work then:

See these threads first:

http://zerosrealm.com/index.php?page=dllfix (Read very carefully!)

http://forums.spywareinfo.com/index.php?showtopic=7447
http://forums.spywareinfo.com/index.php?showtopic=7261
http://forums.spywareinfo.com/index.php?showtopic=7281



Then from merijn, here: http://www.spywareinfo.com/~merijn/index.html


June 18, 2004:
Please stop emailing me about the new CWS variant that hijacks you to
res://<random>.dll/sp.html#96676. I am aware of this new thing, but it's a
beast to remove.
A solution is being worked on, see this thread on the SWI forums
http://forums.spywareinfo.com/index.php?showtopic=7447.

If it's not working for you, or it's too complicated, I heard from several
people that this workaround works as well:
Open the DLL you get hijacked to in Notepad
Select all content (Ctrl-A) and delete it
Save the file and exit Notepad
Find the file in Explorer, right-click it, select Properties, put a
checkmark in 'Read-Only' and click OK.
If you can't find the DLL file, make sure your settings allow you to view
"Hidden files". Open up any explorer windows and click on "Tools", "Folder
Options", "View" and be sure to check off "Show Hidden Files and Folders".



--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP



In

 

[Guest]

Check here:
http://www.malwarebytes.biz/forums/index.php?showtopic=4
http://www.malwarebytes.biz/forums/index.php?showtopic=51
http://www.malwarebytes.biz/forums/index.php?act=idx
http://www.malwarebytes.biz/forums/index.php?showforum=5