Home Page and Address line problems

[Scott]

I cannot change my home page off www.nkvd.us. If I typing
a web address in the Address bar it goes to searchpage.cc
Search Everything page. I'm running XP Pro and IE 6. I
loaded all updates. Scanned for viruses. Spybot didn't
remove it. If I remove enteries (www.nkvd.us) in the
registry they come back. How do I remove this?

Thanks,

Scott

 

[Martin C]

You have a nasty piece of spyware on your system. As can be seen from this
thread
http://forums.net-integration.net/index.php?showtopic=12610
it can be nasty to get rid of.

The success story was to use HiJackThis followed by CW Shredder and (maybe
important) delete the temporary internet files and reboot.

For details on the programs to use:

Download/run HijackThis from:
http://www.merijn.org/
Be very careful with this program though. Do not remove anything that is
referenced by it until you get advice on what to remove as it will list some
good items as well as bad ones.
See http://mjc1.com/mirror/hjt/#quick and read the quick start on how to
create a log file that can be sent to a forum that can provide assistance on
removal of unwanted problems.
Post the logs to an appropriate NG here where they specialize in
spyware/hijacker removal:
http://forums.spywareinfo.com/

There are many Forums that offer Free "Hijack This" log review.
http://www.spywareinfo.com/forums/
http://www.dslreports.com/forum/security,1
http://www.computercops.biz/forums.html
http://www.cybertechhelp.com/forums/index.php
http://boards.cexx.org/
http://forums.net-integration.net/
http://forum.aumha.org/
http://www.wilderssecurity.com/index.php
http://www.lavasoftsupport.com

Take your pick - they all offer excellent support -

Download/run Cool Web Shredder from
http://www.spywareinfo.com/~merijn/downloads.html

For Info on Cool Web Search Variants
http://www.merijn.org/cwschronicles.html

You may also want to get this file:

http://www.kellys-korner-xp.com/regs_edits/RestoreSearch2.REG
After downloading it, right click it and choose Merge.

Download/install/run Ad-Aware from
http://www.lavasoftusa.com/
This will detect any spyware on your system. When you run Ad-Aware, click on
the ref update to get the latest up-to-date ref file, run Ad-Aware and
delete everything it finds. This may find things that SpyBot has missed
(which you have already according to your post).

Hope this helps,

Martin