Home Search

[Curtis Davidson]

I've installed spyware, ran the scan and removed detected
spyware only to have it return. In fact, I've tried to
uninstall "Home Search Assistent" in the control panel
with no success. Furthermore, my browser is hijacked and
IE starts at "about blank", a generic search page.

PLEASE HELP...THIS IS SO FRUSTRATING!!

 

[Jim Byrd]

Hi Curtis - Start here. Please post back with your results or if you need
additional assistance.

Courtesy of Ron Kinner MVP:


"There is a German program called Spoonweg.exe which might
help.

http://lunatic-skydance.de/mr/soft/SpoonWeg.exe

It will start to download. Save it somewhere you can find
it again then Open it and say YES then Click on Trojaner-
Suchen. If it finds the version of about:blank that it is
meant to kill it will go and do it then reboot the PC.
Otherwise it will say Trojaner Spooner wird nicht gefunden.

Another German program is SpHjFix.exe.

http://www.trojaner-info.de/cgi-bin/download.cgi?
file=sphjfix

This one speaks English so just Press on Start Disinfection
If it doesn't find its target it will say Not Infected
across the top of the little window. Otherwise follow the
instructions.

Both of these probably run better in Safe Mode (F8 -
without Networking)

Finally if both of the above fail then try one of the
methods in:

http://www.pchell.com/support/aboutblank.shtml "



I can also recommend the procedures at www.pchell.com .



In addition, for your specific Home Search Assistant parasite, try the
following (extracted from one of my "standard" posts about this family of
parasites):

"If your hijacker is Home Search Assistant or one of these:

- Only The Best
- Home Search Extender
- Shopping Wizard
- res://****.dll/index.html#***** (or simply res .dll)

first see here:
http://www.short-media.com/forum/showthread.php?p=172774#post172774, and
here: http://www.pchell.com/support/onlythebest.shtml. Then you can try AT
YOUR OWN RISK, HSRemove, free, here: http://www.hsremove.com/. "A few
days ago I got hijacked - Nothing new in that, except this time it was a
real [censored] to get rid of. - There were simply no tools available to
remove this "Home Search" thing. Finally I ended up creating my own tool for
it. USE IT AT YOUR OWN RISK. And if you find it helpful, then please do not
hesitate to make a contribution."

Or, you can try AboutBuster, here, which is also designed to remove Home
Search Assistant: http://www.malwarebytes.biz/"


--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP



In

 

[Jim]

Jim,

I'll give it a shot and let you know the results.

Thanks,

Curtis

-----Original Message-----
Hi Curtis - Start here. Please post back with your results or if you need
additional assistance.

Courtesy of Ron Kinner MVP:


"There is a German program called Spoonweg.exe which might
help.

http://lunatic-skydance.de/mr/soft/SpoonWeg.exe

It will start to download. Save it somewhere you can find
it again then Open it and say YES then Click on Trojaner-
Suchen. If it finds the version of about:blank that it is
meant to kill it will go and do it then reboot the PC.
Otherwise it will say Trojaner Spooner wird nicht gefunden.

Another German program is SpHjFix.exe.

http://www.trojaner-info.de/cgi-bin/download.cgi?
file=sphjfix

This one speaks English so just Press on Start Disinfection
If it doesn't find its target it will say Not Infected
across the top of the little window. Otherwise follow the
instructions.

Both of these probably run better in Safe Mode (F8 -
without Networking)

Finally if both of the above fail then try one of the
methods in:

http://www.pchell.com/support/aboutblank.shtml "



I can also recommend the procedures at www.pchell.com .



In addition, for your specific Home Search Assistant parasite, try the
following (extracted from one of my "standard" posts about this family of
parasites):

"If your hijacker is Home Search Assistant or one of these:

- Only The Best
- Home Search Extender
- Shopping Wizard
- res://****.dll/index.html#***** (or simply res .dll)

first see here:
http://www.short-media.com/forum/showthread.php? p=172774#post172774, and
here: http://www.pchell.com/support/onlythebest.shtml. Then you can try AT
YOUR OWN RISK, HSRemove, free, here:

http://www.hsremove.com/. "A few

days ago I got hijacked - Nothing new in that, except this time it was a
real [censored] to get rid of. - There were simply no tools available to
remove this "Home Search" thing. Finally I ended up creating my own tool for
it. USE IT AT YOUR OWN RISK. And if you find it helpful, then please do not
hesitate to make a contribution."

Or, you can try AboutBuster, here, which is also designed to remove Home
Search Assistant: http://www.malwarebytes.biz/"


--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP



In Curtis Davidson <[email protected]> typed:

I've installed spyware, ran the scan and removed detected
spyware only to have it return. In fact, I've tried to
uninstall "Home Search Assistent" in the control panel
with no success. Furthermore, my browser is hijacked and
IE starts at "about blank", a generic search page.

PLEASE HELP...THIS IS SO FRUSTRATING!!

.

 

[Jim Byrd]

YW, Jim - Let us know how you make out, please.

--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP



In

Jim,

I'll give it a shot and let you know the results.

Thanks,

Curtis

-----Original Message-----
Hi Curtis - Start here. Please post back with your results or if
you need additional assistance.

Courtesy of Ron Kinner MVP:


"There is a German program called Spoonweg.exe which might
help.

http://lunatic-skydance.de/mr/soft/SpoonWeg.exe

It will start to download. Save it somewhere you can find
it again then Open it and say YES then Click on Trojaner-
Suchen. If it finds the version of about:blank that it is
meant to kill it will go and do it then reboot the PC.
Otherwise it will say Trojaner Spooner wird nicht gefunden.

Another German program is SpHjFix.exe.

http://www.trojaner-info.de/cgi-bin/download.cgi?
file=sphjfix

This one speaks English so just Press on Start Disinfection
If it doesn't find its target it will say Not Infected
across the top of the little window. Otherwise follow the
instructions.

Both of these probably run better in Safe Mode (F8 -
without Networking)

Finally if both of the above fail then try one of the
methods in:

http://www.pchell.com/support/aboutblank.shtml "



I can also recommend the procedures at www.pchell.com .



In addition, for your specific Home Search Assistant parasite, try
the following (extracted from one of my "standard" posts about this
family of parasites):

"If your hijacker is Home Search Assistant or one of these:

- Only The Best
- Home Search Extender
- Shopping Wizard
- res://****.dll/index.html#***** (or simply res .dll)

first see here:
http://www.short-media.com/forum/showthread.php?
p=172774#post172774, and here:
http://www.pchell.com/support/onlythebest.shtml. Then you can try AT
YOUR OWN RISK, HSRemove, free, here:

http://www.hsremove.com/. "A few

days ago I got hijacked - Nothing new in that, except this time it
was a real [censored] to get rid of. - There were simply no tools
available to remove this "Home Search" thing. Finally I ended up
creating my own tool for it. USE IT AT YOUR OWN RISK. And if you
find it helpful, then please do not hesitate to make a contribution."

Or, you can try AboutBuster, here, which is also designed to remove
Home Search Assistant: http://www.malwarebytes.biz/"


--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP



In Curtis Davidson <[email protected]> typed:

I've installed spyware, ran the scan and removed detected
spyware only to have it return. In fact, I've tried to
uninstall "Home Search Assistent" in the control panel
with no success. Furthermore, my browser is hijacked and
IE starts at "about blank", a generic search page.

PLEASE HELP...THIS IS SO FRUSTRATING!!

.

 

[The Unknown P]

This is just a variant of Cool Web Search. Go into your
processes and "End Process" on any that you can't
associate with a known program on your OS or with the OS
itself. Process Explorer from www.sysinternals.com is
about the best one to help you with this. Adaware SE will
find a lot of the stuff and delete it. Running MSAS in
safe mode will also find 8 reg entries that Adaware
missed. Start MSAS and go into advanced tools\browser
Hijack Restore and check all boxes and then click restore.
Use a good Reg cleaner like RegSeeker. This will find
entries left behind. There are also DLL's that need to be
removed and two entries in the Windows file. These I can't
tell you the name of as they are randomly generated series
of letters followed by two numbers usually. If you choose
to display folder entries by view\details you will be able
to find the entries entered on the date this was first
noticed by you. In short. Run Adaware SE, Spybot S & D,
CWShredder, MSAS. and RegSeeker all in safe mode. That
should fix you up. You can e:mail me at mikisiw at msn dot
com if you need more help. TTFN.