homepage hijacked

C

chuck

My homepage and defaults have been changed and are stuck
on www.best-search.com. all my antiviral programs and
spyware programs come up negative except for spybot s+d,
which identifies two problems as common hijacker: prefix
change and indicates two registry files that have been
changed t0 a specific homepage. even though spybot seems
to fix or delete the problems they just show up again.

What can I do? PLEASE HELP. thank you
 
F

Frank Saunders, MS-MVP

chuck said:
My homepage and defaults have been changed and are stuck
on www.best-search.com. all my antiviral programs and
spyware programs come up negative except for spybot s+d,
which identifies two problems as common hijacker: prefix
change and indicates two registry files that have been
changed t0 a specific homepage. even though spybot seems
to fix or delete the problems they just show up again.

What can I do? PLEASE HELP. thank you

How to remove Coolwebsearch and affiliates
http://mvps.org/winhelp2002/unwanted.htm#Coolwebsearch

If that doesn't fix it,
Go to: http://mvps.org/winhelp2002/unwanted.htm
Download "Hijack This!" [freeware]

Unzip, double-click "HijackThis.exe" and Press "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log"
button.
Click: "Save Log" (generates: "hijackthis.log")

Next, go to the below location:
http://www.spywareinfo.com/forums/

Sign in, go to the "Spyware and Hijackware Removal" section.
Press "New Topic", copy and paste hijackthis.log into your new message.

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com/security/protect/
 
M

marcus lee

i used HijackThis, removed the spyware, and after
restarting IE, the problem came back. Am I doing anythign
wrong?

Thanks
-----Original Message-----
My homepage and defaults have been changed and are stuck
on www.best-search.com. all my antiviral programs and
spyware programs come up negative except for spybot s+d,
which identifies two problems as common hijacker: prefix
change and indicates two registry files that have been
changed t0 a specific homepage. even though spybot seems
to fix or delete the problems they just show up again.

What can I do? PLEASE HELP. thank you

How to remove Coolwebsearch and affiliates
http://mvps.org/winhelp2002/unwanted.htm#Coolwebsearch

If that doesn't fix it,
Go to: http://mvps.org/winhelp2002/unwanted.htm
Download "Hijack This!" [freeware]

Unzip, double-click "HijackThis.exe" and Press "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log"
button.
Click: "Save Log" (generates: "hijackthis.log")

Next, go to the below location:
http://www.spywareinfo.com/forums/

Sign in, go to the "Spyware and Hijackware Removal" section.
Press "New Topic", copy and paste hijackthis.log into your new message.

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com/security/protect/


.
 
G

Guest

Yes,http://hjt.wizardsofwebsites.com

----- marcus lee wrote: ----

i used HijackThis, removed the spyware, and after
restarting IE, the problem came back. Am I doing anythign
wrong

Thank
-----Original Message----
My homepage and defaults have been changed and are stuc
on www.best-search.com. all my antiviral programs an
spyware programs come up negative except for spybot s+d
which identifies two problems as common hijacker: prefi
change and indicates two registry files that have bee
changed t0 a specific homepage. even though spybot seem
to fix or delete the problems they just show up again
How to remove Coolwebsearch and affiliate http://mvps.org/winhelp2002/unwanted.htm#Coolwebsearc
If that doesn't fix it
Go to: http://mvps.org/winhelp2002/unwanted.ht
Download "Hijack This!" [freeware
Unzip, double-click "HijackThis.exe" and Press "Scan"
When the scan is finished, the "Scan" button will change
into a "Save Log
button
Click: "Save Log" (generates: "hijackthis.log"
Next, go to the below location http://www.spywareinfo.com/forums
Sign in, go to the "Spyware and Hijackware Removal"
section
Press "New Topic", copy and paste hijackthis.log into your new message
Frank Saunders, MS-MVP, IE/O
Please respond in Newsgroup. Do not send emai
http://www.fjsmjs.co
Protect your P
http://www.microsoft.com/security/protect
 
F

Frank Saunders, MS-MVP IE/OE

marcus lee said:
i used HijackThis, removed the spyware, and after
restarting IE, the problem came back. Am I doing anythign
wrong?

Thanks
-----Original Message-----
chuck said:
My homepage and defaults have been changed and are stuck
on www.best-search.com. all my antiviral programs and
spyware programs come up negative except for spybot s+d,
which identifies two problems as common hijacker: prefix
change and indicates two registry files that have been
changed t0 a specific homepage. even though spybot seems
to fix or delete the problems they just show up again.

What can I do? PLEASE HELP. thank you

How to remove Coolwebsearch and affiliates
http://mvps.org/winhelp2002/unwanted.htm#Coolwebsearch

If that doesn't fix it,
Go to: http://mvps.org/winhelp2002/unwanted.htm
Download "Hijack This!" [freeware]

Unzip, double-click "HijackThis.exe" and Press "Scan".

When the scan is finished, the "Scan" button will change into a
"Save Log" button.
Click: "Save Log" (generates: "hijackthis.log")

Next, go to the below location:
http://www.spywareinfo.com/forums/

Sign in, go to the "Spyware and Hijackware Removal" section.
Press "New Topic", copy and paste hijackthis.log into your new
message.

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com/security/protect/


.

Wasn't there any response when you posted the log to the forum I gave you?

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com/security/protect/
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top