Homepage keeps changing to idgsearch.com

K

K

My IE browser homepage keeps getting changed to
idgsearch.com page everytime I open a fresh browser
window, and links to porn sites keep appearing in my
favourites folder no matter how many times I change it.
Plus icons for Diet Pills and Play Online keep appearing
on my desktop. I've deleted them time and again, and I've
used Spybot Search and Destroy, and Ad Aware, but the
problem still persists. I have read through some of the
posts in relation to this problem, and I've tried
visiting the page for the CWShredder but i can't access
it for some reason. Please help, like the others I'm
going crazy trying to fix this problem.
Thank you in advance
 
J

Jim Byrd

Hi K - This parasite is relatively new and difficult. See here for a
first look at the kinds of infection you can get:
http://forums.spywareinfo.com/index.php?showtopic=15701&hl=idgsearch

then do the following for your particular case. Don't just try to fix what
you saw at the link above.

Download a fresh copy of HijackThis, free, here:
http://www.spywareinfo.com/~merijn/files/hijackthis.zip

Unzip it to any convenient folder, start it then press Scan. Click on
SaveLog when it's finished which will create hijackthis.log. Now click the
Config button, then Misc Tools and click on Generate StartupList.log which
will create Startuplist.txt

Then go to one of the following forums:

Spyware and Hijackware Removal Support, here:
http://www.spywareinfo.com/forums/index.php?s=8a236cdf61469fbad3bddbe810be0374&act=SF&f=11

or Net-Integration here:
http://www.net-integration.net/cgi-...86d536d57b5f65b6e40c55365e;act=ST;f=27;t=6949

or Tom Coyote here:
http://tomcoyote.org/forums/index.php?act=ST&f=10&t=495&s=2c6e92805e310b519b9fa61cc7098fba

Sign in, then copy and paste both files into a message asking for
assistance, Someone will answer with detailed instructions for the removal
of your parasite(s).


For the general hijack case, the best way to start is to get Ad-Aware 6.0,
Build 181 or later, here: http://www.lavasoftusa.com/support/download/.
Update and run this regularly to get rid of most "spyware/hijackware" on
your machine. If it has to fix things, be sure to re-boot and rerun
AdAware again and repeat this cycle until you get a clean scan. The reason
is that it may have to remove things which are currently "in use" before it
can then clean up others.

Another excellent program for this purpose is SpyBot Search and Destroy
available here: http://security.kolla.de/ SpyBot Support Forum here:
http://www.net-integration.net/cgi-bin/forums/ikonboard.cgi. I recommend
using both normally. After fixing things with SpyBot S&D, be sure to
re-boot and rerun SpyBot again and repeat this cycle until you get a clean
"no red" scan. The reason is that SpyBot sometimes has to remove things
which are currently "in use" before it can then clean up others.


Note that sometimes you need to make a judgement call about what these
programs report as spyware. See here, for example:
http://www.imilly.com/alexa.htm


--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP



In
 
K

K

Thanks Jim, but the spywareinfo.com page seems to be down
at the moment. Is there another place I can download
HiJackThis from? I've tried looking it up on search
engines and various sites but I can't get a download of
it. Please help.
Thank you
-----Original Message-----
Hi K - This parasite is relatively new and difficult. See here for a
first look at the kinds of infection you can get:
http://forums.spywareinfo.com/index.php? showtopic=15701&hl=idgsearch

then do the following for your particular case. Don't just try to fix what
you saw at the link above.

Download a fresh copy of HijackThis, free, here:
http://www.spywareinfo.com/~merijn/files/hijackthis.zip

Unzip it to any convenient folder, start it then press Scan. Click on
SaveLog when it's finished which will create hijackthis.log. Now click the
Config button, then Misc Tools and click on Generate StartupList.log which
will create Startuplist.txt

Then go to one of the following forums:

Spyware and Hijackware Removal Support, here:
http://www.spywareinfo.com/forums/index.php? s=8a236cdf61469fbad3bddbe810be0374&act=SF&f=11

or Net-Integration here:
http://www.net-integration.net/cgi- bin/forum/ikonboard.cgi?
s=d3c2c886d536d57b5f65b6e40c55365e;act=ST;f=27;t=6949

or Tom Coyote here:
http://tomcoyote.org/forums/index.php? act=ST&f=10&t=495&s=2c6e92805e310b519b9fa61cc7098fba

Sign in, then copy and paste both files into a message asking for
assistance, Someone will answer with detailed instructions for the removal
of your parasite(s).


For the general hijack case, the best way to start is to get Ad-Aware 6.0,
Build 181 or later, here: http://www.lavasoftusa.com/support/download/.
Update and run this regularly to get rid of most "spyware/hijackware" on
your machine. If it has to fix things, be sure to re- boot and rerun
AdAware again and repeat this cycle until you get a clean scan. The reason
is that it may have to remove things which are currently "in use" before it
can then clean up others.

Another excellent program for this purpose is SpyBot Search and Destroy
available here: http://security.kolla.de/ SpyBot Support Forum here:
http://www.net-integration.net/cgi-
Click to expand...
bin/forums/ikonboard.cgi. I recommend
 
K

K

Hi Jim,
I don't know what's up with this but it keeps saying that
the page cannot be displayed. I've tried the other links
mentioned in posts regarding the same problems I have and
the spywareinfo.com page is the only page I can't get
access to. I don't suppose you could send the zip file to
my email at (e-mail address removed), please? I've been
trying to fix this problem the best I'm able to and I'm
running thin on patience and sanity... :(
Thanks
 
K

K

Hi H Leboeuf,
If I was overly paranoid I'd say whatever I'm infected
with must be trying to prevent its own annihilation...
because I can't access spywareinfo.com at all, not its
homepage, not its download page, nothing except a "The
Page Cannot Be Displayed" page :(
PLEASE HELP!
-bites fingernails till they bleed-
Thanks
 
J

Jim Byrd

Hi K - I'll be glad to send it if you wish - Be aware that it's 153K+
zipped. If your ISP will let you accept something that size, then send me a
good email address at jrbyrd at comcast.net (make the obvious
changes) and I'll send it back by return email. After you get it, run it
and save as I advised before. You can post your results to any of these
fora (since you can't seem to get to spywareinfo) in order to get help:


Spyware and Hijackware Removal Support, here:

http://www.spywareinfo.com/forums/index.php?s=8a236cdf61469fbad3bddbe810be0374&act=SF&f=11

or Net-Integration here:
http://www.net-integration.net/cgi-bin/forum/ikonboard.cgi?
s=d3c2c886d536d57b5f65b6e40c55365e;act=ST;f=27;t=6949 (URL may wrap)

or Tom Coyote here: http://tomcoyote.org/forums/index.php?
act=ST&f=10&t=495&s=2c6e92805e310b519b9fa61cc7098fba (Url may wrap)


--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP



In
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Homepage keeps changing after reboot 4
Something keeps changing my homepage 3
homepage keeps changing!! 1
homepage keeps resetting itself 3
Homepage keeps changing 2
Homepage keeps changing - entries in registry?? 2
default-homepage-network.com 5
Browser Homepage keeps changing itself 2

Top