Redirect Spyware

[David]

I just noticed something on my pc, when I was at
Microsoft.com; trying to dowmload Media Player 9, well
when I clicked on the download button for the file, it
redirected me to this stupid web page searchpage.cc

What a load of crap, well I went digging around my
registry and found this entry for Redirect2.exe and there
was another one for seachpage.cc. So, I deleted both of
them. Well, that did not fix my problem, when I tried to
download again, I saw this address nkvd.us and that stupid
thing brought be back to searchpage.cc. I could not locate
anything else in my registry. Also, I have some
Spyware/AdWare Software (PestPatrol) on my pc and it did
not find anything either. Any suggestions would be greatly
appreciated.

Thanks

David

 

[mac]

I just noticed something on my pc, when I was at
Microsoft.com; trying to dowmload Media Player 9, well
when I clicked on the download button for the file, it
redirected me to this stupid web page searchpage.cc

What a load of crap, well I went digging around my
registry and found this entry for Redirect2.exe and there
was another one for seachpage.cc. So, I deleted both of
them. Well, that did not fix my problem, when I tried to
download again, I saw this address nkvd.us and that stupid
thing brought be back to searchpage.cc. I could not locate
anything else in my registry. Also, I have some
Spyware/AdWare Software (PestPatrol) on my pc and it did
not find anything either. Any suggestions would be greatly
appreciated.

Thanks

David

Download, update and run:
http://www.spywareinfo.com/~merijn/files/cwshredder.zip

 

[Mike Burgess]

David,
"seachpage.cc" and "nkvd.us" are all from the same group of trojans
(Coolwebsearch)

Requires CWShredder 1.56.2
http://www.spywareinfo.com/~merijn/files/cwshredder.zip
Note: if needed - right-click and select: "Save Target As"

Note: you may have more than one issue?
"Redirect2.exe" = Spyware-DCToolbar
http://vil.nai.com/vil/content/v_100784.htm
--
How to remove Coolwebsearch and affiliates
http://mvps.org/winhelp2002/unwanted.htm#Coolwebsearch

Note: this type hijack indicates an unpatched machine, that is lacking
in "Defense". Please visit Windows Update to avoid these exploits.

Note: be *sure* to follow-up with HijackThis
Post back with the URL where you posted if you want help with your log.
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 04-09-04]
Please post replies to this Newsgroup, email address is invalid

 

[David]

Thanks for the info, I will look into it....

Thanks Again

David

-----Original Message-----
David,
"seachpage.cc" and "nkvd.us" are all from the same group of trojans
(Coolwebsearch)

Requires CWShredder 1.56.2
http://www.spywareinfo.com/~merijn/files/cwshredder.zip
Note: if needed - right-click and select: "Save Target As"

Note: you may have more than one issue?
"Redirect2.exe" = Spyware-DCToolbar
http://vil.nai.com/vil/content/v_100784.htm
--
How to remove Coolwebsearch and affiliates
http://mvps.org/winhelp2002/unwanted.htm#Coolwebsearch

Note: this type hijack indicates an unpatched machine, that is lacking
in "Defense". Please visit Windows Update to avoid these exploits.

Note: be *sure* to follow-up with HijackThis
Post back with the URL where you posted if you want help with your log.
__________________________________________________________ __
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 04-09- 04]
Please post replies to this Newsgroup, email address is invalid
--

I just noticed something on my pc, when I was at
Microsoft.com; trying to dowmload Media Player 9, well
when I clicked on the download button for the file, it
redirected me to this stupid web page searchpage.cc

What a load of crap, well I went digging around my
registry and found this entry for Redirect2.exe and there
was another one for seachpage.cc. So, I deleted both of
them. Well, that did not fix my problem, when I tried to
download again, I saw this address nkvd.us and that stupid
thing brought be back to searchpage.cc. I could not locate
anything else in my registry. Also, I have some
Spyware/AdWare Software (PestPatrol) on my pc and it did
not find anything either. Any suggestions would be greatly
appreciated.

Thanks

David

.