Address Bar has been taken over

[Shane Spitzer]

Whenever I try to type an address in the IE6 address bar,
It searches for http://vrape.hardloved.com/top/search.php?
id=(and then whatever I type in here). Of course, I get a
DNS error after such a search.

I tried using AdAware (even updated the latest files from
the website) but it didnt find any spyware. The same bug
takes over my home page after rebooting - although I can
change it back each time. Any ideas?

S

 

[Jim Byrd]

Hi Shane - Also try SpyBot Search and Destroy available here:
http://security.kolla.de/ SpyBot Support Forum here:
http://www.net-integration.net/cgi-bin/forums/ikonboard.cgi. I recommend
using both normally. After fixing things with SpyBot S&D, be sure to
re-boot and rerun SpyBot again and repeat this cycle until you get a clean
"no red" scan.

If that doesn't fix it, then:
Download HijackThis, free, here:
http://www.spywareinfo.com/~merijn/files/hijackthis.zip

Unzip it to any convenient folder, start it then press Scan. Click on
SaveLog when it's finished which will create hijackthis.log. Now click the
Config button, then Misc Tools and click on Generate StartupList.log which
will create Startuplist.txt

Go to Spyware and Hijackware Removal Support, here:
http://www.spywareinfo.com/forums/index.php?s=8a236cdf61469fbad3bddbe810be0374&act=SF&f=11

Sign in, then copy and paste both files a message asking for assistance,
Someone will answer with detailed instructions for the removal of your
parasite(s).




--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP



In

 

[Mike Burgess]

Shane,
vrape.hardloved.com = coolwebsearch and the gang (parasite)

Dealing with Unwanted Spyware, Parasites, Toolbars and Search Engines
http://mvps.org/winhelp2002/unwanted.htm

Includes: How to remove Coolwebsearch and affiliates
_______________________________________
Mike Burgess http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 9-03-03]
Please post replies to this Newsgroup, email address is invalid