BROWSER VIRUS

[Guest]

I have been having this problem with a virus, that seems to change my home page . I have tried to get rid of it using Spybot Search and destroy, but it comes back when I Restart. I tried to go into Regedit and change the values, but that did not work. I even tried to block the websites, but that did'nt work either. one of the sites is http://yourbookmarks.ws/ another is coolwebsearch.com and a bunch of others.

It also adds Adult sites to my Favourites.

Please advice

 

[Han]

Install Spybot, a free software from http://www.safer-
networking.org/ and destroy all the add ware. After that
delete all the old pages and cookies from the browser. I
had the same problem as yours and I am able to solve the
problem as described above.

-----Original Message-----
I have been having this problem with a virus, that seems

to change my home page . I have tried to get rid of it
using Spybot Search and destroy, but it comes back when I
Restart. I tried to go into Regedit and change the values,
but that did not work. I even tried to block the websites,
but that did'nt work either. one of the sites is
http://yourbookmarks.ws/ another is coolwebsearch.com and
a bunch of others.

 

[Corinne Rainbow]

NewsGroups : Hello/Bonjour DON , tu nous a dit / you told us

I have been having this problem with a virus, that seems to
change my home page . I have tried to get rid of it using Spybot
Search and destroy, but it comes back when I Restart. I tried to
go into Regedit and change the values, but that did not work. I
even tried to block the websites, but that did'nt work either.
one of the sites is http://yourbookmarks.ws/ another is
coolwebsearch.com and a bunch of others.

It also adds Adult sites to my Favourites.

Please advice

It is not a virus but a spyware.
Retry spybot, updated and use vaccination.
Then check your msconfig startup to watch if an entry of the spyware is not
in it

--
Corinne
Pour m'écrire perso / To write me :
corinne.rainbow serveur : ibelgique.com
La FAQ d'OE : http://www.faqoe.com/

The OE FAQ : http://insideoe.tomsterdam.com/
The OE Helps : http://www.oehelp.com/
Autres sites (en français)
http://www.secuser.com
http://jceel.free.fr
http:// www.hoaxbuster.com

 

[siljaline]

I have been having this problem with a virus, that seems to change my home page .

I have tried to get rid of it using Spybot Search and destroy, but it comes back
when I Restart. I tried to go into Regedit and change the values, but that did not
work. I even tried to block the websites, but that did'nt work either. one of the
sites is hxxp://yourbookmarks.ws/ another is coolwebsearch.com and a bunch of
others.

It also adds Adult sites to my Favourites.

Please advice

Spyware Alert!

--
siljaline

MS - MVP Windows IE/OE
______________________

(Reply to group, as return address
is invalid - that we may all benefit)

"Cool Web Search" Internet Scourge Spyware Hijack.
Info: http://www.merijn.org/cwschronicles.html#Bootconf
Run "CWShredder" http://www.merijn.org/files/CWShredder.exe
Hit the executable with all instances of IE and OE closed, follow the
prompts.


HTH

--
siljaline

MS - MVP Windows IE/OE
______________________

(Reply to group, as return address
is invalid - that we may all benefit)

 

[Caleb]

I had the same problem. Here is how I solved it:

Do a search in your Windows directory (right click on
the "Windows" directory and select "Search") for the URL
that your home page is being set to. Make sure you are
searching for "a word or phrase in the file."

In my case this turned up a little Javascript file
(filename.js) in the Windows directory that was rewriting
my registry on reboot.

Now search the registry (using regedit.exe)
for "filename.js" or whatever the file name turns out to
be. This will show you where in the registry it is being
executed from. For some reason when I searched in the
obvious registry places, I found nothing unusual
executing on startup, but when I knew what the culprit
was, a registry search found it right away (under RunOnce
I believe)

Delete registry entry. Delete filename.js. Problem
solved. Now set your home page to what you want it to be.

 

[H Leboeuf]

yourbookmarks.ws = this parasite. A nasty one. Get the removal tool.

CoolWebSearch - CWS http://www.spywareinfo.com/articles/cws/
More: Complete list by variant with up-to-date information.
http://www.merijn.org/cwschronicles.html
Moreirect Download: Removal tool.
http://www.merijn.org/files/cwshredder.zip
Moreirect Download: Removal tool.
http://www.symantec.com/avcenter/venc/data/vbs.bootconf.html

I have been having this problem with a virus, that seems to change my home

page . I have tried to get rid of it using Spybot Search and destroy, but it
comes back when I Restart. I tried to go into Regedit and change the values,
but that did not work. I even tried to block the websites, but that did'nt
work either. one of the sites is http://yourbookmarks.ws/ another is
coolwebsearch.com and a bunch of others.