C:\searchpage.html

[Guest]

for some reason my internet explorer has set this url:
C:\searchpage.html as my home page and it resets it self
every time I open explorer so if I change the home page or
restor defaults or what ever I try my hompage keeps
comeing up C:\searchpage.html

does anyone know how to remove this from my computer
please reply to ned.weaver(remove)@comcas.net

 

[Altrus]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

You have, tragically, been the victim of AdAware. This 'advertising'
software infects your computer with a search-engine- the results of which have
been 'sponsered' by people willing to pay as little as a penny a click.

But fear not! You can take this situation in stride through the use of some
clever programs, such as AdAware. Download AdAware from:

http://www.lavasoftusa.com/support/download/

Remember to 'Check for updates' so that you are protected against the
latest threats. Once updated, run the program to eliminate any other spyware
programs which were left behind or missed.

While AdAware should remove this particular bug, some others may have
slipped past. Thus, it's a good idea to use CWShredder to remove some of the
varients which may have been missed. CWShredder is available at:

http://www.spywareinfo.com/~merijn/files/cwshredder.zip

Learn more about your adversary here:

http://mvps.org/winhelp2002/unwanted.htm

This neat little guide is filled with valuable tips on protecting your
computer.

With this knowledge, and a few snappy programs, you can turn the tide and
return your computer to its natural, productive, state.

Best regards,

Altrus

Some information:
http://www.computing.net/security/wwwboard/forum/11198.html

- --


| for some reason my internet explorer has set this url:
| C:\searchpage.html as my home page and it resets it self
| every time I open explorer so if I change the home page or
| restor defaults or what ever I try my hompage keeps
| comeing up C:\searchpage.html
|
| does anyone know how to remove this from my computer
please reply to ned.weaver(remove)@comcas.net

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com>

iQA/AwUBQIbqrHnWWyjmZ2hmEQIrVACgtNqoHHaEh/Ku0Vk9BgQoGuJyVYMAoNob
jZap2MNvapPftZlTXp9kUWrr
=+Fj9
-----END PGP SIGNATURE-----

 

[Guest]

Are you saying that Adaware is both the problem and the
solution? I don't get it.

 

[PA Bear]

I think he'd meant...

IIRC, CWShredder will take care of this problem.

 

[Mike Burgess]

PA Bear,

IIRC, CWShredder will take care of this problem"

If only it was that simply {sigh} ...

There are now several new versions from CWS that reset to
"about:blank", or use the "res:/ {insert page here}" method ... [ugh!]
http://www.spywareinfo.com/~merijn/cwschronicles.html#realyellowpage

FYI: they are creating new "Protocol" entries:
[HKEY_CLASSES_ROOT\PROTOCOLS\Filter\text/html]
[HKEY_CLASSES_ROOT\PROTOCOLS\Filter\text/plain]

and modifying this one:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 04-15-04]
Please post replies to this Newsgroup, email address is invalid
--

 

[Altrus]

Sorry, my mistake.

PA Bear is right, it should read:

"You have, tragically, been the victim of adware..

My apologies.

Altrus

| Are you saying that Adaware is both the problem and the
| solution? I don't get it.
| >-----Original Message-----
| >-----BEGIN PGP SIGNED MESSAGE-----
| >Hash: SHA1
| >
| >Hi,
| >
| > You have, tragically, been the victim of AdAware.
| This 'advertising'
| >software infects your computer with a search-engine- the
| results of which have
| >been 'sponsered' by people willing to pay as little as a
| penny a click.
| >
| > But fear not! You can take this situation in stride
| through the use of some
| >clever programs, such as AdAware. Download AdAware from:
| >
| >http://www.lavasoftusa.com/support/download/
| >
| > Remember to 'Check for updates' so that you are
| protected against the
| >latest threats. Once updated, run the program to
| eliminate any other spyware
| >programs which were left behind or missed.
| >
| > While AdAware should remove this particular bug,
| some others may have
| >slipped past. Thus, it's a good idea to use CWShredder
| to remove some of the
| >varients which may have been missed. CWShredder is
| available at:
| >
| >http://www.spywareinfo.com/~merijn/files/cwshredder.zip
| >
| >Learn more about your adversary here:
| >
| >http://mvps.org/winhelp2002/unwanted.htm
| >
| >This neat little guide is filled with valuable tips on
| protecting your
| >computer.
| >
| > With this knowledge, and a few snappy programs, you
| can turn the tide and
| >return your computer to its natural, productive, state.
| >
| >Best regards,
| >
| >Altrus
| >
| >Some information:
| >http://www.computing.net/security/wwwboard/forum/11198.ht
| ml
| >
| >- --
| >
| >
| >| >| for some reason my internet explorer has set this url:
| >| C:\searchpage.html as my home page and it resets it
| self
| >| every time I open explorer so if I change the home
| page or
| >| restor defaults or what ever I try my hompage keeps
| >| comeing up C:\searchpage.html
| >|
| >| does anyone know how to remove this from my computer
| >please reply to ned.weaver(remove)@comcas.net
| >
| >-----BEGIN PGP SIGNATURE-----
| >Version: PGPfreeware 6.5.8 for non-commercial use
| <http://www.pgp.com>
| >
| >iQA/AwUBQIbqrHnWWyjmZ2hmEQIrVACgtNqoHHaEh/Ku0Vk9BgQoGuJyV
| YMAoNob
| >jZap2MNvapPftZlTXp9kUWrr
| >=+Fj9
| >-----END PGP SIGNATURE-----
| >
| >
| >.
| >

 

[PA Bear]

Thanks, Mike. That variant's been bedevilling us "elsewhere" lately.
--
~PA Bear

PA Bear,

IIRC, CWShredder will take care of this problem"

If only it was that simply {sigh} ...

There are now several new versions from CWS that reset to
"about:blank", or use the "res:/ {insert page here}" method ... [ugh!]
http://www.spywareinfo.com/~merijn/cwschronicles.html#realyellowpage

FYI: they are creating new "Protocol" entries:
[HKEY_CLASSES_ROOT\PROTOCOLS\Filter\text/html]
[HKEY_CLASSES_ROOT\PROTOCOLS\Filter\text/plain]

and modifying this one:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 04-15-04]
Please post replies to this Newsgroup, email address is invalid

I think he'd meant...


IIRC, CWShredder will take care of this problem.

 

[Mike Burgess]

~PA,

"That variant's been bedevilling us "elsewhere" lately"

Yeah it's been a real "Bear" (pun intended to remove!
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 04-15-04]
Please post replies to this Newsgroup, email address is invalid
--

Thanks, Mike. That variant's been bedevilling us "elsewhere" lately.
--
~PA Bear

PA Bear,

IIRC, CWShredder will take care of this problem"

If only it was that simply {sigh} ...

There are now several new versions from CWS that reset to
"about:blank", or use the "res:/ {insert page here}" method ... [ugh!]
http://www.spywareinfo.com/~merijn/cwschronicles.html#realyellowpage

FYI: they are creating new "Protocol" entries:
[HKEY_CLASSES_ROOT\PROTOCOLS\Filter\text/html]
[HKEY_CLASSES_ROOT\PROTOCOLS\Filter\text/plain]

and modifying this one:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 04-15-04]
Please post replies to this Newsgroup, email address is invalid

I think he'd meant...

You have, tragically, been the victim of *adware*...

IIRC, CWShredder will take care of this problem.
--
~PA Bear

(e-mail address removed) wrote:
Are you saying that Adaware is both the problem and the
solution? I don't get it.
-----Original Message-----
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

You have, tragically, been the victim of AdAware. This 'advertising'
software infects your computer with a search-engine- the results of
which have been 'sponsered' by people willing to pay as little as a
penny a click.

But fear not! You can take this situation in stride through the use
of some clever programs, such as AdAware. Download AdAware from:

http://www.lavasoftusa.com/support/download/

Remember to 'Check for updates' so that you are protected against
the latest threats. Once updated, run the program to eliminate any
other spyware programs which were left behind or missed.

While AdAware should remove this particular bug, some others may
have slipped past. Thus, it's a good idea to use CWShredder to remove
some of the varients which may have been missed. CWShredder is
available at:

http://www.spywareinfo.com/~merijn/files/cwshredder.zip

Learn more about your adversary here:

http://mvps.org/winhelp2002/unwanted.htm

This neat little guide is filled with valuable tips on protecting your
computer.

With this knowledge, and a few snappy programs, you can turn the
tide and return your computer to its natural, productive, state.

Best regards,

Altrus

Some information:
http://www.computing.net/security/wwwboard/forum/11198.ht ml

- --


for some reason my internet explorer has set this url:
C:\searchpage.html as my home page and it resets it self
every time I open explorer so if I change the home page or
restor defaults or what ever I try my hompage keeps
comeing up C:\searchpage.html

does anyone know how to remove this from my computer
please reply to ned.weaver(remove)@comcas.net

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.8 for non-commercial use

iQA/AwUBQIbqrHnWWyjmZ2hmEQIrVACgtNqoHHaEh/Ku0Vk9BgQoGuJyV YMAoNob
jZap2MNvapPftZlTXp9kUWrr
=+Fj9
-----END PGP SIGNATURE-----


.