help! possible hijack

[Guest]

I ran adaware last night and found several ojects to be quarrantined. 2 were medium threat of reg, data miner. Adaware froze up when I tried to quarratine the items. How can I find and get rid of these items? This is what the log file reported: Software\Microsoft\Internet Explorer\Search\Searchassistant.www.websearch.com; reg data, "http://www.websearch.com/ie.aspx?tb_id=50024"; rootkey- HKEY_LOCAL_MACHINE;

The second was: Software\microsoft\internet explorer\mainsearch\barwww.websearch.com; reg data; "http://www.websearch.com/internet explorer/aspx?tb_id=50024: rootkey- HKEY_CURRENT_USER;

 

[CRyder]

Hi. Sounds like you've got the "websearch" toolbar on
Internet Explorer. Take it off and you won't get this
message again.
You may be able to uninstall it by going to your control
panel>>add or remove programs and looking for Websearch
toolbar. It's spyware from www.websearch.com

-----Original Message-----
I ran adaware last night and found several ojects to be

quarrantined. 2 were medium threat of reg, data miner.
Adaware froze up when I tried to quarratine the items.
How can I find and get rid of these items? This is what
the log file reported: Software\Microsoft\Internet
Explorer\Search\Searchassistant.www.websearch.com; reg
data, "http://www.websearch.com/ie.aspx?tb_id=50024";
rootkey- HKEY_LOCAL_MACHINE;

The second was: Software\microsoft\internet

explorer\mainsearch\barwww.websearch.com; reg
data; "http://www.websearch.com/internet explorer/aspx?
tb_id=50024: rootkey- HKEY_CURRENT_USER;

 

[purplehaz]

Sounds like spyware or a home page hijacker.

Run these tools weekly
spybot -- http://www.safer-networking.org/
ad-aware -- http://www.lavasoftusa.com/
HiJackThis - http://mjc1.com/mirror/hjt/

I ran adaware last night and found several ojects to be quarrantined. 2

were medium threat of reg, data miner. Adaware froze up when I tried to
quarratine the items. How can I find and get rid of these items? This is
what the log file reported: Software\Microsoft\Internet
Explorer\Search\Searchassistant.www.websearch.com; reg data,
"http://www.websearch.com/ie.aspx?tb_id=50024"; rootkey- HKEY_LOCAL_MACHINE;

The second was: Software\microsoft\internet

explorer\mainsearch\barwww.websearch.com; reg data;
"http://www.websearch.com/internet explorer/aspx?tb_id=50024: rootkey-
HKEY_CURRENT_USER;

 

[MAP]

-----Original Message-----
I ran adaware last night and found several ojects to be

quarrantined. 2 were medium threat of reg, data miner.
Adaware froze up when I tried to quarratine the items.
How can I find and get rid of these items? This is what
the log file reported: Software\Microsoft\Internet
Explorer\Search\Searchassistant.www.websearch.com; reg
data, "http://www.websearch.com/ie.aspx?tb_id=50024";
rootkey- HKEY_LOCAL_MACHINE;

The second was: Software\microsoft\internet

explorer\mainsearch\barwww.websearch.com; reg
data; "http://www.websearch.com/internet explorer/aspx?
tb_id=50024: rootkey- HKEY_CURRENT_USER;

.

Have you tried to run ad-aware again?

http://www.safer-networking.org/ Spybot
http://www.javacoolsoftware.com/spywareblaster.html
http://www.wilderssecurity.net/spywareguard.html
http://www.lavasoft.de/ Ad-aware
http://www.merijn.org/downloads.html (CWS)cool web
shedder and hijack this

 

[mamabear]

-----Original Message-----
I ran adaware last night and found several ojects to be

quarrantined. 2 were medium threat of reg, data miner.
Adaware froze up when I tried to quarratine the items.
How can I find and get rid of these items? This is what
the log file reported: Software\Microsoft\Internet
Explorer\Search\Searchassistant.www.websearch.com; reg
data, "http://www.websearch.com/ie.aspx?tb_id=50024";
rootkey- HKEY_LOCAL_MACHINE;

The second was: Software\microsoft\internet

explorer\mainsearch\barwww.websearch.com; reg
data; "http://www.websearch.com/internet explorer/aspx?
tb_id=50024: rootkey- HKEY_CURRENT_USER;

.

If you haven't gotten sorted out yet, please post your
logfile at the Lavasoft forums. Someone there will look
at it and can see exactly what was on your computer at the
time of this scan. The forums can be found here:
http://www.lavasoftsupport.com/
This will tell you how to post your logfile:
http://www.lavahelp.com/howto/logfile/index.html
Make sure you're using the latest build (6.181) and latest
ref file (http://www.lavahelp.com/howto/updref/index.html)
before you scan.