Help ! rl.webtracer !

[John]

This damn thing is nasty, to say the least...
Can anyone tell me how to get rid of it?
What exactly is it? Virus, worm, trojan, hijacker, what?
I am ok with using regedit, if necessary.
Norton won't fix it, spyware guard detects browser change,
but it keeps re-installing itself, ad-aware doesn't detect
it, Spy-Bot S&D didn't detect it, just installed & ran
this MS Beta, got two new detections then removed.
Webtracer is still here !

 

[me again]

Was reading other posts about running this beta softwre
in "Safe Mode"... that did it... got it! I think?
It is still trying to hijack my browser's start page, but
this beta caught it and provided the option to block the
change... now if we can just figure out where it is
installed & remove it, that would be great. I don't know
the name of the application that is causing this, or where
it is installed.

 

[Phil]

Sorry I can't say exactly where, but I encountered this off
a freeware site after installing a product and visiting the
home pages (don't remember which since I visited a bunch
that instance prior to this occuring). I do remember it
installed to 3 places in the registry. MS AntiSpyware
indicated the locations (I'm using the "advance mode"). I
did not have to go into safe mode. I am using similar
products in addition to what you listed, i.e.
JavaCoolSoftware's SpywareBlaster 3.2, SpyBot S&D 1.3, Ad
Aware SE Build 1.05, plus MS AntiSpyware. On MS
AntiSpyware, if you click on Options, click on Settings,
then click on General make sure you have "Knowlegeable
User" and "Include technical information in selection
details" checked. If you run into this again it should
tell you where it's residing before removing it, THEN you
should reclaim your browser. If you're running a software
firewall its easy: go to your browser Web settings and
default them all then close it, remove the browser from
your firewall then close it, then finally run your browser
again. Your firewall will pick it up and ask you the first
use permissions dialog and reset your browser for you. HTH.

 

[Ron Chamberlin]

Hi me,
Good news and good work on your part!

Empty your temporary files AND your Temporary Internet Files C:\Documents
and Settings\Username\Local Settings\Temporary Internet Files folder ;
Run the scan while in safe mode;
Then open MWAS, go to Advanced-->Internet Explorer--->IE BHO's and disable
any suspicious/unknown objects.

Ron Chamberlin
MS-MVP