hi,
i had a found a few viruses in my friends computer and
removed them successfully via norton. i also did ad aware
and spy bot s&d. everytime i try to change my home page to
yahoo or msn or any page for that matter, it goes back
to "blank" in the address line, and launches a webpage. i
can get on the net without problems and cleaned the disk
via disk cleaner in xp. i still find something with ad
aware called dso exploit that i remove and it goes back
in. i have disabled system restore prior to the virus and
worm removals. thanks
john
John,
The about:blank hijack is quite likely CoolWebSearch. You will need AdAware
(did you update before running?), CWShredder, HijackThis, and expert advice.
Start by downloading each of the following free tools:
CWShredder <
http://www.majorgeeks.com/download4086.html>
CoolWWWSearch.SmartSearch (v1/v2) MiniRemoval
<
http://www.majorgeeks.com/download4113.html>
HijackThis <
http://www.majorgeeks.com/download.php?det=3155>
LSP-Fix and WinsockLSPFix <
http://www.cexx.org/lspfix.htm>
Stinger <
http://us.mcafee.com/virusInfo/default.asp?id=stinger>
Install and run Stinger.
<
http://us.mcafee.com/virusInfo/default.asp?id=stinger>
Create a separate folder for HijackThis, such as C:\HijackThis - copy the
downloaded file there. The other downloaded programs can be copied into, and
run from, any convenient folder.
Start by closing all Internet Explorer and Outlook windows, and running
CoolWebSearchSmartKillerMiniRemoval, then CWShredder. Have the latter fix all.
Then, run HijackThis ("Scan"). Do NOT make any changes immediately. Save the
HJT Log.
<
http://forums.spywareinfo.com/index.php?showtopic=227>
Finally, have your HJT log interpreted by experts at one or more of the
following security forums (and post it, or a link to your forum posts, here):
Aumha: <
http://forum.aumha.org/index.php>
Net-Integration: <
http://forums.net-integration.net/>
Spyware Info: <
http://forums.spywareinfo.com/>
Spyware Warrior: <
http://spywarewarrior.com/index.php>
Tom Coyote: <
http://forums.tomcoyote.org/>
Wilders Security<
http://www.wilderssecurity.com/>
If removal of any spyware affects your ability to access the internet (some
spyware builds itself into the network software, and its removal may damage your
network), run LSP-Fix and / or WinsockXPFIx.
Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.
