IE 6 Hijacked

  • Thread starter Thread starter Acrid-
  • Start date Start date
A

Acrid-

I recently got HiJacked by best-search.cc and search-
space.cc

I removed the entries in the registry but I noticed there
is still a best-seach.cc in my user.dat file.

"search barhttp://best-search.cc/search.php?
v=6&aff=4120963"

Can someone tell me how/where to edit this?

I see "search bar" keys in the registry but none of them
are best-search.cc
 
 
I've run ad-aware, Hijackthis, spybot s&d, mcafee tools,
etc...

None of them show/find that entry in user.dat, not even
sure if these tools check user.dat

win98 user.dat is mostly unreadable data, so I don't have
a clue where that "search barhttp://" entry is set from.

The only relavant Hijackthis info is from the registry and
it isnt set as "best-search.cc".

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search
Bar =
http://search.presario.net/scripts/redirectors/presario/src
hredir.dll?c=1c00&s=searchbar&LC=0409
 
Download and run (FIX) Cool Web Shredder:

http://www.zerosrealm.com/downloads/CWShredder.zip

Zee



I've run ad-aware, Hijackthis, spybot s&d, mcafee tools,
etc...

None of them show/find that entry in user.dat, not even
sure if these tools check user.dat

win98 user.dat is mostly unreadable data, so I don't have
a clue where that "search barhttp://" entry is set from.

The only relavant Hijackthis info is from the registry and
it isnt set as "best-search.cc".

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search
Bar =
http://search.presario.net/scripts/redirectors/presario/src
hredir.dll?c=1c00&s=searchbar&LC=0409
 
Back
Top