mallicious software

[John]

Hi,

A friend of mine called me for help but here's something I can't resolve for
the moment.
Some spy or malware has changed his homepage. Well in fact there is no
homepage anymore, because everytime after opening the ie it tries to search
for http://my.search/hp.php but can't find it.
I tried to look if there's a file which includes scripting including this
url, but there isn't.
The second problem is the fact that everytime you log in, certain junk url
values are written to the registry typedURL keys. Because of that it looks
if he has visited these sites and those urls are showing up everytime you
click on the arrow next to the address bar. It's quite strange because this
last event doesn't happen right after he empties the list log out and log in
again. But mostly after you close ie and start it up again.
Also after login an error-message 'Debug assertion failed! Program
C:\WINNT\editpath.exe, File: fprintf.c Expression:str:=NULL' appears. Don't
know if that has anything to do with the above mentioned problem.

Does anybody know how to solve there problems?

Thanx, John

 

[mac]

Hi,

A friend of mine called me for help but here's something I can't resolve for
the moment.
Some spy or malware has changed his homepage. Well in fact there is no
homepage anymore, because everytime after opening the ie it tries to search
for http://my.search/hp.php but can't find it.
I tried to look if there's a file which includes scripting including this
url, but there isn't.
The second problem is the fact that everytime you log in, certain junk url
values are written to the registry typedURL keys. Because of that it looks
if he has visited these sites and those urls are showing up everytime you
click on the arrow next to the address bar. It's quite strange because this
last event doesn't happen right after he empties the list log out and log in
again. But mostly after you close ie and start it up again.
Also after login an error-message 'Debug assertion failed! Program
C:\WINNT\editpath.exe, File: fprintf.c Expression:str:=NULL' appears. Don't
know if that has anything to do with the above mentioned problem.

Does anybody know how to solve there problems?

Thanx, John

See
Dealing with Unwanted Spyware, Parasites, Toolbars and Search Engines
http://mvps.org/winhelp2002/unwanted.htm


Run the "Cool Web Shredder"
check for update first.
http://www.merijn.org/files/CWShredder.exe
Close all instances of Internet Explorer and Outlook Express,
click on the executable above and follow the prompts.