Hi,
As you've noted, this is result of a spyware. Specifically, it's a BHO
(Browser Helper Object).
This program is bundled with Morpheus. If you have Morpheus (a p2p client), you
may be wise to uninstall it and seek an alternative source which is not infested
with spyware.
Information about the pest you describe is available here:
http://www.doxdesk.com/parasite/WurldMedia.html
To remove it, the following method should work:
First, we'll shut down all third party objects (including the program that is
causing you these problems). You can re-enable them once we are finished.
--
To disable the BHO's:
Open Internet Explorer.
Click on Tools, Internet Options.
Click on the Advanced Tab.
Under the 'Browsing' section, uncheck the box named, "Enable
third-party browser extensions (requires restart)".
Click on OK.
--
Once we've disabled the BHO, we'll move on to deleting it. This is best achieved
by third party programs specializing in this. Don't run them yet, though!
Instead, we'll download them and install them now, and then we'll reboot into
safe mode to run them.
To eliminate the malware disguised as BHO's, you'll want to
download BHOCop. You can download BHOcop, here:
http://support.honour.ca/bin/bhocop.zip
Once you download the file, run the setup program, and install the program. You
may wish to make a shortcut somewhere, or else recall where it's installed in
case you forget, or the shortcut isn't placed on your desktop. You'll want to
remove the pest with this program.
To remove ancilliary files, or other such programs, we'll download two other
programs.
First, download AdAware. This is an excellent program which
detects and deletes spyware, and other malware programs.
AdAware is available from:
http://www.lavasoftusa.com/support/download/
After downloading and installing AdAware, *be sure to update
it*. This will ensure you are protected against the latest
threats. But don't run it yet!
Next, we'll get CWShredder. This neat program catches
variants which may have been missed by AdAware. CWShredder
is available from:
http://www.spywareinfo.com/~merijn/files/cwshredder.zip
Once again, be sure to update it to ensure the latest threat
protection, but it's not necessary to run it yet.
You'll note that, in some cases, versions of spyware are
particularly malicious - removing them can cause you to lose
your internet connection. Therefore, we'll download the next
two programs as precautionary measures. If, after running
these programs, you are unable to connect to the internet,
you may need to run these programs to fix the connection.
They are available here:
http://www.cexx.org/lspfix.htm
and
http://www.tacktech.com/pub/winsockfix/WinsockFix.zip
Directions for the last program can be found here:
http://www.tacktech.com/display.cfm?ttid=257
** Note: You'll only need to run these programs in the event
that removal of the evil programs causes some good
components to break. Otherwise, you can safely continue.
At this point in time, you may also wish to update your anti-virus solution.
Ensure definitions and files are up-to-date.
After installing and updating these programs, reboot your
computer into safe mode. Instructions on rebooting into
safe-mode are available here:
http://www.pchell.com/support/safemode.shtml
Once you have entered safemode, run the programs. You may choose to scan for
virii, then run BHOCop, followed by AdAware and CWShredder.
Once all the scans are complete, restart your computer. If
you have problems connecting to the internet, you'll want to
run the two programs you downloaded for this very case,
LSPfix, and Winsock Fix.
The above measures should help you eliminate any traces of
spyware, and should bring your computer back to normal.
If you are seeking more information about Adware and Spyware, an excellent
resource is available here:
http://mvps.org/winhelp2002/unwanted.htm
Note - As I previously mentioned, this program is bundled with Morpheus. If you
use such a p2p file-sharing program, you would be wise to consider safer
alternatives.
Best Regards,
Altrus
: My internet window (browser) constantly shuts down while I'm surfing on the
: internet. I get a message that related to wurldmedia, and to run an adware.
: i continue to run adware and that fixes the problem for a short time, but it
: returns when i open a new window. can anyone help, how can i get rid of it.
: --
: beslaw
