Search Engine Over Written

[Guest]

I picked up a bug while browsing. When I click the Search
button on Internet Explorer 6, the default search engine
(MS) has been replaced by:

http://www.payfortraffic.net/search.htm

This is a malicious site which has made it challenging
for me to remove. Attempts to reasign a search engine
using the Customize button only makes the same website
appear. I've tried blocking the website, ran updated anti
virus definitions, ran Lavasoft AdAware with maximum
detection settings, deleted my Temp files, history, disc
cache and cookies. Each step was followed by a reboot.

Do you have an idea for a fix that might solve this
problem? Your time and effort would be appreciated.

 

[Ramesh [MVP]]

Download the fix - Reset Search:
http://www.kellys-korner-xp.com/regs_edits/RestoreSearch2.REG

(Or)

Open Registry Editor (regedit.exe) delete the keys below:

HKCU\Software\Microsoft\Internet Explorer\Main\Search Bar
HKCU\Software\Microsoft\Internet Explorer\Main\Search Page
HKCU\Software\Microsoft\Internet Explorer\Main\Start Page
HKCU\Software\Microsoft\Internet Explorer\SearchURL
HKCU\Software\Microsoft\Internet Explorer\Main\Default_Page_URL
HKCU\Software\Microsoft\Internet Explorer\Main\Default_Search_URL
HKCU\Software\Microsoft\Internet Explorer\Search\SearchAssistant
HKCU\Software\Microsoft\Internet Explorer\Search\CustomizeSearch
HKCU\Software\Microsoft\Internet Explorer\Main\AutoSearch
HKLM\Software\Microsoft\Internet Explorer\Main\Search Bar

Click the Search button in the toolbar > Customize > AutoSearch Settings >
Select a provider from the list.
Open Internet Explorer > Tools > Options > Programs > "Reset Web Settings"

Again scan for spyware using Ad-Aware (UPDATE it first)

--
Ramesh - Microsoft MVP
http://www.mvps.org/sramesh2k

Microsoft Most Valuable Professional Program
http://mvp.support.microsoft.com

~ Please reply to newsgroup ~


I picked up a bug while browsing. When I click the Search
button on Internet Explorer 6, the default search engine
(MS) has been replaced by:

http://www.payfortraffic.net/search.htm

This is a malicious site which has made it challenging
for me to remove. Attempts to reasign a search engine
using the Customize button only makes the same website
appear. I've tried blocking the website, ran updated anti
virus definitions, ran Lavasoft AdAware with maximum
detection settings, deleted my Temp files, history, disc
cache and cookies. Each step was followed by a reboot.

Do you have an idea for a fix that might solve this
problem? Your time and effort would be appreciated.

 

[Mike Burgess]

Terry,
"payfortraffic.net" = Coolwebsearch [parasite]

How to remove Coolwebsearch and affiliates
http://mvps.org/winhelp2002/unwanted.htm#Coolwebsearch
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 11-08-03]
Please post replies to this Newsgroup, email address is invalid