searchwww/adware

[...M...]

My Internet Explorer's search window was recently
hijacked by a homepage named searchwww.com. It
installed it's own search page, search url, and search
assistant. I got rid of those areas with the help of my
Ad-aware program, which just erased it from my registry.
The thing is, there is still an internet shortcut of
theirs that keeps trying to popup at about 49 minutes
past the hour, every hour. It doesn't acually popup
because of my google pop-up blocker, but i'm not about to
just leave it there. I have been looking around on the
net and I believe it is a script. Also the shortcut's
address is www.searchwww.com/vbs/, vbs standing for
Visual basics script. Can someone with expertise please
look into
thisseem to find ietoolbar.dll in the System32 folder and DOS
tells me I have no such thing. I didn't actually get
hijacked with a toolbar, just the searchwww search page
in my Internet Explorer search window and their shortcut
that won't seem to go away. The shortcut is the only
thing I have yet to get rid of. I can't find the path in
my system anywhere. My ad-aware plus program can't find
it, my spybot program can't find it, and my Spyhunter
program can't find it. I also have BHODemon, the browser
helper object eraser. I keep trying all these different
programs and nothing seems to work. I know its on my
computer somewhere, and when I actually find it i'm going
to wonder why I did not think to look there before. Can
someone else give me some leads???

Thank you,
M

 

[Guest]

-----Original Message-----
My Internet Explorer's search window was recently
hijacked by a homepage named searchwww.com. It
installed it's own search page, search url, and search
assistant. I got rid of those areas with the help of my
Ad-aware program, which just erased it from my registry.
The thing is, there is still an internet shortcut of
theirs that keeps trying to popup at about 49 minutes
past the hour, every hour. It doesn't acually popup
because of my google pop-up blocker, but i'm not about to
just leave it there. I have been looking around on the
net and I believe it is a script. Also the shortcut's
address is www.searchwww.com/vbs/, vbs standing for
Visual basics script. Can someone with expertise please
look into
this
seem to find ietoolbar.dll in the System32 folder and DOS
tells me I have no such thing. I didn't actually get
hijacked with a toolbar, just the searchwww search page
in my Internet Explorer search window and their shortcut
that won't seem to go away. The shortcut is the only
thing I have yet to get rid of. I can't find the path in
my system anywhere. My ad-aware plus program can't find
it, my spybot program can't find it, and my Spyhunter
program can't find it. I also have BHODemon, the browser
helper object eraser. I keep trying all these different
programs and nothing seems to work. I know its on my
computer somewhere, and when I actually find it i'm going
to wonder why I did not think to look there before. Can
someone else give me some leads???

Thank you,
M

.
Try a trojan scan at

http://www.trojanscan.com/trojanscan/scanner.htm

and if you find something then this might help

*** ***
following courtesy of Kent W. England, Microsoft MVP for
Windows Security

Trojans are stealthy and not always found by anti-virus
software. If you find suspicious processes running or task
manager or regedit is being killed after opening, you
might want to try one of the following tools to check for
trojans (after scanning with at least two anti-virus tools
to get rid of the easy stuff).

DiamondCS TDS-3 - Trojan Defence Suite (TDS), leading anti-
trojan system for Windows: http://tds.diamondcs.com.au/

Agnitum: Products: Tauscan: Home:
http://www.agnitum.com/products/tauscan/

Mischel Internet Security - TrojanHunterT: Finds and
removes trojans: http://www.misec.net/trojanhunter.jsp

MooSoft Development Presents The Cleaner:
http://www.moosoft.com/thecleaner/

Hacker Eliminator. - Advanced Hacker Protection:
http://hacker-eliminator.com/

--

 

[...M...]

-----Original Message-----


http://www.trojanscan.com/trojanscan/scanner.htm

and if you find something then this might help

*** ***
following courtesy of Kent W. England, Microsoft MVP for
Windows Security

Trojans are stealthy and not always found by anti-virus
software. If you find suspicious processes running or task
manager or regedit is being killed after opening, you
might want to try one of the following tools to check for
trojans (after scanning with at least two anti-virus tools
to get rid of the easy stuff).

DiamondCS TDS-3 - Trojan Defence Suite (TDS), leading anti-
trojan system for Windows: http://tds.diamondcs.com.au/

Agnitum: Products: Tauscan: Home:
http://www.agnitum.com/products/tauscan/

Mischel Internet Security - TrojanHunterT: Finds and
removes trojans: http://www.misec.net/trojanhunter.jsp

MooSoft Development Presents The Cleaner:
http://www.moosoft.com/thecleaner/

Hacker Eliminator. - Advanced Hacker Protection:
http://hacker-eliminator.com/

scan on www.trojanscan.com/trojanscan/scanner.html. It
scanned my computer, only unable to scan an area in My
Pictures folder and in the System Volume Information
folder. It sayed I do not have any infected files, but I
still can't get rid of the automatic popup for
www.searchwww.com/vbs.html. Maybe its as simple as
deleting the shortcut, but where could it be and how is
it able to try an popup every hour? I have a Visual Basic
Script called, Search.vbs. It this a normal, needed
script file? It might have something to do with it. I
hope someone can solve this puzzle. I'm sure not going to
give up. I hope someone can help me out.


Thank you,
M

 

[Guest]

-----Original Message-----
My Internet Explorer's search window was recently
hijacked by a homepage named searchwww.com. It
installed it's own search page, search url, and search
assistant. I got rid of those areas with the help of my
Ad-aware program, which just erased it from my registry.
The thing is, there is still an internet shortcut of
theirs that keeps trying to popup at about 49 minutes
past the hour, every hour. It doesn't acually popup
because of my google pop-up blocker, but i'm not about to
just leave it there. I have been looking around on the
net and I believe it is a script. Also the shortcut's
address is www.searchwww.com/vbs/, vbs standing for
Visual basics script. Can someone with expertise please
look into
this
seem to find ietoolbar.dll in the System32 folder and DOS
tells me I have no such thing. I didn't actually get
hijacked with a toolbar, just the searchwww search page
in my Internet Explorer search window and their shortcut
that won't seem to go away. The shortcut is the only
thing I have yet to get rid of. I can't find the path in
my system anywhere. My ad-aware plus program can't find
it, my spybot program can't find it, and my Spyhunter
program can't find it. I also have BHODemon, the browser
helper object eraser. I keep trying all these different
programs and nothing seems to work. I know its on my
computer somewhere, and when I actually find it i'm going
to wonder why I did not think to look there before. Can
someone else give me some leads???

Thank you,
M

.
www.spywareinfo.com

download "hijack this" and scan your system copy to
notepad and post in their forum.

 

[Frank P.]

Go to this link and download " CWS Shredder " -- it will fix your problem
http://www.spywareinfo.com/~merijn/downloads.html
--



Frank


scanned with Norton Antivirus 2003
________________________________________________________

 

[Guest]

Frank,
It believe it worked! That must be the only program
out there that is able to remove it. Thank you very, very
much!!! Your awesome!!

-----Original Message-----
Go to this link and download " CWS Shredder " -- it will fix your problem
http://www.spywareinfo.com/~merijn/downloads.html
--



Frank


scanned with Norton Antivirus 2003
________________________________________________________







"...M..." <[email protected]> wrote in

message news:[email protected]...

 

[Wayne Scott]

Frank,
It believe it worked! That must be the only program
out there that is able to remove it. Thank you very, very
much!!! Your awesome!!



message news:[email protected]...

None of these have worked for me yet. At least not completely. I did
get rid of the hijacking problem, however, EVERY HOUR a query is
logged on my PC that manages internet access, that something from a
particular machine in my network is looking up "www.searchwww.com" .
This started at 25m:37s after some hour and appears on hourly
intervals, differing by no more than one second.

How can I track down the culprit?

I have run the tools mentioned in this thread; I have Lavasoft
Ad-aware6 plus; WebRoot Spy Sweeper (licensed version); InterMute
SpySubtract Pro.


Thanks,
Wayne Scott

 

[Wayne Scott]

None of these have worked for me yet. At least not completely. I did
get rid of the hijacking problem, however, EVERY HOUR a query is
logged on my PC that manages internet access, that something from a
particular machine in my network is looking up "www.searchwww.com" .
This started at 25m:37s after some hour and appears on hourly
intervals, differing by no more than one second.

How can I track down the culprit?

I have run the tools mentioned in this thread; I have Lavasoft
Ad-aware6 plus; WebRoot Spy Sweeper (licensed version); InterMute
SpySubtract Pro.


Thanks,
Wayne Scott

Yesterday evening, I found a shortcut to "Search.vbs" in

C:\Documents and Settings\All Users\Start Menu\Programs\Startup

I deleted that sucker and the problem is solved.

/wws