Start Page Taken over / S&D not helping

[ahmed]

My IE start page is set to "about:blank" - however, when I hope up
explorer, a search page shows up, the address shown is STILL
about:blank, but it's not blank by any means.

base href="res://%43%3a%5c%57%49%4e%58%50%5c%6d%2e%64%6c%6c/ is at the
top of the source code. It shows up as a browser page in S&D and in
the registry, I've removed it/replaced it with about:blank or
http://news.google.com for instance, but it keeps coming back.
Everytime I press the home button in explorer, or simply restart it,
there it is again.

Any ideas?

Thanks,
ahmed
(e-mail address removed)

 

[Don Varnau]

That's a variant of coolwebsearch
http://www.spywareinfo.com/~merijn/cwschronicles.html#aboutblank

CWShredder from http://www.spywareinfo.com/~merijn/downloads.html should
remove it.

You should follow up with Ad-aware and/or Spybot. You may have
other malware installed.
See: http://mvps.org/winhelp2002/unwanted.htm for more information,
including security tips.

Don

 

[Frank Saunders, MS-MVP]

My IE start page is set to "about:blank" - however, when I hope up
explorer, a search page shows up, the address shown is STILL
about:blank, but it's not blank by any means.

base href="res://%43%3a%5c%57%49%4e%58%50%5c%6d%2e%64%6c%6c/ is at the
top of the source code. It shows up as a browser page in S&D and in
the registry, I've removed it/replaced it with about:blank or
http://news.google.com for instance, but it keeps coming back.
Everytime I press the home button in explorer, or simply restart it,
there it is again.

Any ideas?

Thanks,
ahmed
(e-mail address removed)

How to remove Coolwebsearch and affiliates
http://mvps.org/winhelp2002/unwanted.htm#Coolwebsearch

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com/security/protect/