URL Change Request

  • Thread starter Thread starter Tim
  • Start date Start date
T

Tim

After each logon since I have installed the Spyware, I
get a message that a URL Change Requires Approval. When
I click to block this change, another message appears
asking if I want to block the change. I check yes and the
get no further messages. (I have checked the box to
bypass in the future but this seems to have no effect).
This happens before I even attempt to logon to the
Internet.

I also noticed that in the advanced settings (IE toobars)
a hazardous toolbar that I can neither block or delete
despite repeated attempts and reboots.

I have run a indepth scan and found nothing in the
registry files.

Any ideas on how to fix this?

Other than having to reactivate the XP firewall using
Netsh Winsock reset command, this tool has been great.
 
Tim said:
After each logon since I have installed the Spyware, I
get a message that a URL Change Requires Approval. When
I click to block this change, another message appears
asking if I want to block the change. I check yes and the
get no further messages. (I have checked the box to
bypass in the future but this seems to have no effect).
This happens before I even attempt to logon to the
Internet.

I also noticed that in the advanced settings (IE toobars)
a hazardous toolbar that I can neither block or delete
despite repeated attempts and reboots.

I have run a indepth scan and found nothing in the
registry files.

Any ideas on how to fix this?

Other than having to reactivate the XP firewall using
Netsh Winsock reset command, this tool has been great.
Click to expand...

Tim,

Try doing Full System Scan in Normal mode, reboot and repeat in
Safe Mode. Please post back with your results. Thanks.

Steve Wechsler (akaMowGreen)
MVP Windows Server
AumHa VSOP
 
I ran a full scan in Normal mode. I found two infections:

1. eAcceleration.stop.sign. adware bundler I ignored
because I know what this is associated with and it was
recomended.

2.possible browser high jack search bar. I deleted as
recommended. When I tried to remove, I was asked that it
would have to close the Internet Browser, which I agreed
to do. A response came back that it had been remove.
However, this browser high jact still showed up in
advanced settings (IE toobars). I could not remove from
there.

I immediately restarted in safe mode. I found one
infection, which was a browser hijack. I removed it but
again, it was not removed from the advanced settings (IE
toobars). Still could not remove even though a response
stated it had been removed.

I rebooted and got URL Change Requires Approval. This
time, it actually informed that application changes were
approved before I had a chance to block.

I have done a full virus scan and nothing was found.

To me, it sounds like there is a problem with deleting
these browser hijacks.

Thoughts
 
Here is the file that can not be removed.{2CDE1A7D-A478-
4291-BF31-E1B4C16F92EB}. I get this message as well(even
though I just ran a full scan) "This Toolbar is a known
threat, you should run a full spyware scan now!" Plus
this message states "Warning this Toolbar File is
missing. This could be caused by a number of reasons such
as the file was removed without properly unregistering
the Toolbar from Internet Explore. To resolve this, click
the 'Permanently remove this Toolbar' button." As I
mentioned previously, I can not block or remove this file.

Hope this helps someone resolve this problem.
 
Back
Top