Zesty Find

[J.T. Kirk]

I don't know how, but somehow this 'feature' got installed in my IE on a
WIN2K machine. It will pop-up when it thinks a URL I've entered can not be
found, which is not the case, and occasionally makes itself my home page.
It is a most annoying piece of crap. I have run AdAware and Spybot, but it
remains.
Any one know about this and how to get it rid of it?

 

[Jan Il]

I don't know how, but somehow this 'feature' got installed in my IE on a
WIN2K machine. It will pop-up when it thinks a URL I've entered can not be
found, which is not the case, and occasionally makes itself my home page.
It is a most annoying piece of crap. I have run AdAware and Spybot, but it
remains.
Any one know about this and how to get it rid of it?

It is posible that you have a variant of the CoolWebSearch parasite.

Download and run CWShredder which is the best way of getting rid of the many
forms of the CoolWebSearch hijacker:
http://www.zerosrealm.com/downloads/CWShredder.zip
or
http://www.spywareinfo.com/~merijn/files/cwshredder.zip

You can check the details of this type of problem at CoolWebSearch
Chronicles:
http://www.spywareinfo.com/~merijn/cwschronicles.html

And if necessary:

CWShredder - Remove from Registry - See 3rd one down here:
http://www.computing.net/security/wwwboard/forum/11527.html

I use a program called BHODemon that checks forunwanted Browser Help
Objects:
http://www.definitivesolutions.com/bhodemon.htm

I and also use SpywareBlaster which can help prevent some parasites getting
a grip on your PC.
http://www.wilderssecurity.net/spywareblaster.html

HTH

Jan

 

[H Leboeuf]

This is the culprit.
AdTomi - ZestiFind hijacker
http://www.lavasoftsupport.com/index.php?showtopic=9118
--

Clean your system also as suggested by Jan ||

Henri Leboeuf
Web page: http://www.colba.net/~hlebo49/index.htm
===

 

[J.T. Kirk]

Thanks.
I tries all of your suggestions, but this thing will just not go away.

 

[H Leboeuf]

AdTomi - ZestiFind hijacker
http://www.lavasoftsupport.com/index.php?showtopic=9118

Get the latest AdAware from this site, it should take care of it.
--

(note the name Zestifind, and zestyfind)

I did find a reference to a zestyfind.dll at:
http://www.sysinfo.org/bhoinfo.php

{5CF8A355-F8C6-4883-9C25-49D01A7D25BE} X TB zestyfind.dll hijacker

Not much other than it's a hijacker.

You may want to get help from the experts here.

Go to http://www.spywareinfo.com/downloads.php#det
Download "Hijack This!" [freeware] or download direct (below):
http://www.merijn.org/files/hijackthis.zip

If you get a 404 error or Access denied, try:
http://216.180.252.218/~spywareinfo.com/downloads/tools/hijackthis.zip

Unzip the Download file in a NEW FOLDER that you can create before you start
the download.
DO NOT use any of the TEMP folders that are presently in your computer.
Double-click "HijackThis.exe" and Press "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log"
button.
Click: "Save Log" (generates "hijackthis.log")

Next, HijackThis | Config [button] | Misc Tools [button]
Click: Generate StartupList log [button] (generates "startuplist.txt")

Next, go to the below location:
http://www.spywareinfo.com/forums/

Sign in, then copy and paste both files in your message.

HijackThis Quick Start Help
http://www.tomcoyote.org/hjt/

The Tutorial if you want to know more about the results or the .log file.
http://www.merijn.org/htlogtutorial.html


Henri Leboeuf
Web page: http://www.colba.net/~hlebo49/index.htm
===