Re: Advice please-browser hijacker..

From: OldCoyote (westernskies_at_a5.comOldCoyote)
Date: 01/16/05 

Date: Sun, 16 Jan 2005 10:29:08 -0600

We had a similar problem with CoolWebSearch. It was my first experience
with this type of product. It was on a Windows XP computer and the initial
tech had tried for two days to remove it using AdAdware and SpyBot S&D.
Both products removed it but it came back the next boot.

I found the tech had omitted turning off System Restore so I did that first
thing. I ran the utilities and also got a clean machine until reboot. I
then looked at the Hidden Folders option and it was set to Hide System
folders. I un-hid the folders and low and looked in the Windows\System32
folder for anything that looked abnormal. I didn't see anything. So I went
to the event viewer and in an error file it pointed me to a folder in the
Program File directory. Sure enough I found the offending folder and got
rid of it.

I'm not sure if you've tried to un-hide folders yet but it's worth a try
before wiping out the machine.

Also if any of you know where I can get 5 minutes alone in a room with
someone who writes these programs please pass along the information.

"ArtDent" <par@noyd.invalidname> wrote in message
news:68DFd.6199$C52.1087@newsread2.news.atl.earthlink.net...
>
> On 13-Jan-2005, mihaiyx@yahoo.com wrote:
>
>> I'm having the same issue. I have tried manually removing all file,
>> registry entries, Norton antivirus doesn't detect anything, hijackThis
>> did not do anything, BHO Demon does not see anything malicious, and no
>> spyware removal will get ridd of it.
>>
>> ... I think I'll take the ultimate measure and format everything,
>> reinstall. However, I'm still afraid that it'll come back before i get
>> a chance to install all the security fixes and whatever else I can to
>> protect.
>
> Before reformatting you may want to try the 'new' anti-spyware program
> from
> Microsoft at:
> http://www.microsoft.com/athome/security/spyware/product
> It is free, and, although a beta, it seems to do a pretty good job.
> Good luck.
> --
> Don't Panic!

Loading