Re: IMPORTANT SECURITY NOTICE! Bogus webpage download ad?

From: Bill Sanderson (Bill_Sanderson_at_msn.com.plugh.org)
Date: 03/15/04 

Date: Mon, 15 Mar 2004 16:31:22 -0500

I've got a two-pronged approach to try:

1) try CWShredder. I do see at least one google page stating that
newspynotice is a coolwebsearch variant.

http://aumha.org/freeware.htm

Scroll down to CWShredder

If CWShredder doesn't remove your hijack, go back to that link, and scroll
down to

HijackThis. Read the explanatory material telling you where to post the
resultant logs, and post in those forums. If the standard tools don't get
you cleaned up, HijackThis and some "art" are needed.

"Gweezo" <gweezo@comcast.net> wrote in message
news:rn5c509gtoqeo1oakunmcgkecjsr6rgqo4@4ax.com...
> My browser was also hijacked to the URL at the bottom of this message
> as a home page. Ad Aware and Spybot have not been able to get rid of
> it. I have cleaned up with both these programs several times, and also
> made certain that there is nothing in my startup folder or
> Currentversion/Run. Yet within a couple of days it returns to hijack
> my home page again. This does not occur from a reboot but during times
> I'm connected to the Net. Connecting to this URL downloads files to
> the Desktop and apparently tries to run one of them, however, in my
> case it was not able to run the file due to NAV.
>
> Anyone else with this problem, any suggestions?
>
> On Sun, 14 Mar 2004 19:51:44 -0500, "Bill Sanderson"
> <Bill_Sanderson@msn.com.plugh.org> wrote:
>
>>What exactly is "all of the above?"
>>
>>If you are getting popups and adware, I wouldn't start with a commercial
>>product, effective though it may be--I haven't looked into that. For most
>>folks either Google or MSN's toolbar, and a good cleaning with Ad-aware
>>and
>>Spybot search & destroy, along with proper firewall, antivirus, and system
>>patches, are enough.
>>
>>
>>"RBIEZE" <RBIEZE@direcway.com> wrote in message
>>news:c9ac01c40992$3eaf0830$a401280a@phx.gbl...
>>> my system started all of the above today.i updated virus
>>> protection and installed STOPzilla and deleted some
>>> strange new files in config system.all to no avail
>>>>-----Original Message-----
>>>>Is this bogus???? Is this from Microsoft? My firewall
>>>>tells me it is safe but it looks unsafe. Has anyone else
>>>>received this unsolicited webpage?
>>>>
>>>>http://209.50.251. 182/newspynotice.html
>

Relevant Pages

  • Re: Unable to Open User Accounts Icon in Control Panel - Same Problem!
    ... I ran CWShredder and HiJack this ... Administrator account and got the same error message. ... Have a good week, Sam. ... > Ad-Aware, Spybot, CWShredder and HijackThis! ...
    (microsoft.public.windowsxp.general)
  • Re: Possible blackmail sent to my pc
    ... > If I do not use the internet, ... If you have one of the CoolWebSearch variants, you might try CWShredder. ... The really heavy-duty program is called, "Hijack This". ... probably will have to Google on each, and see if you can find a mirror which ...
    (microsoft.public.security)
  • Re: about:blank
    ... The about blank hijack can be easy to remove or it can very difficult to ... If you've run CWShredder, Ad-aware and Spybot without success then try ... Still changes homepage to about:blank. ... > homepage history drop down. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: about blank is killing me!!!
    ... This hijack can be difficult to remove. ... First run CWShredder http://www.spywareinfo.com/~merijn/downloads.html you ... Removing the AboutBlank Virus ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Windows update
    ... Parasites & Other Security Issues" ... scroll to the link for CWShredder and download and run ...
    (microsoft.public.windowsupdate)