Re: res://cabjx.dll/index.html#96676

From: Malke (malke_at_nospoonnotreally.com)
Date: 08/02/04


Date: Mon, 02 Aug 2004 05:49:04 -0700

Colin Wallis wrote:

> Has anyone seen this before?.
> It has completely taken over my browser and Spybot, etc
> cannot locate and fix it.
> I don't even think a .dll nuker will do it.
> All help most welcome.

This type of hijacker is pretty common and usually comes from one of the
many CoolWebSearch variants. Spybot is great, but you need more than
one antispyware tool to remove malware. Here are general instructions:

Remove spyware with Spybot Search & Destroy from
www.safer-networking.org and Ad-aware from www.lavasoftusa.com. Be sure
to update these programs before running them. These programs are free,
so run them both since they complement each other. It is best to run
antivirus and spyware removal tools in Safe Mode. You may also want to
run CWShredder and HijackThis from http://aumha.org/freeware.htm.
Although CWShredder is no longer being updated, it will still clean
older variants of the CoolWebSearch malware. I find that also using a
combination of HijackThis and AboutBuster (which you can get from
MajorGeeks) works well to get rid of the type of hijacker you have.
Please read all instructions carefully. Also, make sure you've visited
Windows Update and applied all security patches. Do not install driver
updates from Windows Update. Make sure you are running a firewall and
have a full-featured, current antivirus installed using updated
definitions.

Malke

-- 
MS MVP - Windows Shell/User
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"


Relevant Pages

  • Re: res://cabjx.dll/index.html#96676
    ... That's agreat help. ... Spybot is great, but you ... >MajorGeeks) works well to get rid of the type of hijacker ... >Windows Update and applied all security patches. ...
    (microsoft.public.security.virus)
  • RE: Windows XP updates
    ... Here's an easy simple way to disable Spybot Search & Destroy so you ... "Windows Update has encountered an error and cannot display the requested ... It was the "Tea Timer" in Spybot S&D. ... resident.....then uncheck the Resident "Tea Timer" box. ...
    (microsoft.public.windowsupdate)
  • Re: can not open any web based email
    ... >newsgroup with no help yet. ... >windows update or email acconts. ... Now check for, and remove, spyware. ... Install and run Spybot. ...
    (microsoft.public.windowsxp.network_web)
  • Re: Spyware - wajgy.dll
    ... > Thanks - Shiloh ... You have a spyware hijacker. ... Do not install driver updates from Windows Update. ...
    (microsoft.public.security.virus)
  • Re: unreadable fonts IE 6.0.2800.1106
    ... How long since you've visited Windows Update? ... Dealing with Unwanted Spyware, Parasites, Toolbars and Search Engines ... Alternative download pages for Ad-Aware, Spybot, HijackThis and CWShredder ... Delete all temporary internet files ...
    (microsoft.public.windows.inetexplorer.ie6.browser)