Re: www.sodhell.com

From: Malke (malke_at_nospoonnotreally.com)
Date: 09/05/04


Date: Sun, 05 Sep 2004 13:57:15 -0700

Ron Mellott wrote:

> I have somehow picked up this nasty 'thing' that loads
> and tries to connect me through Internet Explorer to a
> website www.sodehell.com to complete 3 survey questions.
>
> I have gone into the registry to remove references
> to "sodhell" and also through Windows Explorer. But each
> time I turn on my computer, it still is there ... again.
>
> It does not appear to be picked up by Norton, or Spybot,
> or Spy Sweeper, or Spyware Doctor .... at least not that
> I can recognize and in any case, does not block it.
>
> Anyone know what it is? How to remove it? How to block
> it?
>
> Many thanks!

In addition to my usual suggestions (see below), I find that a
combination of HijackThis and About:Buster (get from MajorGeeks) is
really useful in getting rid of stubborn hijackers. Don't forget to
update all programs before running, and run them in Safe Mode.

Here's the usual:

Remove spyware with Spybot Search & Destroy from
www.safer-networking.org and Ad-aware from www.lavasoftusa.com. Be sure
to update these programs before running them. These programs are free,
so run them both since they complement each other. It is best to run
antivirus and spyware removal tools in Safe Mode. You may also want to
run CWShredder and HijackThis from http://aumha.org/freeware.htm.
Although CWShredder is no longer being updated, it will still clean
older variants of the CoolWebSearch malware. Please read the
instructions carefully.

Malke

-- 
MS MVP - Windows Shell/User
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"


Relevant Pages

  • Re: about:blank page - where is this setting?
    ... even CWShredder, but the coolweb thing just comes back after a reboot. ... Next step is to hack the registry, ... I will try downloading HijackThis, though I'm losing so much time on ... >> any of the spyware apps to make any difference. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Home page hijacked by Cool Web Search
    ... Get CWShredder ... "Check for Spyware" suggestions: ... as does HijackThis (Only more so. ... Other tutorials for Spybot S&D ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: blocking sites??
    ... crucial that you use updated tools and do all scans in Safe Mode. ... Remove spyware with Spybot Search & Destroy and Ad-aware. ... See below for HijackThis links. ... the most recent System Restore point from the More ...
    (microsoft.public.windowsxp.general)
  • Re: home page problem
    ... , CWShredder, HijackThis, and expert advice. ... Start by downloading each of the following free tools: ... Spyware Warrior: ...
    (microsoft.public.windowsxp.network_web)
  • Re: strange virus/spyware
    ... It looks like some form of spyware I guess. ... Although CWShredder is no longer being updated, ... I find a combination of HijackThis and AdBuster ... Do not install driver updates from Windows Update. ...
    (microsoft.public.security.virus)