From: Malke (malke_at_nospoonnotreally.com)
Date: Sun, 05 Sep 2004 13:57:15 -0700
Ron Mellott wrote:
> I have somehow picked up this nasty 'thing' that loads
> and tries to connect me through Internet Explorer to a
> website www.sodehell.com to complete 3 survey questions.
> I have gone into the registry to remove references
> to "sodhell" and also through Windows Explorer. But each
> time I turn on my computer, it still is there ... again.
> It does not appear to be picked up by Norton, or Spybot,
> or Spy Sweeper, or Spyware Doctor .... at least not that
> I can recognize and in any case, does not block it.
> Anyone know what it is? How to remove it? How to block
> Many thanks!
In addition to my usual suggestions (see below), I find that a
combination of HijackThis and About:Buster (get from MajorGeeks) is
really useful in getting rid of stubborn hijackers. Don't forget to
update all programs before running, and run them in Safe Mode.
Here's the usual:
Remove spyware with Spybot Search & Destroy from
www.safer-networking.org and Ad-aware from www.lavasoftusa.com. Be sure
to update these programs before running them. These programs are free,
so run them both since they complement each other. It is best to run
antivirus and spyware removal tools in Safe Mode. You may also want to
run CWShredder and HijackThis from http://aumha.org/freeware.htm.
Although CWShredder is no longer being updated, it will still clean
older variants of the CoolWebSearch malware. Please read the
-- MS MVP - Windows Shell/User Elephant Boy Computers www.elephantboycomputers.com "Don't Panic!"