Announcement

Collapse
No announcement yet.

need comp help

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • need comp help

    I have a problem and not even really sure what it is.
    I had a browser hijack attempt yesterday.
    So I d/l adaware and ran it (several times) and got
    rid of everything it found. Then i ran nortan virus
    scan and it found a virus (can't remember what it was
    but was found in teamspeak program)
    so I quarantined and deleted it. Then uninstalled
    teamspeak.
    But the problem I'm having is My homepage is
    set to (about blank) it comes up as a search page.
    And no matter how many times i try to set it to my homepage it continues to come up as: about blank!

    Now I know a bunch of you are going to say I should switch to Opera or some other browser. But my wife has settings on IE that she likes to use. She's resistant to changeing.
    Plus, I'm still not sure whether there is some spyware
    or virus on my computer.
    Any help would be appreciated.
    I'm running IE 6 , windows XP
    1.6 ghz P4, 512 ram

  • #2
    I think this thread would fit better in the Tech Help forum.

    Strange that the homepage is reset to blank, instead of some porn site.

    Comment


    • #3
      oh, sorry mode.

      Comment


      • #4
        No biggie.

        It's better that such things are posted here, so it doesn't drown in off-topic posts.
        Now, let's get you some help...

        Comment


        • #5
          I don't know about your browser problem, but TeamSpeak doesn't contain any viruses. It's possible that some other virus you got attacked your TS installation. Please don't take that as a reason to abandon TeamSpeak, though.

          Comment


          • #6
            Originally posted by LaughingRat
            I don't know about your browser problem, but TeamSpeak doesn't contain any viruses. It's possible that some other virus you got attacked your TS installation. Please don't take that as a reason to abandon TeamSpeak, though.
            Oh, I know that LR. I figured that a virus attacked teamspeak for some reason as that happened at almost the same time as my browser problem.
            When i get this resolved I will be reinstalling teamspeak.

            Comment


            • #7
              Grr. I know this one. I fixed it on my Dad's PC last time I saw him, but I can't remember what it was and now I'm at home. Assuming it's the same thing (and it sounds the same), there's a utility that removes the spyware / virus / whatever the hell it is that causes it. I found it by typing the name of the search site (some weird place, not one of the usual ones) into google alongside the word "problem" (I think).
              Try that.
              If you can't find it I'm seeing my parents again the weekend after this, so I can see exactly what I used to fix it then.

              Comment


              • #8
                update, after some research i found out its something called coolwebsearch and it keeps showing up no
                matter how many times i run adaware. i looked up the problem on google like you suggested mega and
                it says this one actually seems to know when you are
                trying to eradicate it and stops it somehow.
                I d/l spybot search and destroy and something called
                css shredder which is supposed to be what this thing is. all to no avail.
                So, I d/l mozilla firefox browser and got my homepage in there. I think my wife is gonna have to learn to live with another browser because Microsoft
                seems to have security holes big enough to drive a semi-truck through with room to spare.
                She's coming home for one day and has to leave again (family emergency) So I guess maybe when i get some time after she leaves I will do a reformat.
                It seems this maybe the only way to get rid of it.
                GRRRR Microsoft sucks bigtime!

                I suggest to anyone still using IE that you stop immediately and try some other browser.
                The thing I like about firefox is no popups.
                With IE, even with a popup blocker you get gazillions of popups. good grief!

                If anyone knows of a way to get rid of this without a
                reformat pls tell me. I'm not looking forward to it.
                I have about 40 gigs of stuff on this computer,
                sheesh, i need to take some aspirin, i have a headache now.

                Comment


                • #9
                  I also will be formatting my computer (due to other issues - described in another thread), and I know your frustration.

                  Ad-aware needs updates, which you can do from within the program (guessing you already did that). After that is done, and you do a scan, does Ad-aware detect the coolwebsearch program and files? Does it ever say these files are currently in use, and would you like to have it scan upon reboot? I don't recall the option in Ad-aware, but you can set it to have it scan upon bootup. That usually helps clean up some of the more stubborn programs.

                  I haven't used Spybot in some time, so I can't say off hand how to use it (although, it seems most of these programs are intuitive enough to figure out).

                  Of course there is the good ol' reg hack, if you feel comfortable doing that.
                  Team ORJ

                  Comment


                  • #10
                    That was exactly it- coolwebsearch and css shredder. It does work! It was a bit dodgy, but I think in the end I ran css shredder, reset the machine, ran it again and it was fixed. I think. Basically I just ran it loads of times and it seemed to work eventually, so persevere.

                    Comment


                    • #11
                      Have you tried running "Spybot - Search and Destroy" ?

                      (It's like ad aware, and picks up and removes lots of things ad aware can't. Conversely, ad-aware picks up lots of thing that spybot s&d doesn't.)

                      I think it's a free download.

                      Comment


                      • #12
                        I advise you to be carefull with SpyBot, know what you delete before you delete it.

                        Comment


                        • #13
                          With the format. Normally you can tell windows to use a different browser as default (got mine running opera) but I don't know if what I did will work under XP. A copy of Mozillia will provide a small learning curve for your wife.
                          Conformity is the refuge of the unimaginative, the dull and the stupid
                          The internet based realm of Decompiler

                          Comment


                          • #14
                            In response to yenz, yes I've tried using spybot
                            search and destroy, also adaware and the cssshredder.
                            Mega, this is I think a new iteration of this thing and its
                            harder to get rid of. Its called a rogue dll, and it reinserts
                            itself into the resistry even after you delete it.
                            css shredder by itself does not work!
                            There are some threads on computer cops webite
                            forums that have some sort of fix using (hijack this)
                            by going into safe mode then deleting the registry entries rebooting and using hijack this to clean it out.
                            But seems the file they say to go to is only in windows
                            xp professional. I have windows xp home edition.

                            Comment


                            • #15
                              Start up in safe mode, Kill all the running process's you can, then type "msconfig" in the "run" dialogue.

                              Uncheck everything except the things you need starting up every time with windows.

                              Obviously if you see an entry that is part of a program you use, don't uncheck it. You can always check them again later.

                              Reboot.

                              ---

                              This has the potential to stop useful apps/drivers/utilities from starting up. Be careful. Although I have never seen anyone break their XP install by unchecking everything, this could potentially hurt... things...

                              ---

                              There seems to be a lot of hype surrounding this little nasty... in fact most of these "anti-spyware" sites that google turned up look like they just contain more spyware. o_O

                              http://www.spysweeper.com/remove-coolwebsearch.html
                              http://www.spywareinfo.com/~merijn/cwschronicles.html
                              http://www.siena.edu/antivirus/Spyware/CWS.htm

                              Comment

                              Working...
                              X