Fucking Hell! (part two)

[BADMIHAI]

I apparently got some trojan that redirects my homepage to res://uzwpy.dll/index.html#96676 and fills me up with pop-ups. Ironically, it has a link to adaware removal. Don't tell me to try Ad-Aware, because it didn't find anything. Suggestions are welcomed. Thanks in advance!

[nthfinity]

is it the most recent ad aware? also; unplug your computer, and attempt to do a full virus scan.

if that doesnt find it, a command prompt, or dos version of Norton anti virus is more likely to find it.

also, perhaps spybot.

good luck,badmihai

[Onix]

try 'spybot search and destory' , thats often good at finding what adaware misses :)

[Mers]

i believe Norton or McAfee has a program called 'stinger' which pretty much eliminates any new viruses that come out, and is very small (size is less than 3 megas i believe)..it worked well on my old computer...i'll try and find it here at home...

[graywolf624]

norton or mcafee will do it.

Also if you know your shit you can remove it in the registry.
Should be under sklm/software/micrsoft/internet explorer somewhere.. do a search for that address.

Then after the redirect is removed check your hklm/software/microsoft/win/run or runonce directory for the offending trojan thats run.. delete that key as well and delete file it points too.. you may need to go to safe mode to do the regedit.. mcafee or norton will do this better for ya.. but some times ya have to do what you have to do.

Dennis
*Your resident windows security guru.*

[possessed_beaver]

start > run > "msconfig" > startup and remove it from start up

if not try adware :)

[abbor]

Or just type "Format C:"
It's much easier..

[BADMIHAI]

Or just type "Format C:"
It's much easier..


I did that, and now my computer's not working anymore. Help!

[abbor]

Good thing that JW works then..
Just use your windows cd and it should work, maybe fdisk or something, i don't know... I was just saying what I'd done if it was on my computer

[DTM8]

I apparently got some trojan that redirects my homepage to res://uzwpy.dll/index.html#96676 and fills me up with pop-ups. Ironically, it has a link to adaware removal. Don't tell me to try Ad-Aware, because it didn't find anything. Suggestions are welcomed. Thanks in advance!

BADMIHAI, I know this is kind of late, but I can still help you(if you are still having that problem)

I also had to deal with this shit a month ago. Chances are, if you have a trojan on your browser, you have other spyware/malware as well.

The key programs that you should have are CWshredder, Spybot S&D, HijackThis, and Adaware. Each program aid's to remove certain amounts of spyware/malware because one program cannot remove everything.

HijackThis creates a log of your browser so you could further understand the processes that are going on, on your browser. From there, you can delete certain things. So, for me to help you, PM me your log file so I could tell you what to delete.

You could find it here: http://www.spywareinfo.com/~merijn/downloads.html


CWshredder is a small utility that aids to remove the trojans found in your browser, specifically CoolWWWweb search trojan.

[Bling]

format c: lol

please

spybot man...great program, and its free

[BADMIHAI]

I found this cool feature of Windows called System Restore. It restores your system to whenever you want it to. Problem solved.

[graywolf624]

I found this cool feature of Windows called System Restore. It restores your system to whenever you want it to. Problem solved.

Be very careful with that. The system restore directory is often the one used to hold viruses since it doesnt allow you to directly access them without disabling the system restore function. Also if you had it on your system at the restore point but didnt realize it.. your gonna have to do the same thing over shortly.

[Bling]

I found this cool feature of Windows called System Restore. It restores your system to whenever you want it to. Problem solved.

Be very careful with that. The system restore directory is often the one used to hold viruses since it doesnt allow you to directly access them without disabling the system restore function. Also if you had it on your system at the restore point but didnt realize it.. your gonna have to do the same thing over shortly.your right. but at least as a temp fix sometimes it works. hope everything stays well.

[abbor]

Also, most of the spyware that is around is aimed at Internet Explorer..
Try installing Opera, Mozilla or Netscape or something...
Worked perfect for some friends of mine...