Hi, I wonder if this is the right section to put my
question, but here I go:

It seems that our computer has caught a spyware-thing,
that my antispyware-programme cannot remove. My IE-
startpage is change and I cannot re-change it and keep it
there. It comes up with a strange search-page and causes a
few other (it seems) things.

I have only got free-ware programmes (Ad-ware and Spybot).
They can detect the spyware, but seemingly not remove it.
But is it not possible to manually remove such things?
Does anyone outthere know how to do it and do youdare
guide me through such an operation if I gave you an
description of the (to me known) spyware-things on my
harddrive (names, location etc.)?

I hope that someone can help as this problem starts to
annoy us!

Greetings

[ Post a follow-up to this message ]

when i had this problem i went in the registry editor and searched for the w
eb address that the home page is set to and deleted every result that came u
p with a match to that website. Also check in task manager for processes tha
t don't look familiar to yo
u and stop them. If you find the right one that will let you change the home
 page searh for that process (whatever.exe) and delete it, but make sure you
're definate it is the right one.

Sorry i can't be more in depth about what process to look for but they could
 be called anything. When the search files and folders come up with a folder
 where the .exe lives get rid of that too.

Hope this helps

"Ulrik Dige" wrote:

> Hi, I wonder if this is the right section to put my
> question, but here I go:
>
> It seems that our computer has caught a spyware-thing,
> that my antispyware-programme cannot remove. My IE-
> startpage is change and I cannot re-change it and keep it
> there. It comes up with a strange search-page and causes a
> few other (it seems) things.
>
> I have only got free-ware programmes (Ad-ware and Spybot).
> They can detect the spyware, but seemingly not remove it.
> But is it not possible to manually remove such things?
> Does anyone outthere know how to do it and do youdare
> guide me through such an operation if I gave you an
> description of the (to me known) spyware-things on my
> harddrive (names, location etc.)?
>
> I hope that someone can help as this problem starts to
> annoy us!
>
> Greetings
>

[ Post a follow-up to this message ]

Hi again and thank you for your reply.
I went to regedit, but wow there is a lot of stuff in
there. I do not know where to begin and where to end and I
am not very keen on touching anything. I tried to search
for the webadress of the search-page which is a strange
one: it says nothing but 'about :blank' in the adress-line,
but nothing came up.

Could you possibley give me a little more guiding?
Please...

Greetings
>-----Original Message-----
>when i had this problem i went in the registry editor and
searched for the web address that the home page is set to
and deleted every result that came up with a match to that
website. Also check in task manager for processes that
don't look familiar to you and stop them. If you find the
right one that will let you change the home page searh for
that process (whatever.exe) and delete it, but make sure
you're definate it is the right one.
>
>Sorry i can't be more in depth about what process to look
for but they could be called anything. When the search
files and folders come up with a folder where the .exe
lives get rid of that too.
>
>Hope this helps
>
>"Ulrik Dige" wrote:
> 
it[vbcol=seagreen] 
causes a[vbcol=seagreen] 
Spybot).[vbcol=seagreen] 
it.[vbcol=seagreen] 
>.
>

[ Post a follow-up to this message ]

try the program "CWShredder"

should solve your problem


<anonymous@discussions.microsoft.com> schrieb im Newsbeitrag
 news:2010f01c4590f$236c0600$a301280a@phx
.gbl...[vbcol=seagreen]
> Hi again and thank you for your reply.
> I went to regedit, but wow there is a lot of stuff in
> there. I do not know where to begin and where to end and I
> am not very keen on touching anything. I tried to search
> for the webadress of the search-page which is a strange
> one: it says nothing but 'about :blank' in the adress-line,
> but nothing came up.
>
> Could you possibley give me a little more guiding?
> Please...
>
> Greetings 
> searched for the web address that the home page is set to
> and deleted every result that came up with a match to that
> website. Also check in task manager for processes that
> don't look familiar to you and stop them. If you find the
> right one that will let you change the home page searh for
> that process (whatever.exe) and delete it, but make sure
> you're definate it is the right one. 
> for but they could be called anything. When the search
> files and folders come up with a folder where the .exe
> lives get rid of that too. 
> it 
> causes a 
> Spybot). 
> it. 

[ Post a follow-up to this message ]

Hi,
could you say a little about what it does and where I can
obtain it?

>-----Original Message-----
>try the program "CWShredder"
>
>should solve your problem
>
>
><anonymous@discussions.microsoft.com> schrieb im
Newsbeitrag
> news:2010f01c4590f$236c0600$a301280a@phx
.gbl... 
and I[vbcol=seagreen] 
line,[vbcol=seagreen] 
and[vbcol=seagreen] 
to[vbcol=seagreen] 
that[vbcol=seagreen] 
the[vbcol=seagreen] 
for[vbcol=seagreen] 
look[vbcol=seagreen] 
thing,[vbcol=seagreen] 
keep[vbcol=seagreen] 
things?[vbcol=seagreen] 
to[vbcol=seagreen] 
>
>
>.
>

[ Post a follow-up to this message ]

CWShredder Review
A small utility for removing CoolWebSearch (aka CoolWwwSearch,
YouFindAll, White-Pages.ws and a dozen other names). Spybot S&D tends to
forget essential parts of the hijack, so until it updates, you can just this
to completely remove the hijack. Updated to remove the new variants once
they come out.

This tool will find and destroy all traces of the CoolWebSearch (CWS)
hijacker on your system. This includes:

· Redirections to CoolWebSearch related pages
· Redirections when mistyping URLs
· Redirections when visiting Google
· Enormous IE slowdowns when typing
· IE start page/search page changing on reboot
· Sites in the IE Trusted Zone you didn't add
· Popups in Google and Yahoo when searching
· Errors at startup mentioning WIN.INI or IEDLL.EXE
· Unable to change or see certain items in IE Options
· Unable to access IE Options at all

http://www.soft32.com/download_19014.html


<anonymous@discussions.microsoft.com> schrieb im Newsbeitrag
 news:2092001c45948$111b84b0$a401280a@phx
.gbl...[vbcol=seagreen]
> Hi,
> could you say a little about what it does and where I can
> obtain it?
> 
> Newsbeitrag 
> and I 
> line, 
> and 
> to 
> that 
> the 
> for 
> look 
> thing, 
> keep 
> things? 
> to 

[ Post a follow-up to this message ]

Thank you. It helped!


>-----Original Message-----
>      CWShredder Review
>      A small utility for removing CoolWebSearch (aka=20
CoolWwwSearch,
>YouFindAll, White-Pages.ws and a dozen other names).=20
Spybot S&D tends to
>forget essential parts of the hijack, so until it=20
updates, you can just this
>to completely remove the hijack. Updated to remove the=20
new variants once
>they come out.
>
>      This tool will find and destroy all traces of the=20
CoolWebSearch (CWS)
>hijacker on your system. This includes:
>
>      =B7 Redirections to CoolWebSearch related pages
>      =B7 Redirections when mistyping URLs
>      =B7 Redirections when visiting Google
>      =B7 Enormous IE slowdowns when typing
>      =B7 IE start page/search page changing on reboot
>      =B7 Sites in the IE Trusted Zone you didn't add
>      =B7 Popups in Google and Yahoo when searching
>      =B7 Errors at startup mentioning WIN.INI or IEDLL.EXE
>      =B7 Unable to change or see certain items in IE=20
Options
>      =B7 Unable to access IE Options at all
>
>http://www.soft32.com/download_19014.html
>
>
><anonymous@discussions.microsoft.com> schrieb im=20
Newsbeitrag
> news:2092001c45948$111b84b0$a401280a@phx
.gbl... 
can[vbcol=seagreen] 
search[vbcol=seagreen] 
strange[vbcol=seagreen] 
editor[vbcol=seagreen] 
set[vbcol=seagreen] 
that[vbcol=seagreen] 
searh[vbcol=seagreen] 
sure[vbcol=seagreen] 
search[vbcol=seagreen] 
the .exe[vbcol=seagreen] 
my[vbcol=seagreen] 
IE-[vbcol=seagreen] 
remove[vbcol=seagreen] 
youdare[vbcol=seagreen] 
an[vbcol=seagreen] 
on my[vbcol=seagreen] 
starts[vbcol=seagreen] 
>
>
>.
>

[ Post a follow-up to this message ]

i have the same problem, it doesn't remove it Definitely . When i
start my pc again, than the F**  startpage is coming back. HOW do you
removed it realy.

CWShredder has found this spyware below....
CWS.Searchx

Any suggestions............... tnx for the trouble...

regards,
Tahllah

[ Post a follow-up to this message ]