Click to See Complete Forum and Search --> : Not really virus problem...
Mich@el
November 6th, 2003, 01:27 AM
But a spyware problem. Recently I somehow recieved some type of spyware that changes my homepage to idgsearch.com every type i restart my comp. I ran my adware, ran norton AV, did file search, did services search, and did partial registry search and cant find anything relating to this. also did google search and nothing there. Anyone here know how to get rid of this? It gets very annoying I must say.
thanks
michael
Lowland
November 6th, 2003, 04:52 AM
Michael, you don't tell us which OS, browser and adware you have. I would recommend this adware removal tool (http://security.kolla.de/index.php?lang=en&page=news) however, if you are on network or using machines at work you should seek advice from your network admin before downloading/installing. (I don't know your hsitory, Michael)
Perhaps you would post back with more information? I'm sure someone will be able to help you
Good Luck
Archer
November 6th, 2003, 08:33 AM
Another good pair of tools are
Spyware Blaster http://www.javacoolsoftware.com/spywareblaster.html
Browser Hijack Blaster http://www.wilderssecurity.net/bhblaster.html
shamus
November 6th, 2003, 08:43 AM
I agree with Lowland, go with Spybot.
Mich@el
November 6th, 2003, 12:51 PM
Im running windows 2000 Sp 4, using ad-aware pro, and using iexplore. I will check out spybot see if it can find the problem.
Mich@el
November 12th, 2003, 12:55 AM
Ok the annoying thing is still there. I tried the spybot program and it didnt find it, Ive tried clearing all my temp files nothing, tried manually clearing all registry files and still no fix. The thing just constantly resets my homepage to idgsearch.com and whenever im doing say a google search it takes over and does its own search. Its getting very annoying anyone else have any other ideas what could cause this? Also ive run norton on comp and nothing picked up there so dont believe any virus properties in it.
any help be great
Archer
November 12th, 2003, 06:01 AM
It seems the solution may be to run hijack this and remove several ID Search keys.One suggestion seems to suggest its getting through a security hole in windows WMP.
http://delltalk.us.dell.com/supportforums/board/message?board.id=si_virus&message.id=529&view=by_date_ascending&page=2
Mich@el
November 12th, 2003, 03:59 PM
lol yes i have changed it back to my original but it automatically changes itself back....not that out of it
BIGGS
November 12th, 2003, 07:00 PM
Micheal, dont feel to bad, i've got the same problem.
im running Windows XP Pro Corp. Sp1
i've got adaware 6.1 professional
norton systmeworks 2004 pro
all software is up to date
no spyware is detected, there is no virus detected, nothing in unusual in the windows hosts file. every time you start the computer up it defaults to that same damn webpage, you can go ahead and clear all temp files, online and off line files, cookies, history and change the homepage but the cat came back the very next day , i thought it was a gonner but. ... well you get my point, its just very annoying
btw, i am using a router so im behind a firewall
slgrieb
November 12th, 2003, 07:38 PM
Have you tried using the system configuration tool? Check the startup group and see what is running. Most of the time you will recognize programs that should be running, or be able to figure them out by examing their location. If you still don't see anything obvious disable all items and then re-enable one item at a time and see what happens.
BIGGS
November 12th, 2003, 08:10 PM
muah ha ha
or something like that
think i found the answer
run regedit and search for idgsearch.com
you'll find like 12 entries or so, delete them , clear temp internet files change your homepage and you should be all good
Mich@el
November 12th, 2003, 10:31 PM
hmm i have tried clearing registry with search and clearing temp but not at same time....ill see if works. Also i checked services first thing nothing showed there either.
techs
November 13th, 2003, 08:13 AM
You have a BHO (browser helper object). Go here (http://home01.wxs.nl/~kleyn080/BHO_list.html) for info. This is where you can get removal help here (http://forums.techguy.org/t176979/s638303c633c8283520c54178a7fdeda2.html)
Mich@el
November 13th, 2003, 09:57 AM
thanks much that thread helped a ot ( i hope since found file they said to) and hoping now it wont come back. very annoying thing but good to know something new about all the annoying products out there
thanks
michael
cloefish
July 2nd, 2004, 12:08 AM
[how did you rid of your problem??? My homepage keeps changing to something else also, and everytime i boot my computer these obsene web pages put icons on my desktop, i cant get rid of them they always come back. What was the ragedit thing you said you did?
GrandDad
July 2nd, 2004, 12:25 AM
[how did you rid of your problem??? My homepage keeps changing to something else also, and everytime i boot my computer these obsene web pages put icons on my desktop, i cant get rid of them they always come back. What was the ragedit thing you said you did?
Welcome to WD cloefish .
First thing start here ;
http://forums.windrivers.com/showthread.php?t=57348
because you probably need more than a 'Registry' edit with this new stuff out.
If you have any questions or when tried above start a new thread and you can post a HiJack this log thier to .