Ok so I got a virus or something today maybe adware which has been messing with my IE. Everytime I start it goes to a defualt blank page. I have my virus scan on all the time and it detects it everytime IE opens up probably because it keeps coming back every time Ihit the button even after I delete it or quartine the trojan.

So I tried adaware which said 3 thigns were in my IE regedit which it cleaned. Then it came back again!! Id id ti again cleaned all 3 but it keeps coming back. I tried spyware...Then I noticed my IE default page keeps getting changed even if If chnage it back to yahoo.com. Even when I change it will be either yahoo then a bunch of #s like yahoo.com=232213211212sjksadljljkas or MSN.com/23290128901290SSASAAS.

So now I'm doing eveything in order, adaware, anti virus full scan, and spaywayre, delete temp files, and restart my comp soon..hopefully that will work.

Heres my regedit for my IE file: let me know If this looks right shou;d I delete something?

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer

names

(default)

build

Integrated Browser

MKenabled

UpdateINF

Version

W2kversion

they are all Reg_SZ type which is the second cloumn. The only exception is "integrated browser" which is a Reg_dword. Have no idea what those mean.

Also under th data column they all have writing or numbers except for "(default)" which has nothing.

 

you should just try running hijackthis and cwshredder
a google search for each will give you nice download links

 

tried didnt work

ok found out i have a program Interent search helper which is a culprit it hink...the prob is eveytime i triy to erase this 11mb program and remove it from add/remove prgrams it says can't find link or something??? thats not supposed to happen!

then i tried searching for key words and it came up with nothing. Where is this program on my computer? It shosws that its 11mb on my add/remove programs but I can't find it in my program files to delete it individually ahhhh!!

the virus seems to be a german thing to trojan as i tried to google it and it came up all german. Ill post the name tomm but i want to delete this programm...

 

if you have any sort of virus protection
such as norton or mcaeffe
just boot into safe mode and run your antivirus

 

^^^ That doesn't always work

Ive got the w.32Spybot worm atm and Ive tried everything incl. safe mode and I cant get rid of it. I tried following Symantec's instructions on getting rid of it (incl. turning off system restore, reboot in safe, delete certain registry keys and reboot) and still no luck.

I have Hijack this but haven't run it yet and Im running pandasoftware virus scan now but its not looking too promising.

Also not sure if this is just coincedental but my windows media player wont load because it didn't get "the version number that it expected" and wants me to re-install it.

Sorry for hijacking the thread, but I do have some advice for you to try, open regedit and ctrl+f then type in the name of the application that you want to get rid of and you should find the keys that need to be deleted. That's what I had to do when dealhelper wouldn't remove from my prog list, and that seems to have worked

 

SilverKnight,

Do you ever get a box that pops up asking if you want to continue running scripts on the page? If so, does it refer to a .HTM or .HTML file?

 

nope not that. Heres the virus which keeps popping up and me deltign it and it coming back again and again...


C:\WINDOWS\REGEDIT.EXE:YQBCI

The Trojan horse TR/Dldr.WinSh.AC.02 has been found.

 

ok guys heres the website it sends me to when I try to uninstall it.

http://looking-for.cc/uninstall/SearchExtender.html blah it makes me install it again

Control F works now I just delete delete....

I migh tjust uninstall IE and use mozilla and then reinstall IE again ahhhh

 

NOBODY CLICK THAT LINK ^^^

Besides it not being safe for work, it contains a virus.

 

I've found that you get much fewer viruses if you quit visiting porn sites.