Search Engine Blocking Spyware??

[Kingkool68]

I Tried to goto google last night and i got a DNS error Page cannot be
found. I also tried MSN search engine and the Yahoo search engine
with the same result. I downloaded and updated Spybot which found 4
items that cause these search pages to be redirected. I think it was
labelled slaw-search. I removed the items but i still can't get to
google.

I think this spyware is associated with www.your.com

Does anyone know how to fix this problem? Will i have to go digging
in my registry?

[Jim Byrd]

Hi King - This is Cool Web Search. Do the following:
Download and run: http://www.spywareinfo.com/~merijn/files/cwshredder.zip to
remove the parasite

Then download and run:
http://www.kellys-korner-xp.com/regs.../iegentabs.reg to restore your
tabs and remove any restrictions that the parasite has put in place.

However, this also indicates that you may have acquired some other malware
along the way. If you go to this page at Jim Eshelman's site, here:
http://aumha.org/a/noads.htm and wait a little bit (be patient), an analysis
of a number of possible parasites on your machine will be made to help you
identify and remove them. NOTE: You will need to disable Ad Blocking in Zone
Alarm 3.x, if present or any other Ad Blocking software which interferes
with Java Scripting for this scan to work. You should get a message between
the two lines of **** giving the results of the scan.

Get Ad-Aware 6.0, Build 181 or later, here:
http://www.lavasoftusa.com/support/download/. Update and run this regularly
to get rid of most "spyware/hijackware" on your machine.

Another excellent program for this purpose is SpyBot Search and Destroy
available here: http://security.kolla.de/ SpyBot Support Forum here:
http://www.net-integration.net/cgi-b.../ikonboard.cgi. I recommend
using both normally. After fixing things with SpyBot S&D, be sure to re-boot
and rerun SpyBot again and repeat this cycle until you get a clean "no red"
scan.


Note that sometimes you need to make a judgement call about what these
programs report as spyware. See here, for example:
http://www.imilly.com/alexa.htm



--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP



In news:e67902c9.0309221054.7bc9eeff@posting.google.c om,
Kingkool68 <kingkool68@comcast.net> typed:
> I Tried to goto google last night and i got a DNS error Page cannot be
> found. I also tried MSN search engine and the Yahoo search engine
> with the same result. I downloaded and updated Spybot which found 4
> items that cause these search pages to be redirected. I think it was
> labelled slaw-search. I removed the items but i still can't get to
> google.
>
> I think this spyware is associated with www.your.com
>
> Does anyone know how to fix this problem? Will i have to go digging
> in my registry?

[YoKenny]

Kingkool68 wrote:
> I Tried to goto google last night and i got a DNS error Page cannot be
> found. I also tried MSN search engine and the Yahoo search engine
> with the same result. I downloaded and updated Spybot which found 4
> items that cause these search pages to be redirected. I think it was
> labelled slaw-search. I removed the items but i still can't get to
> google.
>
> I think this spyware is associated with www.your.com
>
> Does anyone know how to fix this problem? Will i have to go digging
> in my registry?

Looks like your HOSTS file has been hijacked. It is a new hijacker and has
not been identified yet. As Jim says it looks like the CoolWebSerch
hijacker.

Check to see if all search sites have been set to 64.191.59.85 and if they
have then remove the entries.

To learn about the HOSTS file and what should be in it.
http://www.mvps.org/winhelp2002/hosts.htm

[Joebee]

Kingkool68 wrote:

> Does anyone know how to fix this problem? Will i have to go digging
> in my registry?

Go here http://forums.spywareinfo.com/