Argh! I hate spyware/adware/etc

[Rajah]

I know, this complaint has been posted before.

At work, I somehow got some page set up that loads every time I load IE for the first time in a boot. It only runs the first time, and it slows the entire system down. I've tried clearing temporary internet files, running the latest versions of adaware and spybot, and running virus scan, and none of those have gotten rid of this annoying popup/"search" page.

Anyone have any other ideas? The most the IM people here are willing to do to get rid of it is entirely reload the computer, which is a bit of overkill.

 

[Dan Murphy]

What is the name of it?

 

[newmousecateer]

Rajah, are you talking about incredifind? I am having the same problem. Last night I was actually typing the Disney Credit card address, and that stupid incredifind would not let me go to the Bank One site!! And incredifind does not show up in the "add/remove programs" in the control panel.

I hope someone has an answer.

 

[always quiet]

Go to Start, Run.....type in msconfig. A lbox will appear with all sorts of tabs (like folders), click on the one that says "Start Up"
Listed there you will find everything that starts automatically when your computer starts. It is probably going to be a long list (I know mine was...everything that gets pinned to your start up is unbelievable!). Find the program you want to have not start up and uncheck the box (you are not uninstalling anything, don't worry about doing something wrong). Click apply, then restart. A box will appear telling you that you have used the system configuration....check the box "do not start or show again". You shouldn't have a problem after that.

 

[Dax]

It would benifit everyone to download the ADware program found at this site.

Adware

This will remove any resident spyware installed on your system. This will stop a lot of annoying popups also. Be sure to Update BEFORE Scanning

 

[Rajah]

Newmouse -- no idea. It doesn't have any title, just a bunch of search boxes where you can "go" to common things. Kinda like the category boxes on yahoo, but this is *definitely* not yahoo. And if you try to do anything at all, a little box pops up saying "please wait, loading". I have to go to task manager to shut it down.

AQ -- nice thought, but they've turned off that option here at work.

 

[Nancy]

We had the icredifind and another one that starts with an s taking over the computer all the time. It ended up that we did a system reboot. (the computer was only 2 months old so it wasn't that big a deal) I now have spybot on my computer and I have no problems at all.

 

[newmousecateer]

Rajah, that is what incredifind does....exactly like you described it.

AQ...I will try that when I get home tonite, thanks.

 

[Rajah]

That may be it, then.

I just don't believe that the only way to get rid of the thing is to reload the machine.

 

[newmousecateer]

I just did a search in incredifind....wow! Apparently this program is one huge headache to a ton of people!!

 

[SyracuseWolvrine]

Sounds as if it may be a variant of CoolWebSearch. Adaware and Spybot can't get rid of CWS, but there's a utility out there called CWShredder that can. http://www.spywareinfo.com/~merijn/downloads.html

 

[Rajah]

Yep, I think that was it Syracuse. I just found CWShredder and ran it, it found 2 things, I rebooted the machine, no more problem. So unless this is something that only pops up the first time I run IE during the day, then it looks like CWShredder took care of the problem.

Thanks!!

 

[phisigprincess]

::shudder:: Spyware. This is why my computer has been at my best friends house for over a month being completely wiped clean and reconfigured. Luckily my DF is nice enough to loan me his computer, but I am SO ANNOYED at spyware!!! ARG!!!!

 

[Winka]

Syracuse Wolverine are you still there?

My laptop was sieged by a homepage hijacker too(allaboutsearching)-Spybot/Adaware resistant. It bundled a load of spyware hosts (including Xupiter and NewtonKnows) which upon a spware cleaning would simply be recalled everytime IE restarted...have tried to manually remove but it's so deeply imbedded somewhere...

...is allaboutsearching anything like the CoolWebSearch variant? DO you think the CWShredder will work on it? I'll check it out and if it works will FYI here for anyone else who might catch allaboutsearching.

This type of bundled spyware is new to me...and pretty aggravating.

 

[newmousecateer]

Winka, let us know if it works. Maybe I will download CWshredder when I get home.

 

[SyracuseWolvrine]

Originally posted by Winka
Syracuse Wolverine are you still there?

My laptop was sieged by a homepage hijacker too(allaboutsearching)-Spybot/Adaware resistant. It bundled a load of spyware hosts (including Xupiter and NewtonKnows) which upon a spware cleaning would simply be recalled everytime IE restarted...have tried to manually remove but it's so deeply imbedded somewhere...

...is allaboutsearching anything like the CoolWebSearch variant? DO you think the CWShredder will work on it? I'll check it out and if it works will FYI here for anyone else who might catch allaboutsearching.

This type of bundled spyware is new to me...and pretty aggravating.

It may be related to CoolWebSearch ... I'm not familiar with that particular variant, but it's entirely possible.

From what I've found, there may be an uninstaller for allaboutsearching ... a google search returned a page from the computing.net forums ... http://www.computing.net/security/wwwboard/forum/10727.html with some information.

 

[Winka]

Thanks wolverine. I've just posted my logfile and am patiently awaiting help.

Newmousecateer...I may be wrong but I'm not sure if this is something that is a preventive measure but rather more of a remedy once you've contracted this sort of persistent hijacker...hope you don't have to go through this. Oops-went back to re-read..seems like you do have a hijacker of some sort...fun, ain't it? Get ready for even more fun tonight...I'll come back to this thread if this works for me.

Oh wolverine btw...you wouldn't be able to advise me on my logfile if I PM you, would you?

 

[bjgrazi]

I ran everything thing I could and the allaboutsomething is what keeps popping up now........ that didn't happen till I ran all the new cleanup programs.........................

 

[SyracuseWolvrine]

I can take a look at the logfile, and probably catch some stuff, but the folks on the other forum are a bit better at it than I am.

 

[Winka]

Originally posted by bjgrazi
I ran everything thing I could and the allaboutsomething is what keeps popping up now........ that didn't happen till I ran all the new cleanup programs.........................

Hi Barb...sorry to see you here too. Spybot et al are NOT at fault for your current problems...seems like you have been hijacked by allaboutsearching and they're one-step ahead of the widely availabe anti-spyware software...re-read Syracuse Wolverine's posts for some useful links...

I am currently in the midst of a HijackThis cleansing. This program scans your system to catch all the allaboutsearching entries (or whatever strain you have omegasearch, prosearching or whatever) as well as a host of other entries you do NOT want to delete...you MUST post this scan list (the logfile) to their forums and they can advise you which files to remove...

...also be aware of the steps you take...run Spybot first...then initiate the HijackThis software...these hijackers can sense when you're attempting to dislodge them and can send up a whole host of popups or even seize up you computer and cause it to restart (I know it sounds a little exorcist-ish but certain words, links can generate a whole host of defenses by the hijacker)...

...if you aren't comfortable with all this you might want to enlist someone more computer savvy...it's not that bad but it may be more than you want to deal with.

Good luck , I'm going back in...thanks for the offer to check my logfile Wolverine...if I don't hear from them soon, I may take you up on it.