Help with some dirty fucking spyware
 

Before you read below...do not click on the link that I put in because I think it could do the same to your PC that it did to mine.

LL owners, be careful of the sites that you open when you validate sites...I am pretty sure that this is how my PC got infected.


Somehow, I think it happened while validating sites submitted to my LL, some shitbag reset my default homepage in Internet Explorer to this: res://mshp.dll/index.html#37049 ...and I can't change it. I go into ie, tools, Internet Options, programs, and hit "Reset Web Settings" and it will do it temporarily. When I restart my computer that res://mshp.dll/index.html#37049 is back as my default.

I've run the latest Spybot Search and Destroy to no avail.

Does anyone know how to reset my default home page so this spyware goes away. Is there anything else that I need to look at on my PC?

Thanks!

Take a look here
http://forums.techguy.org/t203900/se...1ebe49a02.html

Thanks Jim! I'm reading it now and will let everyone know if this works.

Ok, I think it is now fixed. Jim the place that you recommended had good advice, the only thing was the link that they said to click on for "CWShredder" didn't work. I went to google and found this:

http://www.sherrylynn.us/CWShredder.exe

I loaded it and it seemed to work.

Thanks for the help Jim and I hope this helps anyone else that has this problem.

I only had some a bad shit once. Fortunately I'm completly comfortable tweaking the windows registry and went in and deleted all the crap.

I do use Adaware from time to time to check, and if it finds something rather than having it delete it or quarantine it, I go to the registry myself and remove it.

Captn :) if you need more stuff to check the PC - this is the authors download page - he also has a program called hijackthis hat goes along with cwshredder to totally disinfect from spyware - I dont even run much except adaware from lavasoft and these programs when I get infected reviewing sites and it has always taken care of the problems :)
http://www.spywareinfo.com/~merijn/downloads.html

note that these programs get updated pretty frequently so its best to D/L the most recent one from the authors site each time you want to run it - it's almost a daily battle to keep up with the spyware kiddies :)

Thanks Linkster!

I downloaded it and ran it. My logs look Ok, is there anything in particular that anyone can recommend that I look for?

Are you still having any problems after running the cwshredder?

Spyware is such a pain in the ass... might want to look into running Adaware. It's pretty good at catching most if not all of it... and it's got a monitoring utility (in the paid version, the free one just scans and removes).

One thing I do when I get something nasty like that is also recommended on that site. I just take the URL that I am sent to and search it on any search engine. That is how I found that place. It will usually point you in the right direction to get rid of it.

And I have Norton's Internet Suite and 3 spyware programs but things still get through. I hate that crap...

The funny thing is...right after I posted that the other day, I all of a sudden had a new Start page, my google bar went away and I had popups :) I searched the URL of the new Start Page and sure enough, I found directions on how to get rid of it.