searchv.com - GoFuckYourself.com

SleazyDream · 10-17-2003, 12:25 AM

anyone else got this fucking virus on their machine.

I've tried 3 virus remover programs now and none have worked. every time I re-boot my machine that fucking searchv.com site replaces my home page.

HELP

it's cyberterrorism.

someone needs to tell microsoft that even though I reset my main page to microsoft serachV.com keeps stealing the page.
I'm sure Bill would like to hear that...........

Abyss_Vee · 10-17-2003, 12:26 AM

prolly somewhere in your registry

jojojo · 10-17-2003, 12:36 AM

this is a common virus here is what you do:

1. find the file reg.sys and delete it

2. Run 'regedit' and use the find function to find each instance of 'searchv' and delete it - there should be several - then restart.

Ron2k1 · 10-17-2003, 12:51 AM

Yeah remove it in your registry and update your internet explorer.

What ie version do you run currently?

fang · 10-17-2003, 12:54 AM

I've got the same shit

irishfury · 10-17-2003, 12:55 AM

if that is the cool web search try this

run adaware

then

Have only HijackThis running while staying offline and fix the following :

ALL R0 and R1 entries

O2 - BHO: WinShow module - {6CC1C918-AE8B-4373-A5B4-28BA1851E39A} - C:\Documents and Settings\Patricia\Application Data\winshow\winshow.dll

O4 - Global Startup: MSupdater.exe

O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} -

Not sure of this entry , still looking into it :

O4 - HKLM\..\Run: [Sysdpt] c:\windows\system32\sysdpt.exe

But start with the other entries, reboot and remove :

C:\Documents and Settings\Patricia\Application Data\winshow\ <- complete winshow folder
MSupdater.exe <- this file (if still present

irishfury · 10-17-2003, 01:51 AM

if you did what I had above and after reboot it comes back it's because you have to get rid of this file

O2 - BHO: HTML Source Editor - {086AE192-23A6-48D6-96EC-715F53797E85} - C:\WINDOWS\System32\DReplace.dll

10-17-2003, 12:25 AM	#1
SleazyDream I'm here for SPORT Industry Role: Join Date: Jul 2001 Location: Phone # (401) 285-0696 Posts: 41,470	searchv.com anyone else got this fucking virus on their machine. I've tried 3 virus remover programs now and none have worked. every time I re-boot my machine that fucking searchv.com site replaces my home page. HELP it's cyberterrorism. someone needs to tell microsoft that even though I reset my main page to microsoft serachV.com keeps stealing the page. I'm sure Bill would like to hear that........... __________________ This dog, is dog, a dog, good dog, way dog, to dog, keep dog, an dog, idiot dog, busy dog, for dog, 20 dog, seconds dog! Now read without the word dog.

10-17-2003, 12:36 AM	#3
jojojo Too lazy to set a custom title Join Date: Mar 2002 Location: Vancouver, BC Posts: 2,318	this is a common virus here is what you do: 1. find the file reg.sys and delete it 2. Run 'regedit' and use the find function to find each instance of 'searchv' and delete it - there should be several - then restart. __________________ Learn SEO - make $$ residually - icq me 333485092

10-17-2003, 12:54 AM	#5
fang Confirmed User Join Date: Oct 2002 Location: USA Posts: 1,189	I've got the same shit __________________ Niche Sites and Reality Sites That = Big $$$ Get Your Share Now

10-17-2003, 12:55 AM	#6
irishfury Confirmed User Join Date: Aug 2003 Location: In the hearts of cowards Posts: 2,611	if that is the cool web search try this run adaware then Have only HijackThis running while staying offline and fix the following : ALL R0 and R1 entries O2 - BHO: WinShow module - {6CC1C918-AE8B-4373-A5B4-28BA1851E39A} - C:\Documents and Settings\Patricia\Application Data\winshow\winshow.dll O4 - Global Startup: MSupdater.exe O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - Not sure of this entry , still looking into it : O4 - HKLM\..\Run: [Sysdpt] c:\windows\system32\sysdpt.exe But start with the other entries, reboot and remove : C:\Documents and Settings\Patricia\Application Data\winshow\ <- complete winshow folder MSupdater.exe <- this file (if still present __________________ Trust no one there all snakes

10-17-2003, 01:51 AM	#7
irishfury Confirmed User Join Date: Aug 2003 Location: In the hearts of cowards Posts: 2,611	if you did what I had above and after reboot it comes back it's because you have to get rid of this file O2 - BHO: HTML Source Editor - {086AE192-23A6-48D6-96EC-715F53797E85} - C:\WINDOWS\System32\DReplace.dll __________________ Trust no one there all snakes

10-17-2003, 12:26 AM	#2
Abyss_Vee Confirmed User Join Date: Sep 2003 Location: Los Angeles Posts: 5,208	prolly somewhere in your registry

10-17-2003, 12:51 AM	#4
Ron2k1 Confirmed User Join Date: Sep 2001 Location: The Netherlands Posts: 1,573	Yeah remove it in your registry and update your internet explorer. What ie version do you run currently?