Wtf?!
 

Seems that something has invaded my computer and changed my registry and everything. I get these ads for popups blockers and anti spyware and I can't change my homepage back to where I had it, and adaware didn't catch it nor did Norton anti virus.

:feels-hot

How the hell do I fix this? Goddammit! (No, I'm not formatting C.)

spybot search and destroy




delete kazaa too

Yup spybot works great and use kazaa lite

My spybot didn't catch it, either. Sorry, should have mentioned that.

This isn't from kazaa. I don't have that.

This came from a site where I store smilies. This should be illegal as hell. It hacked my fuckin registry!

http://www.spychecker.com/program/cwshredder.html


This helped me out:thumbsup

Get "hijack this" and root the little fuckers out.

Ok, I can't take credit for this, I found it on a message board somewhere a while back and saved it on my computer. It is the most comprehensive description of how to remove spyware that i have ever seen, and it has saved many computers for me.

---Paste----
AWARE VERSION 5.7 is obsolete. You need to uninstall it.

Do this:

Uninstall the oudated version of Adaware.

Then go here http://www.lavasoftusa.com/software/adaware/ and download Adaware 6

Install the program and launch it.

I strongly recommend that you read the help file to familiarize yourself with the program.

Before running the scan look at the top of the main window and you will see a Gear Icon. This is where you configure the settings. Click on that and then in the next window that pops up click on the "Scanning" tab on the left side. Under "Drives and Folders" put a check by "Scan within archives" and below that under "Memory and Registry" put a check by all the options there.
The click on the "Tweak" tab and under "Scanning engine" put a check by "Unload recognized processes during scanning" ...........then......under "Cleaning engine" put a ckeck by "Automatically try to unregister objects prior to deletion" and "Let windows remove files in use at next reboot" then click "Proceed"

I would also recommend that in the "Tweak" section there under "Web Update Settings" that you put a check by "Automatically look for updated reference files upon start" and "Always back up reference file before updating". This way it will automatically check for updates before you scan.

Next in the main window look in the bottom right corner and click on "Check for updates now" and get the latest referencefiles.
After getting the latest referencefiles you are ready to scan.

Click "Start" and in the next window make sure "Active in depth scanning" is checked then click "Next" and the scan will begin.

When it is finished let it fix everything it finds.

Restart your computer.

Next go here http://spybot.eon.net.au/index.php?...p;page=download and download Spybot.

Install the program and launch it.

Before scanning press "Online" and "Search for Updates" .

Put a check mark at and install all updates.

Click "Check for Problems" and when the scan is finished let Spybot fix/remove all it finds.

Restart your computer.

Finally do this. Go here http://www.tomcoyote.org/hjt/ and download Hijack This. Un Zip it and click on the Hijachthis.exe.

Click the "Scan" button when the scan is finished the scan button will become "Save Log" click that and save the log.

Go to where you saved the log and click on "Edit > Select All" then click on "Edit > Copy" then Paste the log back here in a reply.

Do NOT have Hijack This fix anything yet. Most of what it finds will be harmless. Someone here will be glad to advise you on what to fix if there is anything left.


---ENd Paste---

He says not to have Hijack This fix anything, but it is pretty easy to look at the log yourself and see what is malicious ... like any url that you don't recognize. If you want to post the log file here I'll see what I can do too.

Good luck-

:ak47: Spyware

w00t! It worked!

Hey thanks! Grabbin it to go with my other two. :thumbsup

Its fucked up, I had a win min piece of shit program that loaded on to my computer and kept on changing my homepage to pornochicks.com Good thing I found it and nuked it.

What site ??

it's actually coming from www.mysmilies.com

Is it setting your start page to i-lookup.com? (DO NOT GO THERE, IT MIGHT FUCK YOUR SYSTEM UP)

I had something similar happen to me and that was the site it kept setting my browser to. Ad Aware is good shit.