Archived from groups: microsoft.public.windowsxp.newusers (
More info?)
HijackThis
http://www.spywareinfo.com/~merijn/files/HijackThis.exe
[[A general homepage hijackers detector and remover. Initially based on the
article Hijacked!, but expanded with almost a dozen other checks against
hijacker tricks. It is continually updated to detect and remove new hijacks.
It does not target specific programs/URLs, just the methods used by
hijackers to force you onto their sites. As a result, false positives are
imminent and unless you are sure what you're doing, you should always
consult with knowledgable folks (e.g.
http://www.spywareinfo.com/~merijn/forums.html) before deleting anything.
A rudimentary HijackThis log tutorial by me is available here.
http://www.spywareinfo.com/~merijn/htlogtutorial.html
The official HijackThis QuickStart for posting on the SpywareInfo forums is
available here.]]
http://tomcoyote.org/hjt/
===================
CWShredder
http://www.spywareinfo.com/~merijn/files/CWShredder.exe
[[A small utility for removing CoolWebSearch (aka CoolWwwSearch, YouFindAll,
White-Pages.ws and a dozen other names). Spybot S&D and Ad-aware tend to
forget essential parts of the hijack, so until they update, you can use this
to completely remove the hijack. This program is updated to remove the new
variants once they come out.
Read my article with documentation on Coolwebsearch here.]]
http://www.spywareinfo.com/~merijn/cwschronicles.html
=================
2) SpywareBlaster
SpywareBlaster doesn't scan and clean for spyware - it prevents it from ever
being installed.
The most important step you can take is to secure your system. And
SpywareBlaster is the most powerful protection program available.
http://www.javacoolsoftware.com/spywareblaster.html
--
Hope this helps. Let us know.
Wes
In news:ey%23N9yfOEHA.1644@TK2MSFTNGP09.phx.gbl,
Marsha <nospamplease@nosuchplace.com> hunted and pecked:
> My homepage is set to about Blank & it changes to something else.
>
> "Wesley Vogel" <123WVogel955@comcast.net> wrote in message
> news:mjapc.50141$xw3.2980092@attbi_s04...
>> Marsha;
>>
>> Do you have your Home Page set to about: Blank or is your Home Page
>> getting hijacked and set to about: Blank??
>>
>> If you're getting hijacked try HijackThis.
>>
>> HijackThis
>>
http://www.spywareinfo.com/~merijn/downloads.html
>>
>> Scroll down to Official downloads | HijackThis (zipped):
>> --
>> Hope this helps. Let us know.
>> Wes
>>
>> In news:Oi%23WUOeOEHA.904@TK2MSFTNGP12.phx.gbl,
>> Marsha <nospamplease@nosuchplace.com> hunted and pecked:
>>> I have Ad Aware which picks this up, Spybot, Norton, Windows XP, all
>>> current with updates. I delete this & it keeps coming back. How do
>>> I get rid of this pest?
>>> Thanks,
>>> Marsha
>>>
>>> Started deep registry scan
>>> ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
>>> Possible browser hijack attempt : Software\Microsoft\Internet
>>> Explorer\MainStart Pageabout:blank
>>>
>>> Possible Browser Hijack attempt Object recognized!
>>> Type : RegData
>>> Data : "about:blank"
>>> Rootkey : HKEY_CURRENT_USER
>>> Object : Software\Microsoft\Internet Explorer\Main
>>> Value : Start Page
>>> Data : "about:blank"
>>>
>>>
>>> Deep registry scan result :
>>> ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
>>> New objects : 1
>>> Objects found so far: 1