Re: "ehttp.cc" insertion in URL

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Bill Sanderson (Bill_Sanderson_at_msn.com.plugh.org)
Date: 02/17/04 

Date: Mon, 16 Feb 2004 23:20:16 -0500

All right---did a bit more research.

It appears this is a piece of one or more of the coolwebsearch variants,
which you should use CWShredder to remove.

You can get the current version of CWShredder here:

http://www.kellys-korner-xp.com/regs_edits/cwshredder.zip

You can try the autoupdate feature, but you may not be able to get a
response--the home domain of this app is under a DOS attack at the moment.

However, the app as downloaded should take care of this problem. Please use
this even if you've attempted my earlier suggestions.

"Gary Brown" <anonymous@discussions.microsoft.com> wrote in message
news:10b2701c3f44b$a5118820$a001280a@phx.gbl...
> Every time I enter a URL in IE, the string "ehttp.cc" is
> inserted between the "http://" and what I have typed.
> When this happens, new links appear in the Favorites
> dropdown list, etc. I can stop the insertion by entering
> every URL with "http://" first.
>
> Some IT security professional discussion groups have
> posts on this, but the anti-virus companies do not seem
> to mention it. Anyone know of a way to remove this thing?

Relevant Pages

  • Re: CWS = Crummy Windows Security
    ... Unfettered means that if security permits, any app can write to this ... In our opinion, even with Admin access, there should be special ... As the download page you provided indicates, ... On the CWS version we wrestled with, CWShredder didn't work. ...
    (NT-Bugtraq)
  • Re: CWshredder ??
    ... I think this is probably an accident of timing. ... The app does get rev'd regularly: The date on the one I just downloaded is ... >>Does anyone know where CWShredder went. ...
    (microsoft.public.security.virus)