Re: homepage is reset to unwanted site, possible virus

From: Mike Burgess (winhelp2002_at_spamthis.com)
Date: 02/12/04


Date: Wed, 11 Feb 2004 21:19:56 -0500

Hi,
magicsearch.ws = CWS.Smartsearch.4 (coolwebsearch trojan)

How to remove Coolwebsearch and affiliates
http://mvps.org/winhelp2002/unwanted.htm#Coolwebsearch

Note: this type hijack indicates an unpatched machine, that is lacking
in "Defense". Please visit Windows Update to avoid these exploits.
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 02-07-04]
Please post replies to this Newsgroup, email address is invalid

--
<anonymous@discussions.microsoft.com> wrote in message
news:e57d01c3f0ec$16f3f260$a301280a@phx.gbl...
> INSTALL ONE OF THE FOLLOWING: SPYWARE (FREE), ADAWARE
> (FREE) OR PESTPATROL ($30). THIS WILL CLEAN UP ALL YOUR
> SPYWARE AND RESTORE YOUR HOMEPAGE.
> >-----Original Message-----
> >everytime i open internet explorer it is set to an
> >unwanted address. the site is www.magicsearch.ws and
> every
> >time i try to type in a site address in the address bar,
> >it takes me back to the magic search homepage. i have
> >tried resetting everything for internet explorer in the
> >registry edit, and the same problem keeps occuring. it
> >happens regardless of what version of IE is installed.
> >.
> >


Relevant Pages

  • Re: I feel like someone has taken over my computer!!!
    ... find-itnow.com = CWS.Alfasearch.2 (coolwebsearch trojan) ... this type hijack indicates an unpatched machine, ... Please visit Windows Update to avoid these exploits. ... > been to is Ebay. ...
    (microsoft.public.security.virus)
  • Re: Strange Link Placement
    ... runsearch.com = CWS.Mupdate (coolwebsearch trojan) ... this type hijack indicates an unpatched machine, ... Please visit Windows Update to avoid these exploits. ... > then, Kazaa was not running. ...
    (microsoft.public.security)
  • Re: Browswer will not open at all.
    ... Winshow.dll = Coolwebsearch trojan ... this type hijack indicates an unpatched machine, ... Please visit Windows Update to avoid these exploits. ... > the latest IE 6 setup but trying to update, ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Start page and potential virus.
    ... search-space.com is a rather old Coolwebsearch trojan. ... this type hijack indicates an unpatched machine, ... Please visit Windows Update to avoid these exploits. ... > I've encountered a problem with my start-page option. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Webpage error - http:///?
    ... "to an error page and http:/// " = coolwebsearch trojan ... this type hijack indicates an unpatched machine, ... Please visit Windows Update to avoid these exploits. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)

Loading