Searchweb2.com - still comes back

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: iannc.net (ianncnet_at_discussions.microsoft.com)
Date: 09/18/04 

Date: Fri, 17 Sep 2004 22:59:01 -0700

I have tried removing this nasty without success ...keeps coming back.
Operating System is XP SP2.

1. I note that even with XP SP2 loaded this little gem keeps adding itself
to the pop ups allowed in the Pop Up Block section of IE Privacy. Remove and
save and it will appear back in the allowed section in 60sec. The fact that
one can write a script that can add entries to the Allowed Section of Pop Up
Blocker tends to cast doubt in my mind about the usefulness of this new
security feature in XP...nice try Mircrosoft but we do have a flaw here.

2. Have scanned in normal mode and safe mode using licenced copies of
spybot, spyware doctor and (freeware) Lavasoft's Ad-aware SE Personal edition
(latest versions as at Sept'04). Traits of searchweb2.com or lop.com not
found. Infact the reports come back with a clean bill of health each time.
Yet as soon as look in Pop up Blocket searchweb2 and lop are back. If close
IE and open again the @#$% search bar pops backup. It was also removing the
line entry of blocking the site in the hosts file (127.0.0.1
www.searchweb2.com) until I made this file Read only.

3. Have also run CW Shredder - and system clean

4. Have scanned registry in save mode - no luck in finding these gems and
getting rid of them.

5. Tried disabling all off Active X options in IEby setting option to
disable - and you guessed it, this web bar will still display when starting
IE again.

One think I have noticed by slowing down the start of IE and watching what
programmes are being excuted in Task Manager etc is that a programme is
briefly called "else grey.exe" I have tried to find out what this does,
without success. Anybody have any ideas ?

The main issue is how do I finally get rid of this searchweb2.com parasite,
as spybot, lavasoft and cw shredder have not to date. It's a bugger. 

-- 
Iann C
MSCE

Relevant Pages