Forum Home
Press F1
 
Thread ID: 41650 2004-01-18 03:49:00 smartsearch.ws - evil little IE modifier ambasluv (1414) Press F1
Post ID Timestamp Content User
208211 2004-01-18 03:49:00 Interesting one for all of you out there. www.smartsearch.ws a friend wasn't being too careful with his browsing recently and now has this little ******* running ravage on his machine. Type an address in the address bar and it takes you to their page, which of course has nothing to do with where you were heading, in my case, google to find a way to kill it... There's a smal box at the top of it's screen that does let you browse the web though, but oh lordy does it make some fun for itself. Anybody with experience with this sod? Any removal tips would be greatly (as always) appreciated.

Yours


No Longer Ambasluv ;-(
ambasluv (1414)
208212 2004-01-18 04:05:00 Run Ad-Aware to remove all nasties. Check that your antivirus is up to date as well.

You can get Ad-Aware from here (www.lavasoft.de). Post back if you have any problems.

Lo.
Lohsing (219)
208213 2004-01-18 04:09:00 Try first a program called spybot from here (www.safer-networking.org) and next is cwshredder from here (www.siena.edu) and if that doesn't work, use hijackthis from here (www.spychecker.com) and delete all those entries that have the smartsearch name in. Be careful with this one as it lists good & bad references, so deleting something you are not sure of, could get you into the sh*t :) Pheonix (280)
208214 2004-01-18 04:10:00 Annoyingly Ad-Aware didn't pick up on this one for me... Current tactic which seems to be working temporarily at least is a quick romp through regedit... F3 - smartsearch and a whole lot of hitting the delete button - note to self, turn off ad-watch before doing this next time, as it alerts every time I make a registry mod... Anyone know where it's files would be located? Or is it one of those irritating random location things... ambasluv (1414)
208215 2004-01-18 04:12:00 What version of Ad-Aware are you using? I think it's up to 6.181 now or something like that? Earlier versions aren't supported anymore...

Lo.
Lohsing (219)
208216 2004-01-18 04:39:00 Is this page (www.computing.net) of any help? The solution is near the bottom of the thread. tommy (2826)
208217 2004-01-18 05:13:00 Use CWshredder in safe mode, (keep pressing F8 key when booting up). Latest version cures this buggar in safe mode. Pheonix (280)
208218 2004-01-18 05:32:00 Another read here (www.tiag-eu.com) on manually removing it. Would still recommend running cwshredder after this as well. Pheonix (280)
1