Help!!!!! Magicsearch.ws

[stamp92]

Over the last few years spyware is becoming an increasing problem. Usually Spybot SD, Adaware, Coolweb Shredder will fix all my spyware problems but I've tried these on my latest spyware problems and its not fixing it.

MAGICSEARCH.WS is the nasty piece of spyware i am hassled with at the moment. Any ideas? My homepage is set to this address and even after i run scans with ie closed it still doesnt remove it.

[kronas]

try clearing your 'temporary internet files' out through the 'internet options' assuming you use internet explorer, then go to the actual folder and delete anythng that shows up.

also try doing a search on your pc, using the search box for Magicsearch.ws, and remove............

[Paul]

http://www.merijn.org/files/CWShredder.exe That should rip it out, if not look for Hijackthis

[Paul]

Originally Posted by kronas

try clearing your 'temporary internet files' out through the 'internet options' assuming you use internet explorer then go to the actual folder and delete anythng that shows up.

also try doing a search on your pc, using the search box for Magicsearch.ws, and remove............

Clearing the temp files is always a good idea but won't work for this type of hijach
This sort if problem can be a pain to resolve but the shredder should clear it

[kronas]

Originally Posted by Paul

Clearing the temp files is always a good idea but won't work for this type of hijach
This sort if problem can be a pain to resolve but the shredder should clear it

it was just an idea, i was thinking about a solution, but you covered it.

[stamp92]

alas shredder doesnt remove it i will try Hijackthis otherwise im gonna be forced 2 have 2 use system restore

[Paul]

Originally Posted by kronas

it was just an idea, i was thinking about a solution, but you covered it.

No probs Kronas Clearing the temp files can often resolve glitches or page errors but for things like this you often have to look further afield
For anyone looking for more info on CWshredder:
http://www.spywareinfo.com/~merijn/cwschronicles.html
and HiJackthis
http://mjc1.com/mirror/hjt/

[stamp92]

i tried hijackthis coolweb shredder, spybot sd and adaware all failed to find and remove it

i managed to get rid of it by using system restore so problem fixed.

its disgusting that some nasty company would make such crap. its as bad if not worse than any virus ive had 2 deal with.

i have included two screen shots for those interested from hijack this. even after removing these 18 registry keys they damn thing just put them all back again.

[Flubflow]

What can often be the problem with trying to get rid of spyware is that it is sometimes embedded with some nasty shareware apps that you are using. So, even if you remove the traces of spyware, everytime you run that suspect shareware app then the spyware just gets reinstalled automatically again. I am always wary of shareware with a lengthy "Terms & Conditions" dialogue box that you have to accept during install and so I tend to look for small print regarding spyware.

I don't know about XP but on Windows98 you often get spyware as plugins in the "downloaded program files" folder which is the same as "OCCache" folder and you have to delete suspect plugins from there (looking at the properties of the plugins to see where they come from and what runtime files the rely on).

[stamp92]

i finally found a fix for the problem. this nasty spyware installs some nasty exe files in c:\Program Files\Common Files\Services\ which put the spyware back as soon as any spyware programs remove it. you need 2 delete these files first then use a spyware program. hijack this worked for me.


see this site for full details

http://www.computing.net/security/ww...orum/9514.html