This is a log ran... from SpyGuard what can I do to stop this?

Discussion in 'Computer Science & Culture' started by ChildOfTheMind, Sep 13, 2004.

Thread Status:
Not open for further replies.
  1. ChildOfTheMind So dark the con of man Registered Senior Member

    Messages:
    337
    BROWSER HIJACK ALERT - BROWSER PAGE CHANGED
    On 22:45:58 09/12/2004 a browser page change was detected.
    Registry Location: HKCU\Software\Microsoft\Internet Explorer\Main\
    Value Name: Search Page
    Old Value: http://ie.search.msn.com
    New Value: http://websearch.drsnsrch.com/sidesearch.cgi?id=
    User Action Taken: RESTORE OLD VALUE

    --------------------------------------------------------------------------------
    BROWSER HIJACK ALERT - BROWSER PAGE CHANGED
    On 22:46:10 09/12/2004 a browser page change was detected.
    Registry Location: HKCU\Software\Microsoft\Internet Explorer\Main\
    Value Name: Search Bar
    Old Value:
    New Value: http://websearch.drsnsrch.com/sidesearch.cgi?id=
    User Action Taken: RESTORE OLD VALUE

    --------------------------------------------------------------------------------
    BROWSER HIJACK ALERT - BROWSER PAGE CHANGED
    On 22:46:19 09/12/2004 a browser page change was detected.
    Registry Location: HKLM\Software\Microsoft\Internet Explorer\Main\
    Value Name: Search Page
    Old Value: http://ie.search.msn.com
    New Value: http://websearch.drsnsrch.com/sidesearch.cgi?id=
    User Action Taken: RESTORE OLD VALUE

    --------------------------------------------------------------------------------
    BROWSER HIJACK ALERT - BROWSER PAGE CHANGED
    On 22:46:23 09/12/2004 a browser page change was detected.
    Registry Location: HKLM\Software\Microsoft\Internet Explorer\Main\
    Value Name: Search Bar
    Old Value:
    New Value: http://websearch.drsnsrch.com/sidesearch.cgi?id=
    User Action Taken: RESTORE OLD VALUE

    --------------------------------------------------------------------------------
    BROWSER HIJACK ALERT - BROWSER PAGE CHANGED
    On 22:49:01 09/12/2004 a browser page change was detected.
    Registry Location: HKCU\Software\Microsoft\Internet Explorer\Main\
    Value Name: Search Page
    Old Value: http://ie.search.msn.com
    New Value: http://websearch.drsnsrch.com/sidesearch.cgi?id=
    User Action Taken: RESTORE OLD VALUE

    --------------------------------------------------------------------------------
    BROWSER HIJACK ALERT - BROWSER PAGE CHANGED
    On 22:49:03 09/12/2004 a browser page change was detected.
    Registry Location: HKCU\Software\Microsoft\Internet Explorer\Main\
    Value Name: Search Bar
    Old Value:
    New Value: http://websearch.drsnsrch.com/sidesearch.cgi?id=
    User Action Taken: RESTORE OLD VALUE

    --------------------------------------------------------------------------------
    BROWSER HIJACK ALERT - BROWSER PAGE CHANGED
    On 22:49:05 09/12/2004 a browser page change was detected.
    Registry Location: HKLM\Software\Microsoft\Internet Explorer\Main\
    Value Name: Search Page
    Old Value: http://ie.search.msn.com
    New Value: http://websearch.drsnsrch.com/sidesearch.cgi?id=
    User Action Taken: RESTORE OLD VALUE

    --------------------------------------------------------------------------------
    BROWSER HIJACK ALERT - BROWSER PAGE CHANGED
    On 22:49:11 09/12/2004 a browser page change was detected.
    Registry Location: HKLM\Software\Microsoft\Internet Explorer\Main\
    Value Name: Search Bar
    Old Value:
    New Value: http://websearch.drsnsrch.com/sidesearch.cgi?id=
    User Action Taken: RESTORE OLD VALUE

    --------------------------------------------------------------------------------
    BROWSER HIJACK ALERT - BROWSER PAGE CHANGED
    On 22:49:43 09/12/2004 a browser page change was detected.
    Registry Location: HKCU\Software\Microsoft\Internet Explorer\Main\
    Value Name: Search Page
    Old Value: http://ie.search.msn.com
    New Value: http://websearch.drsnsrch.com/sidesearch.cgi?id=
    User Action Taken: RESTORE OLD VALUE

    --------------------------------------------------------------------------------
    BROWSER HIJACK ALERT - BROWSER PAGE CHANGED
    On 22:49:49 09/12/2004 a browser page change was detected.
    Registry Location: HKCU\Software\Microsoft\Internet Explorer\Main\
    Value Name: Search Bar
    Old Value:
    New Value: http://websearch.drsnsrch.com/sidesearch.cgi?id=
    User Action Taken: RESTORE OLD VALUE

    --------------------------------------------------------------------------------
    BROWSER HIJACK ALERT - BROWSER PAGE CHANGED
    On 22:49:50 09/12/2004 a browser page change was detected.
    Registry Location: HKLM\Software\Microsoft\Internet Explorer\Main\
    Value Name: Search Page
    Old Value: http://ie.search.msn.com
    New Value: http://websearch.drsnsrch.com/sidesearch.cgi?id=
    User Action Taken: RESTORE OLD VALUE

    --------------------------------------------------------------------------------
    BROWSER HIJACK ALERT - BROWSER PAGE CHANGED
    On 22:49:54 09/12/2004 a browser page change was detected.
    Registry Location: HKLM\Software\Microsoft\Internet Explorer\Main\
    Value Name: Search Bar
    Old Value:
    New Value: http://websearch.drsnsrch.com/sidesearch.cgi?id=
    User Action Taken: RESTORE OLD VALUE

    --------------------------------------------------------------------------------
    BROWSER HIJACK ALERT - BROWSER PAGE CHANGED
    On 22:50:14 09/12/2004 a browser page change was detected.
    Registry Location: HKCU\Software\Microsoft\Internet Explorer\Main\
    Value Name: Search Page
    Old Value: http://ie.search.msn.com
    New Value: http://websearch.drsnsrch.com/sidesearch.cgi?id=
    User Action Taken: RESTORE OLD VALUE

    --------------------------------------------------------------------------------
    BROWSER HIJACK ALERT - BROWSER PAGE CHANGED
    On 22:50:15 09/12/2004 a browser page change was detected.
    Registry Location: HKCU\Software\Microsoft\Internet Explorer\Main\
    Value Name: Search Bar
    Old Value:
    New Value: http://websearch.drsnsrch.com/sidesearch.cgi?id=
    User Action Taken: RESTORE OLD VALUE

    --------------------------------------------------------------------------------
    BROWSER HIJACK ALERT - BROWSER PAGE CHANGED
    On 22:50:17 09/12/2004 a browser page change was detected.
    Registry Location: HKLM\Software\Microsoft\Internet Explorer\Main\
    Value Name: Search Page
    Old Value: http://ie.search.msn.com
    New Value: http://websearch.drsnsrch.com/sidesearch.cgi?id=
    User Action Taken: RESTORE OLD VALUE

    --------------------------------------------------------------------------------
    BROWSER HIJACK ALERT - BROWSER PAGE CHANGED
    On 22:50:18 09/12/2004 a browser page change was detected.
    Registry Location: HKLM\Software\Microsoft\Internet Explorer\Main\
    Value Name: Search Bar
    Old Value:
    New Value: http://websearch.drsnsrch.com/sidesearch.cgi?id=
    User Action Taken: RESTORE OLD VALUE
     
  2. Google AdSense Guest Advertisement



    to hide all adverts.
  3. Naomi [oxiglycodextrosium] Registered Senior Member

    Messages:
    186
    Nuke all of your drives. Problem solved.

    Please Register or Log in to view the hidden image!

     
  4. Google AdSense Guest Advertisement



    to hide all adverts.
  5. river-wind Valued Senior Member

    Messages:
    2,671
    download AdAware, and run that - see if it picks up any spyware that it can get rid of. There are other freeware spy-and ad-ware removers out there; I've found AdAware to be the best.
     
  6. Google AdSense Guest Advertisement



    to hide all adverts.
  7. Idle Mind What the hell, man? Valued Senior Member

    Messages:
    1,709
    Download Hijack This! and another program called CWShredder. The first one should do the trick.
     
  8. sargentlard Save the whales motherfucker Valued Senior Member

    Messages:
    6,698
    I have a question about adaware. I quarentined 175 objects in 2 different archives, now if I were to delete my archives would that mean the objects within them would be deleted or only the logged archive itself setting all the stored objects free on my machine again.

    I want to delete those bad registry keys etc off my system so should I just delete the archives or let them be qurantined?

    Idlemind

    Thanks for the mention of CWSshredder.
     
  9. Idle Mind What the hell, man? Valued Senior Member

    Messages:
    1,709
    I don't think they can cause any harm if they are quarantined, but I am no expert.

    Why the thanks?
     
  10. sargentlard Save the whales motherfucker Valued Senior Member

    Messages:
    6,698

    CWSshredder found coolwebsearch BS on my system and banished it.
     
Thread Status:
Not open for further replies.

Share This Page