Hello FZWG and the computing.net family, I have been trying to remove a stubborn spyware called netsetter. The three popular spyware software do not see it, with the help of FZWG and a few other techies, I have been able to remove it from most of my computer. The one area it refuses to die is the internet options, connections, in lan settings. I was able to replace it in the connections, isp settings, with the isp address. Everytime I replace the spyware address in the lan setting, it removes what I have typed in and drops in its own address. My question, where would I find the lan settings, I like to see if its hiding in there or anywhere else lan information is stored, thanking you in advance for your time and help, charlie

Netsetter/Marketscore removal odds are very low, particularly if it keeps coming back. Apparently there are clandestine files that keep recreating it. Here are some suggestions/items to rule out: 1.Delete the *.tmp files on the hard drive (Do this in DOS). Some of these may contain malicious code for browser hijacking or malware reinstallation. 2.Do a Find>Files and Folders for the following file extensions: *.hta, and also *.jse. If any of these files is found, open in Notepad (or a text editor) and look at the URLs in the file. Delete any Netsetter/Marketscore URL found. 3.Do a Find for: Hosts (not Hosts.sam or Lmhosts). If found, open in Notepad and look at the entries. Delete any reference to the URL doing the hijacking. 4.Rename the Hosts file to something else, like: Ghosts. Reboot. 5.Run: MSConfig, and select the StartUp tab. Look for any entry with: regedit.exe /s If found, disable the entry by unchecking. 6.Again in MSConfig, select the SYSTEM.INI tab. Expand the (+) next to [boot]. Look for: Shell=Explorer.exe. Check to ensure there is nothing following after Eplorer.exe (Example: Shell=Explorer.exe Whatever.exe). If something follows Explorer.exe, delete what follows. Do not delete Explorer.exe!!!!! Exit MSConfig. Reboot. 7.Close all open Internet Explorer windows before effecting any of the changes described above. 8.Reboot after any change. Before proceeding, ensure all files in the PC are viewed: Right click Start>Explore>View>Folder Options>View tab>Advanced Settings>Files and Folders>Hidden Files: >>>Show All Files<<<

I found this info: NetSetter / Marketscore - A "market research" program along the lines of WebHancer, intended to track your Internet usage and buying habits. Some users seem to have it and not know where it came from. Removal instructions here. (If you did voluntarily sign up for this service and wish to remove it, you can login to the Marketscore Web site for removal procedures.) here: http://www.cexx.org/adware.htm It's a little over half way down the page. There's links for how to remove it. If you've already tried that or it didn't work, you can post on the forum here: http://www.spywareinfo.com/ Those folks should be able to help you. Good luck.

charlie, There are a couple of websites that deal with web hijackers, such as Netsetter. Go to the Browser Hijacking forum at: http://www.spywareinfo.com/yabbse/ You will have to register, etc, but it is free. They have some kind of utility called: Hijack This!, that may help you, plus other info. Post your issue there. The other forum is located at: http://www.net-integration.net/cgi-bin/forums/ikonboard.cgi (all on one line) Go to the SpybotS&D forum there. Registration, etc., also free. This morning had to work on a friend's PC with Netsetter/Marketscore on it. SpybotSD latest update pointed right to it. You need some spyware 'top guns' to help you.

Just in case, take a look at this Registry entry: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\URL Click on the URL folder in the left pane of the Registry, and check the Default Prefix. It should read: http:// If there is anything else after http://, delete it. Do the same thing for the next folder: Prefixes, if there are any entries after the //. Any luck?

Thank you all, BlueFront, Suzi, Echo and again, FZWG, hopefully I can rid of this nightmare. It would let me access the net, since most of its program has been deleted. I get as far as my isp telling me I am logged on, but blocks my browser from coming on line. Even though I call it up manually, the browser, either ie or netscape won't connect to the net. As always, I appreciate and thank you for your help, charlie