Tom's Guide | Tom's Hardware | Tom's Games
 |
 |
 |
My home page has been hijack by searchx.cc, I tried Webroot, it detects that the page is being changed but the page come backs.
Does any body know how to resolve it?
This is a virus you need to download CWS shredder and clean any traces of the virus if this still does not do it try AVG free antivirus to scan the registry do not try to delete the files yourself as on some of these homepage hackers i have found they can sometimes put in codes in the registry that when you try to search for the entries the computer shuts down
PGR
0 
0
A Browser Homepage highjacker again... Is this one a variation on the "search.cc" pest?
Check out the assorted references in:
http://www.computing.net/windows2000/wwwboard/forum/57216.html
especially the reference to:
http://www.computing.net/windows95/wwwboard/forum/155566.html
Also do your own google search using:
searchx.cc BHO
and/or
searchx.cc
as the string/search term. You'll almost certainly get many hits advising assorted ways to get rid of it.
And once clean keep the various utils suggested (and which you may decide it's wise to install...) up-to-date re' their reference files.
0
April-17-2004 I began the misery of the searchx.cc infection.
I tried restoring to a previous date, but for some reason, windows would not let me. I tried AdAware, SpyKiller, XoftSpy, AntiSpy, AntiSpy, CWShredder, and HijackThis. Nothing works. Everything detects threats, says they will remove, then after reboot it comes back.
Am I the only one to notice that these recurring search engines are all .CC? Just an observation.
I also noticed the lack of contact info on the searchx.cc pages. And if you go into any of the categories, you'll see "Copy Left (C)" and "No Rights Reserved". I have faith the people at searchx.cc support the infections, if they themselves aren't the immediate cause.
Any suggestions to remove the infection?
Any ideas to shutdown searchx.cc?
0
@ ct2193
I know one fix - and I've done this - that *absolutely* works: reformat your computer. I reformatted my computer and I've no regrets. I mean, I got so fed up with trying to remove searchx.cc that I lost it. I was pounding my keyboard and throwing stuff at my monitor!
I noticed that you were infected just yesterday. I know what you're thinking and, yes, reformatting is a very drastic measure. You may not be thinking of reformatting...you might even think it's insane. But when you've suffered this stupid hijacker for as long as I have (two weeks), you, too, will feel hopeless and desperate - you'll see.
At the moment, the "fixes" and "solutions" are ineffective. Until they find one, I suggest you use a different browser (like Netscape) and put searchx.cc out of your mind.
0
I fix computers for a living...been fixing them for years. This searchx.cc bho..spyware..virus..whatever it is...keeps coming back. I'm about to format myself. I know quite a bit about virus' etc...I want to kill these people. First time in a long long time I could not get rid of something like this.
z
0
I have the same "Search For..." About:Blank Homepage! The Searchx.cc page is there and is staying. Still,.. I have a cure for it. A Manual cure.
Here it is: In the registry I delete the same 4 keys in the Local Machine and Current User by a "Reg" file... and I reinstall the homepage to www.google.be: Here is the reg text I have put on my DeskTop: (You can copy it into another reg file, put it on your DeskTop and execute it always that Search Page is on.)Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"=-
"HOMEOldSP"=-
"Search Bar"=-
"Search Page"=-[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search]
"SearchAssistant"=-[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.be"[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main]
"Start Page"=-
"HOMEOldSP"=-
"Search Bar"=-
"Search Page"=-[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search]
"SearchAssistant"=-[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.be"(You can check these keys by yourself, and search alos by google, how to delete reg keys by putting a "-" after the key)
Then.. in system32, there is a dll file of 36Kb. It has all sorts of names like:
jfldfa.dll or ijdbga.dll,...
1 Constant: it is 36Kb!!! and of today or yesterday... very recent!!! Modify the name of all dll's that have that size of 36Kb
These dll's you can not delete any way, but you can rename them into a dll_old file, so that there are no more active. On an other boot you can kill them.This is a manual killing of the searchx.cc. The real cure I haven't found yet!
0
Oke, apparently, the cure to this anoying Search For page lays into the AntiBiotic "CWShredder 1.56.3" Spyware Tool
Download it on MajorGeeks:
http://www.majorgeeks.com/download4086.html
I have download it, ran it and it has fixed my registry.
The result is fantastic: My Homepage settings are again free ans the blank page... has become a blank page!
0
... It seems like the Shredder does not work permently. What it does, is the same as what I have posted in my first item here above: deleting the reg keys, and leaving the Homepage to Blank.(You can see that if you ask for a "Scan Only") Unfortunatly the executable to generate those Reg keys (and to highjack your IE) are still Alive and Kicking on the next startup. So the problem remains. To avoid this, I have copied the Reg file of 2 items above into the startup items. Hopefully that works ;|
0
I was having the same searchx.cc problem. I ran HiJack This to reset the registry. Then I went to http://housecall.trendmicro.com and ran their online scan. It found "sysapp.exe" in c:\winnt\system\ and tagged it as a trojan. (This file has gone unnoticed by my software and I don't see it mentioned above.) It also found a whole list of trojans in a java folder called "javapi". If you use SunJava you might want to do a search for that folder and move it to a different location on your computer. (I have a specific folder where I store captured and/or disabled trojans.)
So far so good. But then searchx.cc was only an intermittent problem for me. It wouldn't consistantly change my start page on restart or cold boot or multiple starts of explorer. I still haven't been able to figure out what triggered it to change my homepage, etc.
Hope this helps.
0  |
 LSA Shell (Export Version...
|
AVG Free Version
|
This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |
