Spyware

Prueba esto:
1) Ctrl+Alt+Del y finaliza (si te aparece) "srng.exe"
2) Inicio>Ejecutar y teclea sucesivamente y sin comillas estas líneas. Después de cada una, pulsa Enter:
"regsvr32 /u iehelper.dll"
"regsvr32 /u searchhook.dll"
3) Localiza esto archivos y elimínalos:
"arial.vbs"
"iehelper.dll"
"searchhook.dll"
"srng.exe"
"tahoma.vbs"


"Yolanda" escribió en el mensaje news:
> Hola,
>
> Siento ser tan pesada pero he ido siguiendo los pasos que me habeis indicado
> y aún así sigo teniendo problemas. Podéis echarme una mano? Gracias.
>
> "" wrote:
>
>> Hola!
>>
>> About Browser Hijacker: Browser hijackers are malicious
>> programs that change a user's web browser settings,
>> usually altering designated default start and search
>> pages. In addition a browser hijacker can modify neary
>> every aspect of a web browser including adding bookmarks,
>> and redirecting search traffic to alternative sites
>> It says the location is my homepage.
>>
>> Aqui tienes un sitio de donde bajas un programa para
>> eliminarlo (si quieres):
>>
>> http://www.free-web-browsers.com/support/remove-
>> search.shtml
>>
>> o puedes bajar el hijackthis
>>
>> Puedes leer esto tambien, creo que esto te puede servir
>> de ayuda, ya me paso a mi y esto te ayudara:
>>
>> Lavasoft Knowledge Base Article 04051801
>>
>> about:blank presented by Ad-aware
>> -
>>
>> SYMPTOM
>>
>> During an Ad-aware scan, about:blank is presented in the
>> results list, and is shown in the logfile. An example
>> entry from the logfile is shown:
>>
>>
>>
>> Possible browser hijack attempt :
>> Software\Microsoft\Internet Explorer\MainStart
>> Pageabout:blank
>>
>> Possible Browser Hijack attempt Object recognized!
>> Type : RegData
>> Data : "about:blank"
>> Rootkey : HKEY_CURRENT_USER
>> Object : Software\Microsoft\Internet Explorer\Main
>> Value : Start Page
>> Data : "about:blank"
>>
>>
>>
>> Selecting the about:blank listings in the results list
>> causes the homepage and search pages to change from
>> about:blank to the default settings of the Microsoft
>> Internet Explorer web browser, which are currently to The
>> Microsoft Network (MSN) main page.
>>
>>
>> CAUSE
>>
>> Several variants of CoolWebSearch are using about:blank
>> to hijack users' broswers to their sites. Therefore,
>> about:blank is now presented in the results list for
>> review. Its listing is "Possible browser hijack attempt"
>> in reflection that the listing of this item in the
>> results list may be or may not be entries made by a
>> browser hijacker.
>>
>>
>> RESOLUTION
>>
>> Users that knowingly have about:blank set as their
>> homepage, and have no issues with a homepage hijack, can
>> prevent this item from being presented on future scans by
>> checking the box next to listings indicating about:blank,
>> then right-clicking one of the checked items, and then
>> choosing "Add selection to ignorelist."
>>
>> Users that have a CoolWebSearch variant present on their
>> system that wish to remove it completely can select the
>> CoolWebSearch items, along with the about:blank listings,
>> to fully remove the variant, and its changes, from their
>> systems.
>>
>>
>> ADDITIONAL INFORMATION
>>
>> This article is also located in our Knowledge Base at
>> http://www.lavahelp.net/articles/v6...1801.html.
>>
>> en este en este sitio de abajo tienes un programa que te
>> deja la pagina de inicio siempre la misma, eso evita que
>> programas intrusos se metan en tu PC y cambien la pagina
>> de inicio de tu navegador:
>>
>> http://www.pjwalczak.com/spguard/
>>
>>
>> En la configuracion del Lavasoft adware desmarca la
>> opcion que dice: Search for negligible risks entries
>> (esto lo encuentras en la parte de abajo en la parte de
>> Scan Now), esto evita que detecte esos elementos que
>> tienes en el temporal y que no son nada maligno.
>>
>> Espero que esto resuelva tu problema, sino entra al foro
>> de lavasoft y fijate si alli encuentras algo,
>>
>> Un cordial saludo, Maria Ines
>>
>> >Hola,
>> >
>> >Hace dias que el Microsoft antispyware me detecta que
>> tengo un Possible
>> >Browser Hijack.
>> >Type: Browser Hijacker
>> >Threat Level: High
>> >Description: Possible Browser Hijack redirects Internet
>> Explorer.
>> >Cuando le doy a remove para que lo elimine me confirma
>> que lo ha eliminado
>> >pero cuando vuelvo a pasarle el Microsoft antispayware
>> me lo vuelve a
>> >detectar.
>> >
>> >Por otra parte cuando le paso el lavasoft me detecta 5
>> critical objects que
>> >siempre son los mismos:
>> >* 1 lop = malware
>> >* 4 tracking cookie = data miner
>> >
>> >Cuando le doy a eliminar parece ser que me los elimina
>> pero si le vuelvo a
>> >pasar el lavasoft me los vuelve a detectar.
>> >
>> >¿Qué puedo hacer?
>> >
>> >Gracias
>> >
>> >.
>> >
>>

Hola,

He probado de hacer lo que me has indicado pero no tengo eso archivos en mi
PC por lo que sigo teniendo los mismos problemas. ¿Qué puedo hacer?

Gracias de antemano.

Yolanda

"José Gallardo" escribió:

Prueba esto:
1) Ctrl+Alt+Del y finaliza (si te aparece) "srng.exe"
2) Inicio>Ejecutar y teclea sucesivamente y sin comillas estas líneas. Después de cada una, pulsa Enter:
"regsvr32 /u iehelper.dll"
"regsvr32 /u searchhook.dll"
3) Localiza esto archivos y elimínalos:
"arial.vbs"
"iehelper.dll"
"searchhook.dll"
"srng.exe"
"tahoma.vbs"


"Yolanda" escribió en el mensaje news:
> Hola,
>
> Siento ser tan pesada pero he ido siguiendo los pasos que me habeis indicado
> y aún así sigo teniendo problemas. Podéis echarme una mano? Gracias.
>
> "" wrote:
>
>> Hola!
>>
>> About Browser Hijacker: Browser hijackers are malicious
>> programs that change a user's web browser settings,
>> usually altering designated default start and search
>> pages. In addition a browser hijacker can modify neary
>> every aspect of a web browser including adding bookmarks,
>> and redirecting search traffic to alternative sites
>> It says the location is my homepage.
>>
>> Aqui tienes un sitio de donde bajas un programa para
>> eliminarlo (si quieres):
>>
>> http://www.free-web-browsers.com/support/remove-
>> search.shtml
>>
>> o puedes bajar el hijackthis
>>
>> Puedes leer esto tambien, creo que esto te puede servir
>> de ayuda, ya me paso a mi y esto te ayudara:
>>
>> Lavasoft Knowledge Base Article 04051801
>>
>> about:blank presented by Ad-aware
>> -
>>
>> SYMPTOM
>>
>> During an Ad-aware scan, about:blank is presented in the
>> results list, and is shown in the logfile. An example
>> entry from the logfile is shown:
>>
>>
>>
>> Possible browser hijack attempt :
>> Software\Microsoft\Internet Explorer\MainStart
>> Pageabout:blank
>>
>> Possible Browser Hijack attempt Object recognized!
>> Type : RegData
>> Data : "about:blank"
>> Rootkey : HKEY_CURRENT_USER
>> Object : Software\Microsoft\Internet Explorer\Main
>> Value : Start Page
>> Data : "about:blank"
>>
>>
>>
>> Selecting the about:blank listings in the results list
>> causes the homepage and search pages to change from
>> about:blank to the default settings of the Microsoft
>> Internet Explorer web browser, which are currently to The
>> Microsoft Network (MSN) main page.
>>
>>
>> CAUSE
>>
>> Several variants of CoolWebSearch are using about:blank
>> to hijack users' broswers to their sites. Therefore,
>> about:blank is now presented in the results list for
>> review. Its listing is "Possible browser hijack attempt"
>> in reflection that the listing of this item in the
>> results list may be or may not be entries made by a
>> browser hijacker.
>>
>>
>> RESOLUTION
>>
>> Users that knowingly have about:blank set as their
>> homepage, and have no issues with a homepage hijack, can
>> prevent this item from being presented on future scans by
>> checking the box next to listings indicating about:blank,
>> then right-clicking one of the checked items, and then
>> choosing "Add selection to ignorelist."
>>
>> Users that have a CoolWebSearch variant present on their
>> system that wish to remove it completely can select the
>> CoolWebSearch items, along with the about:blank listings,
>> to fully remove the variant, and its changes, from their
>> systems.
>>
>>
>> ADDITIONAL INFORMATION
>>
>> This article is also located in our Knowledge Base at
>> http://www.lavahelp.net/articles/v6...1801.html.
>>
>> en este en este sitio de abajo tienes un programa que te
>> deja la pagina de inicio siempre la misma, eso evita que
>> programas intrusos se metan en tu PC y cambien la pagina
>> de inicio de tu navegador:
>>
>> http://www.pjwalczak.com/spguard/
>>
>>
>> En la configuracion del Lavasoft adware desmarca la
>> opcion que dice: Search for negligible risks entries
>> (esto lo encuentras en la parte de abajo en la parte de
>> Scan Now), esto evita que detecte esos elementos que
>> tienes en el temporal y que no son nada maligno.
>>
>> Espero que esto resuelva tu problema, sino entra al foro
>> de lavasoft y fijate si alli encuentras algo,
>>
>> Un cordial saludo, Maria Ines
>>
>> >Hola,
>> >
>> >Hace dias que el Microsoft antispyware me detecta que
>> tengo un Possible
>> >Browser Hijack.
>> >Type: Browser Hijacker
>> >Threat Level: High
>> >Description: Possible Browser Hijack redirects Internet
>> Explorer.
>> >Cuando le doy a remove para que lo elimine me confirma
>> que lo ha eliminado
>> >pero cuando vuelvo a pasarle el Microsoft antispayware
>> me lo vuelve a
>> >detectar.
>> >
>> >Por otra parte cuando le paso el lavasoft me detecta 5
>> critical objects que
>> >siempre son los mismos:
>> >* 1 lop = malware
>> >* 4 tracking cookie = data miner
>> >
>> >Cuando le doy a eliminar parece ser que me los elimina
>> pero si le vuelvo a
>> >pasar el lavasoft me los vuelve a detectar.
>> >
>> >¿Qué puedo hacer?
>> >
>> >Gracias
>> >
>> >.
>> >
>>