View Full Version : websearchnetwork *spyware*

09-06-2005, 01:29 PM
lately i've been getting my homepage changed from blank to websearchnetwork.com and legit websites being hijacked with ads, like this one had a porn ad instead of the win the mac mini ad! and winz even had a nude teen ads instead of something.....then i downloaded spybot search and destory since adaware wasnt picking it up...so downoaded it updated it ran it 4 times, to no luck, did a search on google, and nothing?..

is there anything i can do instead of reformatting or :badpc: it lol...

Am using winxp pro, nortons antivirus, adaware, spybot search and destory, all gets updated every day, and run every 2 days....and none of them pick this irritating hijacker...

Many thanx in advance :)

Speedy Gonzales
09-06-2005, 01:43 PM
See if this http://securityresponse.symantec.com/avcenter/FxWebsch.exe

From here http://securityresponse.symantec.com/avcenter/venc/data/adware.websearch.html detects and removes it.

09-06-2005, 03:36 PM
Thanks for that! but....theres nothing found? isnt that odd or something?
coz surely if it happens then the file should be somewhere? :(

09-06-2005, 03:48 PM
You could try running the tests in safe mode

Speedy Gonzales
09-06-2005, 04:05 PM
I think there's websearch as in adware and websearch as in a trojan.

It looks like the trojan changes names, on startup. Copy and paste a hijackthis log in here. And we'll see whats in it.

09-06-2005, 04:13 PM
Sounds like a nasty one

HuntBar/SToolbar also tries to hijack your homepage to WebSearch.com, and copies searches you make in known search engines to the search field in the toolbar as you type.

HuntBar/WinTools is the kitchen-sink release containing a BTIn BHO, an MSLink-style BHO targeted at the server as.adwave.com, and a multi-functional toolbar targeted at websearch.com, plus three executables running at startup including one hidden one and one running as a Windows service. These processes interact to stop each other from being killed, preventing removal of the software.