Browser (IE7) hijacked

I have tried desperately, but in vain to remove the starting web page when I
connect to IE. The usual method via INTERNET OPTIONS just doesn't work. The
errant page is http://search.bearflix.com/ and it simply won't go away
although I removed the source program some time ago. There must be some
rascal program that keeps resetting this address. I have searched several
times for it, but it seems to be well hidden. I know others have this same
problem so there must be a solution for it.
Thanks for any suggestions
--
CinciDave

Crossposted to the microsoft.public.security.homeusers

--
Peter

Please Reply to Newsgroup for the benefit of others
Requests for assistance by email can not and will not be acknowledged.

"CinciDave" wrote in message
...
I have tried desperately, but in vain to remove the starting web page when I
connect to IE. The usual method via INTERNET OPTIONS just doesn't work. The
errant page is http://search.bearflix.com/ and it simply won't go away
although I removed the source program some time ago. There must be some
rascal program that keeps resetting this address. I have searched several
times for it, but it seems to be well hidden. I know others have this same
problem so there must be a solution for it.
Thanks for any suggestions
--
CinciDave

Crossposted to the microsoft.public.security.homeusers

--
Peter

Please Reply to Newsgroup for the benefit of others
Requests for assistance by email can not and will not be acknowledged.

"CinciDave" wrote in message
...
I have tried desperately, but in vain to remove the starting web page when I
connect to IE. The usual method via INTERNET OPTIONS just doesn't work. The
errant page is http://search.bearflix.com/ and it simply won't go away
although I removed the source program some time ago. There must be some
rascal program that keeps resetting this address. I have searched several
times for it, but it seems to be well hidden. I know others have this same
problem so there must be a solution for it.
Thanks for any suggestions
--
CinciDave

Unexplained computer behavior may be caused by deceptive software
http://support.microsoft.com/kb/827315

Run a /thorough/ check for hijackware, including posting the requested logs
in an appropriate forum.

Checking for/Help with Hijackware
http://aumha.net/viewtopic.php?f=30&t=4075
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://www.elephantboycomputers.com/...moving_Malware

**Post your logs to
http://spywarehammer.com/simplemachi...php?board=10.0,
http://forums.spybot.info/forumdisplay.php?f=22,
http://aumha.net/viewforum.php?f=30, or another appropriate forum for review
by an expert in such matters, not here.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/

"CinciDave" wrote in message
...
I have tried desperately, but in vain to remove the starting web page
when
I connect to IE. The usual method via INTERNET OPTIONS just doesn't work.
The errant page is http://search.bearflix.com/ and it simply won't go
away
although I removed the source program some time ago. There must be some
rascal program that keeps resetting this address. I have searched several
times for it, but it seems to be well hidden. I know others have this
same
problem so there must be a solution for it.
Thanks for any suggestions
--
CinciDave

Unexplained computer behavior may be caused by deceptive software
http://support.microsoft.com/kb/827315

Run a /thorough/ check for hijackware, including posting the requested logs
in an appropriate forum.

Checking for/Help with Hijackware
http://aumha.net/viewtopic.php?f=30&t=4075
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://www.elephantboycomputers.com/...moving_Malware

**Post your logs to
http://spywarehammer.com/simplemachi...php?board=10.0,
http://forums.spybot.info/forumdisplay.php?f=22,
http://aumha.net/viewforum.php?f=30, or another appropriate forum for review
by an expert in such matters, not here.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/

"CinciDave" wrote in message
...
I have tried desperately, but in vain to remove the starting web page
when
I connect to IE. The usual method via INTERNET OPTIONS just doesn't work.
The errant page is http://search.bearflix.com/ and it simply won't go
away
although I removed the source program some time ago. There must be some
rascal program that keeps resetting this address. I have searched several
times for it, but it seems to be well hidden. I know others have this
same
problem so there must be a solution for it.
Thanks for any suggestions
--
CinciDave

The tool that he STOLE from MS and which MS then withdrew from the public
download page 3 months ago (not that it'd fix the HIJACKWARE infection
afflicting the OP)!

The Real Truth MVP wrote:
Try my Homepage/Fix Reset tool. Download it here
XXXX://pcbuttsHO1E.com/downloads/tools/tools.htm
SNIP

The tool that he STOLE from MS and which MS then withdrew from the public
download page 3 months ago (not that it'd fix the HIJACKWARE infection
afflicting the OP)!

The Real Truth MVP wrote:
Try my Homepage/Fix Reset tool. Download it here
XXXX://pcbuttsHO1E.com/downloads/tools/tools.htm
SNIP

From: "PA Bear [MS MVP]"

| The tool that he STOLE from MS and which MS then withdrew from the public
| download page 3 months ago (not that it'd fix the HIJACKWARE infection
| afflicting the OP)!

No, that's not the one.

This is a BAT file he created by extracting excerpts from Stuart's RogueFix


--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

From: "PA Bear [MS MVP]"

| The tool that he STOLE from MS and which MS then withdrew from the public
| download page 3 months ago (not that it'd fix the HIJACKWARE infection
| afflicting the OP)!

No, that's not the one.

This is a BAT file he created by extracting excerpts from Stuart's RogueFix


--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

Take your meds, Chris.

The Real Truth MVP wrote:
Put the bottle down you drunk.



"PA Bear [MS MVP]" wrote in message
...
The tool that he STOLE from MS and which MS then withdrew from the public
download page 3 months ago (not that it'd fix the HIJACKWARE infection
afflicting the OP)!

The Real Truth MVP wrote:
Try my Homepage/Fix Reset tool. Download it here
XXXX://pcbuttsHO1E.com/downloads/tools/tools.htm
SNIP

Take your meds, Chris.

The Real Truth MVP wrote:
Put the bottle down you drunk.



"PA Bear [MS MVP]" wrote in message
...
The tool that he STOLE from MS and which MS then withdrew from the public
download page 3 months ago (not that it'd fix the HIJACKWARE infection
afflicting the OP)!

The Real Truth MVP wrote:
Try my Homepage/Fix Reset tool. Download it here
XXXX://pcbuttsHO1E.com/downloads/tools/tools.htm
SNIP

"PA Bear [MS MVP]" wrote in message
...
Take your meds, Chris.


pcbutts1
a.. Gender: Female
b.. Industry: Government
c.. Location: United States
About Me
I am a current Microsoft MVP I am part of the antivirus and spyware
community. I have been for 6 years. I am asked to help with scripts by
many of the regulars in the community. I write code for them and tell
them to do what they want with it. I don't have a problem with that, I
do this for free. My cetifications MCSE Microsoft Certified Solutions
Developer (MCSD) MS certified Trainer (MCT) A+ Net+ Software Programmer
Technical Writer

**********************************************

I believe NOTHING on the Internet if the truth be known
..................

BUT

pcbutts1 has *never* lied to me AFAICT

PA Bear HAS lied about me! 'nuf said?

--

Dave