can't get rid of ads

gohand · 05-22-2004, 10:49 PM

there are ads hard to ignor even i go to google it pops up, but in other computer or a new formated, new installed computer don't, so there must be some file that stored in the system that when you surf it recognize you like cookies but no matter i clean all the history or cookies that i could in my pc i still can't get rid of them, so where can they be? and there are some thing called your-search.cc that stocks in my home page address set from the internet explorer's property, no matter how i change it, once i restart it comes back again, even i use hijackthis to dellete any realate item that i can think of, but the most sad thing is when i click search result in google the page becomes "your-search.cc"'s page, i can click on the result when i click back a few times. and the ads from Xlime.offeroptimizer.com click here pops- up ever where i go, is anyone has a simular experience? any idea?

Harold III · 05-22-2004, 11:13 PM

if there's anything doubtable, go to your regedit.exe and search for its name. and delete their register keys.

In you case, that search.cc is probably inside your IE as a plug-in.

gohand · 05-23-2004, 12:55 AM

how can i delete it is it is inside the iE as a plug-in? and how can i search inside regedit by key word? because it is too large location inside and i am not familiar with it.

Harold III · 05-23-2004, 11:37 PM

Quote:

Originally posted by MicroBell
Most of those programs are adware/spyware. I would suggest useing a few removal programs like Adware 6.0, Spybot Search & Destroy and hijack this (as you already have). Once your clean..install a firewall and this will prevent some of this crap.

if it's an old computer, in order to learn something, just find out the keys of the addware in your register table and delete them. I've done it just a week ago, my IE (and windows explorer) had an extra tool bar, to get rid of it, I searched for the words appeared on the tool bar in the register, and deleted the keys. Then it's gone. Probably the plug-in is still on my compter somewhere, but I have just cut of the connection between the addware and my browser by deleting the register keys.

milen · 06-20-2004, 01:27 PM

Me too I had this problem.,
From regedit I delete any key with same name
Restart and regedit is same as I never touch it.
there is something overwriting windows changes.
then I change some dll files which IE use to show pages like
"about:blank"
I got the dll from other PC not infected.
I saw the new dll file 250 KB smaller the the infected one.
Same Restart and here we go same adds showing.
Did repair on the OS
Insend of 'Welcome to Windows" I saw "Welcome to SAMRT-SEARCH"
--
This prgrams are using classes in reg edit you can see about a milion of them but which one is I don't recommend guest buy deleting.
Unless you are Bill and know what are you doing.
---
There is a dll file called bridge.dll
This for sure know if you find it delete it.
IN SAFE MODE
---
So I don't know what I didn't try yet.
But no metter What I did after restart
same add shownig like own my PC
---
I give up reinstall windwos
Ater 1 mount fighting
---
Other option is go "Linux do it better"

Djadragon · 06-24-2004, 11:12 AM

if u can't fix it....simple use avant browser..

gohand · 06-25-2004, 06:12 PM

i've get rid of them finally, i just installed the software of adware from http://www.bulletproofsoft.com/ now they all gone! and they had something called spy-watch that keeps you got them again.

05-22-2004, 10:49 PM	#1 (permalink)
gohand True Techie Join Date: Mar 2004 Posts: 151	can't get rid of ads there are ads hard to ignor even i go to google it pops up, but in other computer or a new formated, new installed computer don't, so there must be some file that stored in the system that when you surf it recognize you like cookies but no matter i clean all the history or cookies that i could in my pc i still can't get rid of them, so where can they be? and there are some thing called your-search.cc that stocks in my home page address set from the internet explorer's property, no matter how i change it, once i restart it comes back again, even i use hijackthis to dellete any realate item that i can think of, but the most sad thing is when i click search result in google the page becomes "your-search.cc"'s page, i can click on the result when i click back a few times. and the ads from Xlime.offeroptimizer.com click here pops- up ever where i go, is anyone has a simular experience? any idea?

05-22-2004, 11:13 PM	#2 (permalink)
Harold III Super Techie Join Date: Dec 2003 Posts: 333	if there's anything doubtable, go to your regedit.exe and search for its name. and delete their register keys. In you case, that search.cc is probably inside your IE as a plug-in. __________________ I do this for Aiur. NOT YOU.

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

05-23-2004, 12:55 AM	#3 (permalink)
gohand True Techie Join Date: Mar 2004 Posts: 151	how can i delete it is it is inside the iE as a plug-in? and how can i search inside regedit by key word? because it is too large location inside and i am not familiar with it.

06-20-2004, 01:27 PM	#5 (permalink)
milen Super Techie Join Date: Feb 2004 Posts: 289	Me too I had this problem., From regedit I delete any key with same name Restart and regedit is same as I never touch it. there is something overwriting windows changes. then I change some dll files which IE use to show pages like "about:blank" I got the dll from other PC not infected. I saw the new dll file 250 KB smaller the the infected one. Same Restart and here we go same adds showing. Did repair on the OS Insend of 'Welcome to Windows" I saw "Welcome to SAMRT-SEARCH" -- This prgrams are using classes in reg edit you can see about a milion of them but which one is I don't recommend guest buy deleting. Unless you are Bill and know what are you doing. --- There is a dll file called bridge.dll This for sure know if you find it delete it. IN SAFE MODE --- So I don't know what I didn't try yet. But no metter What I did after restart same add shownig like own my PC --- I give up reinstall windwos Ater 1 mount fighting --- Other option is go "Linux do it better"

06-24-2004, 11:12 AM	#6 (permalink)
Djadragon Newb Techie Join Date: Jun 2004 Posts: 13	if u can't fix it....simple use avant browser..

06-25-2004, 06:12 PM	#7 (permalink)
gohand True Techie Join Date: Mar 2004 Posts: 151	i've get rid of them finally, i just installed the software of adware from http://www.bulletproofsoft.com/ now they all gone! and they had something called spy-watch that keeps you got them again.