Help

[liquidmercurial.livejournal.com]

Hey, anyone found any spyware removal/detection tool that will remove the Search200 parasite/browser hijacker? Adaware, Spybot S&D, Hijack This, CWShredder, and No Adware have not been able to remove it from the system. I am at my wits end trying to find something. If anyone here has come across this piece of sh** parasite and was able to remove it, please share how you did so. Thanks!!

Comments

[klyf23.livejournal.com]

http://www.experts-exchange.com/Security/Q_21009908.html#solution

The site will try to sell you a subscription, but if you scroll down about halfway, the soloution shows up anyways....
---
You want to disable System Restore in XP and ME before trying anything. They can put the stuff right back. >_

[coyoteden.livejournal.com]

Believe it or not, when cleaning up a spyware-infested machine, I go into add/remove and use the uninstallers provided with the spyware before running AAW or SB S&D. Thing is, spyware makers have to provide uninstallers or they quickly get classified as virus writers. Not saying the uninstallers WORK all of the time, but they are usually there. If you use a spyware cleaner first you break the uninstallers and if they could have removed the spyware cleanly, they certainly won't now.

That said, if you're getting Search200 hijacking, remove WinTools if you find it in Add/remove programs. You may have to remove Web Search, Search Result, and Error Search Result first. After running the uninstallers and rebooting, scan with AAW or S&D to be sure. Also try HijackThis to manually clean up anything left over.

It could also be a particularly NASTY variant of CWS doing this. You'll know it when you run CWShredder and it takes out CWS.Bootconf and appears clean but if you run it after a reboot CWS.Bootconf is removed AGAIN, ad infinitum. If so, I detail how to remove it for good here (http://www.livejournal.com/community/techsupport/281266.html?thread=1312690#t1312690)