Replies

Maybe someone can help me....

I have the following URL on my IE homepage:
res://apmza.dll/index.html#27063

I have run:
Search and destroy
AdWare
Spy Sweeper
and Norton

I have also changed my homepage URL in the tools/options section

And it still keeps taking me back to this home page, can anyone help?

bump

I have the following URL on my IE homepage: res://apmza.dll/index.html#27063

I have run:

Search and destroy

AdWare Spy Sweeper Hijackthis CWSshredder and Norton I have also changed my homepage URL in the tools/options section and everything will get cleaned up, BUT as soon as I restart our computer I get this from Adware....

so it keeps coming back! and then when I open IE .....the URL is changed once again to the corrupted homepage. We are at our witts end, can someone please help??

Thanks alot!

davidW

You have an instance of CoolWebSearch spyware/browser hijacker on your PC. This must be removed before any other cleaning can be done. It can be a wee nasty.

Go to these two links and download these pieces of free software:

CWShredder

HiJackThis!

Run CWShredder firsrt. It will detect and clean the nasty that is breeding the hijacker on your system. Be warned that it may come back after a reboot or Windows restart or even within a minute of just waiting. It depends on what variant you have. You should go to www.merijn.org and read up on it.

Then run the HiJackThis program. It will genereate a listing of items that are set up to be associated with your Browser...good and bad. Copy and paste the results here on this thread and I will look at it and tell you what should be deleted. Warning: it will list good items that are necessary as well as the bad ones so don't delete anything unless you are sure of what you are looking at.

Hopefully that will take care of your problem if it isn't a particularly virulent variant of CoolWebSearch like I had.

Sorry. I just read your second post. I see you've already tried what I suggested.

The thing you have to get rid of is what AdAware keeps finding:
C:\Windows\netlk32.exe

Do a search for this file and see if Windows can see it. If not, it is a 'hidden' file and you can try to change its attributes so it is not hidden or you can start up your system with a system disk (emergency boot disk) which will put you in DOS mode. If you are NOT running Win XP, then you can run the following commands exactly and it will remove the file:

C:
cd windows
del netlk32.exe

Remove the 3.5" floppy and then reboot. It should now be gone. Run AdAware again to be sure.

If it isn't then you have a registry key or keys that are recreating it at boot up. You will then need to search your registry for "netlk32.exe" and delete each instance and then go to DOS mode and start over. If you are not familiar with using "regedit" then don't do it. Find someone who is. Or...maybe someone here can assist.