Can't get rid of spyware, need help please

M

Manifest

Joined
Jan 25, 2004
Messages
449
In internet explorer, the page tries to redirect itself to:

"www.couponage.com/Panels/Generic2/?keyword=checkad&panelid=1000&ag=186&cc=CA"

but seems to get blocked because the page displays "Action Canceled".
While this happens, the "folders" explorer bar pops up on the side as well :confused:

I tried searching through the older threads and have updated and scanned with Spybot, Adaware, Spysubtract, Cwshredder, and Spyware Blaster. I also scanned with Norton Antivirus and have Kerio Firewall. Nothing is getting rid of it...

When I tried using Spysubtract to get rid of the adware it detects, the program freezes in normal windows mode and in safe mode. In safe mode, IE still tries to redirect itself and there seems to be nothing abnormal running in task manager.

I'm all out of ideas...can someone help me?

Thanks!

Justin
 
Have you changed the homepage default in the "Tools/Internet Options" config. screen?

I recommend that you also download Firefox. a VASTLY better browser and not so subject to these sorts of attacks.
 
gajinoz: I checked my homepage and nothing seems wrong with it; it is set to blank. I would download Firefox except I'm not sure how it will react to my online homework and quizzes. Thanks for the suggestion though.

K.V. Colluci: Email sent. Thank you very much for your help. :)
 
Manifest said:
gajinoz: I checked my homepage and nothing seems wrong with it; it is set to blank. I would download Firefox except I'm not sure how it will react to my online homework and quizzes. Thanks for the suggestion though.

K.V. Colluci: Email sent. Thank you very much for your help. :)
Click to expand...
It's not going to cure your problem but you might want to set it to something like google or bladeforums or your favourite porn site or something. :)

You can still download Firefox and play with it. It doesn't stop you using IE if you need to, just gives you another option. The tabbed browsing is really a plus.
 
WOOOHOOOO! I think I fixed it!

It was a file in system32 called calsp.dll. It becomes embedded in Winsock LSP and none of the spyware programs can detect/delete it. Also, you cannot manually delete it. The only program that detected it was HijackThis and the lines read:

O10 - Unknown file in Winsock LSP: c:\windows\system32\calsp.dll

HijackThis cannot delete this file and you need to download a separate program that lets you fix the LSP.

http://www.cexx.org/lspfix.htm

LSP-Fix did not automatically fix it so I had to manually delete it within LSP-Fix.

Thanks for your help, K.V. Colluci.

I hate spyware/adware/malware :mad:
 
Manifest said:
I hate spyware/adware/malware :mad:
Click to expand...
Nice to see you beat it! :)

Now, get yourself a GOOD firewall and antivirus client and load up with some other spyware detector/killer tools.
 
gajinoz said:
Nice to see you beat it! :)

Now, get yourself a GOOD firewall and antivirus client and load up with some other spyware detector/killer tools.
Click to expand...

Yep, I'm glad it's fixed! I actually find my firewall very good. Kerio Personal Firewall. The only reason I got this malware is because I turned it off for a few hours :mad: I also regularly use Adaware and Spybot. :D
 
You must log in or register to reply here.
Back
Top