I got an email from a friend. It's an e-card. I didn't even open that card, but from that point on, my IE home page was changed to websearch.com. I changed the home page manually back to what I want and then I scaned with ad-aware, two new objects were found in registry. I deleted with ad-aware. Then scan my registry again, it's gone. But when I re-open my IE, surf for a few pages, use ad-aware to scan, the two objects that ad-aware has deleted comes back again.
I tried many times,it always come back. Here is the piece of log file from ad-aware:
====================================================
Started deep registry scan
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Possible browser hijack attempt : SoftwareMicrosoftInternet ExplorerMainSearch Barwww.websearch.com
Possible Browser Hijack attempt Object recognized!
Type : RegData
Data : "http://www.websearch.com/ie.aspx?tb_id=40017"
Rootkey : HKEY_CURRENT_USER
Object : SoftwareMicrosoftInternet ExplorerMain
Value : Search Bar
Data : "http://www.websearch.com/ie.aspx?tb_id=40017"
Possible browser hijack attempt : SoftwareMicrosoftInternet ExplorerSearchSearchAssistantwww.websearch.com
Possible Browser Hijack attempt Object recognized!
Type : RegData
Data : "http://www.websearch.com/ie.aspx?tb_id=40017"
Rootkey : HKEY_LOCAL_MACHINE
Object : SoftwareMicrosoftInternet ExplorerSearch
Value : SearchAssistant
Data : "http://www.websearch.com/ie.aspx?tb_id=40017"
================================================
So obviously ad-aware cannot remove the root of this problem. Anybody any suggestions ?? Thanks ahead.
--文学城www.wenxuecity.com--