desde haceunos dias me sale una pagina de inicio a pesar de poner l
Blank que no hay forma de quitarla ni en el regedir ni con antitroyanos ni antiespias ni el norton yo ya estoy desesperado y lo peor es que sale al abrir cualquier explorador como el creador de web Webmaker el caso es que pone
about:blank pero sale una de busqueda
http://searchx.cc/cprv.php?ww=Black%20Jack&pl&pin=2
estoy desesperado y no puedo formatear.....
Moderador: Moderadores
-
namerbop
eliminar Searchx.cc
busca en el registro con el Regedit.exe estas entradas
res://%43%3a%5c%57%49%4e%44%4f%57%53%5c%4d%52%48%4f%50%2e%44%4c%4c
y eliminalo
a mi en win98 me salio en la clave .../software/Microsot Internet Explorer/Main
y en
...software/Microsot Internet Explorer/search
res://%43%3a%5c%57%49%4e%44%4f%57%53%5c%4d%52%48%4f%50%2e%44%4c%4c
y eliminalo
a mi en win98 me salio en la clave .../software/Microsot Internet Explorer/Main
y en
...software/Microsot Internet Explorer/search
-
Invitado
puedes descargar el CWShredder como dicen (no me acuerdo en que pagina esta, usa un buscador)
te elimina varios troyanos entre ellos el WebCoolSearh
pero a mi no me quita el Searchx de http://searchx.cc que instala tambien una pagina de busqueda en el explorer
tambien
mira a ver si tienes el archivo mrhot.dll en el disco y eliminalo
tambien mira en
http://forums.spywareinfo.com/
NO HAGAS format c: o borraras todo el disco duro
te elimina varios troyanos entre ellos el WebCoolSearh
pero a mi no me quita el Searchx de http://searchx.cc que instala tambien una pagina de busqueda en el explorer
tambien
mira a ver si tienes el archivo mrhot.dll en el disco y eliminalo
tambien mira en
http://forums.spywareinfo.com/
NO HAGAS format c: o borraras todo el disco duro
-
namerbop
searchx.cc
Esto a mi me funciono
In regedit, go to 1.HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsNT\CurrentVersion\Windows\AppInit_DLLs
2.Now rename this folder to Windows2
3.Now delete the AppIint_DLLs key under the Windows2 folder. (If you don't rename the folder to 2, the DLL reappears on F5, crazy stuff)
4.Hit F5 to make sure the DLL doesn't come back.
5.Now rename the Windows2 folder back to Windows
-------------------------------------------------
Esto no me funciono, pero prueba tu
CWS.Searchx
Variant 38: CWS.Searchx - About:blank seems popular lately
Approx date first sighted: April 6, 2004
Log reference: http://forums.techguy.org/t217853.html
Symptoms: IE pages changed to about:blank (which is changed to a search portal linking to searchx.cc) and a search page inside a DLL on the system, hijack returning on system reboot
Cleverness: 8/10
Manual removal difficulty: Involves lots of Registry editing
Identifying lines in HijackThis log:
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\System32\gfmnaaa.dll/sp.html (obfuscated)
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\System32\gfmnaaa.dll/sp.html (obfuscated)
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res:// C:\WINDOWS\System32\gfmnaaa.dll/sp.html (obfuscated)
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
O2 - BHO: (no name) - {48918FB4-1FD5-4DF3-87F0- 12C36350039D} - C:\WINDOWS\System32\gfmnaaa.dll
This variant is not very hard to spot, but slightly harder to troubleshoot since its symptoms look a lot like those of CWS.Xmlmimefilter. It drops a randomly named DLL in the system folder and sets the IE homepage/search pages to it. A BHO is also added pointing to the same DLL. The about:blank page is modified by creating two new protocol filters for text/html and text/plain which allows the DLL to control most of the content flowing through the IE browser as web pages. The trojan keeps a record of all actions in a log file at c:\filter.log. Removing the two filters in the Registry, deleting the BHO, the DLL and the logfile and restoring the IE pages fixes this hijack.
Note: The CWS.Realyellowpage has been sighted together with this variant sometimes, causing CWShredder to not be able to remove this one. Refer to the manual removal method for that variant to delete the offending dll, then run CWShredder again to remove CWS.Searchx.
In regedit, go to 1.HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsNT\CurrentVersion\Windows\AppInit_DLLs
2.Now rename this folder to Windows2
3.Now delete the AppIint_DLLs key under the Windows2 folder. (If you don't rename the folder to 2, the DLL reappears on F5, crazy stuff)
4.Hit F5 to make sure the DLL doesn't come back.
5.Now rename the Windows2 folder back to Windows
-------------------------------------------------
Esto no me funciono, pero prueba tu
CWS.Searchx
Variant 38: CWS.Searchx - About:blank seems popular lately
Approx date first sighted: April 6, 2004
Log reference: http://forums.techguy.org/t217853.html
Symptoms: IE pages changed to about:blank (which is changed to a search portal linking to searchx.cc) and a search page inside a DLL on the system, hijack returning on system reboot
Cleverness: 8/10
Manual removal difficulty: Involves lots of Registry editing
Identifying lines in HijackThis log:
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\System32\gfmnaaa.dll/sp.html (obfuscated)
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\System32\gfmnaaa.dll/sp.html (obfuscated)
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res:// C:\WINDOWS\System32\gfmnaaa.dll/sp.html (obfuscated)
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
O2 - BHO: (no name) - {48918FB4-1FD5-4DF3-87F0- 12C36350039D} - C:\WINDOWS\System32\gfmnaaa.dll
This variant is not very hard to spot, but slightly harder to troubleshoot since its symptoms look a lot like those of CWS.Xmlmimefilter. It drops a randomly named DLL in the system folder and sets the IE homepage/search pages to it. A BHO is also added pointing to the same DLL. The about:blank page is modified by creating two new protocol filters for text/html and text/plain which allows the DLL to control most of the content flowing through the IE browser as web pages. The trojan keeps a record of all actions in a log file at c:\filter.log. Removing the two filters in the Registry, deleting the BHO, the DLL and the logfile and restoring the IE pages fixes this hijack.
Note: The CWS.Realyellowpage has been sighted together with this variant sometimes, causing CWShredder to not be able to remove this one. Refer to the manual removal method for that variant to delete the offending dll, then run CWShredder again to remove CWS.Searchx.
-
FAM
Funciona
Para deshacerse del maldito searchx.cc como página de inicio el
CWShredder v1.57.0
funciona. Se lo puede bajar de:
http://www.gamersco.com/downloads.php?m ... le&file=71
Gracias "És clar que si"
¡¡ÍDOLO, MAESTRO!!
CWShredder v1.57.0
funciona. Se lo puede bajar de:
http://www.gamersco.com/downloads.php?m ... le&file=71
Gracias "És clar que si"
¡¡ÍDOLO, MAESTRO!!
-
Fonzi
El CWS.SEARCHX ES IMPOSIBLE DE QUITAR ??
Yo tengo el mismo problema con la página de inicio.
Va directamente a about:blank , ya que tengo el hijacker cws.searchx , y no lo puedo quitar.
Le he pasado el spy-sweeper , el adaware , el spy bot search & destroy , los cuales encuentran al virus , lo eliminan , pero al rato vueve a aparecer.
Alquien me puede ayudar a quitarlo de alguna manera ?
Desde ya gracias.
Va directamente a about:blank , ya que tengo el hijacker cws.searchx , y no lo puedo quitar.
Le he pasado el spy-sweeper , el adaware , el spy bot search & destroy , los cuales encuentran al virus , lo eliminan , pero al rato vueve a aparecer.
Alquien me puede ayudar a quitarlo de alguna manera ?
Desde ya gracias.