I got serious spyware trouble and I'll cut right to the chase.
I'm apparently infected with the WebSearch toolbar from Websearch.com and can't seem to "shake it"!
I got a desktop computer and a newer laptop computer and usually use mainly the desktop to go online and have done so very few times with the laptop. However, on BOTH computers, I found to have the WebSearch toolbar and now I practically can't get internet access to work due to this s..t!
What is worse is, that I have protected myself in the best possible way and I NEVER compromise on protection. I usually install nothing or won't go online before I have protection enabled on every possible problem that is out there today.
Both of my pc's run Windows 2000 , FAT 32.
My protection includes: AVG Antivirus 7.0; Zone Alarm Firewall (newest version); Spywareblaster, Pest Patrol and Spybot Search and Destroy with tea-timer enabled.
So, far I never had serious problems, untill 2-3 weeks ago when the first problems with the internet started. It seemed to be unstable in the beginning and then got worse and worse and at the moment it doesn't work 90% of the time at all and usually only briefly and very badly for the rest of the time which has been like that for the last 6-7 days. That goes for both computers though I didn't really use the laptop for internet access.
Despite all of the above mentioned protection and my ACTIVELY SCANNING Pest Patrol, I find that WebSearch has installed itself on BOTH of my computers. My firewall, AVG Antivirus etc. is ALWAYS updated and defined as well as enabled!
While I briefly had a connection to the internet I downloaded two trials of spyware scanners that claimed to be able to do the job on the "very resistant" WebSearch toolbar which were Webroot Spy Sweeper and Spyware Doctor. After install (updates were only partially possible due to the netproblem!) it seems that WebSearch only fights more against being removed properly by denying me even more often access to the internet and usually blocking it at all and even though Pest Patrol is set to scan at reboot and finds and gives the possibility to "delete" WebSearch toolbar it CONSTANTLY re-installs itself again and again, no matter how many times I seem to remove, delete and scan for it with all the scanners I got time after time when I reboot.
Usually WebSearch is found here by Pest Patrol:
HK_local_computer --> Software --> Microsoft --> Internet Explorer --> ActiveX Compatibility --> and then the key itself.
Besides that, it usually disables in Spybot Search and Destroy after reboot 1 item (which is probably the protection against it!) and besides that - not always but many times - 1 item of protection in Spywareblaster that then both can be enabled again but get on reboot once again disabled.
Now, after I have tried to scan with two scanners that claimed to be able to do the job but still seem like if they couldn't, I am still unable to get on the net which I desperately need in order to be able to work in my profession!
Furthermore, I tried to check with HijackThis but couldn't after an analysis on the net nor to MY best knowledge find anything that looked somehow suspicious. I'm not a specialist, but this is only my opinion so far.
The last thing that might be of interest is that I besides the message in Pest Patrol that I can "delete" and get confirmation of the same got yesterday a pop-up message on my desktop computer that "Pest Patrol might not be optimal installed for your needs on your system" or something like that and "ask your system administrator or someone with administrator rights for help on this topic". But I(!) am the system administrator on my computers and I HAVE all the rights, so this message seems like yet another mystical attempt to confuse me or it's just WebSearch that seems to have corrupted something in Pest Patrol. I don't remember the exact text but it is close to what I just mentioned above. This message just showed up on the desktop computer and hasn't shown on the laptop.
As a last resort I downloaded and installed "Adware.WebSearch remover" from Symantec's site but it just stated each time after a scan that it isn't able to find the hijacker on the system, which apparently isn't correct.
I have to add, that there ISN'T any toolbar showing up in Internet Explorer which i ONLY use for Windows 2000 updates. To go on the internet I ONLY use Opera and/or Firefox 1.0!
I'm really at the end of my knowledge and I can really only see WebSearch as the real problem to all this trouble but besides that I'd also like to know HOW on earth it could penetrate my protection that I so far thought was pretty secure as this is obviously not holding back all of the troubles out there and that of course worries me now a lot!
I also got to say, that I used Bearshare to download some files and hereafter moved them around between the two computers I gotta admit. So, maybe it has been "sleeping" in some of those files but what I don't understand is WHY I can't seem to "shake it"???
If there is anybody out there who has some good ideas I'd be incredibly happy to hear from you as soon as possible as it really is - I think - only about this one hijacker which though seems to be untouchable and invincible to me so far.
The only way out I know is a format of both computers which I at this point am not a big fan of as I got files I'd like to keep. And even though I should format one of the two computers and after that move some of the "secure" files back again from the other one after which I'd also format that one, I still have no idea if this crap gets with them back again onto the first formatted computer??!
Is it possible??? Can this hijacker re-install on a "clean" pc if I did it this way?
I'd be most greatful for ANY help on this problem!
I say thanks already now for your kind help!
Greetings
safecite