res://cooup.dll/index.html#37049

This is my current internet explorere homepage,
annoyingly, no spyware programmes recognise it.
Does anyone know how to get rid of it?
Thanks
Rachel

PS. Someone suggested using Netscape instead of internet
explorer, does Netscape really have fewer pop ups and
sypware downloads?

Re: remove res://cooup.dll/index.html#37049 by Lawrence

Lawrence
Tue Jul 13 15:29:50 CDT 2004

"Rachel" <anonymous@discussions.microsoft.com> wrote in message
news:2bc7e01c468bf$5d7dbc20$a401280a@phx.gbl...
> res://cooup.dll/index.html#37049
>
> This is my current internet explorere homepage,
> annoyingly, no spyware programmes recognise it.
> Does anyone know how to get rid of it?
> Thanks
> Rachel

Yes Netscape and Firefox rarely have the same issues that IE has.

For your CWS infection do the following:

Please follow these steps in order to clean your computer of Malware which
can include Viruses, Trojans, Worms, Spyware, Hijackers and Dialers.

Step 1:
Download Spybot and Adaware from the following locations and install them.
You should run both programs and clean up what it finds. This is to
gaurantee that you find the most malware you can installed on your computer.

Before running the scans on both programs, it is mandatory that you update
the programs. There are update options in each program when you run them.

Spybot
http://www.safer-networking.org/index.php?page=download

Ad-Aware
http://www.lavasoftusa.com/software/adaware/

If you would like to learn more about how to use these two programs with the
proper settings you can read the tutorials below:

AD-AWARE Tutorial
http://www.bleepingcomputer.com/forums/index.php?showtutorial=48

SPYBOT SEARCH AND DESTROY Tutorial
http://www.bleepingcomputer.com/forums/index.php?showtutorial=43

When you scan with both programs, fix everything that it finds.

When you are done with the scan and fixing the items. Please continue with
the next step.

Step 2:

It is important that you run Spybot and Adaware before you proceed with this
step. Fixing enties with Hijackthis may leave behind unwanted files on your
computer if the previous step was not done first.

Create a directory on your hardrive to save HijackThis.exe. A directory
like c:\hijackthis. If you do not do this, you will not be able to use the
backup/restore features.

Download HijackThis from:

http://www.spywareinfo.com/~merijn/files/hijackthis.zip

Save this file into the directory you made previously and then run the
program. Click on the Scan button and when it is finished click on the Save
Log button. A Notepad window will open with the contents of this log. Click
on Edit then click on Select all. Then click on Edit and then Click on
Copy.

Register an account at http://www.bleepingcomputer.com and post this created
log into the Hijackthis Logs forum at that site. To do this, once you are
registered, create a new post, right click in message area and select paste
to paste the log into the post.

An expert will reply to you after reading this post. DO NOT fix any entries
unless you are absolutely sure you know what you are doing as you may cause
more damage to the system

To see a tutorial on using HijackThis you can click on the link below.

http://www.bleepingcomputer.com/forums/index.php?showtutorial=42

--
Lawrence Abrams
http://www.bleepingcomputer.com
Source for Original Content, Tutorials, and Support for the beginning
computer user.



RE: remove res://cooup.dll/index.html#37049 by Jayan

Jayan
Wed Jul 14 07:25:02 CDT 2004

Rachel,

I dont mean to sound patronising, but, go to tools internet options and type in where you want your homepage to be, e.g www.google.com

If the page reverts pack to tht res:// etc etc then you have something manipulating it on your PC.

I agree with as much as I could be interested to red from Lawrence, no offence but you did go on a bit. Spy/adware removal programs are very good and important. I run mine once a week, but occasionaly stuff still gets through.

Try going to start, run, and type in msconfig go to the startup tab and you will see what is starting with your machine, you can untick any suspicious programs (google them first)

"Rachel" wrote:

> res://cooup.dll/index.html#37049
>
> This is my current internet explorere homepage,
> annoyingly, no spyware programmes recognise it.
> Does anyone know how to get rid of it?
> Thanks
> Rachel
>
> PS. Someone suggested using Netscape instead of internet
> explorer, does Netscape really have fewer pop ups and
> sypware downloads?
>

Re: remove res://cooup.dll/index.html#37049 by Lawrence

Lawrence
Wed Jul 14 21:34:00 CDT 2004

"Jayan" <Jayan@discussions.microsoft.com> wrote in message
news:FA53A104-9ABC-4B0A-A14B-C82931057EC9@microsoft.com...
> Rachel,
>
> I dont mean to sound patronising, but, go to tools internet options and
type in where you want your homepage to be, e.g www.google.com
>
> If the page reverts pack to tht res:// etc etc then you have something
manipulating it on your PC.
>
> I agree with as much as I could be interested to red from Lawrence, no
offence but you did go on a bit. Spy/adware removal programs are very good
and important. I run mine once a week, but occasionaly stuff still gets
through.
>
> Try going to start, run, and type in msconfig go to the startup tab and
you will see what is starting with your machine, you can untick any
suspicious programs (google them first)


Unfortunately this is a known CWS variant and can not be removed properly by
any automated tool. The only way to remove it is via manual removal.

--
Lawrence Abrams
http://www.bleepingcomputer.com
Source for Original Content, Tutorials, and Support for the beginning
computer user.