[BigDogSS]

I downloaded Spybot and got rid of various spy stuff.
I had the DSO Exploit thingy and fixed it according to alicka.

However, my original problem exists:  My home page gets reset to res://qsryz.dll/index.html#37049 every time I leave the internet.  

What is this and how do I get rid of it?  

Alicka, any idea?

[alicka]

I take it you followed my instruction? Well I've completely removed it off my system and several others with no affect to the homepage or any other settings in IE.
I am currently using IE 6. Sounds like you have or have had a virus rescently.

If you are update with all patches and patterns you'll have no problem.

Also if your using nethink under windows 2000, don't follow these or any of my advice. Systems older then 2000 are more like to crash as they are unstable and don't handle registry edit changes so well.

If you've follow all my instruction, and don't have any virus or other spybot software you will have no problems

Remember this is just 1 of many spybots.

Regards

[Gkhster]

I suspect that you have the latest version of the "CoolWebSearch homepage hijacker" .

There is a ton if information about it, as well as a detailed procedure on how to get rid of it at http://www.pchell.com/support/onlythebest.shtml

If after looking at this page you have questions, please let us know.

Hope this helps,
Guy

[cremedies]

Try Spysweeper.com

[fredg]

Hi,
Here are links to 2 free programs, one of which you already have, and some other info about editing he Registry. If you edit the Registry, BE CAREFUL.

If you think you already have Spyware/Advertising Ware in your computer, run these as follows:
Spyware/Advertising ware removal

http://www.security-related.com/download2.htm
Download: SpyBot Search & Destroy; 1.3

AdAware at:
www.lavasoftusa.com
Download: AdAware_SE

Both the above programs run better and much faster when run in SafeMode.
It's best to run the AdAware scan first; 3 times; then re-boot.
Then, run the AdAware scan again 3 times; then run the SpyBot.
Re- Boot.
Reason for running so many times:
Some of these trojans' files can be deleted the first time; leaving some others; but on re-boot, they re-write the files that were deleted.
Running multiple times deletes most of it the first
Time.

If you wish to have a great program, after you clean out Spyware/Advertising Ware:
SpyWare Blaster 3.2
Great, free, program that STOPS spyware, trojans, home page hijacks, etc, BEFORE they get into your computer. Check it out at CNET at link:

http://www.download.com/SpywareBlast...ml?tag=lst-0-2

Two Tips:
If you notice the little green computer lights that show your dial-up connection to the internet staying on when they shouldn't be, located on the bottom right of the system tray, disconnect immediately and run AdAware. These lights staying on means that some URL is sending or receiving spyware/advertising ware to or from your computer, most of the time.

Other Tip: After being on the net, if you have visited any sites you don't really trust, then run AdAware BEFORE you shut down or re-start the computer. This will delete any Spyware easier, before the computer can configure it, set it up, spread it throughout the Registry, and make it more difficult to remove after re-booting.

If the above doesn't work, then try editing the Registry. BE CAREFUL when deleting things from the Registry; your computer might not re-boot.
When the computer boots up, the Registry tells it what programs to run; telling it to run the SpyWare/Advertising programs first, if in the computer.
Here are steps for deleting things that startup when you boot up the computer:

Go to Start/Run. Type in "regedit" without quotes, then click on OK.
At the top, Click on "Edit", then "Find".
In the space Find What: type in what you want to find. (in this case, RUN).
Then, put a check mark by "Match whole string only". This will keep the search from stopping at every word it finds, like the word "run", etc.
Then click "Find Next". It will search the registry for the first entry you typed in.
It will "open" a folder on the left hand side of the screen, showing what is in the folder on the right hand side. If you know that an entry on the right hand side is something you no longer have, or has just been added with a name you don't know, then right click on it, then left click "delete", tell it Yes or OK to remove it.
Then, press F3 on the top of the keypad to continue the search.
When finished, at the top, click on File, Exit.

Any StartUp programs, that start when the computer boots up will be listed in folders on the left hand side of the screen with names like:
RUN, RUNSERVICES, RUNONCE, RUN-, etc.
Click on the next folder down with the name RUN in it, to look at its startups on the right hand side.

If the spyware/advertising program has re-set your home page; you will have to type in the home page you want.; click on Apply, and OK.

Now, AdAware_SE will find stuff, if run multiple times, that SpyBot cannot find.
Also, since I started using SpyBlaster, I have not had any problems; for about 2 weeks now... great program.

Be sure you reset your home page after running AdAware.
Merry Christmas,
fredg
PS; the home page hijacker keeps coming back cause it's in your computer's Registry.