spyware

my brother has just gotten a nasty surprise. i have removed alot of spyware but one thing remains and is causeing issues.

description
any search engine typed in will bring up a page looking similar to that searchV crap (you know, with viagr and sex searches)
unclosable popups come up once IE is closed.

anyone know what this asshole is? better yet, anyone know where the asshole who coded it lives? that way i can beat the shit out of him with a bat

This SOB has been the cause of my networking problems. no freaking wonder my network goes wierd when he uses it. anyways there has to be a number of viruses on here, i mean where 1 is there is usally a friend

Do a Ctrl-Alt-Del (only once though) to bring up the Close Program or Task Manager window and look for any unusual program that's running. If you suspect something of being spyware, do a Google search on that program. If it is some kind of spyware, there will usually be a few pages on how to remove it. I've removed a couple of fairly harmless, yet still annoying, adware programs this way.

yea, right when i click reply (5 min ago) all this porn shit come up.

yea i checked tasks and such. cant get to google or any other search engine. like i said it takes my to one of thos sex/viagra/BS search things. what ever this is has its ass deep into windows.

which is easier, hours of registry repair and hunting or 15 minutes format. i vote for format

Hmmm... What's the search page's address?

well, i dont know. if i type in say google.com it says something else, but address bar still shows google.com

this is a redirect program of some sort. honestly i hate doing this stuff. however it has been messing with the network, not sure how. then agian networking is somethat i have only recently been getting into.

anyways here is a list of things i did find, or rather spybot/adware found
anal-oral
claria
download enhancer


now the first 2 are new to me. last one is common.

After a quick search, I found that Claria seems to be the new name of Gator, and we all know what that is.

these people should be executed.
http://en2.wikipedia.org/wiki/Claria_Corporation

god, isnt that type of softawre outlawed in some countries

If not, it should be. I remember when the internet was simple and spyware was something James Bond would use on one of his old SPECTRE missions.

By the way, anal-oral appears to be another spyware.

what exactley is the "anal-oral" filename (including extensions)

Get hijackthis and look at log file.

will do

the anal-oral deal was deleted before i bother to pull up its spec and such. oh dont even bother doing a google search, you know what a search like that would yeild.

i have only tried a few spyware sites with no luck

I did do a Google search to come up with that link. I was a bit more specific, so I didn't get nearly as much garbage as usual.

use Adaware and Spybot S&D to clean the nasties if this hasn't been performed.

delete your internet cache and cookies

Also, run regedit and check the following:

My Computer\HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run

My Computer\HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce

My Computer\HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnceEx

My Computer\HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices

My Computer\HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce