http://ssearch.biz/?wmid=1010 please help

[KC]

http://ssearch.biz/?wmid=1010 hijacker

I spent ages trying to remove this hijacker from a PC. As others said the usual programs don't find it. It hijacks 'My Computer' as well as IE.

In the end it was quite simple to remove. WinPatrol identified a running process sdspebpo.exe. A web search on this file found nothing (hence it seemed suspicious) so I killed that task and suddenly IE and My Computer came up properly. Ran msconfig and unticked this prog from the startup (it was showing as a 'DNS Cache') and rebooted - It didn't come back - SUCCESS! (well hopefully - haven't connected that PC to the internet yet).

[Guest]

Yes i finally got rid of ssearch.biz !!!!!!

They only thing you need is (free version) adware away
And follow the steps by them on there site
http://adwareaway.com/ssearchbiz.htm
Fist i got an error but with help from there support i am free of ssearch.biz

[Guest_John]

http://images.thetechguide.com/forum/public/style_emoticons/<#EMO_DIR#>/biggrin.gif\' class=\'bbc_emoticon\' alt=\'\' />
Dear All,
I have just removed sucessfully the tough ssearch.biz with only one time refer this page and use also only one time of the excellent Adaware Away.
Thanks a lot to this forum.

vucanxuan1965Email Removed

[Guest]

Download this tool http://p-nand-q.com/download/pserv_cpl/pserv-2.3.exe and install it

Set your Explorer up using the info in this link so that hidden and System files are visible
Also Uncheck the "Hide extensions for known file types" box

Reboot to SAFE mode
How to start the computer in Safe mode

Rename the C:\WINNT\Regedit.exe file to oldreg.bin
It appears to be infected and you will have to replace it from CD

Start the program we installed (use Start > All Programs > pserv.cpl > Services and Devices)
(my spanish is awful)

When it opens find the Plug and Play svc service
Right click and choose Kill - then set it disabled (or even delete it)

Reboot and check -- did it come back ?
Fix the entries using HijackThis

extract a new regedit.exe file  http://images.thetechguide.com/forum/public/style_emoticons/<#EMO_DIR#>/biggrin.gif\' class=\'bbc_emoticon\' alt=\'\' />

[Guest]

hi all

This is the answer to all of you that were unable to remove ssearch.biz:
http://www.members.shaw.ca/AdwareAway/AdwareAway.exe
it does work , did it 5 mins ago 100%
you only need to select the hijaker to be removed and thats it

good luck to all of you
its good to try somthing that you know that it works 100%

[Guest]

Finally!!!!!!!!!!!!!!!!!!!!!!!!!!!!! i was freakin ' out due to this goddamned ssearchbiz......

adwareaway solved all my problems 1 min. ago!!!!!! thanks to everybody!!!!!!

i apologize for my bad english....but i'm from Milano Italia.....thanks thanks thanks

[Pneumonic]

Dear all,

I recently ran into this virus as well. While I have tried to chip away at this for quite a while (2 months), I finally found it. This is a virus created by 180solutions. It is found in a System32 Folder--download the Xoftspy software and do a search ONLY on the System32 folder. It will come up with a folder that is named something like FLEOK. Find this folder and delete it. No need to buy anything.
http://ssearch.biz/?wmid=1010

Hope this works for all of you....

[Guest]

http://images.thetechguide.com/forum/public/style_emoticons/<#EMO_DIR#>/biggrin.gif\' class=\'bbc_emoticon\' alt=\'\' /> http://ssearch.biz/?wmid=1010
To delete this [censored] .
Delete all the folder in Content.IE5 in the Temporary Internet Files ,included the dustbin !!!!!!

[jagdwire]

New conga line!!!

1.http://www.mp3players4free.com/default.aspx?r=4070
2.http://www.mp3players4free.com/default.aspx?r=14984
3.??
4.??
5.??


To be part of this conga line, e-mail me at habjabEmail Removed with the following info:
1. referral link
2. offer completed
3. e-mail you used to sign up for the FREE mp3 player


PS: Do not e-mail me if you don't use these referral links to sign up! Also, YOU MUST SIGN UP UNDER THE FIRST LINK OR YOU WILL NOT BE ADDED!

Thanks for your time and good luck!