IE keeps trying to open SAFESEARCH 1

[Daire]

Hi, my friend has a laptop running win 200 pro that keeps trying to open a webpage called safesearch all the time.
I removed the safesearch program and deleted any reference to safesearch that i could find in the registry but there is still a safesearch.dll file that it wont let me delete.

It still hasnt worked, the progress bar at the bottom of explorer goes crazy trying to open a page but nothing happens.

I got Ad-Aware 6.0 but am not sure what to do with it
Can anyone help?

 

[CableInstaller]

With Ad-aware the key to removing objects is to scan with an updated reference file, as so many just download the program and scan with a reference file thats a year old.
So far Ad-aware takes the lead in removal of these types of Hijackers and data miners, updates are as common as 2 - 3 per week, more than any of the other scanners available.

---Quote from Ad-aware website---
I would also point out that if you have been running a SmartScan rather than a Custom Scan, you may find even more objects with a Custom Scan!!! However, the best way to know what has been placed on your machine is with a logfile. First, please make sure you have the latest Build 6.181 (bottom right of the AdAware start screen).

Next, click the Globe icon to get the latest reference file (illustrated here

http://www.lavahelp.com/howto/updref/index.html.

Then, please set up Ad-Aware for a Full (Custom) Scan using the instructions at Full Scan Settings, as indicated below.

CUSTOM SCAN SETUP:

Ad-Aware 6 comes pre-configured with default options that are already ON (green checkmark) ... do not change them. The following are changes that you will need to make to prepare the "Full" custom scan that is recommended for the first look into your computer (instead of a red "x", you will make them a green "checkmark"):

Launch the program, and click on the Gear at the top of the start screen to access the preferences/setting window.
Click the "Scanning" button.

Under Drives & Folders, select "Scan within Archives".
Click "Click here to select Drives + folders" and select your installed hard drives.

Under Memory & Registry, select all options.
Click the "Advanced" button.

Under "Log-file detail", select all options.
Click the "Tweaks" button.

Under "Scanning Engine", select the following:
"Include additional Ad-aware settings in logfile" and
"Unload recognized processes during scanning."
Under "Cleaning Engine", select the following:
"Let Windows remove files in use after reboot."

Click on 'Proceed' to save these Preferences.

When you are finished, you will be using the Custom Scan with Memory and Both registry scans ON. Please make sure that you activate IN-DEPTH scanning before you proceed.

NOTE: In the free Personal version of A-A, you will notice that some options are greyed out ... these settings are only available for users of the purchased Plus and Professional versions of the program. For the Full Scan setup instructions for the Plus or Professional versions, or if you have previously changed your settings in the Personal version, see this thread:

http://www.lavahelp.com/howto/fullscan/index.html

After you click on the "Start" button, in the next window, select the 2nd option (Use Custom Scanning options) and make sure "Activate In-depth scan (Recommended)" is ticked green.
---End Quote---

 

[Xemus]

Here's Pest Patrol's writeup of a manual removal, provided in case CableInstaller's instructions don't fully kill it.

http://www.pestpatrol.com/PestInfo/s/safesearch.asp

http://www.closedsocket.com

 

[diogenes10]

You probably should also look at a hijack this log of your system. Usually when there is a problem of this nature, there is more than one, so there may be other things that should be cleaned off your system too.

 

[Daire]

Thanks guys, used a combination of adaware and hijackthis and seems to have worked, cant find any mention of safesearch anywhere now and all seems OK

Cheers