I have gotten a curious error with my IE 6 browser ever since being invaded by the AproposClient virus --
When ever I try to navigate to a non-existant domain, I get a web page that reads --
"Search the Web - Incorrect Error Page"
This web page has some sort of search input field, links to things like Business and Adult Entertainment.
And the links appear to point back to contexualsearch.com.
How do I get rid of this annoying web page?
(I believe that I have followed all the steps to get rid of Apropos.)
The log from SpyKiller:
Scan initialized on 2/23/2004 7:33:29 PM
========================================
Started memory scan
====================
Running processes:
1: \SystemRoot\System32\smss.exe
2: \??\C:\WINDOWS\system32\winlogon.exe
3: C:\WINDOWS\system32\services.exe
4: C:\WINDOWS\system32\lsass.exe
5: C:\WINDOWS\system32\svchost.exe
6: C:\WINDOWS\System32\svchost.exe
7: C:\WINDOWS\system32\spoolsv.exe
8: C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
9: C:\Program Files\Norton AntiVirus\navapsvc.exe
10: C:\WINDOWS\System32\svchost.exe
11: C:\WINDOWS\Explorer.EXE
12: C:\WINDOWS\System32\hkcmd.exe
13: C:\Program Files\HP\HP Software Update\HPWuSchd.exe
14: C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
15: C:\PROGRA~1\NORTON~1\navapw32.exe
16: C:\WINDOWS\System32\ctfmon.exe
17: C:\Program Files\Messenger\msmsgs.exe
18: C:\Program Files\Belkin\F1U201.401\usbshare.exe
19: C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
20: C:\Program Files\HP\hpcoretech\comp\hptskmgr.exe
21: C:\WINDOWS\System32\taskmgr.exe
22: C:\Program Files\Internet Explorer\iexplore.exe
23: C:\Program Files\HistoryKill\histkill.exe
24: C:\Program Files\HistoryKill\hkPopupKiller.exe
25: C:\Program Files\SpyKiller\SpyKiller.exe
Memory scan result:
Total modules found:25
Suspicious modules found: 0
Started registry scan
====================
RVP HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\...
SpyWare/AdWare - RVP
Registry scan result:
Suspicious keys found: 1
Started folder scan
====================
Folder scan result:
Folder processed: 0
Suspicious folders found: 0
Started file scan
====================
File scan result:
Suspicious files found: 0
Scanning finished
====================
Suspicious modules found: 0
Suspicious keys found: 1
Suspicious folders found: 0
Suspicious files found: 0
====================
Components ignored:0
Total components found:1
When ever I try to navigate to a non-existant domain, I get a web page that reads --
"Search the Web - Incorrect Error Page"
This web page has some sort of search input field, links to things like Business and Adult Entertainment.
And the links appear to point back to contexualsearch.com.
How do I get rid of this annoying web page?
(I believe that I have followed all the steps to get rid of Apropos.)
The log from SpyKiller:
Scan initialized on 2/23/2004 7:33:29 PM
========================================
Started memory scan
====================
Running processes:
1: \SystemRoot\System32\smss.exe
2: \??\C:\WINDOWS\system32\winlogon.exe
3: C:\WINDOWS\system32\services.exe
4: C:\WINDOWS\system32\lsass.exe
5: C:\WINDOWS\system32\svchost.exe
6: C:\WINDOWS\System32\svchost.exe
7: C:\WINDOWS\system32\spoolsv.exe
8: C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
9: C:\Program Files\Norton AntiVirus\navapsvc.exe
10: C:\WINDOWS\System32\svchost.exe
11: C:\WINDOWS\Explorer.EXE
12: C:\WINDOWS\System32\hkcmd.exe
13: C:\Program Files\HP\HP Software Update\HPWuSchd.exe
14: C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
15: C:\PROGRA~1\NORTON~1\navapw32.exe
16: C:\WINDOWS\System32\ctfmon.exe
17: C:\Program Files\Messenger\msmsgs.exe
18: C:\Program Files\Belkin\F1U201.401\usbshare.exe
19: C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
20: C:\Program Files\HP\hpcoretech\comp\hptskmgr.exe
21: C:\WINDOWS\System32\taskmgr.exe
22: C:\Program Files\Internet Explorer\iexplore.exe
23: C:\Program Files\HistoryKill\histkill.exe
24: C:\Program Files\HistoryKill\hkPopupKiller.exe
25: C:\Program Files\SpyKiller\SpyKiller.exe
Memory scan result:
Total modules found:25
Suspicious modules found: 0
Started registry scan
====================
RVP HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\...
SpyWare/AdWare - RVP
Registry scan result:
Suspicious keys found: 1
Started folder scan
====================
Folder scan result:
Folder processed: 0
Suspicious folders found: 0
Started file scan
====================
File scan result:
Suspicious files found: 0
Scanning finished
====================
Suspicious modules found: 0
Suspicious keys found: 1
Suspicious folders found: 0
Suspicious files found: 0
====================
Components ignored:0
Total components found:1