Friday, June 27, 2008

Removing safeway.blogspot.com from Internet Explorer

safeway.blogspot.com
--------------------------
If you can see "safeway.blogspot.com" in your Internet Explorer's title bar and this is also set as your home page and you can not change it then you can solve this problem by following the following steps:

However this is not a spyware it secures your browser's homepage from being changed by any spyware/adware or something similar malware; but if you have problem with this than you can remove.

I have found a website which offers a program to remove some malwares :
http://www.adwareaway.net/safeway_blogspot.htm
(it can also remove this too (as described on the site)).
Go to the site, click on the download link to download the software . See the instruction on above site page and run the program.

I haven't used this program so use it at your risk or do as under if you know registry editing.

I had faced the same problem before some months and had removed it successfully but now not remember so good but you can follow the same procedure as mentioned below.

First backup your registry and create a restore point.
It is better to do all the below mentioned in safemode.
So start windows in safemode and login to administrator user account.

(Now about the program that changes the homepage)
You will NOT find its entries in msconfig.
This program is a vbscript and I think it resides somewhere in your windows or system32 folder.

Search registry for VirusRemoval.vbs
You will find it somewhere under user logon (or some similar) key in registry.
It is set to run when user logs on.
If you find it and it has also wscript.exe written in the key value then delete that entry. Search for more same entries and delete them if found.

Now search windows folder for *.vbs files. You may have to check the options of the
@ Search for hidden files and folder
@ Search in system folders
@ Search sub folders

Delete the file VirusRemoval.vbs if found (most probably it will be hidden).

Also it has an autorun.inf file in root directory on all drives.
So to delete that, enter the following commands in run or at command prompt :

attrib -h -s -r c:\autorun.inf

delete c:\autorun.inf

(The attrib command can remove/set the attributes : read only, hidden, system, archive)
Run the above commands for all hard drives and pen drives (replace the c: in the above commands with the drive letters you have like :

delete d:\autorun.inf

And I think, its done.

0 comments:

Post a Comment