Don't forget updatescenter[dot]com and bestwebslinks[dot]com as well

[siteowner message] Chris -- I edited out the live links.

Edited By Siteowner
Chris | 12.13.05 - 8:06 pm | #

how do you fix it/ get rid of it?
I already tried the Smit... blabla thing and didnt work
gina | 12.15.05 - 2:00 pm | #

Try Counterspy free trial -- ihatespyware.com

Or contact me offline. alex(at)sunbelt-software.com
Alex Eckelberry (Siteowner) | 12.15.05 - 2:22 pm | #

hi, i just got this problem an hour ago and i was reading this blog about this and its exactly whats happening to me. i was wondering how i can block it or delete it.

thank you
ruben | 12.27.05 - 7:23 am | #

I picked up this yesterday, and have just tried counterspy, but it's not fixed it I'm afraid. I run Norton which has of course failed to stop it, tried Spybot and adaware, neither of which are any help, just like Microsoft's anti spyware prog.
Any other ideas please?

Best regards

Mike
mike | 12.27.05 - 9:34 am | #

Mike -- try running CounterSpy in safe mode. You can contact support here at support@sunbelt-software.com for help removing it.
Alex Eckelberry (Siteowner) | 12.27.05 - 9:48 am | #

Hi Alex, many thanks for the advice. I will have to wait for my son to get in as I have no idea how to get safe mode up. I'm in the UK and it's snowing here which is a rare thing these days in the midlands, and I expect traffic will be at a standstill, and he may be sometime.

Thanks again,

Best regards,
Mike
mike | Homepage | 12.27.05 - 1:05 pm | #

i also picked up the spyware scam yesterday. I tried what Alex advised except the safe mode cause i'm still wondering how to get to it.
But a full system scan doesnt' seem able to do the trick.
Just wonderin any other suggestions or solutions to the problem.
It so far only turns up as my homepage, but snice its a real high risk, really want to get rid of it ASAP

thx

Leslie
Leslie | 12.27.05 - 1:34 pm | #

To run in Safe Mode, press F8 when your system boots up and then choose Safe Mode.

Symantec actually has a very good writeup here on it here:
http://snipurl.com/6et0
Alex Eckelberry (Siteowner) | 12.27.05 - 2:27 pm | #

I've tried running it in safe mode and managed to remove it from my laptop
but when i go back to normal windows, it seems that its still here, any other suggestions?
Leslie | 12.27.05 - 5:49 pm | #

Leslie, support is contacting you...
Alex Eckelberry (Siteowner) | 12.27.05 - 5:54 pm | #

Hi,

I have tried in safe mode too now, and whilst removing a number of trojans and other bits, I'm still left with the systemwarning(dot)com taking over my IE6 browser. Any further help would be gratefully recieved!
Best regards
Mike
mike | Homepage | 12.27.05 - 6:29 pm | #

hi, i had just tried safe mode and when i get into normal windows again it still the same. what should i do?
ruben | 12.27.05 - 7:09 pm | #

Me too, I tried in safe mode and it's still there. Thanks for your help Alex
Chris Chin | 12.27.05 - 8:05 pm | #

You can get it off your home page by going to Tools/Internet Options/Advanced and then make sure Enable Third Party Extentions is unclicked. HOWEVER, I doesn't take this off your machine.

I've tried EVERYTHING from paying Microsoft to IBM to running every Spyware/Adware/Norton to having three other techies on it. Any help or ideas would be truly appreciated. Thanks!
Pete | 12.27.05 - 9:02 pm | #

Yo Alex, You seem to be the only site that even knows about this little bugger. Picked it up yesterday. Did a registry scan and deleted all occurences - it came back. Downloaded your software and ran it several different ways - it came back. Ran LavaSoft and Nortons - still there. Will buy your software and sign up for annual subscription if you can help me. Am an applications programmer and a computer attorney in Georgia and can help debug if you need more info. Psky little sucker - would, like everybody else - really appreciate some help. THANKS!
Blanton Owens | 12.27.05 - 9:37 pm | #

Any idea which one you have? SpyAxe, SpyTrooper, WinFix, SpyGuard, etc.?
Alex Eckelberry | Homepage | 12.27.05 - 9:45 pm | #

Blanton -- contact me offline -- alex(at)sunbelt-software.com. That goes for anyone else who needs help.

These are VERY hard to remove.

Another option is to go to spywarewarrior.com and make a plea for help. They are very helpful over there.
Alex Eckelberry | Homepage | 12.27.05 - 9:57 pm | #

Hey thx Pete, I got it out of the homepage.

But there's still the problem of the bug still being in here and were all trying to get it out.

Hope we can find a solution soon...
Leslie | 12.28.05 - 12:47 pm | #

actually i think i spoke to soon....

whenever i open a 2nd browser, the 2nd browerse seems to have a hard time connecting to the net. When i try jumping to another page that might load faster (ie yahoo, google) it loads the page, but the webpage is blank now.

i wonder is this the fault of the spam??
Leslie | 12.28.05 - 12:51 pm | #

Had this for a few days and found these IPs to block on sunbeltblog

85.255.115.174
85.255.115.130
85.255.115.173
85.255.115.172

Im running McAfee personal firewall plus and instantly stopped the problem when i put those IPs into the block list
Rusty | 12.28.05 - 5:45 pm | #

I'm having the same problem as everyone else. I ran McAffe, Micro-Sort anti-spyware, spyblaster, spy boot, registry mechanic, spynomore.

Other than the home page issue, Every 5-10 mins, McAffee finds 2-4 Trojans and other virus'.

Also, there is a "pop" that sounds every minute or so.

Any other suggestions - thank you
Scott | 12.30.05 - 1:06 am | #

Strange, by running AVG Free ed and their anti-spyware I got rid of it. But make sure u dont sav esnapshots of the registry an dstuff...
ursak | 10.24.06 - 8:37 pm | #

I still got the same page with "dns404.net" but little different. It wanted me to Install "System doctor" a bogus program...
Mike | 06.01.07 - 7:57 am | #