# Spyware that I can't seem to get rid of

**URL:** <https://boards.straightdope.com/t/spyware-that-i-cant-seem-to-get-rid-of/269904>\
**Category:** Factual Questions\
**Created:** [October 18, 2004, 9:21pm UTC](https://boards.straightdope.com/t/spyware-that-i-cant-seem-to-get-rid-of/269904 "2004-10-18T21:21:46Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![Yumblie](https://avatars.discourse-cdn.com/v4/letter/y/76d3ee/32.png) [@Yumblie](https://boards.straightdope.com/u/Yumblie)\
**Post date:** [October 18, 2004, 9:21pm UTC](https://boards.straightdope.com/t/spyware-that-i-cant-seem-to-get-rid-of/269904/1 "2004-10-18T21:21:46Z")

</div>

I’m struck with an annoying bit of spyware right now that redirects me to “[incredifind.com](http://incredifind.com)” whenever a page doesn’t load, and upon going back I get pop-ups and all that good stuff. Sounds like a job for adaware and spybot S&D right? For once, these programs have failed me. They say I’m clean but I still get that stupid redirector page.

How can I get rid of this? Don’t say “Get a new browser” because I’ve stuck with IE this long and I’m afraid of change.

I’m on XP, SP1, by the way.

---

<div class="post-metadata">

**Author:** ![Anne\_Neville](https://avatars.discourse-cdn.com/v4/letter/a/b9e5f3/32.png) [@Anne\_Neville](https://boards.straightdope.com/u/Anne_Neville)\
**Post date:** [October 18, 2004, 9:34pm UTC](https://boards.straightdope.com/t/spyware-that-i-cant-seem-to-get-rid-of/269904/2 "2004-10-18T21:34:29Z")

</div>

Here’s a site with removal instructions for KeenValue/Incredifind (which is probably what is hijacking your site to [incredifind.com](http://incredifind.com)):

[http://www.spyany.com/program/article\_spy\_rm\_KeenValue.html](http://www.spyany.com/program/article_spy_rm_KeenValue.html)

**Disclaimer:** I have not tried this, nor do I know if this is a trustworthy site. A Google search found several other sites with similar instructions for removing this spyware.

---

<div class="post-metadata">

**Author:** ![Fear\_Itself](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/fear_itself/32/19637_2.png) [@Fear\_Itself](https://boards.straightdope.com/u/Fear_Itself)\
**Post date:** [October 18, 2004, 10:11pm UTC](https://boards.straightdope.com/t/spyware-that-i-cant-seem-to-get-rid-of/269904/3 "2004-10-18T22:11:30Z")

</div>

[Another removal guide for Incredifund.com/KeenValue](http://www.doxdesk.com/parasite/KeenValue.html) at [www.Doxdesk.com](http://www.Doxdesk.com), a reliable spyware resource. Try their [online Parasite scanner](http://www.doxdesk.com/parasite/), a script that checks your browser for spyware plugins, helper objects and hijackers.

---

<div class="post-metadata">

**Author:** ![Horrifying\_Howler\_Monkey](https://avatars.discourse-cdn.com/v4/letter/h/df788c/32.png) [@Horrifying\_Howler\_Monkey](https://boards.straightdope.com/u/Horrifying_Howler_Monkey)\
**Post date:** [October 19, 2004, 1:19am UTC](https://boards.straightdope.com/t/spyware-that-i-cant-seem-to-get-rid-of/269904/4 "2004-10-19T01:19:02Z")

</div>

Spysweeper is pretty good, available here [http://www.webroot.com/products/spysweeper/](http://www.webroot.com/products/spysweeper/)

Microsoft has a not bad article at [www.microsoft.com/spyware](http://www.microsoft.com/spyware) if haven’t seen it yet…

---

<div class="post-metadata">

**Author:** ![Yumblie](https://avatars.discourse-cdn.com/v4/letter/y/76d3ee/32.png) [@Yumblie](https://boards.straightdope.com/u/Yumblie)\
**Post date:** [October 19, 2004, 2:13am UTC](https://boards.straightdope.com/t/spyware-that-i-cant-seem-to-get-rid-of/269904/5 "2004-10-19T02:13:08Z")

</div>

Aaaaargh. I ran Adaware, Spybot S&D, and then the trial version of Spy Sweeper, and they all found things, got rid of things, said everything’s OK, but then I go to a page not found and I _still_ get redirected to some stupid search engine. The funny thing is, it’s different every time.

And after all that, I tried just going to Internet Options and deleting all my cookies. Bam. Problem solved.

Well, thanks anyway guys.

---

<div class="post-metadata">

**Author:** ![Fear\_Itself](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/fear_itself/32/19637_2.png) [@Fear\_Itself](https://boards.straightdope.com/u/Fear_Itself)\
**Post date:** [October 19, 2004, 2:19am UTC](https://boards.straightdope.com/t/spyware-that-i-cant-seem-to-get-rid-of/269904/6 "2004-10-19T02:19:31Z")

</div>

> [@Yumblie](#):
>
> Aaaaargh. I ran Adaware, Spybot S&D, and then the trial version of Spy Sweeper, and they all found things, got rid of things, said everything’s OK, but then I go to a page not found and I _still_ get redirected to some stupid search engine. The funny thing is, it’s different every time.
> 
> And after all that, I tried just going to Internet Options and deleting all my cookies. Bam. Problem solved.
> 
> Well, thanks anyway guys.

You’ll be back.

---

<div class="post-metadata">

**Author:** ![Yumblie](https://avatars.discourse-cdn.com/v4/letter/y/76d3ee/32.png) [@Yumblie](https://boards.straightdope.com/u/Yumblie)\
**Post date:** [October 19, 2004, 2:47am UTC](https://boards.straightdope.com/t/spyware-that-i-cant-seem-to-get-rid-of/269904/7 "2004-10-19T02:47:11Z")

</div>

> [@Fear Itself](#):
>
> You’ll be back.

☹

---

<div class="post-metadata">

**Author:** ![Tuckerfan](https://avatars.discourse-cdn.com/v4/letter/t/eada6e/32.png) [@Tuckerfan](https://boards.straightdope.com/u/Tuckerfan)\
**Post date:** [October 19, 2004, 3:14am UTC](https://boards.straightdope.com/t/spyware-that-i-cant-seem-to-get-rid-of/269904/8 "2004-10-19T03:14:15Z")

</div>

If you’ve tried everything in [this thread](http://boards.straightdope.com/sdmb/showthread.php?t=260053), then I suggest you give [Winpatrol](http://www.winpatrol.com/) and [X-Setup Pro](http://www.x-setup.net/). They’re not automatic removal tools, but they should let you regain control of your system and then you can track the offending files down and remove them manually.

---

<div class="post-metadata">

**Author:** ![DrDeth](https://avatars.discourse-cdn.com/v4/letter/d/b487fb/32.png) [@DrDeth](https://boards.straightdope.com/u/DrDeth)\
**Post date:** [October 19, 2004, 5:14am UTC](https://boards.straightdope.com/t/spyware-that-i-cant-seem-to-get-rid-of/269904/9 "2004-10-19T05:14:48Z")

</div>

Winpatrol works- it doesn’t remove stuff, but it lets you know when the bad stuff is loading. Then “hijack this” or something else will help.  
I still can’t get rid of about:blank- any hints? Both of the above help a lot, I get a “wuff” when about:blank laods, then hijackthis will remove it for the nonce. I have tried “aboutbuster” but no help- maybe because I use win 2000pro.

---

<div class="post-metadata">

**Author:** ![peri](https://avatars.discourse-cdn.com/v4/letter/p/67e7ee/32.png) [@peri](https://boards.straightdope.com/u/peri)\
**Post date:** [October 19, 2004, 1:50pm UTC](https://boards.straightdope.com/t/spyware-that-i-cant-seem-to-get-rid-of/269904/10 "2004-10-19T13:50:11Z")

</div>

If you have IncreFind you will most likely also have Mindset Interactive-Favoriteman, ShopAtHomeSelect (SAHagent) and Targetnet. Missing one of those will allow the others to respawn. You must remove them all.

---

<div class="post-metadata">

**Author:** ![Number](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/number/32/242_2.png) [@Number](https://boards.straightdope.com/u/Number)\
**Post date:** [October 19, 2004, 3:57pm UTC](https://boards.straightdope.com/t/spyware-that-i-cant-seem-to-get-rid-of/269904/11 "2004-10-19T15:57:04Z")

</div>

Run [HijackThis](http://www.spywareinfo.com/~merijn/downloads.html) and post the log here.
