Reply #7: Also, Maggie, see if this describes your problem --

[VOX]

http://www.spywareguide.com/spydet_606_searchex.html

Full Name: Searchex Websearch
Type: Browser Hijacker
Also Known as: Hotlink Troj/AdwareDropper.A
Danger Level: 3
Official Description: Searchex is a homepage- and search-hijacker pointing at searchex.com.

Instead of directly changing the Start Page setting directly, it uses an Internet Explorer Browser Helper Object to redirect newly-opened windows. This results in the original Start Page being briefly visible then being replaced.

An IE Search Hook is used to redirect address bar searches and invalid domain name pages to cantfind.com. At times in the past this server redirected to MSN or 7Search.

Comment: Searchex/HomePage was bundled with 'NetSpeed' software from winstream.com (the authors of Searchex).

Searchex/Hotlink was distributed with an 'e-card' from valentines-ecard.com, which was heavily promoted by misleading junk e-mail.

Information URL: http://vil.nai.com/vil/content/v_100052.htm

Properties: Stealth Tactics
Stays Resident
Changes browser

Removal tools: List of products that detect/remove/protect against Searchex:

X-Cleaner
RegBlock