Try this: Tools > Internet Options > Advanced > Browsing
Uncheck the Enable 3rd party browser extensions
If this clears your problem then find out who the culprit(s) is/are with
these tools.
Let AD-Aware Scan your system for advertising Spyware
http://www.lavasoftusa.com
If you use a HOSTS file, beware of this new issue.
Ad-Aware has decided to include a new detection when scanning the HOSTS
file. This now creates a "Bad hosts file entry" in the log file generated at
the end of a scan. The best thing to do is to place a check in each entry,
right-click and select: "Add selection to ignorelist". Otherwise if you let
AWW "fix" these items it will trash the HOSTS file! Even if you have it
"locked" by [example] SpywareBlaster or Winpatrol. It does not return the
attributes and renames the HOSTS file incorrectly to hosts.
and:
SpyBot-S&D
http://security.kolla.de/
p.s Reset the 3rd party browser setting.
More: This may be caused by a third-party program (adware, spyware,
parasite).
Get AdAware and SpyBot and run them both. Keep them up to date.
Dealing with Unwanted Spyware, Parasites, Toolbars and Search Engines
http://mvps.org/winhelp2002/unwanted.htm
Additional link:
http://aumha.org/a/quickfix.htm
You may need this removal tool.
More: Complete list by variant with up-to-date information.
http://www.spywareinfo.com/~merijn/cwschronicles.html
More: Removal tool:
http://www.spywareinfo.com/~merijn/files/CWShredder.exe
CWShredder - Tutorial
http://www.bleepingcomputer.com/forums/index.php?showtutorial=47
IMPORTANT:
Before trying to remove spyware, download a copy of LSPFIX from
the URL below - some malware may kill your internet connection when it is
removed, this program will enable you to regain your connection.
http://www.cexx.org/lspfix.htm
http://www.spychecker.com/program/winsockxpfix.html (if your OS is Win2k or
XP)
Important: "So how did I get infected in the first place?"
http://forums.net-integration.net/index.php?showtopic=3051
--
Do you also have problems with other search engines?
Unable to use any major Search Engines?
Qhosts virus/trojan, ALERT!.
http://securityresponse.symantec.com/avcenter/venc/data/trojan.qhosts.html
http://vil.nai.com/vil/content/v_100719.htm
http://www.sophos.com/virusinfo/analyses/trojqhosts1.html
Removal tools that have been used with success.
http://www.brown.edu/Facilities/CIS/Software_Services/virus/index.html
http://software.brown.edu/dist/w-cleanqhosts.html
To protect against an other attack, be sure to install hotfix 828750 which
fixes the exploit that this virus uses.
http://www.microsoft.com/windows/ie/downloads/critical/828750/default.asp
Henri Leboeuf
Web page:
http://www.colba.net/~hlebo49/index.htm
===
