Searching from Address bar

  • Thread starter Thread starter JP
  • Start date Start date
J

JP

Hi, came here to see if anyone can give me some insight into this problem I
am having.

One day I was on a website and this thing popped up asking me to install
something, I accidentally clicked yes instead of no because I never click
yes on those things unless I read them first.

Anyway, what happened was, it installed some sort porn thing on my task bar
(which I have now uninstalled thank god).

However I noticed some different behaviour in my IE browsing. every so often
when I got a 404 message or was searching for something this website popped
up asking me if i wanted to search it for stuff. I went into Add/Remove
programs and got rid of this intervening program.

Ever since then, when I want to search from the IE bar I get the result
http:///? followed by the words I searched for...
i.e. Search: test
result: http:///? test

I have been to several websites (including MS) to try and put it back to how
it was (MSN Search engine) but had no luck. I have also tried reinstalling
IE6SP1 with no luck.

Anyone help with this?
thanks
JP
 
JP said:
Hi, came here to see if anyone can give me some insight into this problem I
am having.

One day I was on a website and this thing popped up asking me to install
something, I accidentally clicked yes instead of no because I never click
yes on those things unless I read them first.

Anyway, what happened was, it installed some sort porn thing on my task bar
(which I have now uninstalled thank god).

However I noticed some different behaviour in my IE browsing. every so often
when I got a 404 message or was searching for something this website popped
up asking me if i wanted to search it for stuff. I went into Add/Remove
programs and got rid of this intervening program.

Ever since then, when I want to search from the IE bar I get the result
http:///? followed by the words I searched for...
i.e. Search: test
result: http:///? test

I have been to several websites (including MS) to try and put it back to how
it was (MSN Search engine) but had no luck. I have also tried reinstalling
IE6SP1 with no luck.

Anyone help with this?
thanks
JP
Click to expand...

Spyware Alert!
Cool Web Search Hijacker!
Removal tool:
http://www.spywareinfo.com/~merijn/files/cwshredder.zip
Unzip, hit the executable and follow the prompts.
Please make sure that all instances of IE and OE are closed.

HTH

--

siljaline

"Arguing with anonymous strangers on the Internet is a sucker's game
because they almost always turn out to be -- or to be indistinguishable from
-- self-righteous sixteen-year-olds possessing infinite amounts of free time."
- Neil Stephenson, _Cryptonomicon_
 
JP said:
followed instructions
still having same effects

i uninstalled the interference program, i am just trying to get it back to
msn search instead of http:/// !!
Click to expand...
Sorry to hear the Shredder didn't work.
This will, a bit complex, but in your case, necessary - unfortunately.

Go to:
http://www.spywareinfo.com/~merijn/files/hijackthis.zip

Unzip, double-click "HijackThis.exe" and Press "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log"
button.
Click: "Save Log" (generates "hijackthis.log")

Next, HijackThis | Config [button] | Misc Tools [button]
Click: Generate StartupList log [button] (generates "startuplist.txt")

Next, go to the below location: Spyware and Hijackware Removal Support.
http://forums.spywareinfo.com/index.php?s=cc723fe045fe14d54470f5395cdeb850&showforum=11

Sign in, then copy and paste both files in your message.

HTH

--
siljaline

"Arguing with anonymous strangers on the Internet is a sucker's game
because they almost always turn out to be -- or to be indistinguishable from
-- self-righteous sixteen-year-olds possessing infinite amounts of free time."
- Neil Stephenson, _Cryptonomicon_
 
Prefer not to sign up for a forum for using it once,
log files attached though, I can't see anything abnormal in them though
Click to expand...

that seemed to have fixed the problem

must have been the default search bits

thanx 4 all ur help!!


JP
 
JP said:
that seemed to have fixed the problem

must have been the default search bits
Click to expand...

JP,

Two things, while I appreciate that you trust my ability to view your Hijack This logs,
I am not a qualified Spyware expert, just a conduit to the source of information that
will help rid your machine of these pests.

You are encouraged to post your logs!
http://forums.spywareinfo.com/index.php?s=969632b9141cef2eca4d7504e7fc8b2b&showforum=11
You may log in a guest user, the lengthy registration process is not necessary.

Your choice, *but* in your case, if I was in your shoes, take the advice and post your
logs.

Regards,

--

siljaline

"Arguing with anonymous strangers on the Internet is a sucker's game
because they almost always turn out to be -- or to be indistinguishable from
-- self-righteous sixteen-year-olds possessing infinite amounts of free time."
- Neil Stephenson, _Cryptonomicon_
 
JP,
You fixed the Search URL's but the "URLSearchHook" is broken!
Plus you're still infected .......

R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} -
(no file)

O2 - BHO: (no name) - {F7F808F0-6F7D-442C-93E3-4A4827C2E4C8} -
C:\WINDOWS\nem213.dll
[more info]
http://www.doxdesk.com/parasite/InternetOptimizer.html

O16 - DPF: {8522F9B3-38C5-4AA4-AE40-7401F1BBC851} -
http://216.65.38.226/Download_Plugin.exe

O16 - DPF: {FC87A650-207D-4392-A6A1-82ADBC56FA64} (MultiDist) -
http://xbs.climaxbucks.com/internet-optimizer/080703/MultiDist.CAB
[more info]
http://www.doxdesk.com/parasite/InternetOptimizer.html
_______________________________________
Mike Burgess http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 9-03-03]
Please post replies to this Newsgroup, email address is invalid
--
 
Mike Burgess said:
JP,
You fixed the Search URL's but the "URLSearchHook" is broken!
Plus you're still infected .......

R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} -
(no file)

O2 - BHO: (no name) - {F7F808F0-6F7D-442C-93E3-4A4827C2E4C8} -
C:\WINDOWS\nem213.dll
[more info]
http://www.doxdesk.com/parasite/InternetOptimizer.html

O16 - DPF: {8522F9B3-38C5-4AA4-AE40-7401F1BBC851} -
http://216.65.38.226/Download_Plugin.exe

O16 - DPF: {FC87A650-207D-4392-A6A1-82ADBC56FA64} (MultiDist) -
http://xbs.climaxbucks.com/internet-optimizer/080703/MultiDist.CAB
[more info]
http://www.doxdesk.com/parasite/InternetOptimizer.html
Click to expand...

Mike,
Thanks for the assist! ;)


--

siljaline

"Arguing with anonymous strangers on the Internet is a sucker's game
because they almost always turn out to be -- or to be indistinguishable from
-- self-righteous sixteen-year-olds possessing infinite amounts of free time."
- Neil Stephenson, _Cryptonomicon_
 
Mike Burgess said:
JP,
You fixed the Search URL's but the "URLSearchHook" is broken!
Plus you're still infected .......

R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} -
(no file)

O2 - BHO: (no name) - {F7F808F0-6F7D-442C-93E3-4A4827C2E4C8} -
C:\WINDOWS\nem213.dll
[more info]
http://www.doxdesk.com/parasite/InternetOptimizer.html

O16 - DPF: {8522F9B3-38C5-4AA4-AE40-7401F1BBC851} -
http://216.65.38.226/Download_Plugin.exe

O16 - DPF: {FC87A650-207D-4392-A6A1-82ADBC56FA64} (MultiDist) -
http://xbs.climaxbucks.com/internet-optimizer/080703/MultiDist.CAB
[more info]
http://www.doxdesk.com/parasite/InternetOptimizer.html
Click to expand...

Cheers Mike,
have fixed those sections you highlighted to me, and Yes it was
Internet-Optimizer that started the problem.

siljaline, sorry, I thought I had to sign up to it, but if all sorted now
it's all good innit!!

many thanks again

JP
 
JP said:
Cheers Mike,
have fixed those sections you highlighted to me, and Yes it was
Internet-Optimizer that started the problem.

siljaline, sorry, I thought I had to sign up to it, but if all sorted now
it's all good innit!!

many thanks again

JP
Click to expand...

JP,
Glad to hear you got sorted out mate - *do* post your logs next time around.
In the Spyware Forum that is -
http://forums.spywareinfo.com/index.php?s=1a00f9b10977b274c7f2fc2b0d49adfe&showforum=11

Cheers!



--

siljaline

"Arguing with anonymous strangers on the Internet is a sucker's game
because they almost always turn out to be -- or to be indistinguishable from
-- self-righteous sixteen-year-olds possessing infinite amounts of free time."
- Neil Stephenson, _Cryptonomicon_
 
FWIW, I was receiving the dreaded http:///? on address bar searches.
Tried everything to no avail until I ran HijackThis, and told it to "fix"
(delete?) the "Default URLSearchHook is missing" issue it found. It did the
trick!!!

--Peter Svensk [MSFT]

This posting is provided "AS IS" with no warranties, and confers no rights.
 
Back
Top