Text turned into links

  • Thread starter Thread starter Bonnie
  • Start date Start date
B

Bonnie

I recently noticed that certain text that appears in various message
boards, etc. is highlighted and/or underlined, click on it and a new
window opens taking me to a "sales" site that has some relationship to
the highligted text. I'm running XP Home Ed.
........ I ran Ad-aware, no difference, also restored to earlier
settings, to no avail. What is going on? Any ideas?
.............. Thanks, Bonnie
 
Bonnie said:
I recently noticed that certain text that appears in various message
boards, etc. is highlighted and/or underlined, click on it and a new
window opens taking me to a "sales" site that has some relationship to
the highligted text. I'm running XP Home Ed.
....... I ran Ad-aware, no difference, also restored to earlier
settings, to no avail. What is going on? Any ideas?
............. Thanks, Bonnie
Click to expand...

In an HTML message you can highlight a piece of text and attach a link to it. The link doesn't have to have anything to do with the text.
For instance, this link, new game, will take you to www.microsoft.com . Put your mouse cursor over it and look at the status bar.

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup only. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com./athome/security/protect/default.aspx
 
Hi Bonnie :-)

You may have a hijacker, malware, spyware or other scumware on your system
causing this problem. Thus, in addition to running your updated anti-virus
program, you should do the following to be sure none of these are present on
your system. Although you may have already run one or more of the programs,
please do so again according to the instructions below. Be aware that, some
very aggressive and damaging variants of malware can replicate themselves
repeatedly, or mutate, if not removed properly. Please follow all
instructions carefully to be sure your system is thoroughly cleaned


Dealing with Unwanted Spyware and Parasites:
http://mvps.org/winhelp2002/unwanted.htm
Be sure to run CWShredder here

http://www.majorgeeks.com/download3019.html

and AdAware and Spybot.
Download the newest version of HiJackThis here:
http://www.bleepingcomputer.com/files/hijackthis.php
(or Spybot - Search and Destroy DSO Exploit Fix 1.3.1 TX)
http://www.majorgeeks.com/download4392.html



Also visit these two sites to test for parasites and help basic cleaning:

On-Line Check

http://aumha.org/a/noads.htm

and

Quick-Fix Protocol.
http://aumha.org/a/quickfix.php

Basically, throw everything here at your "infection".

And be sure to use the HijackThis. Please DO NOT post your log to this
newsgroup, but to the HiJackThis Support Forums below:
http://www.hijackthis.de/forum/forumdisplay.php?f=10&guestlanguageid=4
the Aumha HiJackThis Forum
http://forum.aumha.org/viewforum.php?f=30

or Bleeping Computer Forum

http://www.bleepingcomputer.com/forums/forum22.html

to allow the experts there to evaluate your log and advise you of any
necessary steps to clean your system.

(Note: You will have to Register before posting on these Forums. Please
follow all posting instructions carefully to avoid having your log deleted
or ignored.



Also this program searches for hidden .dlls that recreate the malware.
About Buster:
http://www.majorgeeks.com/download4289.html

CAUTION!!!!! Before you try to remove spyware using any of the programs
below, download a copy of LSPFIX from any of the following sites:
http://www.cexx.org/lspfix.htm
http://www.spychecker.com/program/winsockxpfix.html
(if your OS is Win2k or XP) The process of removing certain malware may kill
your internet connection. If this should occur, this program, LSPFIX, will
enable you to regain your connection.

You should also get a copy of WINSOCKXPFIX available at:
http://www.spychecker.com/program/winsockxpfix.html
and
WinsockXP Fix- WinXP
http://www.spychecker.com/program/winsockxpfix.html
with instructions, at
http://www.iup.edu/house/resnet/winfix.shtm
Also
From LavaSoft- all versions of Windows-
http://digital-solutions.co.uk/lavasoft/whndnfix.zip
(NOTE: It is reported that in XP SP2, the command netsh winsock reset
will fix this problem without the need for these programs.)

or ........

Winsock Fix Utility
http://www.dfwonline.net/files/WinsockFix.zip



Also.........

Courtesy of Jim Byrd -

Download Sysclean.com, from Trend Micro, here:
http://www.trendmicro.com/download/dcs.asp along with the latest pattern
file, here:
http://www.trendmicro.com/download/pattern.asp
Be sure to read the "How-to" info here:
http://www.trendmicro.com/ftp/products/tsc/readme.txt
You might also want to get Art's updater, SYS-UP.Zip, here for future
updating of these: http://home.epix.net/~artnpeg/.
(If you download and use the updater from the beginning, it will
automatically handle downloading the other files. Place them in a dedicated
folder after appropriate unzipping, and then run. This scan may take a long
time, as Sysclean is VERY extensive and thorough



If these steps do not resolve your problem, or you need help with the above,
please post back to this thread with the details and any error messages.

Hope this helps

Jan :)
Smiles are meant to be shared,
that's why they're so contagious.

Replies are posted only to the newsgroup for the benefit or other readers.
How to make a good newsgroup post:
http://www.dts-l.org/goodpost.htm
 
Thanks for the thoughts.... Yes, I think I need to run the addn. apps
as suggested. The odd thing is that it doens't seem malicious,but
rather $$ oriented, in that I'm not directed to any particular site,
but sites all over the map, depending upon which words "got pickup up
on".
I'm thinking a third party (behind the scenes) is getting
credit for directing me to these sites??? either way, it's a shame.
Thanks again, Bonnie
********************
 
Hi Bonnie :-)
Thanks for the thoughts.... Yes, I think I need to run the addn. apps
as suggested. The odd thing is that it doens't seem malicious,but
rather $$ oriented, in that I'm not directed to any particular site,
but sites all over the map, depending upon which words "got pickup up
on".
I'm thinking a third party (behind the scenes) is getting
credit for directing me to these sites??? either way, it's a shame.
Thanks again, Bonnie
Click to expand...

It's nothing personal, it is truly all about $$. This type of stuff is
earning someone, or group of people, some very big bucks. The additional
expense is on the user, who has to invest a good deal of their time, and
sometimes money, to try and get rid of it. :/

If you need further assistance, just post back here. :-)

Jan :)
Smiles are meant to be shared,
that's why they're so contagious.
 
Aha! found it. It was an actual application, listed under program
files as "WEBREBATES", even had a readme file with instructions to
remove. Nothing special to remove it, just the standard "add/remove"
apps thing. The trick was knowing that the darned thing existed in my
system.
I never recall being prompted to install this thing.... but
who knows.
Thnx, Bonnie
*************************
 
Hi Bonnie :-)
Aha! found it. It was an actual application, listed under program
files as "WEBREBATES", even had a readme file with instructions to
remove. Nothing special to remove it, just the standard "add/remove"
apps thing. The trick was knowing that the darned thing existed in my
system.
I never recall being prompted to install this thing.... but
who knows.
Thnx, Bonnie
Click to expand...


You're very welcome! Glad to hear you were able to resolve your problem.
Good job!

Thank you for posting back and letting us know what worked for you, and for
the benefit of other readers who might have a similar problem. :-)

Jan :)
Smiles are meant to be shared,
that's why they're so contagious.
 
I checked a little further into it.... one of the files was entitled
"auto_silent_install.exe" (or something like that) hmmm, I wonder
what that was all about....<g> So I guess I didn't knowingly install
this app!! Sneaky devils.......
 
I checked a little further into it.... one of the files was entitled
"auto_silent_install.exe" (or something like that) hmmm, I wonder
what that was all about....<g> So I guess I didn't knowingly install
this app!! Sneaky devils.......
Click to expand...

Heh! Yup..that they are. :-)

Thank you for posting back with the update. Verrry inter-esting... ;o)

Jan :)
Smiles are meant to be shared,
that's why they're so contagious.
 
Back
Top