"something" cretaes links on pages where there are no links

G

Guest

When I open a page in IE, advertising links are created on some words where
original page does not have a link. Looks like I have loaded some "add-on"
that creates these links. If I refresh a page links are gone but they are
back if I get to page from somewhere else (Favorites or History, or by
clicking on legit link on some other page).
These new links ussualy take me to pages like
http://www2.popupsearches.com/search.php?query=home

I ran McAfee virus scan and checked for spyware but could not find anything
to solve it. I am reluctant to delete stuff from registry since I am not sure
where in registry to look for potential cause of the problem.
Any ideas?
Thanks.
 
A

Altrüs

Hi,

It does indeed sound like spyware or adware. As a result, we're going to
thoroughly scan the computer for any kind of spyware/adware program and remove
it. This will require downloading some third party tools, however, they are all
free.


You may first want to remove any third party helper
objects. This is best done by a program called BHOCop.
You can download BHOcop, and view an introduction to it,
from the following sites:

Download from:
http://support.honour.ca/bin/bhocop.zip
Introduction at:
http://www.pcmag.com/article2/0,1759,97081,00.asp

Once you download the file, run it, and install the program.
Then remove all objects you find that you are not familiar
with.

We'll now have you download some programs which shall aid
you in the actual removal of spyware programs which may be
running (and causing these problems).

First, download AdAware. This is an excellent program which
detects and deletes spyware, and other malware programs.
AdAware is available from:

http://www.lavasoftusa.com/support/download/

After downloading and installing AdAware, *be sure to update
it*. This will ensure you are protected against the latest
threats. Then, run it.

Some versions can be particularly malicious - removing them
can cause you to lose your internet connection. Therefore,
we'll download the next two programs as precautionary
measures. If, after running these programs, you are unable
to connect to the internet, you may need to run these
programs to fix the connection.

They are available here:

http://www.cexx.org/lspfix.htm

and

http://www.tacktech.com/pub/winsockfix/WinsockFix.zip

Directions for the last program can be found here:
http://www.tacktech.com/display.cfm?ttid=257

Note: You'll only need to run these programs in the event
that removal of the evil programs causes some good
components to break. Otherwise, you can safely continue:

Next, we'll get CWShredder. This neat program catches
variants which may have been missed by AdAware. CWShredder
is available from:

http://www.spywareinfo.com/~merijn/files/cwshredder.zip

Once again, be sure to update it to ensure the latest threat
protection.

Lastly, you may find it necessary to rename your HOSTS file.
This step is used if you find yourself unable to connect to
specific sites. Instructions can be found here:
http://support.honour.ca/ldbh.solutions.php#blockers

The above procedures should help you remove these programs
and return your computer to a functional state.

More information about Adware and Spyware is available here:

http://mvps.org/winhelp2002/unwanted.htm


Once you are finished, run a full system scan with your antivirus
product to ensure that all loose ends are tied up.

If you have any questions or comments, don't hesitate to ask,

Best regards,

Altrus





: When I open a page in IE, advertising links are created on some words where
: original page does not have a link. Looks like I have loaded some "add-on"
: that creates these links. If I refresh a page links are gone but they are
: back if I get to page from somewhere else (Favorites or History, or by
: clicking on legit link on some other page).
: These new links ussualy take me to pages like
: http://www2.popupsearches.com/search.php?query=home
:
: I ran McAfee virus scan and checked for spyware but could not find anything
: to solve it. I am reluctant to delete stuff from registry since I am not sure
: where in registry to look for potential cause of the problem.
: Any ideas?
: Thanks.
 
G

Guest

Thanks for the help. I ran MS AntiSpyware that found and removed cause of my
problem. PC is fine now. No popups and unwanted links.
 
A

Altrüs

Glad to have been of some help.

:)

Regards,

Altrus

: Thanks for the help. I ran MS AntiSpyware that found and
removed cause of my
: problem. PC is fine now. No popups and unwanted links.
:
:
:
: "Altrüs" wrote:
:
: > Hi,
: >
: > It does indeed sound like spyware or adware. As a result,
we're going to
: > thoroughly scan the computer for any kind of spyware/adware
program and remove
: > it. This will require downloading some third party tools,
however, they are all
: > free.
: >
: >
: > You may first want to remove any third party helper
: > objects. This is best done by a program called BHOCop.
: > You can download BHOcop, and view an introduction to it,
: > from the following sites:
: >
: > Download from:
: > http://support.honour.ca/bin/bhocop.zip
: > Introduction at:
: > http://www.pcmag.com/article2/0,1759,97081,00.asp
: >
: > Once you download the file, run it, and install the program.
: > Then remove all objects you find that you are not familiar
: > with.
: >
: > We'll now have you download some programs which shall aid
: > you in the actual removal of spyware programs which may be
: > running (and causing these problems).
: >
: > First, download AdAware. This is an excellent program which
: > detects and deletes spyware, and other malware programs.
: > AdAware is available from:
: >
: > http://www.lavasoftusa.com/support/download/
: >
: > After downloading and installing AdAware, *be sure to update
: > it*. This will ensure you are protected against the latest
: > threats. Then, run it.
: >
: > Some versions can be particularly malicious - removing them
: > can cause you to lose your internet connection. Therefore,
: > we'll download the next two programs as precautionary
: > measures. If, after running these programs, you are unable
: > to connect to the internet, you may need to run these
: > programs to fix the connection.
: >
: > They are available here:
: >
: > http://www.cexx.org/lspfix.htm
: >
: > and
: >
: > http://www.tacktech.com/pub/winsockfix/WinsockFix.zip
: >
: > Directions for the last program can be found here:
: > http://www.tacktech.com/display.cfm?ttid=257
: >
: > Note: You'll only need to run these programs in the event
: > that removal of the evil programs causes some good
: > components to break. Otherwise, you can safely continue:
: >
: > Next, we'll get CWShredder. This neat program catches
: > variants which may have been missed by AdAware. CWShredder
: > is available from:
: >
: > http://www.spywareinfo.com/~merijn/files/cwshredder.zip
: >
: > Once again, be sure to update it to ensure the latest threat
: > protection.
: >
: > Lastly, you may find it necessary to rename your HOSTS file.
: > This step is used if you find yourself unable to connect to
: > specific sites. Instructions can be found here:
: > http://support.honour.ca/ldbh.solutions.php#blockers
: >
: > The above procedures should help you remove these programs
: > and return your computer to a functional state.
: >
: > More information about Adware and Spyware is available here:
: >
: > http://mvps.org/winhelp2002/unwanted.htm
: >
: >
: > Once you are finished, run a full system scan with your
antivirus
: > product to ensure that all loose ends are tied up.
: >
: > If you have any questions or comments, don't hesitate to ask,
: >
: > Best regards,
: >
: > Altrus
: >
: >
: >
: >
: >
: > : > : When I open a page in IE, advertising links are created on
some words where
: > : original page does not have a link. Looks like I have
loaded some "add-on"
: > : that creates these links. If I refresh a page links are
gone but they are
: > : back if I get to page from somewhere else (Favorites or
History, or by
: > : clicking on legit link on some other page).
: > : These new links ussualy take me to pages like
: > : http://www2.popupsearches.com/search.php?query=home
: > :
: > : I ran McAfee virus scan and checked for spyware but could
not find anything
: > : to solve it. I am reluctant to delete stuff from registry
since I am not sure
: > : where in registry to look for potential cause of the
problem.
: > : Any ideas?
: > : Thanks.
: >
: >
: >
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top