address bar problems & unwanted files in ie download folder

[dave]

http://search.xrenoder.com = seized control of address bar

also possible unwanted files appear in ie downloaded
program files. i listed all that appear, since i'm not
sure.
{9F1C11AA-197B-4942-BA54-47A8489BB47F}
http://v4.windowsupdate.microsoft.com/CAB/x86/ansi/iuctl.CA
B?37822.69409722

loader class
{02C20140-76F8-4763-83D5-B660107B7A90}
http://connect.online-dialer.com/MaConnect.cab

installer class
{018B7EC3-EECA-11D3-8E71-0000E82C6C0D}
http://www.xxxtoolbar.com/ist/softwares/v3.0/0006.cab

update class
{9F1C11AA-197B-4942-BA54-47A8489BB47F}
http://v4.windowsupdate.microsoft.com/CAB/x86/ansi/iuctl.CA
B?37822.69409722

shockwave class
{D27CDB6E-AE6D-11CF-96B8-444553540000}
http://download.macromedia.com/pub/shockwave/cabs/flash/swf
lash.cab

{9F1C11AA-197B-4942-BA54-47A8489BB47F}
http://v4.windowsupdate.microsoft.com/CAB/x86/ansi/iuctl.CA
B?37822.69409722

{3234504D-0000-0010-8000-00AA00389B71}
http://codecs.microsoft.com/codecs/i386/mpeg4ax.CAB

{1E89F686-B78D-4C85-9EFC-3474516E3FE2}
http://directplugin.com/plugin/109465.exe


{00000161-0000-0010-8000-00AA00389B71}
http://codecs.microsoft.com/codecs/i386/msaudio.cab

{00000130-9980-0010-8000-00AA00389B71}
http://codecs.microsoft.com/codecs/i386/ACELPACM.CAB

{00000075-9980-0010-8000-00AA00389B71}
http://codecs.microsoft.com/codecs/i386/ACELPACM.CAB

 

[Jim Byrd]

Hi Dave - This is a BHO parasite which SpyBot S&D will remove usually. If
you have it, however, you may will have other things. I would suggest the
following:

Download HijackThis, free, here:
http://www.spywareinfo.com/~merijn/files/hijackthis.zip

Unzip it to any convenient folder, start it then press Scan. Click on
SaveLog when it's finished which will create hijackthis.log. Now click the
Config button, then Misc Tools and click on Generate StartupList.log which
will create Startuplist.txt

Go to Spyware and Hijackware Removal Support, here:
http://www.spywareinfo.com/forums/index.php?s=8a236cdf61469fbad3bddbe810be0374&act=SF&f=11

Sign in, then copy and paste both files into a message asking for
assistance, Someone will answer with detailed instructions for the removal
of your parasite(s).



--
Regards, Jim Byrd, MS-MVP
Please respond in original thread in Newsgroup.


In