It's a parasite.
Try this: Tools > Internet Options > Advanced > Browsing
Uncheck the Enable 3rd party browser extensions
If this clears your problem then find out who the culprit(s) is/are with
these tools.
Let AD-Aware Scan your system for advertising Spyware
http://www.lavasoftusa.com
and:
SpyBot-S&D
http://security.kolla.de/
p.s Reset the 3rd party browser setting.
More: This may be caused by a third-party program (adware, spyware,
parasite).
Get AdAware and SpyBot and run them both. Keep them up to date.
Dealing with Unwanted Spyware, Parasites, Toolbars and Search Engines
http://mvps.org/winhelp2002/unwanted.htm
Additional link:
http://aumha.org/a/quickfix.htm
You may need this removal tool.
More: Complete list by variant with up-to-date information.
http://www.spywareinfo.com/~merijn/cwschronicles.html
More: Removal tool:
http://www.spywareinfo.com/~merijn/files/CWShredder.exe
CWShredder - Tutorial
http://www.bleepingcomputer.com/forums/index.php?showtutorial=47
IMPORTANT:
Before trying to remove spyware, download a copy of LSPFIX from
the URL below - some malware may kill your internet connection when it is
removed, this program will enable you to regain your connection.
http://www.cexx.org/lspfix.htm
http://www.spychecker.com/program/winsockxpfix.html (if your OS is Win2k or
XP)
Important: "So how did I get infected in the first place?"
http://forums.net-integration.net/index.php?showtopic=3051
--
If after running these 3 tools, with the latest version then get help from
these experts.
Go to
http://www.spywareinfo.com/downloads.php#det
Download "Hijack This!" [freeware] or download direct (below):
http://www.merijn.org/files/hijackthis.zip
If you get a 404 error or Access denied, try:
http://216.180.252.218/~spywareinfo.com/downloads/tools/hijackthis.zip
Unzip the Download file in a NEW FOLDER that you can create before you start
the download.
DO NOT install in your Desktop folder.
DO NOT use any of the TEMP folders that are presently in your computer.
Double-click "HijackThis.exe" and Press "Scan".
When the scan is finished, the "Scan" button will change into a "Save Log"
button.
Click: "Save Log" (generates "hijackthis.log")
Next, HijackThis | Config [button] | Misc Tools [button]
Click: Generate StartupList log [button] (generates "startuplist.txt")
Next, go to the below location:
http://www.spywareinfo.com/forums/
Sign in, then copy and paste both files in your message.
HijackThis Quick Start Help
http://www.tomcoyote.org/hjt/
The Tutorial if you want to know more about the results or the .log file.
http://www.merijn.org/htlogtutorial.html
Henri Leboeuf
Web page:
http://www.colba.net/~hlebo49/index.htm
===
