Fixing a tricky browser hijack

[Brainstormer]

I have google set up as my browser home page.
There is a translation program called babylon
that has stolen the link even though I keep changing it back.

I did a full spybot scan and also a quick malwarebytes
scan and it didn't find it. I'm about to do a full malwarebytes
scan.

I did check out the .js file and it had
nothing custom written in it. In fact, it
seems it has nothing but a commented note.

I selected "default" for the Home URL and so it has the Firefox one
in there now, but I'm still having the problem. There are all these
"sponsored links"
that come up on the first full page of results, so you don't see
any google results until you scroll down.

I also did an msconfig to see if it was starting up and a control alt
delete to see if it was there. I did uninstall it yesterday.

There is a site that describes it but it wants a fee.

Anyone have any ideas?

 

[Char Jackson]

I have google set up as my browser home page.
There is a translation program called babylon
that has stolen the link even though I keep changing it back.

I did a full spybot scan and also a quick malwarebytes
scan and it didn't find it. I'm about to do a full malwarebytes
scan.

I did check out the .js file and it had
nothing custom written in it. In fact, it
seems it has nothing but a commented note.

I selected "default" for the Home URL and so it has the Firefox one
in there now, but I'm still having the problem. There are all these
"sponsored links"
that come up on the first full page of results, so you don't see
any google results until you scroll down.

I also did an msconfig to see if it was starting up and a control alt
delete to see if it was there. I did uninstall it yesterday.

There is a site that describes it but it wants a fee.

Anyone have any ideas?

Does anything at this link help you?
http://forums.cnet.com/5208-6122_102-0.html?messageID=3006321

 

[Leythos]

Path: news.astraweb.com!border5.newsrouter.astraweb.com!flph200.ffdc.sbc.com!prodigy.net!flph199.ffdc.sbc.com!prodigy.com!flpi107.ffdc.sbc.com!nlpi065.nbdc.sbc.com.POSTED!1244ae27!not-for-mail
From: "Leythos" <[email protected]>
Newsgroups: alt.comp.anti-virus
References: <[email protected]>
In-Reply-To: <[email protected]>
Subject: Re: Fixing a tricky browser hijack
Lines: 47
MIME-Version: 1.0
Content-Type: text/plain; format=flowed; charset="iso-8859-1"; reply-type=original
Content-Transfer-Encoding: 7bit
X-Newsreader: Microsoft Windows Mail 6.0.6001.18000
X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6001.18049
X-Antivirus: avast! (VPS 090513-0, 05/13/2009), Outbound message
X-Antivirus-Status: Clean
Message-ID: <[email protected]>
NNTP-Posting-Host: 76.198.93.184
X-Complaints-To: (e-mail address removed)
X-Trace: nlpi065.nbdc.sbc.com 1242246310 ST000 76.198.93.184 (Wed, 13 May 2009 16:25:10 EDT)
NNTP-Posting-Date: Wed, 13 May 2009 16:25:10 EDT
Organization: at&t http://my.att.net/
X-UserInfo1: TSU[@ION_BWWR\X[ZZOFJFTBTR\B@GXLN@GZ_GYO^BVNDQUBLNTC@AWZWDXZXQ[K\FFSKCVM@F_N_DOBWVWG__LG@VVOIPLIGX\\BU_B@\P\PFX\B[APHTWAHDCKJF^NHD[YJAZMCY_CWG[SX\Y]^KC\HSZRWSWKGAY_PC[BQ[BXAS\F\\@DMTLFZFUE@\VL
Date: Wed, 13 May 2009 13:25:11 -0700

Use my Remove-it software, it will remove that from your system. Choose yes
for all options when prompted. Download it here http://www.ms-mvp.org/


--
The Real Truth http://pcbutts1-therealtruth.blogspot.com/
*WARNING* Do NOT follow any advice given by the people listed below.
They do NOT have the expertise or knowledge to fix your issue. Do not waste
your time.
David H Lipman, Malke, PA Bear, Beauregard T. Shagnasty, Leythos.

Abuse complaint send to ATT/Prodigy, again.

 

[Beauregard T. Shagnasty]

Use my [STOLEN] Remove-it software, it will remove that from your
system. Choose yes for all options when prompted. Download it here
http://www.ms- mvp. org/

-
The Real Truth http://pcbutts1 -therealtruth. blogspot.com/
*WARNING* Do NOT follow any advice given by the people listed below.
They do NOT have the expertise or knowledge to fix your issue. Do not
waste your time.
David H Lipman, Malke, PA Bear, Beauregard T. Shagnasty, Leythos.

............................................................^^^^^^^

So, you forged Leythos' name, then in your sig told the OP you "do NOT
have the expertise" to help? How amusing is that!!?

 

[FromTheRafters]

Use my [STOLEN] Remove-it software, it will remove that from your
system. Choose yes for all options when prompted. Download it here
http://www.ms- mvp. org/

-
The Real Truth http://pcbutts1 -therealtruth. blogspot.com/
*WARNING* Do NOT follow any advice given by the people listed below.
They do NOT have the expertise or knowledge to fix your issue. Do not
waste your time.
David H Lipman, Malke, PA Bear, Beauregard T. Shagnasty, Leythos.

...........................................................^^^^^^^

So, you forged Leythos' name, then in your sig told the OP you "do NOT
have the expertise" to help? How amusing is that!!?

Reminds me of an episode of "Star Trek" with Harcourt Fenton Mudd's
robots.