Google Bug ?

[Guest]

I seem to be having problems getting rid of some sort of advertising bot or
virus. If i do a google search, it is only on the third attempt that i
actually get to where i want to go. Example, search google for royal mail,
result and link appears in search result, click on it, and get sent to some
oddball site, same next attempt, third attempt, direct to royal mail site?

I've tried, Registry Mechanic, AVG, Xoftspy, adaware, and even a Mcaffee
download which was excellent at getting rid of a blue screen virus. Maybe my
problem is a left over from this?

One other thing, AVG scan always finds a different file in the system32
folder that has a reading error. It's never the same file that is found ?

Any ideas anyone ?

Thanks Bob

 

[Juan]

Your problem is the Xoftspy application, that program is known to delete
spyware and install others.... the different files found by AVG may be
related but you won't know until you remove the Xoftspy and scan with
Adaware fully updated, as the Xoftspy may leave a bug behind. Also have a
look in Start\Run\msconfig\Startup and see if any unknown application is
running and uncheck it to disable it, and next go to Start\Run\regedit\ and
see in the Run keys of the Local Machine and the Current User hives and
delete any suspicious value.... Normal there are; Default value, antivirus
values [maybe a couple], msoffice, messenger and CTFMON...
delete any other value if present.

Look in these keys for unknown suspicious values.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

 

[Guest]

Hi

I tried to follow your advice as best as possible with limited knowledge on
my part.
Deleted Xoftspy.
Carried out AVG scan, found a file with a reading error, as is normal, this
time it is named DMNQK.EXE.

Following you guide I went into regedit and tried to delete this file, but
it reappears if you go back into regedit ? So I renamed it with a .DOC
extension just in case it is supposed to be there?

HKEY_CURRENT_USER \ software\etc looks fairly clean and basic, the other
one, LOCAL MACHINE, does have several entries as you said. I'm not too
competent to play around in here, but did rename a file as described above.

My Adaware is obviously not a full version as it does not update
automatically or manually, so it looks like I will have to buy that one.

Google still doing as usual, third hit gets you to the search you wanted,
other 2 take you to all different sites.

Many thanks for your assistance
Bob

Your problem is the Xoftspy application, that program is known to delete
spyware and install others.... the different files found by AVG may be
related but you won't know until you remove the Xoftspy and scan with
Adaware fully updated, as the Xoftspy may leave a bug behind. Also have a
look in Start\Run\msconfig\Startup and see if any unknown application is
running and uncheck it to disable it, and next go to Start\Run\regedit\
and
see in the Run keys of the Local Machine and the Current User hives and
delete any suspicious value.... Normal there are; Default value, antivirus
values [maybe a couple], msoffice, messenger and CTFMON...
delete any other value if present.

Look in these keys for unknown suspicious values.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

------------------------------------------

I seem to be having problems getting rid of some sort of advertising bot or
virus. If i do a google search, it is only on the third attempt that i
actually get to where i want to go. Example, search google for royal
mail,
result and link appears in search result, click on it, and get sent to some
oddball site, same next attempt, third attempt, direct to royal mail
site?

I've tried, Registry Mechanic, AVG, Xoftspy, adaware, and even a Mcaffee
download which was excellent at getting rid of a blue screen virus. Maybe my
problem is a left over from this?

One other thing, AVG scan always finds a different file in the system32
folder that has a reading error. It's never the same file that is found ?

Any ideas anyone ?

Thanks Bob

 

[Guest]

GOT IT !!!!
Scanned with Registry Mechanic, got rid of a couple of items, and found one
of the files I get a reading error with when AVG scans.
Went back to regedit, and deleted the one I renamed with the .doc extension,
and a new one ? DMTKV.EXE ?
Google back now to search and find site on the first hit.
Thanks
bob

Your problem is the Xoftspy application, that program is known to delete
spyware and install others.... the different files found by AVG may be
related but you won't know until you remove the Xoftspy and scan with
Adaware fully updated, as the Xoftspy may leave a bug behind. Also have a
look in Start\Run\msconfig\Startup and see if any unknown application is
running and uncheck it to disable it, and next go to Start\Run\regedit\
and
see in the Run keys of the Local Machine and the Current User hives and
delete any suspicious value.... Normal there are; Default value, antivirus
values [maybe a couple], msoffice, messenger and CTFMON...
delete any other value if present.

Look in these keys for unknown suspicious values.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

------------------------------------------

I seem to be having problems getting rid of some sort of advertising bot or
virus. If i do a google search, it is only on the third attempt that i
actually get to where i want to go. Example, search google for royal
mail,
result and link appears in search result, click on it, and get sent to some
oddball site, same next attempt, third attempt, direct to royal mail
site?

I've tried, Registry Mechanic, AVG, Xoftspy, adaware, and even a Mcaffee
download which was excellent at getting rid of a blue screen virus. Maybe my
problem is a left over from this?

One other thing, AVG scan always finds a different file in the system32
folder that has a reading error. It's never the same file that is found ?

Any ideas anyone ?

Thanks Bob

 

[Juan]

Which Adaware are you speaking of? Adaware SE Personal is free, and can be
updated manually, if you want to full version you need to pay around $29.00
but you get automatic functions and an autodetect feature much like an
antivirus protection but for spyware, adware, trojans, etc. and it's
probably the best antispyware around. Any way that depends on you. good
luck!

------------------------

GOT IT !!!!
Scanned with Registry Mechanic, got rid of a couple of items, and found one
of the files I get a reading error with when AVG scans.
Went back to regedit, and deleted the one I renamed with the .doc extension,
and a new one ? DMTKV.EXE ?
Google back now to search and find site on the first hit.
Thanks
bob

Your problem is the Xoftspy application, that program is known to delete
spyware and install others.... the different files found by AVG may be
related but you won't know until you remove the Xoftspy and scan with
Adaware fully updated, as the Xoftspy may leave a bug behind. Also have a
look in Start\Run\msconfig\Startup and see if any unknown application is
running and uncheck it to disable it, and next go to Start\Run\regedit\
and
see in the Run keys of the Local Machine and the Current User hives and
delete any suspicious value.... Normal there are; Default value, antivirus
values [maybe a couple], msoffice, messenger and CTFMON...
delete any other value if present.

Look in these keys for unknown suspicious values.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

------------------------------------------

I seem to be having problems getting rid of some sort of advertising

bot
or

virus. If i do a google search, it is only on the third attempt that i
actually get to where i want to go. Example, search google for royal
mail,
result and link appears in search result, click on it, and get sent to some
oddball site, same next attempt, third attempt, direct to royal mail
site?

I've tried, Registry Mechanic, AVG, Xoftspy, adaware, and even a Mcaffee
download which was excellent at getting rid of a blue screen virus.

Maybe
my

problem is a left over from this?

One other thing, AVG scan always finds a different file in the system32
folder that has a reading error. It's never the same file that is found ?

Any ideas anyone ?

Thanks Bob