Googles goes to wrong website/Virus?

[Guest]

Hi!

I have Windows MCE, IE 6 (problem happens with 7.0 too). When I use Google,
it initially appears to work correctly. When I select one of the websites it
suggests, I get taken to a commerical website trying to sell me something
with the key word I searched with originally.

For example, if you search for <<robert delaney pmp>> Google displays a list
of websites. For me, my webiste is listed first. If I select it on my
laptop, it takes me to my website. If I select it on my desk top, it takes
me to various (never the same) websites offering things to sell related to
<<PMP>>.

I did (don't yell at me too much) install a thing a website told me I had to
install to access their website. I think it was called <<directaccess>> or
something similar. It appeared that the problem began immediately. I
deleted it using the Control Panel(Add/Remove Programs) and even upgraded to
I.E. 7.0. I have rebooted several times and always when recommended.

The problem persists.

I (now) have have Symatecs Antivirus installed and have run a full scan. It
has found no problems.

Somehow, the Google access to the internet appears to be hijacked.

Any ideas?

Thanks,

Bob

 

[Jon Kennedy]

This may be caused by spyware/malware that's gotten installed on
your system. Use Ad-Aware, Windows Defender and/or Spybot Search & Destroy
to remove it.

Windows Defender
http://www.microsoft.com/athome/security/spyware/software/default.mspx
Ad-Aware: http://www.lavasoftusa.com/
Spybot: http://www.safer-networking.org/en/index.html
Good sites on how to install and use Spybot -
http://www.safer-networking.org/en/tutorial/index.html
http://tomcoyote.com/SPYBOT/index1.php

Also download a winsock repair tool, to have just in case cleaning up
anything found breaks it -

Winsock repair tools:
LSPFix- all versions of Windows http://www.cexx.org/lspfix.zip
Winsock2 Fix- Win98, ME
http://www.bu.edu/pcsc/internetaccess/winsock2fix.html
LavaSoft- all versions of Windows-
http://digital-solutions.co.uk/lavasoft/whndnfix.zip

More information here:
http://www.spywareinfo.com/
http://inetexplorer.mvps.org/tshoot.html
http://spywarewarrior.com/sww-help.htm

If no joy, in IE go to Tools...Internet Options...Advanced tab, Browsing
section, uncheck "Enable third-party browser extensions", click Apply, click
Okay, reboot. If that solves your problem, then more troubleshooting is
needed to find out exactly which program, or Browser Helper Object (BHO) is
causing this problem. You don't want to leave it at that, as some BHOs are
useful or necessary - like Adobe Acrobat for reading .pdf files or an
essential component of Norton AV. Get BHODemon -
http://www.definitivesolutions.com/bhodemon.htm - read all about BHOs.
Disable all items, and then gradually replace one or two at a time to narrow
down the culprit.

Or if you have IE 6 SP-2 you can do this within the browser:
How to manage Internet Explorer add-ons in Windows XP Service Pack 2
http://support.microsoft.com/default.aspx?scid=kb;en-us;883256

If all the above fails, then the problem could be something new that the
spyware cleaners above don't have in their databases yet. In that case....
HijackThis direct download:
http://www.spywareinfo.com/~merijn/files/hijackthis.zip
Tutorial on how to use HijackThis:
http://www.spywareinfo.com/~merijn/htlogtutorial.html
Then post it's output log to the forum here for analysis and feedback by the
parasite experts:
http://forums.spywareinfo.com/
http://aumha.net/viewforum.php?f=30
Or one of the other HijackThis Logs forums listed here:
http://www.spywareinfo.com/~merijn/forums.html

Or try this program to get some of the most nasty malware:
CWShredder direct download:
http://aumha.org/downloads/cwshredder.zip

An alternate resource for all of this and more:
http://www.aumha.org/secure.htm


--

Jon Kennnedy, MS MVP/IE
Charlotte, NC, USA
(e-mail address removed)