Orbit Explorer

[Alric Knebel]

Recently, an extremely aggressive form of popup -- and hard to spot as
such -- has taken over IE. Whenever a link can not be found, the original
white page describing the failure comes up (you're all familiar with this
page: it has the red underlined hyperlinks about Internet Settings and so
on), but is quickly replaced by something that looks almost identical to
it, except the URL is something called Orbitexplorer. At the same time this
page appears, an "expanded banner" also appears in a new IE window, with a
URL http://images.trafficmp.com/tmpad/ (with other stuff after the "tmpad,"
depending on the ad); it's minimized but you can open it all the way. I
know that there is something hijacking IE, but I can't locate the file doing
it. I've tried searching for key words, and all I get is some temp files in
the Temp folder.

Orbit Explorer is just a search engine, with a home page. The page that
comes up is a facsimile of the "Page Not Found" page so familiar to us, and
I guess the developers are hoping we're tricked by it. Help me if you can.
E-mail me if you want to.

Alric Knebel

 

[maggie]

go to safer-networking.org to get spybot to clean your
browser hijacker off plus use immunize feature.and block
bad pages.
or lavasoftusa.com for ad-aware to do same.
spyware is scum.

 

[Frank Saunders, MS-MVP]

Recently, an extremely aggressive form of popup -- and hard to spot as
such -- has taken over IE. Whenever a link can not be found, the
original white page describing the failure comes up (you're all
familiar with this page: it has the red underlined hyperlinks about
Internet Settings and so on), but is quickly replaced by something
that looks almost identical to it, except the URL is something called
Orbitexplorer. At the same time this page appears, an "expanded
banner" also appears in a new IE window, with a URL
http://images.trafficmp.com/tmpad/ (with other stuff after the
"tmpad," depending on the ad); it's minimized but you can open it all
the way. I know that there is something hijacking IE, but I can't
locate the file doing it. I've tried searching for key words, and
all I get is some temp files in the Temp folder.

Orbit Explorer is just a search engine, with a home page. The page
that comes up is a facsimile of the "Page Not Found" page so familiar
to us, and I guess the developers are hoping we're tricked by it.
Help me if you can. E-mail me if you want to.

Alric Knebel

First eliminate any scumware.
See
Dealing with Unwanted Spyware, Parasites, Toolbars and Search Engines
http://mvps.org/winhelp2002/unwanted.htm

Note that AdAware and SpyBot S & D will each catch some things the other
won't. Also, each needs to be updated before every use, even when just
downloaded. There's also a lot more to do than just those two programs.
CWShredder is also available here:
http://www.kellys-korner-xp.com/regs_edits/cwshredder.zip
**Post your HijackThis log to
http://forums.spywareinfo.com/ or the Spyware forum at
http://forum.aumha.org/ for expert analysis, not here.**
Alternative download pages for Ad-Aware, Spybot, HijackThis and CWShredder
may be found on this page:
http://aumha.org/a/parasite.htm.
If trying everything at that site does not fix the problem please post back
in the same thread.

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com/security/protect/

 

[Alric Knebel]

First eliminate any scumware.
See
Dealing with Unwanted Spyware, Parasites, Toolbars and Search Engines
http://mvps.org/winhelp2002/unwanted.htm

Note that AdAware and SpyBot S & D will each catch some things the other
won't. Also, each needs to be updated before every use, even when just
downloaded. There's also a lot more to do than just those two programs.
CWShredder is also available here:
http://www.kellys-korner-xp.com/regs_edits/cwshredder.zip
**Post your HijackThis log to
http://forums.spywareinfo.com/ or the Spyware forum at
http://forum.aumha.org/ for expert analysis, not here.**
Alternative download pages for Ad-Aware, Spybot, HijackThis and CWShredder
may be found on this page:
http://aumha.org/a/parasite.htm.
If trying everything at that site does not fix the problem please post back
in the same thread.

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com/security/protect/

Thanks a million. It worked. I tested it over and over and Orbit Explorer
is GONE.

Alric

 

[Frank Saunders, MS-MVP]

Thanks a million. It worked. I tested it over and over and Orbit
Explorer is GONE.

Alric

Thanks for the feedback.

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com/security/protect/