problem with address bar, hijacked?

[R. Hamm]

Recently I get this in my address bar when I open the browser:

Enter Keyword or Web Address here

Even when my homepage is Google.com, that shows up until I search for
something or use another favorite to get there, then the true address
appears.
Also, if I type in this garbage:
sdsd
it goes here every time
http://xml.overture.com/d/search/p/igetnet/html/domainlander/?Keywords=sdsd
What is going on?
thanks
R. Hamm

 

[LuckyStrike]

R,

Want to try this and see if you can clean out the vermin?

Hijack This
http://www.tomcoyote.org/hjt/

You might also want to try one of the following if you have not done so
already (sounds like you haven't though). If you elect to obtain these
freeware for home use programs, install cleanly first (AV off), and then
using the internal feature, update and then run the program(s).

Ad-Aware
http://www.lavasoftusa.com/software/adaware/

Spybot S & D
http://security.kolla.de/

HTH -
LuckyStrike
(e-mail address removed)

 

[siljaline]

Want to try this and see if you can clean out the vermin?

Hey Lucky... this one's http://www.doxdesk.com/parasite/IGetNet.html
http://security.kolla.de/index.php?lang=en&page=knowledgebase/threats/hijackers-igetnet

HTH


--
siljaline

"Arguing with anonymous strangers on the Internet is a sucker's game
because they almost always turn out to be -- or to be indistinguishable from
-- self-righteous sixteen-year-olds possessing infinite amounts of free time."
- Neil Stephenson, _Cryptonomicon_

 

[LuckyStrike]

R.,

I have found that Hijack this is strong medicine against things that both
Ad-Aware and Spybot could not handle effectively. Once you run Hijack This,
You may be surprised what you find; I surely was. Another Item that has
proved to be effective is called SpywareBlaster. It's purpose and design is
to eliminate things from being installed unknowingly and against your wishes
in the first place.

SpywareBlaster
http://www.javacoolsoftware.com/spywareblaster.html

See also these links from Sandi Hardmeier MS-MVP
http://www.mvps.org/inetexplorer/index.html

http://www.mvps.org/inetexplorer/Darnit.htm

Best of Luck,
LuckyStrike
(e-mail address removed)
------------------------------------------

 

[LuckyStrike]

Thanks siljaline. Those two Identify and corner the beast, leaving no room
for their escape I'd say. I will add them to the ever burgeoning dastardly
deed-doer database! ;-)

LuckyStrike
(e-mail address removed)
-----------------------------

 

[Kent W. England [MVP]]

Hamm should note that it is dangerous to uninstall things with
Hijackthis. Best to post your hijackthis log here or at spywareinfo and
get an analysis of what should be deleted, unless you are very
comfortable with all the types of objects listed in hijackthis.

--
Kent W. England, Microsoft MVP for Windows


"LuckyStrike" <[email protected]>
wrote in
message news:[email protected]...

 

[LuckyStrike]

Kent,

That is correct of course, and is sound advice. My experience has been to
examine closely the contents and look at each one individually with the
"info on selected item" and a slow read. If you've run a PC for a long time
injudiciously, and without any kind of "protection" it can be a long read as
well. A close look at the URL (if there happens to be one) can also provide
insight into what may be lurking about. It is unfortunate that there isn't a
help file provided with so powerful an application and that the download
page for the app gives but a cursory overview that lacks any real
definition.

LuckyStrike
(e-mail address removed)

 

[Robin T Cox]

Kent,

That is correct of course, and is sound advice. My experience has been
to examine closely the contents and look at each one individually with
the "info on selected item" and a slow read. If you've run a PC for a
long time injudiciously, and without any kind of "protection" it can
be a long read as well. A close look at the URL (if there happens to
be one) can also provide insight into what may be lurking about. It is
unfortunate that there isn't a help file provided with so powerful an
application and that the download page for the app gives but a cursory
overview that lacks any real definition.

There is an excellent basic tutorial about HijackThis here:
http://www.spywareinfo.com/~merijn/htlogtutorial.html

As it says, however, there is no substitute for the help you'll get in the
SWI forums.

 

[LuckyStrike]

That link was jam-packed with all kinds of useful information. Impressive!
The knack of finding all of the links-->, links-->, links-->; more
impressive still. Thanks Robin.

LuckyStrike
(e-mail address removed)
----------------------------------