Searching instead of Downloading

B

bobT

When I try and download software, i.e. internet explorer
6.0 or Zonealarm (free download) the following site
appears instead of the download http://www.best-
search.info/1526/. How do I get rid of this search
engine?
 
F

Frank Saunders, MS-MVP

bobT said:
When I try and download software, i.e. internet explorer
6.0 or Zonealarm (free download) the following site
appears instead of the download http://www.best-
search.info/1526/. How do I get rid of this search
engine?
Click to expand...

First eliminate any scumware.
See
Dealing with Unwanted Spyware, Parasites, Toolbars and Search Engines
http://mvps.org/winhelp2002/unwanted.htm

Note that AdAware and SpyBot S & D will each catch some things the other
won't. Also, each needs to be updated before every use, even when just
downloaded. There's also a lot more to do than just those two programs.
CWShredder is also available here:
http://www.kellys-korner-xp.com/regs_edits/cwshredder.zip
**Post your HijackThis log to
http://forums.spywareinfo.com/ or the Spyware forum at
http://forum.aumha.org/ for expert analysis, not here.**
Alternative download pages for Ad-Aware, Spybot, HijackThis and CWShredder
may be found on this page:
http://aumha.org/a/parasite.htm.
If trying everything at that site does not fix the problem please post back
in the same thread.

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com/security/protect/
 
B

BobT

I am using Spybot, Spywareblaster, and Ad-aware; however
everytime I click "download" to get any of the below
mentioned software, I am brought back to ://www.best-files, cookies etc. Should I empty my Temp Folder?
 
F

Frank Saunders, MS-MVP

H

H Leboeuf

Make sure this is not blocked by a Hosts file.
Look also for a file named HOSTS (no extension, could be hidden) rename it
OLDHOSTS.


Try this: Tools > Internet Options > Advanced > Browsing
Uncheck the Enable 3rd party browser extensions

If this clears your problem then find out who the culprit(s) is/are with
these tools.

p.s Reset the 3rd party browser setting. When problem solved.
--

The presence of http:/// is indicative of CoolWebSearch trojan.

======

Go to http://www.spywareinfo.com/downloads.php#det
Download "Hijack This!" [freeware] or download direct (below):
http://www.merijn.org/files/hijackthis.zip

If you get a 404 error or Access denied, try:
http://216.180.252.218/~spywareinfo.com/downloads/tools/hijackthis.zip

Unzip, double-click "HijackThis.exe" and Press "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log"
button.
Click: "Save Log" (generates "hijackthis.log")

Next, HijackThis | Config [button] | Misc Tools [button]
Click: Generate StartupList log [button] (generates "startuplist.txt")

Next, go to the below location:
http://www.spywareinfo.com/forums/

Sign in, then copy and paste both files in your message.

HijackThis Quick Start Help
http://www.tomcoyote.org/hjt/

The Tutorial if you want to know more about the results or the .log file.
http://www.merijn.org/htlogtutorial.html
_______________________________________
Source: Mike Burgess http://www.mvps.org/winhelp2002/


Let us know how you make out.

Henri Leboeuf
Web page: http://www.generation.net/~hleboeuf/index.htm
 
B

BobT

I ended up to a system restore to 1 day before I noticed
this happening. That worked. Thanks BobT
-----Original Message-----
Make sure this is not blocked by a Hosts file.
Look also for a file named HOSTS (no extension, could be hidden) rename it
OLDHOSTS.


Try this: Tools > Internet Options > Advanced > Browsing
Uncheck the Enable 3rd party browser extensions

If this clears your problem then find out who the culprit (s) is/are with
these tools.

p.s Reset the 3rd party browser setting. When problem solved.
--

The presence of http:/// is indicative of CoolWebSearch trojan.

======

Go to http://www.spywareinfo.com/downloads.php#det
Download "Hijack This!" [freeware] or download direct (below):
http://www.merijn.org/files/hijackthis.zip

If you get a 404 error or Access denied, try:
http://216.180.252.218/~spywareinfo.com/downloads/tools/h ijackthis.zip

Unzip, double-click "HijackThis.exe" and Press "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log"
button.
Click: "Save Log" (generates "hijackthis.log")

Next, HijackThis | Config [button] | Misc Tools [button]
Click: Generate StartupList log [button] (generates "startuplist.txt")

Next, go to the below location:
http://www.spywareinfo.com/forums/

Sign in, then copy and paste both files in your message.

HijackThis Quick Start Help
http://www.tomcoyote.org/hjt/

The Tutorial if you want to know more about the results or the .log file.
http://www.merijn.org/htlogtutorial.html
_______________________________________
Source: Mike Burgess http://www.mvps.org/winhelp2002/


Let us know how you make out.

Henri Leboeuf
Web page: http://www.generation.net/~hleboeuf/index.htm


Yes and still cannot download in
message do
than just those
Click to expand...

.
Click to expand...
 
M

MSFT

I am stuck in the same spot, ite. http:/// when I try to download. I have
disabled Active X controls and plug ins and now I can download but I am
still looking to remove this thing permanently.

Any thoughts? Is there some sort of Active X and plug in logger I can run
to see what starts up in when I try to download a file?
 
F

Frank Saunders, MS-MVP IE/OE

MSFT said:
I am stuck in the same spot, ite. http:/// when I try to download. I
have disabled Active X controls and plug ins and now I can download
but I am still looking to remove this thing permanently.

Any thoughts? Is there some sort of Active X and plug in logger I
can run to see what starts up in when I try to download a file?
Click to expand...

First eliminate any scumware.
See
Dealing with Unwanted Spyware, Parasites, Toolbars and Search Engines
http://mvps.org/winhelp2002/unwanted.htm

Note that AdAware and SpyBot S & D will each catch some things the other
won't. Also, each needs to be updated with the program's update function
before every use, even when just downloaded. There's also a lot more to do
than just those two programs. CWShredder is also available here:
http://www.kellys-korner-xp.com/regs_edits/cwshredder.zip
**Post your HijackThis log to
http://forums.spywareinfo.com/ or the Spyware forum at
http://forum.aumha.org/ for expert analysis, not here.**
Alternative download pages for Ad-Aware, Spybot, HijackThis and CWShredder
may be found on this page:
http://aumha.org/a/parasite.htm.
If trying everything at that site does not fix the problem please post back
in the same thread.

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com/security/protect/
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Can not download 2
Ad popup!! 1
Smart-Finder has hijacked my IE 6 home page 2
i keep getting redirected 4
Download Web Site has been hijacked 1
Cannot Download with IE6 under Win XP Pro SP2 & Zonealarm Security 4
Smarter Downloading?? 2
Can no longer find IE6 1

Top