SurferBar - IE gets redirected

[CW]

Every time I start IE my browser gets redirected to
www.surferbar.com. I have change the homepage but
something keeps changing it and redirecting me to
www.suferbar.com. How can I unistall this?

 

[Frank Saunders MS-MVP, IE/OE]

get and run these programs (if you test after each one you can stop when the
problem is gone):
Ad-Aware:
http://www.lavasoftusa.com
Once installed make sure to update via online before scanning!
and
SpyBot - Search & Destroy -
http://security.kolla.de/
http://security.kolla.de/index.php?lang=en&page=download
http://spybot.eon.net.au/
http://www.tomcoyote.org/SPYBOT/
Once installed make sure to update via online before scanning!
and
BHO Demon: http://www.spywareinfo.com/downloads/bhod/

Until the problem is solved.

If you still have problems, some ISP's provide a customized version of IE.
Some Web pages will also reset your home page and do this. One of the
customizations they might make is to disable the ability to change the home
page, so that you are forced to use their home page. You can re-enable this
by making a small change in the Windows registry.

In Regedit, navigate to this key:

HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control
Panel

In the right-hand pane, right-click the "HomePage" value, then select
Modify. Change it to: 00 00 00 00

Also change either or these to zero 0 instead of 1 if present:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explo
rer] - DWORD "NoSetHomePage"=dword:00000001

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet
Explorer\Restrictions] - DWORD "NoSetHomePage"=dword:00000001

If you don't have this key, browse to:

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main

and in the right hand pane, double click "Local Page" and set equal to
"C:\WINDOWS\System\blank.htm" (no quotes) which will hopefully set your Home
Page to blank and then allow you to subsequently modify it using Internet
Options.

Exit regedit and reboot.

When you reboot, you should be able to change the home page again.

Some pages will also download a program which keeps changing it back. Go to
Start | Run and type:
msconfig
and press <Enter> or click OK. Go to the Startup tab.
See if you can identify any suspicious programs. If you can, uncheck it, If
you can't, change the home page to what you want and then uncheck one and
then reboot. Try IE. If the Web page changed, change it back and then try
msconfig again, rechecking the last one and unchecking the next. Keep doing
this until you find the culprit.



You might also want to look at this little program. I haven't tried it, but
I've read encouraging reports:

http://www.pjwalczak.com/spguard/

 

[Tracy]

I am having the same problem with my IE - this
surferbar.com has somehow taken control of it, and added
a navigation bar to my IE that I have to see if I want to
type an address. How can I get rid of this?

 

[currius]

After a little research this is wahtI found:

08/31/03 18:05:26 whois www.surferbar.com
..com is a domain of USA & International Commercial
Searches for .com can be run at http://www.crsnic.net/

whois -h whois.crsnic.net surferbar.com ...
Redirecting to INTERCOSMOS MEDIA GROUP, INC. D/B/A DIRECTNIC.COM

whois -h whois.directnic.com surferbar.com ...
Registration and WHOIS Service Provided By: directNIC.com



Intercosmos Media Group, Inc. provides the data in the directNIC.com

Registrar WHOIS database for informational purposes only. The information

may only be used to assist in obtaining information about a domain name's

registration record.



directNIC makes this information available "as is," and does not guarantee

its accuracy.


Registrant:
Surfer Bar
545 8th Av. STE 401 New York
NY 10018
New York, NY 10018
US
+00.12343442424


Domain Name: SURFERBAR.COM

Administrative Contact:
Bar, Surfer (e-mail address removed)
545 8th Av. STE 401 New York
NY 10018
New York, NY 10018
US
+00.12343442424


Technical Contact:
Bar, Surfer (e-mail address removed)
545 8th Av. STE 401 New York
NY 10018
New York, NY 10018
US
+00.12343442424


Record last updated 08-27-2003 03:04:03 AM
Record expires on 08-26-2004
Record created on 08-26-2003

Domain servers in listed order:
NS1.RACKSHACK.NET 207.218.223.132
NS2.RACKSHACK.NET 207.218.223.162


By submitting a WHOIS query, you agree you will use this data only for

lawful purposes. You also agree that, under no circumstances, will you use

this data to: a) allow, enable, or otherwise support the transmission by

email, telephone, or facsimile of mass, unsolicited, commercial advertising

or solicitations to entities other than the data recipient's own existing

customers; or to (b) enable high volume, automated, electronic processes

that send queries or data to the systems of any Registry Operator or

ICANN-Accredited registrar.



The compilation, repackaging, dissemination, or other use of this WHOIS

data is expressly prohibited without the prior written consent of

directNIC.com.



directNIC.com reserves the right to terminate your access to its WHOIS

database in its sole discretion, including without limitation, for

excessive querying of the database or for failure to otherwise abide by

this policy.



directNIC reserves the right to modify these terms at any time.



NOTE: THE WHOIS DATABASE IS A CONTACT DATABASE ONLY.

LACK OF A DOMAIN RECORD DOES NOT SIGNIFY DOMAIN AVAILABILITY.

Maybe we have found the culprit?

G'Day....

 

[Mike Burgess]

Tracy,
Dealing with Unwanted Spyware, Parasites, Toolbars and Search Engines
http://mvps.org/winhelp2002/unwanted.htm

Note: Suferbar is not yet detected by Ad-Aware\SpyBot
You will need to use HijackThis! ......
_______________________________________
Mike Burgess http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 8-31-03]
Please post replies to this Newsgroup, email address is invalid
--