Hijacked

LMO · External Since: Jul 01, 2009 Posts: 1

Aloha all.
Many of my searches in IE get hijacked to places like "Coupon Mountain."
etc. When
I do a search, and click on a site, I'm sent to one of these engines instead
of the site I wanted. If I go back to the search, then click on the wanted
site again, I am then sent to the correct site, but many of my first clicks
end up hijacked to one of these unwanted engines.
I do weekely spy cleaning and virus cleanings. Is this problem on the net,
or something on my PC (Vista)? If the latter, anything I can do about it?
I asked this on the IE NG, but got no replies.
Thanks!

Randem · External Since: Jun 01, 2009 Posts: 13

One thing you must understand is that while you do a weekly cleaning you do
not clean your IE. Since you have not mentioned what spyware and AV software
you are using. I must assume you are using McAfee or Norton for your AV
software. Perhaps this will help:

Ref: http://www.randem.com/ieattacks.html
http://www.randem.com/virusproblems.html

--
Randem Systems
Your Installation Specialist
The Top Inno Setup Script Generator
http://www.randem.com/innoscript.html
Disk Read Error Press Ctl+Alt+Del to Restart
http://www.randem.com/discus/messages/9402/9406.html?1236319938

"LMO" <lmo01.TakeThisOut@yahoo.com> wrote in message news:h2hn0e$v4r$1@aioe.org...
> Aloha all.
> Many of my searches in IE get hijacked to places like "Coupon Mountain."
> etc. When
> I do a search, and click on a site, I'm sent to one of these engines
> instead
> of the site I wanted. If I go back to the search, then click on the wanted
> site again, I am then sent to the correct site, but many of my first
> clicks
> end up hijacked to one of these unwanted engines.
> I do weekely spy cleaning and virus cleanings. Is this problem on the net,
> or something on my PC (Vista)? If the latter, anything I can do about it?
> I asked this on the IE NG, but got no replies.
> Thanks!
>

Spirit · External Since: Jan 28, 2009 Posts: 10

Try IE with NO ADDONS - Start - All Programs - Accessories - System
Tools - IE with NO ADDONS

IE - Tools - Manage Add-ons

then add Prevx 3.0 Free Home and Family

http://www.prevx.com/

Set Prevx 3.0 to run all the time, it is compatible with most anti-viral and
anti-ware products. (I use Prevx and Avast Home and turn off the used
Avast Shields which for me is P2P, Outlook/Exchange, and Instant
Messaging.)

http://www.avast.com/eng/avast_4_home.html

Also use this to check for BHO's.

http://www.securityxploded.com/bhoremover.php

These maynot be needed so they are a just in case.

Download and run as a scanner Malwate Bytes, and SuperAnti-Spyware

http://malwarebytes.org/

http://www.superantispyware.com/

"LMO" <lmo01 DeleteThis @yahoo.com> wrote in message news:h2hn0e$v4r$1@aioe.org...
> Aloha all.
> Many of my searches in IE get hijacked to places like "Coupon Mountain."
> etc. When
> I do a search, and click on a site, I'm sent to one of these engines
> instead
> of the site I wanted. If I go back to the search, then click on the wanted
> site again, I am then sent to the correct site, but many of my first
> clicks
> end up hijacked to one of these unwanted engines.
> I do weekely spy cleaning and virus cleanings. Is this problem on the net,
> or something on my PC (Vista)? If the latter, anything I can do about it?
> I asked this on the IE NG, but got no replies.
> Thanks!
>

Malke · External Since: Jan 10, 2009 Posts: 132

LMO wrote:

> Aloha all.
> Many of my searches in IE get hijacked to places like "Coupon Mountain."
> etc. When
> I do a search, and click on a site, I'm sent to one of these engines
> instead of the site I wanted. If I go back to the search, then click on
> the wanted site again, I am then sent to the correct site, but many of my
> first clicks end up hijacked to one of these unwanted engines.
> I do weekely spy cleaning and virus cleanings. Is this problem on the net,
> or something on my PC (Vista)? If the latter, anything I can do about it?
> I asked this on the IE NG, but got no replies.
> Thanks!

Then whatever you are doing for cleaning isn't working because you are still
infected.

Go through the preparatory work here:

http://www.elephantboycomputers.com/page2.html#Removing_Malware

Then scan with either Malwarebytes' Anti-malware or SuperAntispyware.

When all else fails, get guided help. Choose one of the specialty forums
listed at the first link. Register and read its posting FAQ. PLEASE DO NOT
POST LOGS IN THE MS NEWSGROUPS.

If you can't do the work yourself (and there is no shame in admitting this
isn't your cup of tea), take the machine to a professional computer repair
shop (not your local equivalent of BigComputerStore/GeekSquad). Please be
aware that not all local shops are skilled at removing malware and even if
they are, your computer may be so infested that Windows will need to be
clean-installed. If possible, have all your data backed up before you take
the machine into a shop.

Malke
--
MS-MVP
Elephant Boy Computers - Don't Panic!
http://www.elephantboycomputers.com/#FAQ

Over Easy · External Since: Jul 02, 2009 Posts: 7

"Alias" <iamaliasTAKETHIS.TakeThisOut@OUTgmail.com> wrote in message
news:h2ioaq$r5c$3@news.eternal-september.org...
>
> The nymshifter pulls out his trusty ad hominem when totally refuted.
> Boring.
>
> Alias
>>
You think after all this time your posts are helpful? NOPE. Most think you
are annoying and to tell the truth you are. You are just stuck for
something to do. Pretty sad - You have to troll here to try to get people
interested in that INFERIOR OS Ubuntu that NOBODY wants. Pathetic.

Saucy · External Since: Jul 02, 2009 Posts: 37

Use Internet Options found in the Control Panel [and through Tools on IE's
menu].

First clear the browser's cache / history / Temporary Internet files etc.
completely.

Check what is your actual homepage.

Check what plug-ins are installed and running (BHOs etc.) and turn off any
suspicious.

Make sure your browser's Internet Security zone to at least medium-high
[note: that if you set it too high such as to fully Restricted, many sites
will not work].

Make sure your anti-spyware isn't spyware itself. There's lots of bogus
stuff out there. Use a known-good anti-spyware and anti-virus e.g. Grisoft's
AVG, or Avast!, Microsoft's own Windows Defender etc. etc.

http://free.grisoft.com

Then run your known-good anti-spyware and anti-virus.

If this doesn't work, take Malke's advice.

What would I do if I found my browser hijacked? To be honest, I'd freak and
reinstall Windows - but that's just me and I've taken the time to make
harddrive images etc. etc.

Saucy

"LMO" <lmo01.TakeThisOut@yahoo.com> wrote in message news:h2hn0e$v4r$1@aioe.org...
> Aloha all.
> Many of my searches in IE get hijacked to places like "Coupon Mountain."
> etc. When
> I do a search, and click on a site, I'm sent to one of these engines
> instead
> of the site I wanted. If I go back to the search, then click on the wanted
> site again, I am then sent to the correct site, but many of my first
> clicks
> end up hijacked to one of these unwanted engines.
> I do weekely spy cleaning and virus cleanings. Is this problem on the net,
> or something on my PC (Vista)? If the latter, anything I can do about it?
> I asked this on the IE NG, but got no replies.
> Thanks!
>

JEWboy · External Since: Jun 12, 2009 Posts: 28

Get:
a) PCTools SPYWARE DOCTOR (made in Ireland)
b) Symantec NortonAntivirus

These have served me for years, ocne I also was hijacked, fixed by Spyware
Doctor (not by Norton).

If you're running IE older than IE*, maybe it's time to upgrade, in this
process your hijacked might get killed by th eupgrade process, but maybe
not...
In any case Spyware Doctor is now not a newcomer, but an established leader
in killing things similar to hijacking, etc and rmeember while it costs,
nothing good is free, I pay EVERY YEAR and not sorry.

Peter Foldes · External Since: Feb 21, 2006 Posts: 933

1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/malwareremove/default.mspx

NB: Run the FULL scan, not the QUICK scan! You may need to download the
MSRT on a non-infected machine, then transfer MRT.EXE to the infected
machine and rename it to SCAN.EXE before running it.

2. [WinXP ONLY!! =>] Run the Windows Live Safety Center's 'Protection' scan
(only!) in Safe Mode with Networking, if need be:
http://onecare.live.com/site/en-us/center/howsafe.htm

3. Run a /thorough/ check for hijackware, including posting the requested
logs in an appropriate forum, not here.

Checking for/Help with Hijackware
http://aumha.net/viewtopic.php?f=30&t=4075
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://www.elephantboycomputers.com/page2.html#Removing_Malware

**Seek expert assistance in
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
http://forums.spybot.info/forumdisplay.php?f=22,
http://www.dslreports.com/forum/cleanup, http://aumha.net/viewforum.php?f=30
or other appropriate forums.**

--
Peter

Please Reply to Newsgroup for the benefit of others
Requests for assistance by email can not and will not be acknowledged.

"LMO" <lmo01.RemoveThis@yahoo.com> wrote in message news:h2hn0e$v4r$1@aioe.org...
> Aloha all.
> Many of my searches in IE get hijacked to places like "Coupon Mountain."
> etc. When
> I do a search, and click on a site, I'm sent to one of these engines instead
> of the site I wanted. If I go back to the search, then click on the wanted
> site again, I am then sent to the correct site, but many of my first clicks
> end up hijacked to one of these unwanted engines.
> I do weekely spy cleaning and virus cleanings. Is this problem on the net,
> or something on my PC (Vista)? If the latter, anything I can do about it?
> I asked this on the IE NG, but got no replies.
> Thanks!
>

Saucy · External Since: Jul 02, 2009 Posts: 37

UNIX and UNIX clones can be compromised and even rooted. Your suggestion
that just by switching to another OS instant security is gained is utterly
bogus.

Saucy

JEWboy · External Since: Jun 12, 2009 Posts: 28

It slows you down in 2 cases:
1) You don't set its setting sproperly
2) You don't disable real-time proection after you're done working in
dangerous environment.

If you know what to disable after you're done scanning/working in red-alert
zone, don't criticize the best AV in the world.
This thing brough my system from the grave after a severe attack at work
thru stupid boss's DSL box... the only thing that fixed my system with 80GB
of semi-government & military designs.

Learn how to use things.

Over Easy · External Since: Jul 02, 2009 Posts: 7

"JEWboy" <Nojunkmetalblade.TakeThisOut@nojunkprodigy.net> wrote in message
news:OtE1Hiz%23JHA.4900@TK2MSFTNGP02.phx.gbl...
> It slows you down in 2 cases:
> 1) You don't set its setting sproperly
> 2) You don't disable real-time proection after you're done working in
> dangerous environment.
>
> If you know what to disable after you're done scanning/working in
> red-alert zone, don't criticize the best AV in the world.
> This thing brough my system from the grave after a severe attack at work
> thru stupid boss's DSL box... the only thing that fixed my system with
> 80GB of semi-government & military designs.
>
> Learn how to use things.

You think Norton is the best? Figures. AVAST, AVG, or NOD is much better.
You are just crippled. Have been reading your posts. Stay away from
computers.

JEWboy · External Since: Jun 12, 2009 Posts: 28

the only free things that's better than paid for things, are out of my a*
hole
If you need, please enquire within.

Over Easy · External Since: Jul 02, 2009 Posts: 7

"JEWboy" <Nojunkmetalblade.RemoveThis@nojunkprodigy.net> wrote in message
news:Ole7zkz%23JHA.1340@TK2MSFTNGP05.phx.gbl...
> the only free things that's better than paid for things, are out of my a*
> hole
> If you need, please enquire within.

In reality, the only thing your a_hole is good for is making sure your head
stays in.

JEWboy · External Since: Jun 12, 2009 Posts: 28

Why do you bother responding to an obvious lamea** homo pedo unemployed
piece of riubbish that keeps reacting to anything he deems to be his area of
expertise?

Leave the morn to himself. You're better than spending time on him... he
will come back and call you a moron s, what? Morons usualy have
double0-vision and suspect everyone's like them.

Over Easy · External Since: Jul 02, 2009 Posts: 7

"JEWboy" <Nojunkmetalblade.TakeThisOut@nojunkprodigy.net> wrote in message
news:%233u29lz%23JHA.200@TK2MSFTNGP05.phx.gbl...
> Why do you bother responding to an obvious lamea** homo pedo unemployed
> piece of riubbish that keeps reacting to anything he deems to be his area
> of expertise?
>
> Leave the morn to himself. You're better than spending time on him... he
> will come back and call you a moron s, what? Morons usualy have
> double0-vision and suspect everyone's like them.

Oops. You are slipping. You are the MORON.

JEWboy · External Since: Jun 12, 2009 Posts: 28

if you prefer fists to words, you can request

JEWboy · External Since: Jun 12, 2009 Posts: 28

that never happens in Ubuntu.

if you insist on Windows and "beliek everyone else", you will keep being
infected like everyone else using Windows.

Get Ubuntu, then download "Microsoft STFU" plugin for Mozilla.

JEWboy · External Since: Jun 12, 2009 Posts: 28

Most dominating technical products started as a hobby, MORON.

First PC - out of Steve Wozniak's garage (Steve Jobs was the business arm of
that project), Z80 microprocessor - best classic 8-bit processor ever, that
is still in hom eappliances... after 30 years.
First Windows, known as "AppleMac OS". where Bill Gates got the idea from.

Toothbrush, X-Ray machines & radiation discovery, new vehicle features came
out of aftermarket mods, many ideas are borrowed or stolen from hobbies, I
am too tired to make a long list...
Ubuntu is a real contender and it's made in Africa, so it's got to be
quality.

Shirley

Over Easy · External Since: Jul 02, 2009 Posts: 7

"JEWboy" <Nojunkmetalblade.RemoveThis@nojunkprodigy.net> wrote in message
news:%23anvfH0%23JHA.4524@TK2MSFTNGP04.phx.gbl...
> Most dominating technical products started as a hobby, MORON.
>

You you call Jerking Off 7 times a day a hobby?

> First PC - out of Steve Wozniak's garage (Steve Jobs was the business arm
> of that project), Z80 microprocessor - best classic 8-bit processor ever,
> that is still in hom eappliances... after 30 years.
> First Windows, known as "AppleMac OS". where Bill Gates got the idea from.
>
> Toothbrush, X-Ray machines & radiation discovery, new vehicle features
> came out of aftermarket mods, many ideas are borrowed or stolen from
> hobbies, I am too tired to make a long list...
> Ubuntu is a real contender and it's made in Africa, so it's got to be
> quality.
>
> Shirley

JEWboy · External Since: Jun 12, 2009 Posts: 28

I am sorry Norton either didn't work for you or didn't bother to configure
its numerous settings properly.

Rememeber you people attacking me for not knowing "how to use" Vista?

Fact is Norton was good to me, it did take a few googles to find solutions
to its quirky issues - NETWORKING (get disabled when certain Symantec
services is disabled), other than that, I'd be tearing my hair out in
January 2009 when it saved me from disaster in Safe Mode.
I couldn't destroy slowly spreading infection, until I ran NortonAV in
SafeMode and Lord, it found one of THEE most dangerous viruses in the world
on my machine.

Free AV tends to be less powerful because people writing it are motivated
only by good will and maybe semi-government organization, when money gets
involved, product improves.
If money were involved in Linux it wouldn't be a "hobby OS".

Your Avast, etc are hobby AV's.