IE being redirected

S

Smiley

Hi,

I thought it is more likely to be an virus issue but I have scanned the
machine with paid and free software, registry cleaner but nothing showed up
as suspecious.

Use IE to do google search, I am always redirected to somewhere else. Not
what I was looking for, e.g. Oxford radio station, ended up with something
else. Also noticed the following pattern, which selected a link from the
search result, the first 2 links always appear but the 3rd one is random.
Anyone any idea ?

http://201.218.196.152/click.php?c=16b0708e0b6f767ad06f4004&r=2

http://www.search-daily.com/search.php?qq=nnnnn

http://www.growingbusiness.co.uk/06...ising-finance.html?rw.cm=Miva,PPC,nnnnn nnnnn
 
R

Ron Badour

Spyware/adware cause numerous system problems. I recommend you download and
use AdAware or Spybot (or both) on a regular basis and consider removing
everything these programs identify. Be aware that there are frequent
updates to these programs and you need to check for them before every use
including the first time.

AdAware: http://www.lavasoftusa.com/products/ad_aware_free.php

Spybot: http://www-spybot.net/

--
Regards

Ron Badour
MS MVP 1997 - 2008


"Smiley" <firework123@googlemail.com> wrote in message
news:ffn5p1$g1a$2$8300dec7@news.demon.co.uk...
> Hi,
>
> I thought it is more likely to be an virus issue but I have scanned the
> machine with paid and free software, registry cleaner but nothing showed
> up as suspecious.
>
> Use IE to do google search, I am always redirected to somewhere else. Not
> what I was looking for, e.g. Oxford radio station, ended up with something
> else. Also noticed the following pattern, which selected a link from the
> search result, the first 2 links always appear but the 3rd one is random.
> Anyone any idea ?
>
> http://201.218.196.152/click.php?c=16b0708e0b6f767ad06f4004&r=2
>
> http://www.search-daily.com/search.php?qq=nnnnn
>
> http://www.growingbusiness.co.uk/06...ising-finance.html?rw.cm=Miva,PPC,nnnnn nnnnn
>
>
>
>
 
L

Leythos

In article <ffn5p1$g1a$2$8300dec7@news.demon.co.uk>, firework123
@googlemail.com says...
> Hi,
>
> I thought it is more likely to be an virus issue but I have scanned the
> machine with paid and free software, registry cleaner but nothing showed up
> as suspecious.
>
> Use IE to do google search, I am always redirected to somewhere else. Not
> what I was looking for, e.g. Oxford radio station, ended up with something
> else. Also noticed the following pattern, which selected a link from the
> search result, the first 2 links always appear but the 3rd one is random.
> Anyone any idea ?
>
> http://201.218.196.152/click.php?c=16b0708e0b6f767ad06f4004&r=2
>
> http://www.search-daily.com/search.php?qq=nnnnn
>
> http://www.growingbusiness.co.uk/06...ising-finance.html?rw.cm=Miva,PPC,nnnnn nnnnn

The following links will take you to vendors sites for Spy Ware / Ad
ware removal tools and also for Antivirus tools. After you install any
of these applications and update them, run them in SAFE MODE to allow
them to properly clean your system.

First, make sure that your Java is updated to the latest version:
http://www.java.com/en/download/index.jsp

These sites are for downloading Anti-Malware and Anti-Spyware tools, in
order that I would use them myself:

Dave Lipman's tools:
Download MULTI_AV.EXE from the URL --
http://www.pctipp.ch/ds/28400/28470/Multi_AV.exe

AdAwareSE can be found here:
http://www.lavasoft.com/products/ad_aware_free.php

SpyBot Search and Destroy can be found here:
http://www.safer-networking.org/en/download/index.html

Secured2K's AntiPauper (download link/info at)
http://secured2k.home.comcast.net/tools/AntiPuper.exe

Rogue Fix - This removal tool is the property of Internet Inspiration
http://www.internetinspiration.co.uk/roguefix.htm

--

Leythos
- Igitur qui desiderat pacem, praeparet bellum.
- Calling an illegal alien an "undocumented worker" is like calling a
drug dealer an "unlicensed pharmacist"
spam999free@rrohio.com (remove 999 for proper email address)
 
S

Smiley

I have run them many time but nothing showed up.


"Ron Badour" <Sorry@NoAddress.com> wrote in message
news:OXhJvriFIHA.3940@TK2MSFTNGP05.phx.gbl...
> Spyware/adware cause numerous system problems. I recommend you download
> and use AdAware or Spybot (or both) on a regular basis and consider
> removing everything these programs identify. Be aware that there are
> frequent updates to these programs and you need to check for them before
> every use including the first time.
>
> AdAware: http://www.lavasoftusa.com/products/ad_aware_free.php
>
> Spybot: http://www-spybot.net/
>
> --
> Regards
>
> Ron Badour
> MS MVP 1997 - 2008
>
>
> "Smiley" <firework123@googlemail.com> wrote in message
> news:ffn5p1$g1a$2$8300dec7@news.demon.co.uk...
>> Hi,
>>
>> I thought it is more likely to be an virus issue but I have scanned the
>> machine with paid and free software, registry cleaner but nothing showed
>> up as suspecious.
>>
>> Use IE to do google search, I am always redirected to somewhere else. Not
>> what I was looking for, e.g. Oxford radio station, ended up with
>> something else. Also noticed the following pattern, which selected a link
>> from the search result, the first 2 links always appear but the 3rd one
>> is random. Anyone any idea ?
>>
>> http://201.218.196.152/click.php?c=16b0708e0b6f767ad06f4004&r=2
>>
>> http://www.search-daily.com/search.php?qq=nnnnn
>>
>> http://www.growingbusiness.co.uk/06...ising-finance.html?rw.cm=Miva,PPC,nnnnn nnnnn
>>
>>
>>
>>
>
>
 
S

Sandy Mann

Ron

The link that you supplied to spybot does not seem to be the same a spybot -
search & destroy which I usually see recommended in these NG's and none of
the links for spybot on that site, (ie the one you supplied) , seem to work,
at least for me. Did you really mean that Sptbot or did you intend Spybot
S&D?

--
Regards,

Sandy


"Ron Badour" <Sorry@NoAddress.com> wrote in message
news:OXhJvriFIHA.3940@TK2MSFTNGP05.phx.gbl...
> Spyware/adware cause numerous system problems. I recommend you download
> and use AdAware or Spybot (or both) on a regular basis and consider
> removing everything these programs identify. Be aware that there are
> frequent updates to these programs and you need to check for them before
> every use including the first time.
>
> AdAware: http://www.lavasoftusa.com/products/ad_aware_free.php
>
> Spybot: http://www-spybot.net/
>
> --
> Regards
>
> Ron Badour
> MS MVP 1997 - 2008
>
>
> "Smiley" <firework123@googlemail.com> wrote in message
> news:ffn5p1$g1a$2$8300dec7@news.demon.co.uk...
>> Hi,
>>
>> I thought it is more likely to be an virus issue but I have scanned the
>> machine with paid and free software, registry cleaner but nothing showed
>> up as suspecious.
>>
>> Use IE to do google search, I am always redirected to somewhere else. Not
>> what I was looking for, e.g. Oxford radio station, ended up with
>> something else. Also noticed the following pattern, which selected a link
>> from the search result, the first 2 links always appear but the 3rd one
>> is random. Anyone any idea ?
>>
>> http://201.218.196.152/click.php?c=16b0708e0b6f767ad06f4004&r=2
>>
>> http://www.search-daily.com/search.php?qq=nnnnn
>>
>> http://www.growingbusiness.co.uk/06...ising-finance.html?rw.cm=Miva,PPC,nnnnn nnnnn
>>
>>
>>
>>
>
>
>
 
S

Straight Talk

On Wed, 24 Oct 2007 05:45:02 -0500, "Ron Badour" <Sorry@NoAddress.com>
wrote:

>Spyware/adware cause numerous system problems. I recommend you download and
>use AdAware or Spybot (or both) on a regular basis and consider removing
>everything these programs identify.

How about simply using another browser in order to not get it on your
system in the first place?

Once the crap is there, you really cannot rely on stuff like Ad Aware
and Spybot to remove it.
 
D

Daave

Good catch, Sandy. Ron's link was for a knock-off, which at one time was
considered a rogue application:

http://www.spywarewarrior.com/rogue_anti-spyware.htm

http://spywarewarrior.com/viewtopic.php?p=125334

For the real McCoy, go to:

http://www.safer-networking.org/en/spybotsd/index.html



"Sandy Mann" <sandymann2@mailinator.com> wrote in message
news:uux3ZpjFIHA.4308@TK2MSFTNGP06.phx.gbl...
> Ron
>
> The link that you supplied to spybot does not seem to be the same a
> spybot - search & destroy which I usually see recommended in these
> NG's and none of the links for spybot on that site, (ie the one you
> supplied) , seem to work, at least for me. Did you really mean that
> Sptbot or did you intend Spybot S&D?
>
> --
> Regards,
>
> Sandy
>
>
> "Ron Badour" <Sorry@NoAddress.com> wrote in message
> news:OXhJvriFIHA.3940@TK2MSFTNGP05.phx.gbl...
>> Spyware/adware cause numerous system problems. I recommend you
>> download and use AdAware or Spybot (or both) on a regular basis and
>> consider removing everything these programs identify. Be aware that
>> there are frequent updates to these programs and you need to check
>> for them before every use including the first time.
>>
>> AdAware: http://www.lavasoftusa.com/products/ad_aware_free.php
>>
>> Spybot: http://www-spybot.net/
>>
>> --
>> Regards
>>
>> Ron Badour
>> MS MVP 1997 - 2008
>>
>>
>> "Smiley" <firework123@googlemail.com> wrote in message
>> news:ffn5p1$g1a$2$8300dec7@news.demon.co.uk...
>>> Hi,
>>>
>>> I thought it is more likely to be an virus issue but I have scanned
>>> the machine with paid and free software, registry cleaner but
>>> nothing showed up as suspecious.
>>>
>>> Use IE to do google search, I am always redirected to somewhere
>>> else. Not what I was looking for, e.g. Oxford radio station, ended
>>> up with something else. Also noticed the following pattern, which
>>> selected a link from the search result, the first 2 links always
>>> appear but the 3rd one is random. Anyone any idea ?
>>>
>>> http://201.218.196.152/click.php?c=16b0708e0b6f767ad06f4004&r=2
>>>
>>> http://www.search-daily.com/search.php?qq=nnnnn
>>>
>>> http://www.growingbusiness.co.uk/06...ising-finance.html?rw.cm=Miva,PPC,nnnnn nnnnn
 
R

Ron Badour

Sandy,

That link takes you directly to a site that lists:
Search & Destroy
2007 Leading Spyware Remover
Download It Here - Free!

However, once that link is clicked, you are taken to Spywarebot. Talk
about deceptive practices !!! Thanks for the heads up--I will change my
crib sheet to:

http://www.safer-networking.org/en/download/

--
Regards

Ron Badour
MS MVP 1997 - 2008


"Sandy Mann" <sandymann2@mailinator.com> wrote in message
news:uux3ZpjFIHA.4308@TK2MSFTNGP06.phx.gbl...
> Ron
>
> The link that you supplied to spybot does not seem to be the same a
> spybot - search & destroy which I usually see recommended in these NG's
> and none of the links for spybot on that site, (ie the one you supplied) ,
> seem to work, at least for me. Did you really mean that Sptbot or did you
> intend Spybot S&D?
>
> --
> Regards,
>
> Sandy
>
>
> "Ron Badour" <Sorry@NoAddress.com> wrote in message
> news:OXhJvriFIHA.3940@TK2MSFTNGP05.phx.gbl...
>> Spyware/adware cause numerous system problems. I recommend you download
>> and use AdAware or Spybot (or both) on a regular basis and consider
>> removing everything these programs identify. Be aware that there are
>> frequent updates to these programs and you need to check for them before
>> every use including the first time.
>>
>> AdAware: http://www.lavasoftusa.com/products/ad_aware_free.php
>>
>> Spybot: http://www-spybot.net/
>>
>> --
>> Regards
>>
>> Ron Badour
>> MS MVP 1997 - 2008
>>
>>
>> "Smiley" <firework123@googlemail.com> wrote in message
>> news:ffn5p1$g1a$2$8300dec7@news.demon.co.uk...
>>> Hi,
>>>
>>> I thought it is more likely to be an virus issue but I have scanned the
>>> machine with paid and free software, registry cleaner but nothing showed
>>> up as suspecious.
>>>
>>> Use IE to do google search, I am always redirected to somewhere else.
>>> Not what I was looking for, e.g. Oxford radio station, ended up with
>>> something else. Also noticed the following pattern, which selected a
>>> link from the search result, the first 2 links always appear but the 3rd
>>> one is random. Anyone any idea ?
>>>
>>> http://201.218.196.152/click.php?c=16b0708e0b6f767ad06f4004&r=2
>>>
>>> http://www.search-daily.com/search.php?qq=nnnnn
>>>
>>> http://www.growingbusiness.co.uk/06...ising-finance.html?rw.cm=Miva,PPC,nnnnn nnnnn
>>>
>>>
>>>
>>>
>>
>>
>>
>
>
 
R

Richard Urban

Have you run Ad-Aware in deep scan mode? The same for your antivirus. Many
times the default scan is a quick sweep. If anything is found you then
should load all the pistols chambers for a comprehensive sweep.

Boot into safe mode and run your scans from there. You may be surprised at
what may turn up.

--

Regards,

Richard Urban
Microsoft MVP Windows Shell/User
(For email, remove the obvious from my address)



"Smiley" <firework123@googlemail.com> wrote in message
news:ffnaps$c6g$2$8300dec7@news.demon.co.uk...
>I have run them many time but nothing showed up.
>
>
> "Ron Badour" <Sorry@NoAddress.com> wrote in message
> news:OXhJvriFIHA.3940@TK2MSFTNGP05.phx.gbl...
>> Spyware/adware cause numerous system problems. I recommend you download
>> and use AdAware or Spybot (or both) on a regular basis and consider
>> removing everything these programs identify. Be aware that there are
>> frequent updates to these programs and you need to check for them before
>> every use including the first time.
>>
>> AdAware: http://www.lavasoftusa.com/products/ad_aware_free.php
>>
>> Spybot: http://www-spybot.net/
>>
>> --
>> Regards
>>
>> Ron Badour
>> MS MVP 1997 - 2008
>>
>>
>> "Smiley" <firework123@googlemail.com> wrote in message
>> news:ffn5p1$g1a$2$8300dec7@news.demon.co.uk...
>>> Hi,
>>>
>>> I thought it is more likely to be an virus issue but I have scanned the
>>> machine with paid and free software, registry cleaner but nothing showed
>>> up as suspecious.
>>>
>>> Use IE to do google search, I am always redirected to somewhere else.
>>> Not what I was looking for, e.g. Oxford radio station, ended up with
>>> something else. Also noticed the following pattern, which selected a
>>> link from the search result, the first 2 links always appear but the 3rd
>>> one is random. Anyone any idea ?
>>>
>>> http://201.218.196.152/click.php?c=16b0708e0b6f767ad06f4004&r=2
>>>
>>> http://www.search-daily.com/search.php?qq=nnnnn
>>>
>>> http://www.growingbusiness.co.uk/06...ising-finance.html?rw.cm=Miva,PPC,nnnnn nnnnn
>>>
>>>
>>>
>>>
>>
>>
>
>
 
R

Richard Urban

It is always safer to get your software direct through the author when
possible. In this case it IS possible.

http://www.safer-networking.org/en/index.html

--

Regards,

Richard Urban
Microsoft MVP Windows Shell/User
(For email, remove the obvious from my address)



"Ron Badour" <Sorry@NoAddress.com> wrote in message
news:%23A1cUBlFIHA.1056@TK2MSFTNGP03.phx.gbl...
> Sandy,
>
> That link takes you directly to a site that lists:
> Search & Destroy
> 2007 Leading Spyware Remover
> Download It Here - Free!
>
> However, once that link is clicked, you are taken to Spywarebot. Talk
> about deceptive practices !!! Thanks for the heads up--I will change my
> crib sheet to:
>
> http://www.safer-networking.org/en/download/
>
> --
> Regards
>
> Ron Badour
> MS MVP 1997 - 2008
>
>
> "Sandy Mann" <sandymann2@mailinator.com> wrote in message
> news:uux3ZpjFIHA.4308@TK2MSFTNGP06.phx.gbl...
>> Ron
>>
>> The link that you supplied to spybot does not seem to be the same a
>> spybot - search & destroy which I usually see recommended in these NG's
>> and none of the links for spybot on that site, (ie the one you supplied)
>> , seem to work, at least for me. Did you really mean that Sptbot or did
>> you intend Spybot S&D?
>>
>> --
>> Regards,
>>
>> Sandy
>>
>>
>> "Ron Badour" <Sorry@NoAddress.com> wrote in message
>> news:OXhJvriFIHA.3940@TK2MSFTNGP05.phx.gbl...
>>> Spyware/adware cause numerous system problems. I recommend you download
>>> and use AdAware or Spybot (or both) on a regular basis and consider
>>> removing everything these programs identify. Be aware that there are
>>> frequent updates to these programs and you need to check for them before
>>> every use including the first time.
>>>
>>> AdAware: http://www.lavasoftusa.com/products/ad_aware_free.php
>>>
>>> Spybot: http://www-spybot.net/
>>>
>>> --
>>> Regards
>>>
>>> Ron Badour
>>> MS MVP 1997 - 2008
>>>
>>>
>>> "Smiley" <firework123@googlemail.com> wrote in message
>>> news:ffn5p1$g1a$2$8300dec7@news.demon.co.uk...
>>>> Hi,
>>>>
>>>> I thought it is more likely to be an virus issue but I have scanned the
>>>> machine with paid and free software, registry cleaner but nothing
>>>> showed up as suspecious.
>>>>
>>>> Use IE to do google search, I am always redirected to somewhere else.
>>>> Not what I was looking for, e.g. Oxford radio station, ended up with
>>>> something else. Also noticed the following pattern, which selected a
>>>> link from the search result, the first 2 links always appear but the
>>>> 3rd one is random. Anyone any idea ?
>>>>
>>>> http://201.218.196.152/click.php?c=16b0708e0b6f767ad06f4004&r=2
>>>>
>>>> http://www.search-daily.com/search.php?qq=nnnnn
>>>>
>>>> http://www.growingbusiness.co.uk/06...ising-finance.html?rw.cm=Miva,PPC,nnnnn nnnnn
>>>>
>>>>
>>>>
>>>>
>>>
>>>
>>>
>>
>>
>
>
 
M

Milo \(MSPSS\)

A possible instance it wasnt detected or so removed by the following
security tools is that it is a new or a day zero infection ( new ). We may
have to proceed with manual removal on such matter.

Please call 866 727 2338 ( Microsoft Security US/CANADA ) - Toll free and
free support or if you aren't from the said location please reply so that we
can assist you from here.

"Smiley" <firework123@googlemail.com> wrote in message
news:ffn5p1$g1a$2$8300dec7@news.demon.co.uk...
> Hi,
>
> I thought it is more likely to be an virus issue but I have scanned the
> machine with paid and free software, registry cleaner but nothing showed
> up as suspecious.
>
> Use IE to do google search, I am always redirected to somewhere else. Not
> what I was looking for, e.g. Oxford radio station, ended up with something
> else. Also noticed the following pattern, which selected a link from the
> search result, the first 2 links always appear but the 3rd one is random.
> Anyone any idea ?
>
> http://201.218.196.152/click.php?c=16b0708e0b6f767ad06f4004&r=2
>
> http://www.search-daily.com/search.php?qq=nnnnn
>
> http://www.growingbusiness.co.uk/06...ising-finance.html?rw.cm=Miva,PPC,nnnnn nnnnn
>
>
>
>
 
D

Dustin Cook

"Milo \(MSPSS\)" <V-4jpaca@mssupport.microsoft.com> wrote in
news:E9198814-8634-491C-89C2-3BDAC7B071C0@microsoft.com:

> A possible instance it wasnt detected or so removed by the following
> security tools is that it is a new or a day zero infection ( new ). We
> may have to proceed with manual removal on such matter.

Couldn't just... oh, fix the browser? Seems like that would be easier.
*j.k*


--
Dustin Cook, Author of BugHunter - MalWare Removal Tool - v2.2d
Email.: bughunter.dustin@gmail.com
Web...: http://bughunter.it-mate.co.uk
Pad...: http://bughunter.it-mate.co.uk/pad.xml
PGP...: http://bughunter.it-mate.co.uk/bughunter.dustin.txt
 
H

Heather

"Milo (MSPSS)" <V-4jpaca@mssupport.microsoft.com> wrote in message
news:E9198814-8634-491C-89C2-3BDAC7B071C0@microsoft.com...
>
> Please call 866 727 2338 ( Microsoft Security US/CANADA ) - Toll free
> and free support or if you aren't from the said location please reply
> so that we can assist you from here.

Milo......if you had read his headers, you would have seen that he lives
in England and his ISP is demon.co.uk. It is obvious what "UK" stands
for, grin.

Just a head's up.....Heather
>
> "Smiley" <firework123@googlemail.com> wrote in message
> news:ffn5p1$g1a$2$8300dec7@news.demon.co.uk...
>> Hi,
>>
>> I thought it is more likely to be an virus issue but I have scanned
>> the machine with paid and free software, registry cleaner but nothing
>> showed up as suspecious.
>>
>> Use IE to do google search, I am always redirected to somewhere else.
>> Not what I was looking for, e.g. Oxford radio station, ended up with
>> something else. Also noticed the following pattern, which selected a
>> link from the search result, the first 2 links always appear but the
>> 3rd one is random. Anyone any idea ?
>>
>> http://201.218.196.152/click.php?c=16b0708e0b6f767ad06f4004&r=2
>>
>> http://www.search-daily.com/search.php?qq=nnnnn
>>
>> http://www.growingbusiness.co.uk/06...ising-finance.html?rw.cm=Miva,PPC,nnnnn nnnnn
>>
>>
>>
>>
>
 
M

Milo \(MSPSS\)

Well as per heather in you are a resident of UK please proceed with
Microsoft Security Hotline
0870 60 10 100


"Heather" <figgyd@nospam.invalid> wrote in message
news:eeh2AQ3FIHA.5544@TK2MSFTNGP02.phx.gbl...
>
> "Milo (MSPSS)" <V-4jpaca@mssupport.microsoft.com> wrote in message
> news:E9198814-8634-491C-89C2-3BDAC7B071C0@microsoft.com...
>>
>> Please call 866 727 2338 ( Microsoft Security US/CANADA ) - Toll free and
>> free support or if you aren't from the said location please reply so that
>> we can assist you from here.
>
> Milo......if you had read his headers, you would have seen that he lives
> in England and his ISP is demon.co.uk. It is obvious what "UK" stands
> for, grin.
>
> Just a head's up.....Heather
>>
>> "Smiley" <firework123@googlemail.com> wrote in message
>> news:ffn5p1$g1a$2$8300dec7@news.demon.co.uk...
>>> Hi,
>>>
>>> I thought it is more likely to be an virus issue but I have scanned the
>>> machine with paid and free software, registry cleaner but nothing showed
>>> up as suspecious.
>>>
>>> Use IE to do google search, I am always redirected to somewhere else.
>>> Not what I was looking for, e.g. Oxford radio station, ended up with
>>> something else. Also noticed the following pattern, which selected a
>>> link from the search result, the first 2 links always appear but the 3rd
>>> one is random. Anyone any idea ?
>>>
>>> http://201.218.196.152/click.php?c=16b0708e0b6f767ad06f4004&r=2
>>>
>>> http://www.search-daily.com/search.php?qq=nnnnn
>>>
>>> http://www.growingbusiness.co.uk/06...ising-finance.html?rw.cm=Miva,PPC,nnnnn nnnnn
>>>
>>>
>>>
>>>
>>
>
>
 
R

RJK

LOL you're getting old ....like me ! :)

regards, Richard


"Ron Badour" <Sorry@NoAddress.com> wrote in message
news:%23A1cUBlFIHA.1056@TK2MSFTNGP03.phx.gbl...
> Sandy,
>
> That link takes you directly to a site that lists:
> Search & Destroy
> 2007 Leading Spyware Remover
> Download It Here - Free!
>
> However, once that link is clicked, you are taken to Spywarebot. Talk
> about deceptive practices !!! Thanks for the heads up--I will change my
> crib sheet to:
>
> http://www.safer-networking.org/en/download/
>
> --
> Regards
>
> Ron Badour
> MS MVP 1997 - 2008
>
>
> "Sandy Mann" <sandymann2@mailinator.com> wrote in message
> news:uux3ZpjFIHA.4308@TK2MSFTNGP06.phx.gbl...
>> Ron
>>
>> The link that you supplied to spybot does not seem to be the same a
>> spybot - search & destroy which I usually see recommended in these NG's
>> and none of the links for spybot on that site, (ie the one you supplied)
>> , seem to work, at least for me. Did you really mean that Sptbot or did
>> you intend Spybot S&D?
>>
>> --
>> Regards,
>>
>> Sandy
>>
>>
>> "Ron Badour" <Sorry@NoAddress.com> wrote in message
>> news:OXhJvriFIHA.3940@TK2MSFTNGP05.phx.gbl...
>>> Spyware/adware cause numerous system problems. I recommend you download
>>> and use AdAware or Spybot (or both) on a regular basis and consider
>>> removing everything these programs identify. Be aware that there are
>>> frequent updates to these programs and you need to check for them before
>>> every use including the first time.
>>>
>>> AdAware: http://www.lavasoftusa.com/products/ad_aware_free.php
>>>
>>> Spybot: http://www-spybot.net/
>>>
>>> --
>>> Regards
>>>
>>> Ron Badour
>>> MS MVP 1997 - 2008
>>>
>>>
>>> "Smiley" <firework123@googlemail.com> wrote in message
>>> news:ffn5p1$g1a$2$8300dec7@news.demon.co.uk...
>>>> Hi,
>>>>
>>>> I thought it is more likely to be an virus issue but I have scanned the
>>>> machine with paid and free software, registry cleaner but nothing
>>>> showed up as suspecious.
>>>>
>>>> Use IE to do google search, I am always redirected to somewhere else.
>>>> Not what I was looking for, e.g. Oxford radio station, ended up with
>>>> something else. Also noticed the following pattern, which selected a
>>>> link from the search result, the first 2 links always appear but the
>>>> 3rd one is random. Anyone any idea ?
>>>>
>>>> http://201.218.196.152/click.php?c=16b0708e0b6f767ad06f4004&r=2
>>>>
>>>> http://www.search-daily.com/search.php?qq=nnnnn
>>>>
>>>> http://www.growingbusiness.co.uk/06...ising-finance.html?rw.cm=Miva,PPC,nnnnn nnnnn
>>>>
>>>>
>>>>
>>>>
>>>
>>>
>>>
>>
>>
>
>
 
D

didier_53

Same for a friend of me :

google searches gives good results but when clicking a link, a radom
commercial page come up !

We used last version of avast and add-aware :



avast > dont detect anomaly
ad-aware / ad-watch paid version > dont detect anomaly
testing with installing firefox in second hand browser > Same problem!

is it a new virus ?
is the dns server of his isp in cause ?

any idea?




"Smiley" <firework123@googlemail.com> a écrit dans le message de news:
ffn5p1$g1a$2$8300dec7@news.demon.co.uk...
> Hi,
>
> I thought it is more likely to be an virus issue but I have scanned the
> machine with paid and free software, registry cleaner but nothing showed
> up as suspecious.
>
> Use IE to do google search, I am always redirected to somewhere else. Not
> what I was looking for, e.g. Oxford radio station, ended up with something
> else. Also noticed the following pattern, which selected a link from the
> search result, the first 2 links always appear but the 3rd one is random.
> Anyone any idea ?
>
> http://201.218.196.152/click.php?c=16b0708e0b6f767ad06f4004&r=2
>
> http://www.search-daily.com/search.php?qq=nnnnn
>
> http://www.growingbusiness.co.uk/06...ising-finance.html?rw.cm=Miva,PPC,nnnnn nnnnn
>
>
>
>
 
You must log in or register to reply here.
Back
Top Bottom