June 6, 2004
Hijacked search results by featured-results.com
A very annoying thing. I thought this might have been coming from prizesurfer.exe in the last post, but I don't think it is. Here's the symptom, you go to Google, do a search, and surprise, out pops some quasi-helpful paid links not from Google. Yes, you have been hijacked.
Here's what it looks like for a search on "mesothelioma" from Google.
Where does this come from? It appears to be some sort of IE plugin. A scanning of C:\WINNT\Downloaded Program Files reveals
| name | id | CodeBase |
|---|---|---|
| {26E8361F-BCE7-4F75-A347-98C88B418322} | http://dst.trafficsyndicate.com/Dnl/T_50026/QDow.cab | |
| {41F17733-B041-4099-A042-B518BB6A408C} | http://a1540.g.akamai.net/7/1540/52/20021126/qtinstall.info.apple.com/borris/us/win/QuickTimeInstaller.exe | |
| Mediachip AD Player Control | {2D0C7226-747E-11D6-83F0-00E04C4A2F90} | http://www2.sznews.com/movies/MCADPlayer.cab |
among others. The rest looks ok. I started by killing the trafficsyndicate.com script, which was "damaged" anyway. Hey, how about that, I think that was it.
Update
It wasn't. I turned on the computer the next day to find the same problem. The offender turned out to be ClearSearch which you can get rid of by following the instructions in pestpatrol.
Update to the update
I was able to uninstall ClearSearch, but that wasn't it either.
can I talk to you for a story I'm working on? 4153442507
so, what's the fix? I've tried four different spyware remover, no luck
Got Spysweeper, ad-aware etc etc but no one help me solve this problem. And only result returned from google website are hijacked...
Posted by: Jason at February 11, 2005 8:00 PMfoo adult chat rooms - http://www.fooadultchat.com/
Posted by: foo adult chat rooms at December 4, 2006 1:47 AM