Solution to remove spyware attached to search engine result links

Posted on 2008-01-25
Medium Priority
Last Modified: 2013-12-08
My system is Window XP service pack 2, IE version 7

Only happened in internet explorer of any version.
After search engine (Yahoo, Google etc) displays search results, by clicking on any result link for the 1st time, i will be directed to some other search engines instead of the actual website i intended to visit.
I realize when i initially click any of the search result link, the status bar of the internet explorer first display the actual address of the search result link, subsequently pause for a while and redirect me to another "fake" search engine website. But when i click back button to go back to the valid search engine result page, another window of title "click2find" will pop up. When i click on the same search result link the 2nd time, i have no problem accessing the website i want.
There are numerous  "fake" search engine websites whenever i got redirected..
I have tried many solutions (scanning with various antivirus s/w in safe mode, checking Hijackthis etc) but none is working. Also tried downgraded from IE 7 to IE 6 and back to IE 7.
Please see more details in the attachments.
Question by:mercinat
  • 2
LVL 47

Accepted Solution

rpggamergirl earned 2000 total points
ID: 20741455
Looks like a wareout infection.

1.  Please download FixWareout from one of these sites:

Save it to your desktop and run it. Click Next, then Install, then make sure "Run fixit" is checked and click Finish. The fix will begin; follow the prompts. You will be asked to reboot your computer; please do so. Your system may take longer than usual to load; this is normal.

At the end of the fix, you may need to restart your computer again.

Finally, please post a fresh HijackThis log, along with the contents of the logfile C:\fixwareout\report.txt

2.  If problem persists:
Please download ComboFix by sUBs from either of these locations:

How to use Combofix:

You must download it to and run it from your Desktop
Now STOP all your monitoring programs (Antivirus/Antispyware, Guards and Shields) as they could easily interfere with ComboFix.
Double click combofix.exe & follow the prompts.
When finished, it will produce a log. Please save that log to post in your next reply along with a fresh HJT log
Re-enable all the programs that were disabled during the running of ComboFix..

Do not mouse-click combofix's window while it is running. That may cause it to stall.

CF disconnects your machine from the internet. The connection is automatically restored before CF completes its run. If CF runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your machine.

Author Closing Comment

ID: 31424899
rpggamergirl, thank you so much for your great solution. I can finally use  search engine in IE again!!
LVL 47

Expert Comment

ID: 20812818
You're welcome, glad to help.

Thank you, :)

Featured Post

The new generation of project management tools

With monday.com’s project management tool, you can see what everyone on your team is working in a single glance. Its intuitive dashboards are customizable, so you can create systems that work for you.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

What monsters are hiding in your child's room? In this article I will share with you a tech horror story that could happen to anyone, along with some tips on how you can prevent it from happening to you.
The Super Bowl is just days away. Millions of advertising dollars will be spent in just a few hours to drive people to websites around the globe. Optimizing your site in anticipation of a big event like this (and the traffic surges that follow) will…
Viewers will get an overview of the benefits and risks of using Bitcoin to accept payments. What Bitcoin is: Legality: Risks: Benefits: Which businesses are best suited?: Other things you should know: How to get started:
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…
Suggested Courses

589 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question