Link to home
Start Free TrialLog in
Avatar of PawloA
PawloAFlag for Canada

asked on

IE8 nag screen appears

"An unknown application is trying to change default search engine."
This message appears everytime I start Internet Explorer 8. The choices are keep my original search engine or change it for the search engine from the default application.
The problem is I don't know what application that is as I have not installed anything in the last while. The problem just started last week. How can I find out the "unknown application" and how do I remove this from bugging me every time I start IE8.
Avatar of farazhkhan
farazhkhan
Flag of Pakistan image

Hi,

I Have the same problem You Must DEINSTALL Mediabar Imesh and then you free.

Courtesy: http://www.bleepingcomputer.com/forums/topic124109.html

Otherwise go ahead with this suggestion: http://wiki.answers.com/Q/How_do_you_stop_an_unknown_application_is_trying_to_change_your_default_search_engine

Regards,
Faraz H. Khan
Avatar of DooDah
DooDah


>>  "An unknown application is trying to change default search engine."
A legitimate program would not do this...

You may have encountered MAL-WARE/SPY-WARE/Virus.


If you are into FREE, you can try these...  COMPUTE with CONFIDENCE, PREVENTION is better than FIX.


ANTI-SPYWARE Webroot Free Scan - Free Spyware Scan
http://www.webroot.com/En_US/land-freescan-int-ss.html?WRSID=2c4c3463e7e4b24da494eb91af946793


ANTI-VIRUS Symantec Free Scan - Free Anti-Virus Scan
http://security.symantec.com/sscv6/home.asp?langid=ie&venid=sym&plfid=24&pkj=YVMWPAZTJWUFJJSZOGI



I assume you have an ANTIVIRUS program already installed, but if you can still install software go out and get SPYSWEEPER with ANTI-VIRUS at WAL-MART or what ever store is close to you.  ( If you are a CORPORATE USER, for goodness sake use your OEM network, not suggesting CORPORATE IT or DOD use Wal-Mart as a Vendor but if you are an individual that's the one that is open round-the-clock. )    


Webroot will clean your system and intercept the sites like the one you encountered with a WARNING for the SITE before you proceed.   Comes in a GREEN and YELLOW Box, MiniBox, or CD-SLEEVE.  If you have anti-virus already, the INSTALL CD will also run a SCAN and CLEAN, if you don't I recommend running SYMANTEC-NORTON and Webroot SpySweeper in tandem.  


You need to consider that you USE only REPUTABLE Anti-Virus Anti-Spyware.    A lot of the FLY-BY-NIGHT company's are actually individuals trying to trick you into downloading installing their mal-ware disguised as...  something to think about when considering low/no-cost security software.  Consider the source of FREE Anti-Virus, what type of IT-Pro works for free, and frequency of updates...  both SPYSWEEPER with ANTI-VIRUS and SYMANTEC-NORTON Antivirus update MULTIPLE time a day...    Free-Tools... NOT SO MUCH.  You can be knee-deep in infections from Dawn to Dusk.  Don't be blinded by FREE - Prevention & INTERCEPTION is ALWAYS better than DIS-INFECTION, and possibly wiping your system.   Consider your long hours in seeking a solution as well...  the right tools Prevention & INTERCEPTION for are CHEAP at HALF-THE-PRICE  



It is today's commentary that the MAL-WARE/VIRUS problem is so evasive for the AVERAGE USER that WAL-MART stocks, sells, and sells-out of  BOTH SPYSWEEPER with ANTI-VIRUS and SYMANTEC-NORTON Antivirus.  WAL-MART...  it's OPEN 24hrs a Day, 7 Days a week... is why I suggest it over other stores...  Get some now...  even if it's 2a.m.  


I have encountered both TROJANS and WORMS that NORTON FLAGGED and WEBROOT QUARANTINED, it was an awesome collaboration.



With Symantec Antivirus, Webroot SpySweeper, and Acronis True Image Workstation on weekly backup, I have never been taken down in the last 10 years.     COMPUTE with CONFIDENCE
ASKER CERTIFIED SOLUTION
Avatar of CSecurity
CSecurity
Flag of Iran, Islamic Republic of image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial

>>  I have not installed anything in the last while. The problem just started last week.
This makes it more likely...

The Internet is full of "Mal-Ware" and "Virus" sites that attempt & install all sorts of  MAL-WARE/SPY-WARE/Virus on your PC...
Some unknown malicious application may be trying to setup the default web page. Since IE8 is more secure compared to previous microsoft browsers hence it display a message before anyone is trying to change the default page and you get this message.
First you really need to locate that application/service etc that is trying to change it. There are various easy way to locate the same. Check you add on, include some filiters in iexplorer like add-block, look into the task manager and find out which one application/service is extra while you just browse and close all application to find out the culprit. you may need to note down the list there and simply just start your browsing without opening anything to catch the virus. and then you may note down again the list as soon as you get the message for changing the default site. Most probabaly you can narrow down the culprits.
Look up in spy that which processs is linked to the window (some technical expertise is requried for that).  Additionally you may need to run updated antivirus and scan your whole system.
Hope this helps you to catch the culprit.
If still unsuccessful...
Run autoruns.
In Autoruns:
Hit options and check "verify code signatures" and rescan (F5 key)
Don't make any other changes...

Within Autoruns,select the file tab and select save(Ctrl+S) and save as AutoRuns Data (*.arn) -Output file is a few megs in size
Once saved then right click autoruns.arn and rename to autoruns.txt to upload

Autoruns http://technet.microsoft.com/en-us/sysinternals/bb963902.aspx