google search bar

system · 2007-09-22T01:32:06.000Z

Lately every page I load seems to have a small toolbar at the top of it that contains the following word “links”

downloads business lawyer loans friends marketing stocks adult “then a text box” and a “google search button”

I thought it was some kind of google toolbar but it does not appear in my control panel installed programs so I can’t
get rid of it there. It has no references in the ie 7 tools options and I can’t figure how to turn it off. I’m really careful
not to install toolbars when installing new software.

Any ideas how to get rid of this would be great IT’S REALLY ANNOYING since google is my homepage.

I have attached an image for view google.jpg

Lisandro · 2007-09-22T01:39:13.000Z

You were hijacked.
Probably, it would be good to follow the steps bellow. Specially, check your C:\WINDOWS\system32\drivers\etc\hosts file should be infected. But maybe also your connections (TCP/IP, sockets, etc.) settings.

Disable System Restore on Windows ME or Windows XP. System Restore cannot be disabled on Windows 9x and it’s not available in Windows 2k. After boot you can enable System Restore again after step 3.
Clean your temporary files. You can use CleanUp or the Windows Advanced Care features for that.
Schedule a boot time scanning with avast. Start avast! > Right click the skin > Schedule a boot-time scanning. Select for scanning archives. Boot. Other option is scanning in SafeMode (repeatedly press F8 while booting).
It will be good if you download, install, update and run AVG Antispyware. Some users recommend SUPERantispyware, Spyware Terminator and/or a-squared (take care about false positives).
If any infection is detected, better and safer is send the file to Quarantine than to simple delete than.
If you still detecting any strange behavior or even you’re sure you’re not clean, maybe it will be good to test your machine with anti-rootkit applications. I suggest AVG, Panda and/or F-Secure BlackLight.
Also, if you still detecting strange behaviors or you want to be sure you’re clean, maybe making a HijackThis log to post here and, specially, scan and submit to on-line analysis the RunScanner log would help to identify the problem and the solution.
After you’re clean, use the immunization of SpywareBlaster or, which is better, the Windows Advanced Care features of spyware/adware cleaning and removal.
Finally, when you’re clean, check for insecure applications with Secunia Software Inspector to update insecure applications and avoid reinfection.

system · 2007-09-22T01:57:02.000Z

Thanks for the reply but I discovered the issue

I FOUND A PROGRAM CALLED SNL BAR “SEEK NEW LIVE” It might have been installed last night when I
installed a Xilisoft program. Not sure but it was the only program I installed yesterday. Or maybe it was hijacked somehow, Anyway uninstalling that program took care of the problem.

Lisandro · 2007-09-22T02:17:44.000Z

psychojs post:3:

Xilisoft

It’s a known source of malwares and rogue programs.

bob3160 · 2007-09-23T09:41:16.000Z

Tech post:4:

psychojs post:3:

Xilisoft

It’s a known source of malwares and rogue programs.

It is ???
I have their Video converter program and don’t have any hidden payloads.

A google search for Xilisoft also reveals almost all safe sites according to finjan and SiteAdvisor.
The only questionable selection is for the download site not Xilisoft.

Lisandro · 2007-09-24T02:23:25.000Z

bob3160 post:5:

Tech post:4:

psychojs post:3:

Xilisoft

It’s a known source of malwares and rogue programs.

It is ???
I have their Video converter program and don’t have any hidden payloads.

A google search for Xilisoft also reveals almost all safe sites according to finjan and SiteAdvisor.
The only questionable selection is for the download site not Xilisoft.

My completely fault.
I messed with Xoftspy.
Although this note http://spywarewarrior.com/rogue_anti-spyware.htm#xos_note I can’t trust their software.

bob3160 · 2007-09-24T17:56:37.000Z

Although this note http://spywarewarrior.com/rogue_anti-spyware.htm#xos_note I can't trust their software.

Tech you are mixing up 2 completely different soft ware companies.

Lisandro · 2007-09-24T21:18:19.000Z

bob3160 post:7:

Tech you are mixing up 2 completely different soft ware companies.

I know. I’ve already asked for excuse.

bob3160 · 2007-09-24T22:56:21.000Z

your excused… ;D

Announcements