Nothing showing in your log except messenger plus. Uninstall it as it comes with Lop, nasty little critter.
Download & instal Adaware from http://majorgeeks.com/download.php?det=506
& update it B4 scanning.
In settings under 'scanning,' have it set to
'scan within archives,'
'scan active processes,'
'scan registry,'
'deepscan registry'
'scan my IE Favourites for banned URL's,'
'scan my host's file.'
Also in tweaks under 'cleaning engine' set it to 'Automatically try to unregister objects prior to deletion.'
Remove what it finds by placing a check in the box to the left of the object.
Download & instal Spybot S&D from http://www.safer-networking.org/index.php?page=download Update it B4 scanning.
After the scan is complete, have spybot fix everything marked RED.
On the page that first opens when you start Spybot there is an option to immunise, you should do this. In the immunise section there is also a link to download Spywareblaster. Download that & you can keep it updated by selecting the same link that you use to download it.
crunchie
Most Valuable Poster
20,095 posts since Feb 2004
Reputation Points: 1,142
Solved Threads: 985
Nothing showing in your log except messenger plus. Uninstall it as it comes with Lop, nasty little critter.
Messenger Plus can be installed without the spyware. Just select custom install, and don't agree to the Spyware's License Agreement ;-). Messenger Plus rules :!:
Tekmaven
Software Architect
1,274 posts since Feb 2002
Reputation Points: 322
Solved Threads: 28
These might be legit, but look a little suspicious:
O4 - Startup: Shortcut to osd.lnk = C:\Program Files\Onscreen Display\osd.exe
O4 - Startup: Shortcut to PHONES.EXE.lnk = C:\Program Files\PHONES\PHONES.EXE
Tekmaven
Software Architect
1,274 posts since Feb 2002
Reputation Points: 322
Solved Threads: 28
Are you running XP? Maybe a quick fix is to System Restore back a few days?
Tekmaven
Software Architect
1,274 posts since Feb 2002
Reputation Points: 322
Solved Threads: 28
Also, verify your proxy settings. I've seen some nasty spyware that runs a proxy and gives ya the wrong pages ;-).
What happens when you go to http://search.msn.com/ ? At the command prompt, trying pinnging search.msn.com (by typing: ping search.msn.com). Compare them to my results, lets see if your getting the *real* site or not.
ping search.msn.com
Pinging a134.x.akamai.net [209.66.98.105] with 32 bytes of data:
Reply from 209.66.98.105: bytes=32 time=14ms TTL=54
Reply from 209.66.98.105: bytes=32 time=9ms TTL=54
Reply from 209.66.98.105: bytes=32 time=9ms TTL=54
Reply from 209.66.98.105: bytes=32 time=21ms TTL=54
Ping statistics for 209.66.98.105:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 9ms, Maximum = 21ms, Average = 13ms
Tekmaven
Software Architect
1,274 posts since Feb 2002
Reputation Points: 322
Solved Threads: 28
Is there any way there could be another setting, or registry key, that could pertain to this problem?
Yes. You may also have a problem with yourHosts file. See http://www.mvps.org/winhelp2002/hosts.htm for information on where to find it and what to do with it, including using it to block ad cookies.
I would also manually clean out your Temporary Internet Files, as well. See Microsoft's Really Hidden Files for more on this issue (warning: potentially offensive site-name and email address).
TallCool1
Practically a Posting Shark
865 posts since May 2003
Reputation Points: 149
Solved Threads: 45
That's also worth a shot, but I'm pretty sure HJT would list anything in the hosts file (other than localhost), I've seen it do that before.
Tekmaven
Software Architect
1,274 posts since Feb 2002
Reputation Points: 322
Solved Threads: 28
That's also worth a shot, but I'm pretty sure HJT would list anything in the hosts file (other than localhost), I've seen it do that before.
Thanks for reminding me. You're right, but the linked pagedoes have some good tips. Just trying to cover all bases, I guess.
TallCool1
Practically a Posting Shark
865 posts since May 2003
Reputation Points: 149
Solved Threads: 45
