Google Linking to !!!!!! etc

adr0ck

at the moment computer seems to be operating ok

i have taken the opportunity and also installed latest zone alarm

pchelpman

Couple of things to tidy up.

Your copy of HJT is in a temporary location. The program makes automatic backups which could easily be lost if HJT isn't in a permanent place. Go to the HJT folder here .....

C:\Documents and Settings\Office\Desktop\HiJackThis.exe

.... and drag & drop it on the the C: drive.

*******************

Open HJT ... click on 'Do a System Scan Only'... put tick/check marks next to these entries IF still present ...

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

O17 - HKLM\System\CCS\Services\Tcpip\..\{B330976D-2A3E-46A3-A571-8EA721380765}: NameServer = 85.255.115.157 85.255.112.14


Remember to close ALL open browser windows – including this one – before clicking on “Fix Checked” at the foot of the HijackThis window.

*******************

Empty your recycle bin.





You should be clear to go now.

Safe surfing.


PCH

adr0ck

since i've done all this my quidco now doesnt work

i.e. won't link to actual sites when clicked through just stays at tradedouble

can i ask pchelpman

why do you advise to remove a certain 017 thing and not all of them?

pchelpman

Sorry to hear you have trouble.

The 017 entry traces back to a server in Kharkiv, Ukraine and is associated with nasty stuff. The other 017 entries all look genuine & safe enough so I left them alone.

The entry can be restored from the HJT backup but I am hesitant in recommending you do that due to the nature of the entry but you can try that if you choose.

I don't know anything about quidco, unfortunately, but is there no way of reinstalling the program or carrying out a "repair" on it?

Maybe other members here will have more advice on that point.

Let us know what you think.


PCH

adr0ck

thanks pchelpman

quidco isn't a program its a website that you link through to earn cashback from

so for example if i wanted to buy something from dell i would log into my quidco account and then link into dells website from the link in quidco

dell would then pay 5% of whatever i bought back to me via my quidco account

my problem is that for some reason i cannot link from quidco website to other sites...the links are just getting stuck at tradedoubler (amongst others)...i think these are the sites that quidco uses to get your cash back from (i think)

theres a help section on quidco 's website and one of the question talks about your HOSTS file is says

Has your HOSTS file been altered or added to?


The Windows HOSTS file is a little known file to most of us. Basically what it does is resolve an internet URL to a local location so that it won't load. If you are experiencing pages that do not load or give a 404 error when you click on a merchant's link this is probably the culprit.

The HOSTS file should be an empty file however some anti-virus or internet security programs can overwrite it. Also, some malware and spyware programs will overwrite it. Fortunately it is very easy to check and clean.

How to check and clean your HOSTS file

i have followed this advice and its does nothing (there was nothing wrong with my hosts file)

so i am stumped

superscaper

Have you tried deleting your internet files and cookies? Tools>internet options>browsing history>delete

adr0ck

on another note when you link to hijackthis website it states that

017 code means domain hijack

what legit programs hijack your domain?

http://hjt-data.trend-braintree.com/hjt/analyzethis/hijackthis-codes.htm

adr0ck

superscaper wrote: »

Have you tried deleting your internet files and cookies? Tools>internet options>browsing history>delete

yep tried deleting all cookies etc

tried quidco in both ie and firefox.....doesnt work in either

tried on another computer and it works fine

so its something to do with my comp

viv0147

Hi there are some sneaky Trojans and virus that bury themselves in system restore so when running a virus checker etc, it will not detect them so turn off system restore the run your virus checker it is then be able to get them once completed remember to turn your system restore back on.