Google Answers Logo
View Question
 
Q: google infected with ad program ( Answered 5 out of 5 stars,   2 Comments )
Question  
Subject: google infected with ad program
Category: Computers > Software
Asked by: harryg-ga
List Price: $2.50
Posted: 01 May 2003 00:42 PDT
Expires: 31 May 2003 00:42 PDT
Question ID: 197856
when I go to www.google.com and type in any word or phrase, for
example "google," a frame window opens on the left side of my screen
that says"NEW Search Results 1 - 5" and then list five items. Many of
them go to about.com, but they go to other sites as well.

I have run ad-aware 6.0, a wonderful program, but it has not solved
this problem.

My question: how do I make this go away. 

In addition, I would like to know what this thing is. I also think it
would be great if there was some information at google.com about it.

But mainly, I want to get it off my computer.

Clarification of Question by harryg-ga on 01 May 2003 01:30 PDT
This happens in IE 6.0 and not in Netscape 7.01 on a Win98SE machine.

Clarification of Question by harryg-ga on 01 May 2003 12:38 PDT
More information and efforts:

I ran spybot -- it found several things but did not fix this problem.

------------

I right clicked on the frame (which looks to the untrained eye like a
normal add on to google -- same colors and font), selected "view
source" to see the html code, and viewed it in notepad. The first few
lines contained the following.

<div style="position: absolute; top: 2; left: 183; width: 19;
background-color: transparent; height: 16">
  <a href="../../close.html"><img border="0" src="../../close.jpg"
width="13" height="13"></a>
</div><title>G</title>
 <!-- To remove Search Results, please visit
http://207.44.176.11/uninstall.html --><html>
<head>  

I tried to go to that 207.44.176.11 site, but no luck in either IE or
Netscape.

-----------

I went into IE tools/ internet options / advanced  to see if I could
see anything to turn off.
Under Browsing I found a checked box called "Enable Third Party
Browser Extensions."  I unchecked it. Closed IE, restarted it and
..... AMAZING GRACE THE STUPID FRAME WAS GONE IN GOOGLE!

I went in and checked that box again and the frame was back.  I
unchecked it, and turned it off.

So I have solved the problem.  But I still don't know what this thing
is and can find no info about it.

So I would still like to know what this is, what is on my computer and
I think that this evil thing should be more widely known in the google
universe.

THANKS.
Answer  
Subject: Re: google infected with ad program
Answered By: aceresearcher-ga on 01 May 2003 12:56 PDT
Rated:5 out of 5 stars
 
Greetings, harryg!

Thanks to Researcher Feilong for the endorsement! However, this
parasite is slightly different than those on which I have previously
Answered Questions.

I have found DoxDesk ( http://www.doxdesk.com ) to be an excellent
source of information for identifying and eradicating evil scumware
(adware and spyware).

They have a great page describing your particular problem -- Qual
Net's SubSearch -- and its solutions:

"Description
SubSearch is an Internet Explorer Browser Helper Object. It detects
when you are using a search engine, and opens its own 'enhanced
results' sidebar containing paid links. This is styled to look a bit
like the search engine you are using at the time...

Removal
There is no uninstall feature. Spybot update 2003-04-28 can remove
SubSearch.

Manual removal..."
http://www.doxdesk.com/parasite/SubSearch.html

While you **can** follow their directions for manual removal, messing
with .dll files and Registry entries can be very tricky, so I
recommend instead that you download the free Spybot Search and Destroy
scumware detecting and disabling software. They just released the
newest version on Monday (April 28), and it includes a fix for
SubSearch.

"2003-04-28
Hijacker
++ 17plus 
++ CnsMin.EasyService 
++ EZ-Searching 
++ HotAndSexy 
++ GlobalWebSearch 
++ Grokster.Mayan 
++ SexOcean 
++ SuperSpider 
++ TopSearcher 
++ Unknown + I-Lookup + RapidBlaster 
+ SexArena + ShopNav + SubSearch"

You can either download and install the new version:
 
Spybot Search & Destroy 1.2 
(donorware - free, but you can donate if you wish) 
http://security.kolla.de/index.php?lang=en&page=download 

or start Spybot and click "Search for Updates" (I think that this
option is much easier and quicker).


I also recommend that you download Lavasoft's AdAware software as
well. It is not identical to Spybot, and the two programs complement
each other well for protection. I and many other Researchers use both
to keep our systems clean.
AdAware Standard 6.0 
(freeware) 
http://www.lavasoft.de/support/download 

Before Rating my Answer, if you have any questions about this
information, please post a Request for Clarification.
     
I hope that this Answer provides exactly the information that you
needed!
    
Regards,    
      
aceresearcher

Request for Answer Clarification by harryg-ga on 01 May 2003 20:29 PDT
Dear Aceresearcher.

Bravo.  After discovering my home home-brew fix (turning off the
"enable third party browser extensions) I continued to look for ways
of getting at the underlying problem.

Your answer was ... the answer.  First I went to doxdesk, found its
"parasite detection" page which told me I had parasites and which
ones. I searched for them, found some, deleted what could be deleted,
but that did not solve the problem.

You recommended Spybot which I had already run, downloading the newest
version from their website. BUT, I had not checked for "updates."  I
did that, got two new updates, ran Spybot again and ... presto, zingo,
the problem is gone.

I now have "enable third party browser extensions" enabled, and no
stupid adware window in my google search results screen.  Hooray.

Many thanks.

Harryg

Clarification of Answer by aceresearcher-ga on 01 May 2003 21:19 PDT
Thanks for the excellent rating and the tip, Harry! 
 
I am so delighted that I was able to help you resolve your problem! 
 
Best Wishes! 
 
ace
harryg-ga rated this answer:5 out of 5 stars and gave an additional tip of: $2.50
Bravo!

Comments  
Subject: Re: google infected with ad program
From: feilong-ga on 01 May 2003 11:31 PDT
 
Perhaps you can try the solutions of my excellent colleague, Aceresearcher:
https://answers.google.com/answers/main?cmd=threadview&id=197645
https://answers.google.com/answers/main?cmd=threadview&id=188046
Subject: Re: google infected with ad program
From: aceresearcher-ga on 01 May 2003 21:19 PDT
 
Thanks for the excellent rating and the tip, Harry!

I am so delighted that I was able to help you resolve your problem!

Best Wishes!

ace

Important Disclaimer: Answers and comments provided on Google Answers are general information, and are not intended to substitute for informed professional medical, psychiatric, psychological, tax, legal, investment, accounting, or other professional advice. Google does not endorse, and expressly disclaims liability for any product, manufacturer, distributor, service or service provider mentioned or any opinion expressed in answers or comments. Please read carefully the Google Answers Terms of Service.

If you feel that you have found inappropriate content, please let us know by emailing us at answers-support@google.com with the question ID listed above. Thank you.
Search Google Answers for
Google Answers  


Google Home - Answers FAQ - Terms of Service - Privacy Policy