About half the time that I open my browser, I get an overlay from
www.jetseeker.com.  This also pops up at random and has no way to
cancel it except to close down the pc.  I have tried an ad blocker,
have a firewall and anti-virus.  I cannot locate where this this is
coming from or how to get rid of it or block it.  Any suggestions?

Hi there!

The fellas at SpyWareInfo.com recommend the following procedure:

Download, install, and run Patrick Kolla's Spybot Search & Destroy:

How To Install Spybot Search and Destroy (includes download links and
a tutorial)
http://tomcoyote.org/SPYBOT/

----------------------------

When you run the program, it will ask you if you want to fix
everything.  Make sure everything that comes up in red is checked,
then select "Fix problems".

Re-boot your computer.

Next, download HijackThis!, a utility designed to ferret out every
last vestige of spyware/malware:

HijackThis!
http://www.tomcoyote.org/hjt/

--------------------------------

Unzip it, double click HijackThis.exe, and click Scan.  When the scan
is complete, click Save Log.  Copy the log into a .TXT file (Notepad
is good), then post the log here:

Spyware and Hijackware Removal Support
http://www.spywareinfo.com/forums/index.php?act=SF&f=11

...with a request for help getting rid of jetseeker's remnants. Your
subject line should include the word "jetseeker".

[ NOTE:  They also ask that you completely read the FAQ before
posting:  http://www.spywareinfo.com/forums/index.php?act=ST&f=24&t=5187
]

A spyware expert will tell which keys to have HT fix.  If you're
comfortable trying to fix it on your own, you can consult the examples
listed below (check the items to be deleted), but I would strongly
recommend you wait for one of the experts to tell you exactly which
keys to remove from your system.  Playing with the registry is a
tricky business, and should not be attempted unless you absolutely,
positively, know exactly what you're doing:

jetseeker hijacking
http://www.spywareinfo.com/forums/index.php?act=ST&f=11&t=8794&hl=jetseeker&s=343bff15251ca7d8738e0a35e773323d

More jetseeker.com
http://www.spywareinfo.com/forums/index.php?act=ST&f=11&t=8946&hl=jetseeker&s=343bff15251ca7d8738e0a35e773323d

After you've gotten jetseeker scrubbed out of your system, run Spybot
once more, fix anything it tells you to fix, and follow up by using
the "immunize" feature, which helps prtect against future hijackings. 
Do remember to keep Spybot updated, and run it at least once a week or
so (or to be extra safe, you can set Spybot up to scan every time you
start your system).

Good luck!

--Missy

Search terms: [ remove jetseeker ]

mackx-ga:

Jetseeker.com is known for using hijack techniques to take over your
IE. Please go to http://www.lavasoftus.com and download Ad-aware to
scan your PC and hopefully remove this menace (those Jetseeker.com
guys keep changing their hijack techniques about as fast as the
Lavasoft folks can keep updating Ad-aware).

If successful, also remember to use Ad-aware regularly (I suggest once
a week), and always use the internal function inside Ad-aware to check
for updates.

Note: Ad-aware should get this, but just in case, check your registry
under:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run to see if something
called "spp.reg" is being loaded in each time you reboot.
Jetseeker.com uses this technique to reapply their hijack each time
the PC is rebooted.

Let me know if this works for you... if not, I'll see if I can find
something else to help you.

Regards,

aht-ga

My apologies, I provided an invalid link. Try http://www.lavasoft.us instead.

Regards,

aht-ga

Add the following line to your "hosts" file in the windows directory:

127.0.0.1 www.jetseeker.com

That way, every time it tries to retrieve the information from the
server, it will generate an error (a window will still open but it
will be empty) since it tries to reach your own computer.

For a really nice tutorial on beating hijackers, see:

http://www.spywareinfo.com/~merijn/cwschronicles.html

It may be a nuisance, but it beats having somebody else's SOBIG
infection spoofing your domain all over the place - groan.