When I perform a Google Search at google.com, the first 6 or 7 search
returns read: link sponsored by Hi-results.com!

This obviously is spyware or something else that has worked its way
into my computer.

Trouble is, I can't find any information about getting it removed. I
have Lavasoft Ad-Aware and SpyBot and they aren't removing this
particular symptom. The removal tool at www.hi-results.com does no
good at all.

Help!
Tim

---

Request for Question Clarification by feilong-ga on 12 May 2004 11:17 PDT

"When I perform a Google Search at google.com, the first 6 or 7 search
returns read: link sponsored by Hi-results.com!"

Can you give us some examples of the search terms you used that gave
you such result?

"The removal tool at www.hi-results.com does no good at all."

Is this the one you used? - http://www.hi-results.com/searchengineoptuninstall.exe

-Feilong

---

Clarification of Question by tim97701-ga on 12 May 2004 11:50 PDT

Hello-

-It doesn't matter what I search for, it ALWAYS comes up.

-Yes...that's the one I used.

I can e-mail you a screen-shot of the results if you'd like?

Thank you very much for your help.
Tim

---

Request for Question Clarification by justaskscott-ga on 12 May 2004 11:55 PDT

Interesting: Lycos has reported that hi-results.com has something to
do with a program called Media Motors.  However, only the previous
versions of Lycos's help pages on the topic mention it.  The current
pages omit it, and a search on Lycos help for [hi-results] or [media]
produces no results.

"How do I remove Lycos as my default search?" (Google cache May 10, 2004)
Lycos
http://216.239.39.104/search?q=cache:rIR4-I47jOIJ:help.lycos.com/scripts/search.cfg/php.exe/enduser/std_adp.php%3Fp_refno%3D040402-000000%26p_created%3D1080939898+%22hi-results.com%22&hl=en

"How do I remove Lycos as my default search?"
Lycos
http://help.lycos.com/scripts/search.cfg/php.exe/enduser/std_adp.php?p_refno=040402-000000&p_created=1080939898

"How do I remove or uninstall Lycos Sidesearch?" (Google cache May 10, 2004)
Lycos
http://216.239.39.104/search?q=cache:0AmqdmgvlqoJ:help.lycos.com/scripts/search.cfg/php.exe/enduser/std_adp.php%3Fp_refno%3D030625-000008%26p_created%3D1056581762+%22hi-results.com%22&hl=en

"How do I remove or uninstall Lycos Sidesearch?"
Lycos
http://help.lycos.com/scripts/search.cfg/php.exe/enduser/std_adp.php?p_refno=030625-000008&p_created=1056581762

Since Lycos seems to know about this problem, I suggest that you
contact them using their help form:

"Lycos Search and InSite Feedback Form"
Lycos
http://help.lycos.com/LycosHelp/help/search/htdocs/search_form.htm

If this information leads to a resolution, please let me know; I could
then post my information as an answer.  (I'd be happy to contact Lycos
myself, but I figured you might want to provide additional details:
e.g., when and in what circumstances this problem began and your
operating system.)

---

Request for Question Clarification by justaskscott-ga on 12 May 2004 11:57 PDT

Or perhaps all you need to do is follow the instructions on the cached
Lycos page.  If that does the trick, you can let me know.

---

Request for Question Clarification by hummer-ga on 12 May 2004 13:02 PDT

Hi Tim,

I would try HijackThis - sounds like some sort of spyware to me too.

HijackThis (update before running):
http://www.spychecker.com/program/hijackthis.html

Post your HijackThis log on the following forum:
Spyware and Hijackware Removal Support:
http://www.spywareinfo.com/forums/

Good luck,
hummer

---

Clarification of Question by tim97701-ga on 12 May 2004 14:01 PDT

Hey There-

This doesn't seem to be helping at all...I don't even use Lycos.

Any other ideas out there?

Thanks!

---

Request for Question Clarification by justaskscott-ga on 12 May 2004 15:14 PDT

Even though you don't use Lycos, perhaps Lycos can help you remove
this program.  I imagine it couldn't hurt to contact them -- they
might have some advice.

---

Clarification of Question by tim97701-ga on 12 May 2004 16:01 PDT

Thanks for the Lycos info. It's still not helping.

I've also found that my failed search terms are being re-directed to a
site called www.errorplace.com. I did a "WHO IS" search and found that
they're owned by the same guy - Jacob Brown - as www.hi-results.com.

How hard can it be to get this crap out of my computer? I just bought
another removal tool from webroot.com and it doesn't seem to be
working either.

Thanks!

---

Request for Question Clarification by stuartwoozle-ga on 12 May 2004 16:21 PDT

Hi there Tim,

Spybot S&D and AdAware are both very good, but sometimes miss some of
the browser hijacking spyware. PC Magazine's recent Editor's Choice
was for Spy Sweeper -- and you can download a free version of this at:
http://www.webroot.com/wb/products/spysweeper/

Does running that help? Also try running an up-to-date virus scanner,
as these often also look for some of the nastier trojans -- some of
which can cause similar behaviour.

Let us know how you get on!
Stuart.

---

Request for Question Clarification by stuartwoozle-ga on 12 May 2004 16:22 PDT

Woah -- that'll teach me for reading the posts, then going away and
posting my answer without checking for new messages! I see you've
tried Spy Sweeper already... :-/

---

Request for Question Clarification by justaskscott-ga on 12 May 2004 17:13 PDT

The problem with errorplace is apparently spreading.  I am reluctant
to recommend a solution, but there are some people suggesting
solutions, in particular for dealing with it as the SandBoxer or Peper
trojan.  You might search for [errorplace], and also for [hi-results],
on the forums listed on this page:

"Online Help Forums"
Merijn.org
http://www.spywareinfo.com/~merijn/forums.html

If it is a SandBoxer or Peper trojan, you might try to remove it as
recommended here:

"SandBoxer"
PestPatrol
http://www.pestpatrol.com/PestInfo/s/sandboxer.asp

But of course, your willingless to try this or an option recommended
in the forums may depend on your comfort with removing things from the
computer.

In any event, let us know if you try an option or have further
thoughts in light of what you read.

---

Request for Question Clarification by hummer-ga on 12 May 2004 17:45 PDT

Tim, did you give HijackThis a try, as I suggested earlier? 

hummer

These objects mostly install themselves as Browser Helper Objects. I
dont know geabout this particular one, but i do have a generic
solution. That solution uses registery but as you mentioned you have
Spybot S&D therefore we can use that to remove this particular
Spyware.

a. Start Spybot S & D in Advanced mode
b. Click on tools or press ALT + T
c. Now click on BHO's

Spybot will list all the BHO's installed on your computer, click on
the ones that you dont know about and click on the toggle button
Spybot will disable them, you can re-enable them later, at this point
disable all the suspects.

I think this will do the trick.
Reply if this was of any help

Nasir Ghaznavi

Hey Everyone-

Thanks for all the excellent suggestions.

Please give me a day or so to get through your list. I'm a small
business owner and time is at a premium.

I appreciate all the help very much!

I have found Spybot removes most of that junk of my computer.  You can
download it for free at http://www.spybot.info .

There is a tools that remove the errorplace and hi-result

i have tried all of these for the past week and have had no luck in
getting rid of errorplace.com.

Dear Nasir-

It worked!

I simply followed your directions and used the "Toggle" button to turn
off all BHO's that did not have a green checkmark by them.

Once I'm sure that everything else is working, I will delete them.

Thank you for your help!

Nasir,  Thank you!  Thank you!

This has been an annoying problem and I have looked for several weeks
for a solution.  Finally, I found your proposed fix and it worked!

The errorplace.com hijack had prevented me from even downloading
Stinger and Spybot along with others.  Luckily, I had another computer
networked together and was able to download them there and then
transfer to this computer with the problem.

I found the problem to be a BHO named jimmyhelp.CDBrowerhelper.

I would like to hear from tim97701-ga to confirm that that person's
problm was the same helper.

Thanks.

Hello Moulguy-

Yes it was!