1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

bing search

Discussion in 'Windows XP' started by rufusta2, Jun 28, 2011.

Thread Status:
Not open for further replies.
Advertisement
  1. rufusta2

    rufusta2 Thread Starter

    Joined:
    Aug 4, 2004
    Messages:
    214
    I had a bing toolbar that my son somehow downloaded to my computer. I removed it and also scanned with ad-aware and found and removed a trojan virus. I was entering something into my address bar and misspelled and it came up to a bing search page. I don't have bing as a default search engine. I checked the registry with regedit and found the bing search entry and deleted it but it sill goes to this page. It does it in firefox and IE. How can I get this deleted permanently?
     
  2. sonexpc

    sonexpc

    Joined:
    Mar 31, 2011
    Messages:
    663
  3. rufusta2

    rufusta2 Thread Starter

    Joined:
    Aug 4, 2004
    Messages:
    214
    It isn't coming up as a toolbar on the top or anything like that. If I just type a letter or two of what site I am wanting to go to, I get a bing search page instead of my usual google search page. Do you think this will still fix that problem or has google started using bing?
     
  4. sonexpc

    sonexpc

    Joined:
    Mar 31, 2011
    Messages:
    663
    But you say you have a bing toolbar before ... Don't know is when it uninstall .. it didn't do a really clean uninstall ... still something in your registry.... also if you use google as search .... you can try to install google toobar ... may be it will override it..
     
  5. catmilk

    catmilk Banned

    Joined:
    May 29, 2011
    Messages:
    141
  6. DoubleHelix

    DoubleHelix Banned

    Joined:
    Dec 9, 2004
    Messages:
    24,388
    What version of Internet Explorer? What is listed in the Search Providers box?
     
  7. rufusta2

    rufusta2 Thread Starter

    Joined:
    Aug 4, 2004
    Messages:
    214
    It was just on the computer for not even a day. I did a system restore but it is still there.
    I am using firefox, the current version and internet explorer 6 I think. I don't normally use anything but firefox unless I have to. Not sure where to find a list of the service providers.
     
  8. DoubleHelix

    DoubleHelix Banned

    Joined:
    Dec 9, 2004
    Messages:
    24,388
    So the Bing searches are happening in Firefox? While you're tying in the address bar? That's not normal behavior for Firefox. Start Firefox in safe mode and see if that behavior happens, if so, there's an add-on causing it.

    IE 6 doesn't support that functionality either, and it doesn't support add-ons, so the problem can't be there either.
     
  9. rufusta2

    rufusta2 Thread Starter

    Joined:
    Aug 4, 2004
    Messages:
    214
    This is the link it is coming up when I just type the word "earn" in my address bar in either firefox or IE: http://www.bing.com/search?pc=Z087&form=ZGAADF&q=earn
    I don't have bing listed as a search option on firefox at all. I detest bing. I had a trojan virus showing up on my scan using Ad-aware and I removed it and it doesn't show any problems on my scans now. I have checked my add ons and don't see anything unusual.
     
  10. rufusta2

    rufusta2 Thread Starter

    Joined:
    Aug 4, 2004
    Messages:
    214
    I just ran a hijack this scan and am posting the results so someone can tell me if they can see any www.startnow.com entries. That is what I think is doing this.

    Logfile of Trend Micro HijackThis v2.0.4
    Scan saved at 9:10:40 PM, on 6/29/2011
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\AVAST Software\Avast\AvastSvc.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\WINDOWS\system32\CSHelper.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\AVAST Software\Avast\avastUI.exe
    C:\WINDOWS\system32\hkcmd.exe
    C:\Program Files\Analog Devices\Core\smax4pnp.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
    C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
    C:\Documents and Settings\Owner\My Documents\Downloads\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.setel.com/
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    O2 - BHO: Shareaza Web Download Hook - {0EEDB912-C5FA-486F-8334-57288578C627} - C:\Program Files\Shareaza\RazaWebHook32.dll
    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
    O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
    O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
    O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    O4 - Global Startup: hp psc 1000 series.lnk = ?
    O4 - Global Startup: hpoddt01.exe.lnk = ?
    O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
    O8 - Extra context menu item: Download with &Shareaza - res://C:\Program Files\Shareaza\RazaWebHook32.dll/3000
    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {A7846ED2-9DE6-4E8A-B116-A8ACEBFA7DB1} (Invoke Solutions MILiveParticipantPadHelper Control) - http://online.invokesolutions.com/events/bin/6.2.0.1452/MILive.cab
    O16 - DPF: {D8AA889B-2C65-47C3-8C16-3DCD4EF76A47} (Invoke Solutions Participant Control(MR)) -
    O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
    O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
    O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
    O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: CopySafe Helper Service (CSHelper) - Unknown owner - C:\WINDOWS\system32\CSHelper.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: Lavasoft Ad-Aware Service - Lavasoft Limited - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe

    --
    End of file - 5006 bytes
     
  11. catmilk

    catmilk Banned

    Joined:
    May 29, 2011
    Messages:
    141
    O2 - BHO: Shareaza Web Download Hook - {0EEDB912-C5FA-486F-8334-57288578C627} - C:\Program Files\Shareaza\RazaWebHook32.dll
    this entry in hjt is not good for sure

    and you can disable these with msconfig
    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
    O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
    O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    O4 - Global Startup: hp psc 1000 series.lnk = ?
    O4 - Global Startup: hpoddt01.exe.lnk = ?
     
  12. rufusta2

    rufusta2 Thread Starter

    Joined:
    Aug 4, 2004
    Messages:
    214
    Before it goes to bing, it is showing stp.startnow.com on the bottom then it goes to a bing search page. My scans have shown a backdoor trojan that I thought I had removed. One folder I saw in my programs is BackEnv and QooBox that will not delete. What is a good free trojan remover?
     
  13. sonexpc

    sonexpc

    Joined:
    Mar 31, 2011
    Messages:
    663
  14. fiona8912

    fiona8912

    Joined:
    Dec 23, 2010
    Messages:
    11
    I vote for you, other browser can override the default browser settings and there isn't any news about Google accept bing but they are in conflict with each other that Google accuse of Bing to copy the mechanism of page rank.
     
  15. rufusta2

    rufusta2 Thread Starter

    Joined:
    Aug 4, 2004
    Messages:
    214
    I decided to do a complete wipe and reinstall my OS. I have installed Avast and Spybot. What other programs do ya'll recommend for malware/spyware/trojan detection & blocking? I was using ad-aware and spyware blaster.
     
  16. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/1004694