I did a search for this here and on google, but didn't come up with anything.
I have a client that seems to have been hijacked. Called last night and brought his laptop down for me to clean up. It needed a LOT Of cleaning up... about 100 occurances of spyware, lots of temp files, etc.
However, that's not what prompted him to call. He uses msn.com as his home page. Which works like it should, but if you enter a url in the address bar that doesn't "exist", the browser is redirected to "http://search.xenodor.somethingorother" (I don't have the pc right in front of me right now.) instead of the typical MSN search page that comes up when a page is not found.
He said he did a little poking around and it seems the search site is related to Alexa.
I've run Spybot and removed all the spyware it found (about 100 cases). It relieved some things but not the xenodor search page above. I'm going to run the old AdAware, because it is noted to remove Alexa references.
Anyone seen this before and/or have any ideas?
Thanks!
wildlife
I have a client that seems to have been hijacked. Called last night and brought his laptop down for me to clean up. It needed a LOT Of cleaning up... about 100 occurances of spyware, lots of temp files, etc.
However, that's not what prompted him to call. He uses msn.com as his home page. Which works like it should, but if you enter a url in the address bar that doesn't "exist", the browser is redirected to "http://search.xenodor.somethingorother" (I don't have the pc right in front of me right now.) instead of the typical MSN search page that comes up when a page is not found.
He said he did a little poking around and it seems the search site is related to Alexa.
I've run Spybot and removed all the spyware it found (about 100 cases). It relieved some things but not the xenodor search page above. I'm going to run the old AdAware, because it is noted to remove Alexa references.
Anyone seen this before and/or have any ideas?
Thanks!
wildlife