IE AutoSearch Oddity

[joetarlton23]

I have been trying to get some help with this. It's a bit long to describe, so I decided to explain it on a web page with some nifty images to make it more clear. Please take a look. It's brief.

http://www.geocities.com/mr_metal_hed/ie/IEbug.htm

[Martin Wilson]

Looks like some adware or something...download ad-aware from http://www.lavasoftusa.com/ and see if that helps.

[joetarlton23]

Thanks for the feedback, Martin. I ran AdAware and eliminated a 5 files that were found, but the problems remains. I'll keep looking. Thanks again.

[Martin Wilson]

This page contains some information:

http://translate.google.com/translat...3Doff%26sa%3Dn

Try searching for files that contain the ip on your computer.

[dolor]

i'm not sure if this is gonna help, but to stop automatic searching, it might help if you go to tools, internet options..click the advanced tab and scroll down to the search options. there should be something like "do not search from the address bar" or "just go to the most likely site". click one of those. maybe it'll help. if not..sry

[joetarlton23]

Still no solution. I'm updating my page with things I've tried and info I've found. http://www.geocities.com/mr_metal_hed/ie/IEbug.htm

[Emo]

look in the Registry.. I bet it's in there...

if I find anything, I'll let you know where exactly

-Emo

[Emo]

Try looking around

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main

-Emo

[Kagey]

You also might want to go here and check out the following
HKLM\Software\Microsoft\Internet Explorer\AboutURLs\

blank: res://mshtml.dll/blank.htm
navagation cancelled: res://shdocvw.dll/navcancl.htm
navagation failure: res://shdocvw.dll/navcancl.htm
offlineinformation: res://shdocvw.dll/offcancl.htm



also go to the location emo said above, and check
search page: http://www.microsoft.com/isapi/redir...ie&ar=iesearch

[joetarlton23]

You guys were right about the registry. In HKLM\Software\Microsoft\Internet Explorer\AboutURLs\ I had two string values named 'blank'. The first was correct, blank: "res://mshtml.dll/blank.htm" , but the other's data was "http://205.134.182.164/1/". I deleted it, but the problem remains.


The source for this page has a line in it that's opening http://205.134.182.161/cool.html. I need to edit the source in SHDOCLC.DLL, but I can't. I'll keep at it.

Thanks again for the help. Maybe someone will figure it out.

[mendhak]

Here's another tedious method:

open up your registry and search for cool.html

modify/delete any and all keys referencing that.

It could be that there are other keys referencing 205.13...../coo.html