When I open new tab in I.E this has now started coming up

The only search provider i have is google. i can not seem to stop this coming up.

what is your home page set to?

wikiwirral,

I have reset all ie settings, i have run malware bytes in safe mode, it found nothing.
There is no installed programs that should not be there, there is nothing in c drive programme folder.

I just can not get rid of it

It's spyware, you'll need to scan in safe mode. Would imagine malwarebytes should pick up whatever's lurking and hijacking the start page. This is old spyware too, any other browser you'd be fine.

In firefox you can edit about:config to change the search.whatever parameters but I think in IE you'll have to revert the program back to default settings to fix the problem if it turns out changing the homepage (and removing any malicious addons) doesn't do it.

Edit: Switch browser and see if the problem repeats itself.

I have set ie back to default settings, addons screen capture attached.

I will download firefox now and try that.

Tools - manage add-ons, remove any google thing there.

This was a feature of google toolbar at one time, I don't use IE so don't know where they are up to on that.

there is nothing there from google, i have just installed firefox, and it does not do it on that, but it very very slow to load page.

i dont have system restore turned on, so it looks like i will have to use recovery partion yet again.

What is a good free antivirus to use, am using microsoft security essentials at the moment

A virus has at some point changed the host file to redirect to that search engine, which probably gets some commission on click throughs.

Check your hosts file to see there isn't anything in there that shouldn't be.

that just goes right over my head, i ain't got a clue what your talking about.

go to start then run type this in.... c:/windows/system32/drivers/etc/hosts

open it with notepad and see if theres anything down at the bottom

It's not a virus, don't waste time going down that avenue of thought. MSE is fine. Did malwarebytes in safe mode find nothing??

Is it worth going back to basics and simply forcing your home page to open when you open a new tab? The screen you have pasted looks very similar to other IE default pages.

If you want a recommended anti virus, I find Avast coupled with Comodo to be very effective, both free downloads.

# Copyright (c) 1993-2009 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handled within DNS itself.
# 127.0.0.1 localhost
# ::1 localhost

found nothing at all, and i ran it in safe mode

avg

Don't ever use AVG. It was good back in 1999 and has been shit ever since. You're better off using nothing than using AVG. Same goes for Norton or Mcaffee.

Willo, what's the url of the site you're redirected to? Is your msconfig startup list completely unticked, nothing loading?

there is loads of stuff in start up.
Its not redirected to any site, its just when i open new tab, i get this

msconfig startup list

Can safely untick the following:

java auto updater
isposure trayapp (i don't know what this is so it's safe to turn off)
kies
kies trayagent
adobe reader
easybits
adobe acrobat
kiespdlr
lightscribe
idt pc audio
the 3 common user interfaces at the top

Ahh ok, so Babylon Search is hijacking the browser. Can you remove Babylon in add/remove programs? If so do that.

Afterwards (whether you can see it in add/remove programs or not) open IE and go tools > internet options > tabs > settings > drop down the 'when a new tab is opened' menu and change it to 'my first home page'. Does that fix the program?

If it does or doesn't check out hidden addons via tools > internet options > programs > manage addons, can you list whats in here please? If babylon is there obviously remove it and reboot, see if that fixes anything.

There is nothing in add/remove programmes to do with babylon.

I changed tab settings to "my first home page" i closed ie and restarted, and as soon as i click new tab, up it comes babylon search.


If it does or doesn't check out hidden addons via tools > internet options > programs > manage addons, can you list whats in here please? If babylon is there obviously remove it and reboot, see if that fixes anything.( see attached)

Thanks for your help on this ex0.

What shows as your homepage under internet options?

Nevermind about the homepage, stupid question since you reset the browser.

Can you scan with this from safe please and let me know how that goes?

https://www.wikiwirral.co.uk/forums/ubbthreads.php/forum_summary.html

screen grab attached, ran in safe mode

Okay, last thing I've got to suggest is that it's somehow a hidden value in IE since the problem didn't reoccur with f0xfire. Since I'm not familiar with IE and honestly wouldn't know where to start, can you completely remove it from windows (add remove programs > remove windows components > remove IE) and then reinstall it with a winblows disk and see if that helps?

If that doesn't get it I'm not sure what else could be done remotely.

Personally I'd just use this as an excuse to switch browser - to any other browser at all - and forget about it (and ie).

i will try removing ie and start again, thanks

I used firefox to download i.e 9, removed ie 8 used cccleaner, installed ie9 and that stupid search thing has gone. I will leave firefox on and start getting to know it.

Thank you ex0 for your help.

Ahh good stuff, glad the problem is solved. It's a weird one that, must be a hidden variable in IE somewhere.

In firefox you can edit all these variables (in the address bar put in about:config and you'll see all the variables you can change listed which makes solving problems in firefox a lot easier).

Another bloody pop up started coming up on every site i go on, ( i know i should not be using i.e)

Um well I can show you how to turn off the warning but you need to solve the underlying problem. If you're getting XSS warnings on every page you visit you've got a serious problem with the machine. Given the previous problems you've had, I'd say format the thing completely and reinstall windows. When you get back up and running disable updates & uninstall IE right away & get a different browser going from the start. And delete whatever recovery partition you're using, you don't need one.

To turn off the xss warnings:

tools > internet options/properties > security tab at the top > select 'internet' as the zone > click custom level > scroll down to 'enable xss filter' and set it as disabled.

Bear in mind that if you've disabled the xss filter you're at risk to more malware infections and data theft (be it password harvesting or bank details or whatever).

i carnt get rid of partion, i dont have win 7 disc, so i need it to go back to factory settings

Download it from btjunkie.org and burn it to a disk, or get someone to do it for you. If your partition is infected restoring to it is useless.

http://btjunkie.org/torrent/Microso...69f5e4bc6570ddd81477880d0e1a53da8653012d

Babylon search is back its highjacked i.e & google chrome and firefox