Please help with this: clicksearchclick.com the worst adware ive ever had. It keeps me redirecting to their site. www.clicksearchclick.com, and legimate links on webpages refer to their site ex: i go to download.com click on software, and the link takes me to www.cliclsearchclick.com/search=software or smth like that. Ive runned ad-aware, Spybot search and destroy, micrsoft antispyware, and no one could get rid of it. IT REALLY PISSES u OFF i can not surf the web anymore, all the time i get to the f*** clicksearchclick.com site.
Here is the HJT log:
Logfile of HijackThis v1.99.1
Scan saved at 15:58:01, on 28-05-2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSdumpreg.exe
C:WINDOWSSystem32nvsvc32.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSExplorer.EXE
C:Archivos de programaHPhpcoretechhpcmpmgr.exe
C:Archivos de programaHewlett-PackardHP Software UpdateHPWuSchd.exe
C:WINDOWSSystem32spooldriversw32x863hpztsb09.exe
C:WINDOWSSystem32Services{D83CAAA7-4C44-4CCE-8374-E66574F33381}SVCHOST.EXE
C:WINDOWSSystem32win32.exe
C:WINDOWSSystem32wuauclt.exe
C:WINDOWSSystem32msiexec.exe
C:Archivos de programaMicrosoft AntiSpywareGIANTAntiSpywareMain.exe
C:Archivos de programaMicrosoft AntiSpywaregcasDtServ.exe
C:Archivos de programaMicrosoft AntiSpywaregcasServ.exe
C:DownloadsHijackThis.exe
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.clicksearchclick.com/index.php?aff=19
O4 - HKLM.Run: [nwiz] nwiz.exe /install
O4 - HKLM.Run: [HP Component Manager] 'C:Archivos de programaHPhpcoretechhpcmpmgr.exe'
O4 - HKLM.Run: [HP Software Update] 'C:Archivos de programaHewlett-PackardHP Software UpdateHPWuSchd.exe'
O4 - HKLM.Run: [HPDJ Taskbar Utility] C:WINDOWSSystem32spooldriversw32x863hpztsb09.exe
O4 - HKLM.Run: [Service Host] C:WINDOWSSystem32Services{D83CAAA7-4C44-4CCE-8374-E66574F33381}SVCHOST.EXE
O4 - HKLM.Run: [Disk Keeper] C:WINDOWSSystem32Services{D83CAAA7-4C44-4CCE-8374-E66574F33381}SECURITY.EXE
O4 - HKLM.Run: [gcasServ] 'C:Archivos de programaMicrosoft AntiSpywaregcasServ.exe'
O4 - HKCU.Run: [wupd] C:WINDOWSSystem32win32.exe
O6 - HKCUSoftwarePoliciesMicrosoftInternet ExplorerRestrictions present
O8 - Extra context menu item: Download All by FlashGet - C:Archivos de programaFlashGetjc_all.htm
O8 - Extra context menu item: Download using FlashGet - C:Archivos de programaFlashGetjc_link.htm
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:ARCHIV~1FlashGetflashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:ARCHIV~1FlashGetflashget.exe
O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/MediaAccessVerisign/ie/Bridge-c139.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=36467&clcid=0x409
O16 - DPF: {24311111-1111-1121-1111-111191113457} - file://c:eied_s7.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {33331111-1111-1111-1111-611111193457} - file://c:ex.cab
O16 - DPF: {33331111-1111-1111-1111-611111193458} - file://c:ex.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
O17 - HKLMSystemCCSServicesTcpip.{98A7F687-A200-4AB6-9AAC-E6F80AA71DA3}: NameServer = 200.74.160.103 200.74.160.104
O21 - SSODL: SystemCheck2 - {54645654-2225-4455-44A1-9F4543D34545} - C:WINDOWSSystem32vbsys2.dll
O23 - Service: AOL Instant Messanger (AIM) - Unknown owner - C:WINDOWSaim.exe
O23 - Service: Hardware Clock Driver (hwclock) - Unknown owner - C:WINDOWSSystem32hwclock.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:WINDOWSSystem32nvsvc32.exe
THANKKKKKK you!!!.