Posted 16 December 2009 - 02:04 AM
I have had a problem for about 2 weeks. By selecting hyperlinks on about 3 successive pages IE will be hijacked by an Ask search page with the selected hyperlink as the subject. Specifically, the desired hyperlinked page will show up but a second later a script (it appears) executes the ask search page. Here is the address that shows up when I tried to by cinema tickets: “http://www.ask.com/web?&o=13048&l=dis&q=https://www.eventcinemas.com.au/online-ticketing/null” This does not occur on all web sites (it appears that I could go all day on bleeping computers - not that I would be disappointed with that).
I have run several different scans in safe mode – only cookies were discovered and removed. I have run TFC and SUPERAntiSpyware (safemode – cookies removed) – the problem remains.
Attached are DDS, RootRepeal and HJT reports.