Victory Over 85.255.120.29!, A newbie, I defeated 85.255.120.29!!!

[v9999]

I defeated 85.255.120.29!!!


I use XP, IE6


When clicking some Google search results I got this URL //85.255.120.29/search/?q

We cannot find this search


---------------------------------------------------------------------

I fixed this 85.255.120.29 problem 5 days ago with //siri.urz.free.fr/Fix/SmitfraudFix_En.php

But same 85.255 problem came back and I could not fix it.


I installed and ran

SmitfraudFix
ATF-Cleaner
AVG Anti-Spyware
FixIt fixwareout
freefixer
HijackThis
Bazooka
Spyware Terminator
Ad-Aware 2007
smitRem
avgas
Spybot
etc.


Nothing worked.


Until a friend told me in IE6 to go to Tools, Manage Ads-ons, Highlight and Disable each and every Ad-on in the list, Restart.

And, OOOOOOOO miracle, 85.255.120.29 problem was gone!!!


I am re-enabling the add-ons one by one and trying to find out which particular one caused the problem.

I am so happy the 85.255 is gone. And no single scan I ran before has found or shown 85.255 in logs

======================================

I already found that re-enabling this add-on AcroIEAdvHlprObj causes the 85.255 problem to start again

[ken545]

Hello v9999

Welcome to Safer Networking.

Please read Before You Post (http://forums.spybot.info/showthread.php?t=288)



Download and install Trendmicros Hijackthis (http://www.trendsecure.com/portal/en-US/threat_analytics/hijackthis.php?page=download)

Download the Trendmicro Hijackthis Installer, follow defauts and it will install in C:\Program Files\Trendmicro\Hijackthis and this is exactly where we want it to be.


Open HJT Scan and Save a Log File, it will open in Notepad
Go to Format and make sure Wordwrap is Unchecked
Go to Edit> Select All.....Edit > Copy and Paste the new log into this thread by using the Post Reply and not start a New Thread.

DO NOT have HijackThis fix anything yet. Most of what it finds will be harmless or even required.

[tashi]

This topic has been moved to archives.

If you need the thread re-opened, please send me a private message (pm) and provide a link.

Applies only to the original poster, anyone else with similar problems please start your own topic.