anyone else seen this...
 

While reviewing sites yesterday, I picked up a bunch of spyware and crap from a site using the infamous Porngraph counter. I thought I had gotten rid of all of it, but either google has totally lost it, or I'm getting some kind of pirated results on google searches using IE.

Click Here to see what I'm talking about. It's a screen shot, so don't worry.

I've run Spybot S&D and CWShredder, but no joy. It really looks like a google page, right down to the source, but I just can't see them doing something like that. All the links are mouseovered, and there's even a popup. searchassistant.net seems to be a pretty common url on the serps page.

mozilla searches are normal, as are searches on another pc in my office.

I've never seen it happen on my system, but I have heard horror stories about this kind of crap.

I did a search on google for "free sex pics" and the results I got are very different from the ones you got :(

When I found myself with a browser that I didn't seem to be driving anymore, and adaware, spybot, et al couldn't find anything, someone pointed me to hijackthis. Not being computer literate enough to translate the data it spit out into usable information myself, I posted it on a tech board and was told very quickly what the problem was and how to get rid of it. You might want to give it a try. You can find a review and download it here

Wow that sucks. This keeps on happening to my friend's daughter's computer. :(

It sure looks different then what my search for free porn pics looks like. :D
www.cleoslinks.com/crap/googlesearch.jpg

You might want to try Here

I think I've got it fixed. A combination of spybot, adaware, cwshredder and hijack this, plus a manual search and delete of the registery for "searchassistant" entries, seems to have done the trick. I think it may have reinstalled itself a time or two, and could possibly do so again.

If I find the name of the file that does the install, I'll post it here. Aolfix.exe was mentioned on symantec's site, but I didn't find that on my system.

If you hear of a murder on the news anytime soon related to this dirtbag

Odysseus Marketing, Inc.
8721 Santa Monica Blvd
#409
Los Angeles, CA 90069-4507
US
Domain Name: SEARCHASSISTANT.NET
Administrative Contact:
Jones, Ed hostmaster@odysseusmarketing.com
Odysseus Marketing, Inc.
8721 Santa Monica Blvd

it's probably me. |raygun|

Thanks for all the tips on the forums and stuff. Looking through those will help when you're trying to decide what to zap with the scumware tools.

There's also some good info here

http://vil.nai.com/vil/content/v_100719.htm

on what the virus is and what it does.

Spacemanspiff,
You might want to check out this program. It's excellent. link