I just need some feedback about this 1

[soas]

I posted a message last night as noah_noah about the bad urls, before i registered, anyways
today i checked the ip adresses for

http://www.yoursearch.org

and for auto.search.msn.com

http://www.yoursearch.org

was 66.40.16.228
auto.search.msn.com was 66.40.16.218

so does that mean msn is doing it ? or is something redirecting based on the auto.search.msn.com?
Its not my isp i wouldnt think, I have had the same dial up isp for 2 years now, so unless they changed it i dont think its that, all im asking is, Is this some change msn did that i am not aware of? or did i install something that has decided to take over, I know it does this on some isps and some evil software i installed before did this to me, but last time it was spyware so i removed it pretty easily, this time i dont know what it is, and i dont like having that pop up, if its msn doing it then i still dont like it but at least i know who to be annoyed at.
It only does it on IE not netscape, netscape comes up with the same old page does not exist alert thing it always has...

 

[soas]

also i copied the address it comes up with when i put in bad urls in IE and pasted it in netscape and nothing came up
when i past this in IE it comes up as yet another different page

http://auto.search.msn.com/response.asp?MT=

test
and im starting to get pretty sure that this isnt something from msn.com, especialy since it only works in IE and not netscape, i know this isnt that important, I mean i dont even type in bad urls that often, its just having it there and knowing something has control over that, the thought of it really bugs me

 

[paulwood]

How did you find the ip addresses, I pinged both and got the following addresses
auto.search.msn.com 207.68.176.190

http://www.yoursearch.org

66.40.16.228
which both resolve to the right sites.

I'm not sure I really understand what the problem is, but you could try the following in IE. Go to Tools >Internet Options> and in Programs click Reset Web Settings and in Advanced check what the search results are supposed to be, and maybe try a few other options.

 

[soas]

Well I just used a typical Ip program, it works fine, when i ping auto.search.msn.com it still shows up as 66.40.16.218
so i guess something is bipassing it then?
How i was able to stop it is i went to the search menu and costumized it so it didnt search from the address bar
but im thinking i have some kind of spyware on my machine, unless its a change my isp made, but i seriously doubt that still, its most likely from one of the things i downloaded

 

[paulwood]

I suppose it is possible that there is a DNS resolution problem with your ISP, but it's a little coincidental that they are both search engines.

If you do think you have spyware and have not previously used it, try downloading Ad-aware, which despite it's name also deals with spyware

http://www.lavasoftusa.com/aaw/aaware.html

 

[soas]

well i downloaded the new version today and i did find some left over gator.com and ezulia stuff that adaware 4.6 didnt get but it still does it, i still dont like the idea that someone has control over the domains i can access, but for now i can avoid the problem by turning off the search options, i would love to figure out whats going on though, i think ill give my isp a ring and see what they know about it.

I wonder what msn would think about someone redirecting their address, i mean unless they are a part of it, it seems like they wouldnt be to happy about it, i dunno
i havent heard from anyone else experiencing it for sure yet though

 

[Polar7]

If bothered by "yoursearch.org" (probably a trojan), try to find the file "hosts" in the C:\WINDOWS\ directory and delete it.

 

[tsuji]

Instead of deleting c:\windows\hosts, I would rather suggest, if you prefer to doing something along this line, to block the outgoing communication by adding the line to it :

127.0.0.1 yoursearch.org

regards - tsuji

 

[Guest_imported]

I had this problem as well and it was driving me crazy. I went to Yoursearch.org, found their contact page and sent an email asking how I got this and how to get rid of it. I wasn't expecting a reply at all, but within 24 hours I got the following response:
-------------
You, or someone using your computer, may have entered one of our many gateway pages where you were asked if you would like to upgrade your search options. If you no longer would like to do so, you are able to
change it back by simply deleting a file in your windows directory called "hosts". (it is possible that you also have a HOSTS file, do NOT delete that)

You need to re-start your browser before the changes take effect.

Please feel free to contact us with any other
questions.

Regards,
Mary B.
Yoursearch.org Customer Service
----------

The solution did work, but I am a bit freaked out that a web site can add and change files on my hard drive so easily.

 

[Guest_imported]

Don't delete the HOSTS file, it might contain real hostnames, that's why it's there.
Instead just remove the line containing

auto.search.msn.com 66.40.16.218

That's why you get 66.40.16.218 when you ping auto.search.msn.com, as the hosts file has higher priority than IP's retrieved from a DNS.
Try NSLOOKUP instead of PING, to get the real IP for auto.search.msn.com

 

[Guest_imported]

I'm so thankful you guy's figured out how to get rid of that search! 2 THUMBS UP! I used a combination of what was stated above to fix the problem for me. I located the "c:\windows\hosts" file, and first deleted the "auto.search.msn.com 66.40.16.218" line using "notepad". Then i placed the "127.0.0.1 yoursearch.org" line in it's place, as was stated originally by Tsuji above. I then restarted the computer and Voila! that stupid search is gone! Keep up the good work guys...We all need to stick together in fighting these types of activities.

 

[Guest_imported]

I'm looking to do just the opposite - I'd really like to be able to set the autosearch (from the actual address bar) to search another web address, such as yahoo or google, when I type in a word or badly formed URL - so for example, if I wanted to search automatically with yahoo for 'cars' I would just have to enter 'cars' - does anybody know about this?

I've tried looking at the hosts file under windows 2000, and this doesn't seem to work, and tried changing entries in the registry, but again, this doesn't work. Reading the above posts, I see it can be done as yoursearch.org seemed to do it, and I was just wondering if anybody knew how they had?

Thanks...

 

[Guest_imported]

I also have this "yoursearch.org" problem but I also noticed a connection to pop up ads witch would appear out of nowhere when I don't have a pop up stopper running. The one that pops up the most is titled "FREE FREE FREE" and says "check out this free video chat site" this links to IFriends witch I believe is associated with Excite. The other ad is for something called Cleanbrowser. I thought the ads had something to do with my ISP, Cox@home or Excite, but I called them and they had never heard of it before.

Both ads had the same roots in their address:

http://66.40.21.67/search/

. The /search extention leads me to the same kind of page as when I enter a bad web address.When I checked the domain,

http://66.40.21.67

, it's a full home page for yoursearch.org. Anybody heard of this? And shouldn't Ad-Aware or my firewall be catching this? The perpetrators of this should be exposed.
tnx, james

 

[paulwood]

It seems that yoursearch.org aren't as up front as most of us would like in the way they try and get our attention, so this doesn't suprise me at all.

My guess is there is either a cookie or some such on your computer that 'phones home' periodically, which causes the pop up, or it's attached to the site you're browsing at the time.

Ad-Aware is very good, but you do need to make sure you have the latest version, and that you scan periodically. As to your firewall, if the pop up uses your browser, or the scripting support in your browser, then it will pass through the firewall because you allow your browser access through. If it's attached to the site, then code in the web page is used.

I don't like people accessing my computer either, however IE6 does have better privacy control than previous versions, although I have had a few problems accessing https sites.

Hope this helps