Expert: Brian Benosky - 10/18/2011

Question
QUESTION: I've recently noticed dsclick.infospace.com when I use Blingo to search for something.  For example, if I typed in allexperts and found the URL to the site under the search results, I would see the following:

http://dsclick.infospace.com/ClickHandler.ashx?ru=http%3a%2f%2fwww.allexperts.co

It appears that before taking me to the all experts site, it first goes through dsclick.infospace.com.  What is it, how can I get rid of it, and how can I prevent it from returning?

ANSWER: Hi Christi

I'd be happy to help you here.  Dsclick is malware which redirects your browser searches.  Please follow the instructions below:

Restart the computer while tapping the F8 button continuously until a menu screen appears.  Choose to Boot Windows into Safe Mode With Networking.  Once in safe mode, open a browser and download Malwarebytes' Anti-Malware to your desktop from here:

http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1

Double-click mbam-setup.exe and follow the prompts to install the program.
* At the end of the install, Malwarebytes will perform an update to it's definitions.
* Once the program has loaded, select Full scan, then click Scan.
* When the scan is complete, click OK, then Show Results to view the results.
* Be sure that everything is checked, and click Remove Selected.
* Reboot the computer normally.
* When completed, a log will open in Notepad.  Please save it to your desktop.

Copy the Malwarebytes log and paste it to me in a follow-up.

Brian

---------- FOLLOW-UP ----------

QUESTION: Here's the log...when I went to Google, I didn't see the dsclick...seems only to be when I use Blingo (search engine) but something must be up as my pc seems to be sluggish.

Malwarebytes' Anti-Malware 1.51.2.1300
www.malwarebytes.org

Database version: 7970

Windows 5.1.2600 Service Pack 3 (Safe Mode)
Internet Explorer 8.0.6001.18702

10/18/2011 12:42:25 AM
mbam-log-2011-10-18 (00-42-25).txt

Scan type: Full scan (C:\|D:\|)
Objects scanned: 296830
Time elapsed: 32 minute(s), 12 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

Answer
Hi Christi

Malwarebytes' did not find any infections on your computer.  I would suggest one more scan, this time with Spybot Search & Destroy:
http://fileforum.betanews.com/detail/Spybot-Search-Destroy/1043809773/1
This program will check for malicious cookies and browser redirects.  If your scan comes up clean with Spybot, then download CCleaner from here:
http://www.snapfiles.com/get/ccleaner.html
Install the program, Click the Analyze button, then once all the junk files are found, click the Run Cleaner button.  That will delete temporary and junk files which slow down your computer.  It is very safe and will not delete anything you need.
After running both programs, let me know if things are improved.

Brian