IE history problem

[fathead]

I have a customer that can't get rid of an address in IE. I have tried clearing history, temp files, etc. I have also run Adaware and Anti-tracks to remove spyware and clear internet history. I have searched the registry and removed everything I could find.
When I start typing '

http://www.s'

in the address bar, the following address pops up:

http://www.shemalecocktail.com/out.php?url=http://www.trannybitches.com/promos/0612/tran1.html&s=70

I don't know how or when this address got on his PC, nor do I want to know!!!...but I need to remove it. Any suggestions?

 

[Davetoo]

Start/Settings/Taskbar & Start Menu, Advanced tab, press "Clear".

I'm Certifiable, not certified.
It just means my answers are from experience, not a book.

 

[carrr]

You'll need to flush the Atocomplete memory. Instructions here:

http://www.tacktech.com/display.cfm?ttid=219

Tired of waiting for an answer? Try asking better questions. See: faq222-2244

 

[fathead]

I have tried both of these things...It gets rid of everything else, but not this address!

 

[carrr]

Start > Run > regedit > navigate to HKEY_CURRENT_USER\Software\Microsoft\InternetExplorer\TypedURLs

Do you see this address in the right hand screen? If so, delete it.

Tired of waiting for an answer? Try asking better questions. See: faq222-2244

 

[fathead]

Not there...I have searched the registry for this address and have found nothing!

 

[bcastner]

Use notepad to look at:
c:\windows\system32\drivers\etc\HOSTS

I want it to look exactly like:


# Copyright (c) 1993-1999 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost

 

[carrr]

I'd be interested in seeing a hijack log for this pc. Download Hijack This! from here:

http://tomcoyote.com/hjt/

You may be perfectly capable of spotting anything amiss in the log. If you need assistance, post the log with a description of the problem in forum760
I/others will find the post there.

Tired of waiting for an answer? Try asking better questions. See: faq222-2244

 

[fathead]

There were several entries in the hosts file that were porn sites...I removed and restarted. Problem still there...
Nothing unusual from hijack this...