Need to get rid of: http://trialtry.cn/1/locator.php?q=

[RandomTom]

This seems to be putting itself infront of every URL on a works computer and stopping the URL from working; usually from a google search.

We're using IE7, and a run of spybot didn't fix anything. Any ideas?

 

[Dano]

Malwarebytes.

 

[blastman]

check your reg settings. It looks like something is adding that part to every URL that is clicked on.

"HKEY_LOCAL_MACHINE\SOFTWARE\Classes\htmlfile\shell\open" (should be \shell\open but for some reason it's not displaying right...)

should look either like this

default = Open in S&ame Windows

or

default = "C:\Progra~1\Intern~1\iexplorer.exe" -nohome

You'll know if it's wrong as the default part will have the url that you mentioned above in it.


Hope it helps.

 

[Rabtech]

Sounds like a rootkit or some spyware - run Combofix then update/run a scan with Malwarebytes.