My ISP is now showing up in Firefox

Hey guys, I'm using Firefox 3.6.16
About a week ago, I mistyped a url, and I was surprised to see a page sponsored by Charter. This has never ever ever happened before. Do I have some kind of charter malware on my pc?

Here is a screenshot of one of the screens.




And as a reminder, currently I am using Spybot S&D, Comodo AV, superantispyware.
And this is on my laptop. W7 Home Premium.

Any idea how this Charter crap showed up?

ErrorMagnet, it appears as though your home page settings have been hijacked by some sort of malware. I looked up "is charter web search malware", using Bing, that's what I read.

You can try running the ESET Online Scanner (be sure to run this with IE, as you can fine tune the scanner better).
http://www.eset.com/us/online-scanner

This will give you a really good scan, allow it to clean up whatever it finds.

I hope that it does you good.

Best of Luck,
Cat

Download Malwarebytes from www.malwarebytes.org. Install it and let it update itself. Also, update SUPERAntiSpyware and Spybot. After all are updated reboot your pc into Safe Mode and run Full Scans with Malwarebytes, then SUPERAntiSpyware and finish up with Spybot. Remove anything any of them find. Then restart Windows again and download HijackThis! and make sure you select Main Menu and click on Do a System Scand and save a lofile. Copy all the text from the logfile and go to the following web address http://hijackthis.de/en and paste the text from the logfile and click the Analyze button. Any results with a red X remove by selecting them in HijackThis! and click on Fix checked. When you do that make sure all web browsers are closed first.

To me you have enough good AV and spyware programs installed already.

Have you tried resetting your homepage? Does it consistently go back to the Charter page if you have tried resetting?

If you're like me and a fast typist, you may have just typed too fast and then hit another wrong key or whatever causing it to become your home page.

Most likely the Charter search portal page is a redirect (or hijack) from your ISP (Charter Communications) whenever you mistype any URL. Any error will automatically take you to Charter's search page, whereby they generate additional revenue by redirecting DNS. There may be a way to opt out of this "service", although I do not use Charter, so I cannot give you specific instructions as to how to go about doing that. Look in some ISP forums for the solution.

This unscrupulous practice is prevalent among several broadband services today, including Verizon, Cox, Charter, Earthlink.

http://www.dslreports.com/shownews/81791

http://slashdot.org/story/07/02/15/0...inder-Like-DNS

Sometimes, but not often, when I doing a web search, it'll redirect me to RoadRunner (my ISP) for links. I don't know why, but it does.

SAS is a powerful spyware scanner, if you were infected, it should have notified you after scanning.

Cat

WOW. Thank you for all the info and suggestions. Okay the ESET online scanner came back clean.

I am going to be reading some of those websites about Charter.
I am performing more scans as I type. I will check back in with results soon.

If the ESET scanner came back clean, you should be good. I ran it once a week when MSE was my main AV, and was glad that I found it.

If you scan with it regularly, SAS will also keep the computer free of adware & trojans. Plus protect your home page, if you selected that option. Note that some "adware" is actually harmless, as long as you're careful about what you click onto.

Cat

Have you just tried to simply go to the home page you want then make it permanent in the FF4 Options section?

yes numerous times