Google swiftly becoming useless?

My previous job was as a ‘Search Engine Optimiser’.

I used to take clients web sites and ‘optimise’ the HTML code so they would rank better on search engines. This involved META tags and graphic tag wording as well as lots of other things. Google was pretty easy to get listed on, as their ‘spider’, Googlebot, is not human and just runs on a set list of parameters. Things like Yahoo, a directory, were much more difficult.

Registering other domain names, I forget what the process is called. It was 3 years ago! Is also easy. Especially with search engines. www.google.com isn’t that different to a spider than www.gooogle.com.

Thanks, i just downloaded CWShredder and tested it. when i use words like diet or viagra that usually result in 3-4 pages of ads now i don’t get any ads that are out of the ordinary.

Thanks for the advice, everyone… and I’ve done everything you’ve all suggested… but I still get those links.

For example, I just did a search for “Google”. The first half of the page was the links I expected, but the last four or so…

*Search For GOOGLE On Crawler.com
Search 15 engines for google on Crawler.com and download Web Search Tools

Find GOOGLE Using the Free 2020 Search Toolbar
Having trouble finding google? Get the 2020Search toolbar and say good-bye
to those annoying pop-ups. Many other useful features such as: text highlighter,
multi-search engine, drag & drop, e-mail results and more.
www.2020search.com - Similar pages

Find GOOGLE On WebSearch.com
Search 15 engines for google on WebSearch.com and download Web Search Tools

You Can Find GOOGLE Right Now At Blowsearch.com
Having trouble finding information on: google, why not give us a try? We
pull from more than 15 leading search engines in real time giving you some
of the best results the internet has to offer.
www.BlowSearch.com - Similar pages *

If I do a page refresh, those links disappear and are replaced by more appropriate links.

I’m gettin’ pretty steamed, here. Why the hell isn’t something like this illegal?

You DO HAVE spyware installed. I swear I swear I swear if anyone says differently they are wrong.

Now on to the hard part, my girlfriend’s parents computer ran into this problem. I ran Spyboy, Adaware, BHO Demon (no its not a bho) and I still couldn’t nuke it. This bugger is HARD. If anyone has the solution please let us know. :slight_smile:

You DO HAVE Spyware.

You DO HAVE Spyware. Peace out!

Wow, you’ve got a stubborn one, Lightnin’. Must be a new one.

If you have time, download and run Hijack This!.

Do a scan, and then press the “Save log” button. Cut and paste the logfile here-- it’ll go some ways to help us identify the nasty for you and get it sorted out.

Also-- what OS are you using? Which version of Internet Explorer? (Pardon me for assuming it’s IE.) Heh.

Here’s my HijackThis! logfile:

Logfile of HijackThis v1.97.7
Scan saved at 12:51:09 AM, on 2/23/2004
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\System32\DRIVERS\CDANTSRV.EXE
C:\WINNT\System32\CTsvcCDA.EXE
C:\WINNT\system32\crypserv.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\hidserv.exe
C:\WINNT\system32
vsvc32.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\Tablet.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\Explorer.EXE
C:\WINNT\system32\svchost.exe
C:\Program Files\Microsoft Hardware\Keyboard ype32.exe
C:\WINNT\system32\CTHELPER.EXE
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\Program Files\Motherboard Monitor 5\MBM5.EXE
C:\WINNT\StartupMonitor.exe
C:\WINNT\system32\RUNDLL32.EXE
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Wacom\TabUserW.exe
C:\Palm\HOTSYNC.EXE
C:\Program Files\stickies\stickies.exe
C:\WINNT\System32\svchost.exe
C:\Program Files\Java\j2re1.4.1_02\bin\javaw.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINNT\system32\ZoneLabs\vsmon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Downloads\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://yahoo.sbc.com/dsl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://yahoo.sbc.com/dsl
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R3 - Default URLSearchHook is missing
O1 - Hosts: this is your pc
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\ycomp5_3_12_0.dll
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {2EB60DEB-EB4D-1110-A4C5-0DEF7DE42BE9} - C:\WINNT\system32\rylasiku.dll
O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\ycomp5_3_12_0.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM…\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM…\Run: [AHQInit] C:\Program Files\Creative\SBLive2k\Program\AHQInit.exe
O4 - HKLM…\Run: [IntelliType] “C:\Program Files\Microsoft Hardware\Keyboard ype32.exe”
O4 - HKLM…\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM…\Run: [WINDVDPatch] CTHELPER.EXE
O4 - HKLM…\Run: [Jet Detection] “C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe”
O4 - HKLM…\Run: [QuickTime Task] “C:\Program Files\QuickTime\qttask.exe” -atboottime
O4 - HKLM…\Run: [MBM 5] “C:\Program Files\Motherboard Monitor 5\MBM5.EXE”
O4 - HKLM…\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\system32\NvCpl.dll,NvStartup
O4 - HKLM…\Run: [nwiz] nwiz.exe /install
O4 - HKLM…\Run: [MTB] C:\WINNT\MTB.exe
O4 - HKLM…\Run: [KVWZAD] C:\WINNT\KVWZAD.exe
O4 - HKLM…\Run: [Run StartupMonitor] StartupMonitor.exe
O4 - HKLM…\Run: [Zone Labs Client] C:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe
O4 - HKCU…\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINNT\system32\NVMCTRAY.DLL,NvTaskbarInit
O4 - Startup: HotSync Manager.lnk = C:\Palm\HOTSYNC.EXE
O4 - Startup: Stickies.lnk = C:\Program Files\stickies\stickies.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: hpoddt01.exe.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: TabUserW.lnk = C:\Program Files\Wacom\TabUserW.exe
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: Backward &Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cac&hed Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Si&milar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
O8 - Extra context menu item: Translate Page - res://C:\WINNT\GoogleToolbar.dll/cmtrans.html
O9 - Extra button: Messenger (HKLM)
O9 - Extra ‘Tools’ menuitem: Yahoo! Messenger (HKLM)
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://download.yahoo.com/dl/sbcy/yinst.cab
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52/20030530/qtinstall.info.apple.com/bonnie/us/win/QuickTimeInstaller.exe
O16 - DPF: {6CB5E471-C305-11D3-99A8-000086395495} - http://toolbar.google.com/data/en/deleon/1.1.48-deleon/GoogleNav.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2003120501/housecall.antivirus.com/housecall/xscan53.cab
O16 - DPF: {75D1F3B2-2A21-11D7-97B9-0010DC2A6243} (SecureLogin.SecureControl) - http://secure2.comned.com/signuptemplates/ActiveSecurity.cab
O16 - DPF: {8EDAD21C-3584-4E66-A8AB-EB0E5584767D} - http://toolbar.google.com/data/GoogleActivate.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37426.8943055556
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://anu.popcap.com/games/popcaploader_v5.cab
O16 - DPF: {E504EE6E-47C6-11D5-B8AB-00D0B78F3D48} (Yahoo! Webcam Viewer Wrapper) - http://chat.yahoo.com/cab/yvwrctl.cab
O16 - DPF: {EF99BD32-C1FB-11D2-892F-0090271D4F88} (Yahoo! Companion) - http://us.dl1.yimg.com/download.yahoo.com/dl/toolbar/yiebio4024.cab
The only thing that I can’t really identify is rylasiku.dll, up in the BHO section. I’ve never heard of that, and can’t find any references to it on the net.

I agree that’s the most likely candidate. It’s a Browser Helper Object, and one nobody seems to have heard of.

Try removing it with Hijack This! Just check the box beside it and press the “Fix” button. It will be automatically backed up, and will be easy to restore if it turns out to be something you needed. (Under the config button.)

I agree that Google isn’t what it was. Actually on “tech tv” the cable channel, Kevin Rose of the screen savers even noted that due to the high number of people linking it is becoming more of a hassle.

Yahoo announced they won’t use Google anymore. I am actually going back to Altavista. They seem to be getting better.

The problem is with google I have a job interview with a hotel tommorrow. I typed in the hotel name. I got 18 pages of so called “internet reservation services” (example expedia, priceline etc etc) coming up first before the actual hotel website. I had to wade thru that garbage.

I went to Altavista and it came up on the first page.

It’s like eBay is having this problem too. People are putting irrelivent words in their items to sell just to pull that item up in a search. They often make them the same color as the backround so it doesn’t show to the buyer.

Hmmm… That sounds pretty extreme. I’m not convinced this isn’t evilware. Would you mind terribly saying what you searched for?

It’s not necessarily spyware…

I’ve no problem with adverts, as such. But when my searches come back infested with links to “link farms” that offer nothing but links to cruddy online shops that have zero information content, and may even no longer sell the product I’m researching, then I begin to question what’s happening to google.

I was trying to find out about the memory card standard “SmartMedia” the other day. You, know, useful information about what it could do for me. Yet all I could get was pages upon pages of shopping sites that wanted to sell me some without telling me anything about them.

The web use to be a library. It had it’s trashy shelves, but what it had was information and Google was the index. But now the library has been surrounded by downmarket malls and hucksters and Google has trouble seeing past them.

[QUOTE=Markxxx]
I agree that Google isn’t what it was. Actually on “tech tv” the cable channel, Kevin Rose of the screen savers even noted that due to the high number of people linking it is becoming more of a hassle.

Yahoo announced they won’t use Google anymore. I am actually going back to Altavista. They seem to be getting better.

The problem is with google I have a job interview with a hotel tommorrow. I typed in the hotel name. I got 18 pages of so called “internet reservation services” (example expedia, priceline etc etc) coming up first before the actual hotel website. I had to wade thru that garbage.

[QUOTE]

I have always, always felt this about Google. I never understood why people used to use it rather than Yahoo! - particularly in the days when Yahoo! also used Google, so doing a Yahoo! search effectively included both services anyway.

I often have to search for hotels and travel stuff, and get just the problems that you mention. The top hit should always, ALWAYS be the actual hotel or corporation itself, NEVER other websites referring to it.

I get the impression that Google is trying to smarten up its act. It has received so much negative press recently that is has no real choice, if it wants to stay popular.

The only reason I use Google at all is because of the convenient search tab in Safari. I tried to hack Safari to change the search to a Yahoo! search, but something went badly wrong, thank god I had made a safety duplicate of the app. I also tried AmbrosiaSW’s “iseek” - but don’t find its location at the top of my screen convenient, I want something integrated into the actual browser.

It looks like it’s “Rylasiku”. After much deliberation, I removed it through HijackThis!, and it appears that my Google hits have returned to normal.

The thing is, I haven’t been able to find any information about Rylasiku, and I’m usually pretty darn good at finding stuff on the 'Net. Anyone else heard of it?

Whatever it is, it’s sneaky as hell. It’s a Browser Helper Object, and it seems to do its level best to stay off of your radar.

Some BHOs are using random filenames. See http://www.sysinfo.org/bhoinfo.php. The examples don’t seem to cover this rylasiku, but it’s probably the same trick. Since Googles gives no hits for “rylasiku,” it’s a good bet it’s a random name.

Would it kill somebody to please post an actual search they did that they don’t like, and preferably say which hit they think is bad? I might be undergoing some sort of apologist cognitive dissonance, but I just don’t see what people are complaining about.

I searched for albuquerque holiday inn. On Google, Yahoo, and AltaVista, it seems to be a bunch of legitimate (if unimpressive) booking agencies. In fact, in all three cases, the sponsored links at the top were more useful than the actual hits. :slight_smile:

I searched for smartmedia memory card information. Google’s first hit seems pretty good, though I don’t know exactly what I’m looking for. Altavista’s too, and Yahoo’s looks good, if a little terse.

I searched for “lord of the rings” (which is more my style, and which you’d think would be a popular search). After the sponsored links on Yahoo and Altavista, there’s nothing but the standard official sites and fan sites.

In the search for badger airbrush parts, I admit, Google does start with two “link farms” the others don’t have. I tried a few other searches I thought would be similar - inkjet cartridges, panasonic telephone parts, buy fruit online - but was unable to reproduce the results. This one definitely puzzles me.

This is page 1 of my search on google for badger airbrush parts (almost all seem reasonable):

Buy Badger at Wholesale
www.AirBrush-Depot.com Badger Airbrushes, Parts & Access- ories direct. Free shipping avail. Sponsored Link

Sponsored Links
Full Line Airbrush Sales
Badger, Iwata, Paasche, Createx.
We offer low prices & free shipping
http://www.dixieart.com
Interest:

Discounted Airbrushes
Up to 50% off Retail
Low prices, Large selection
www.hobbylinc.com
Interest:

Airbrush Badger at eBay
Register for free at eBay and begin
buying and selling today. Affiliate
www.ebay.com
Interest:

Airbrush - Cheaper Prices
Find prices, tax, shipping, store
ratings & reviews for Airbrush.
www.nextag.com
Interest:

See your message here…
Badger Airbrush Parts filter only from Motorcycle Parts and …
Motorcycle Parts and Accessories. search. Badger Airbrush Parts filter
only. 300 GPH & Badger Airbrush & Badger Airbrush & Badger Airbrush …
www.agogomcrent.com/ Badger-Airbrush-Parts-filter-only.html - 16k - Cached - Similar pages

Badger Airbrush Parts 3 4 from Motorcycle Parts and Accessories
Motorcycle Parts and Accessories. search. Badger Airbrush Parts 3
4. 300 GPH & Badger Airbrush & Badger Airbrush & Badger Airbrush …
www.agogomcrent.com/Badger-Airbrush-Parts-3-4.html - 24k - Cached - Similar pages
[ More results from www.agogomcrent.com ]

Badger Airbrush Parts fine needle from Online Shopping
… search. Badger Airbrush Parts fine needle. … CLICK FOR MORE INFORMATION Buy Badger
Airbrush Parts medium needle (Buy Auto Parts) A variety of airbrush parts. …
www.inquizit.com/ Badger-Airbrush-Parts-fine-needle.html - 12k - Cached - Similar pages

Badger Airbrush Parts propel regulator from Online Shopping
Online Shopping. search. Badger Airbrush Parts propel regulator. Airbrush
Parts & Airbrush Parts & Auto Darkening & Parts – rank: 1000 …
www.inquizit.com/ Badger-Airbrush-Parts-propel-regulator.html - 9k - Cached - Similar pages
[ More results from www.inquizit.com ]

Airbrush Department
… Supplies… Badger Iwata Paasche Thayer Chandler Airbrushes Airbrush
Parts, Golden Dr PH Martin Schminke Airbrush Colors… Artboxes …
www.reuels.com/reuels/page168.html - 11k - Feb 22, 2004 - Cached - Similar pages

Airbrush Parts - Badger
We stock Airbrush parts for Badger, Iwata, Paasche and Thayer Chandler
airbrushes. … A large selection of Badger Airbrush Replacement Parts. …
www.reuels.com/reuels/badger_airbrush_parts.html - 13k - Cached - Similar pages
[ More results from www.reuels.com ]

Misterart.Com:: Badger Airbrush Parts - Head Washer For Model 100 …
… Return to Main Misterart.Com:: Badger Airbrush Parts - Head Washer
For Model 100, 150, And 200 (Airbrushes & Accessories) - 62216. …
www.notsmallmall.com/ MisterArtcom_Badger_Airbrush_Parts_head_washer_for_model_100_150_and_200_Airbrushes_… - 60k - Cached - Similar pages

Misterart.Com:: Badger Airbrush Parts - 14 In. Diameter Compressor …
… Current Product: Misterart.Com:: Badger Airbrush Parts - 14 In. Diameter … Return
to Main Misterart.Com:: Badger Airbrush Parts - 14 In. Diameter …
www.notsmallmall.com/ MisterArtcom_Badger_Airbrush_Parts_14_in_diameter_compressor_adaptor_Airbrushes_Acce… - 58k - Cached - Similar pages
[ More results from www.notsmallmall.com ]

badger airbrush parts
… yamarider. Posts: 5 Joined: 1/4/2004 From: , IA, AMERICAN SAMOA (USA) Status: offline.
badger airbrush parts, … RE: badger airbrush parts (in reply to yamarider), …
www.rcuniverse.com/forum/badger_airbrush_parts/ m_1411132/tm.htm - 36k - Cached - Similar pages

Badger Airbrush Parts complete fine head assembly Online Shopping …
Badger Airbrush Parts complete fine head assembly. … Badger Airbrush

Smarter than most, since it doesn’t look obviously random. Sounds like a porn-star name or something. :smiley:

This is probably a variation of the “atoque” browser hijacker, that apparently was unleashed about two weeks ago. The reason you didn’t find any refernce s when you googled ‘rylasku’ is because ‘atoque’ renames itself to a randomly generated name every time it is installed. Do a file find for a file named pup.exe; if it exists, you were hit by ‘atoque’. You can safely delete pup.exe.

Here is a good thread on another board about atoque; if you do a form search on that board for “atoque” you will see dozens of recent threads about it.

Can someone tell me how one gets infected with such adware in the first place?

It was these four (the first four non-sponsored hits) that I was referring to as “link farms”. I agree that the rest seem reasonable.

CurtC, typically it’s bundled with “free” applications, the developers of which make money by selling their users down the river.

For example, Kazaa, Morpheus, and Realplayer are all bundled with spyware, and by clicking through their licenses during the install you agree that you’re fine with it and will absolve them of any responsibility for damage or inconvenience.

If it’s free and sounds like it’s designed to appeal to the congenitally stupid, there’s a good chance it only exists to deliver spyware/adware. See Bonzi Buddy/Hotbar/Toptext/SmileyCentral/Incredimail, etc.

People have been sued over adware that just makes it appear as though random pop-ups are associated with unaffiliated webpages. (“Straightdope.com is flogging Steve Martin’s Penis Cream! WTF?”) Since Google has gone public, I think they owe it to their investors to crush like bugs anyone associated with hijackers that insert advertising directly into a Google search result, masquerading as Google content. It is demonstrably creating a poor perception of the product for many people.