Welcome to Just Ask Matt! Today, Bao writes:

Recently I installed a program called TorrentSearch 3.1. During install it asked permission to install WhenU, which I declined. After installation, it gave an error message when run. Then I noticed that whenever I clicked a Web link from within Outlook Express, which starts the default browser (IE) in addition to the requested page, I also get another window connecting to the following: svp.contextuad.org/?site=512463609. This page seems to be blocked by a security app that says in the title bar: “Not Allowed.” this happens only once per boot. When I close IE and do it again, it doesn’t come back. What happened to my system? Did something modify my hosts file? (I removed TorrentSearch, btw.) I’m running XP Home SP2 with the latest patches.

Sounds like you ended up with some spyware/adware on your PC, all right. Before we get into solutions, remember that you should never download and install ‘mystery’ programs. Get them from reliable sources like SnapFiles, Downloads.com, etc. As to whether something is messing with your HOSTS file, I would say it is possible. Start off by using Microsoft’s spyware remover. Install, update and then run it to see if you have any junk on the system. At this point you can use the contents on this page as a guide to check the status of your HOSTS file. Hope this helps!

Do you have an IT-related question? Perhaps you are just burnt out on writing on the walls with crayons? Whatever the comments may be, drop me a line, and you too can “Just Ask Matt!”