Notices
Computer & Technology Related Post here for help and discussion of computing and related technology. Internet, TVs, phones, consoles, computers, tablets and any other gadgets.

Spyware problem

Thread Tools
 
Search this Thread
 
Old May 25, 2007 | 01:54 PM
  #1  
16vmarc's Avatar
16vmarc
Thread Starter
Scooby Regular
 
Joined: May 2004
Posts: 10,059
Likes: 0
From: Shell Garage, York
Question Spyware problem

Whenever I click a link in Google I get redirected to suspected websites/search engines.

I've used Windows Defender which removed some spy ware but the problem persists. I've also tried Ad-Aware and AVG, which both remove files yet I still have the problem. The files appear to come back after removal. McAffee is detecting no virus so I'm assuming its all spy ware.

I've browsed ad remove programs and can't see anything suspect.

How do I get rid of them for good?
Reply
Old May 25, 2007 | 02:23 PM
  #2  
lightning101's Avatar
lightning101
Scooby Regular
 
Joined: Oct 2004
Posts: 39,688
Likes: 0
From: Never do names esp. Joey, spaz or Mong
Default

Lavasoft ad-aware (free)

Spybot (free)

CCLEANER (free)


If they don't help, post up a cut and paste from hijackthis and i'll tell you what's doing it.
Reply
Old May 25, 2007 | 09:26 PM
  #3  
pimmo2000's Avatar
pimmo2000
Scooby Regular
iTrader: (6)
 
Joined: Sep 2004
Posts: 14,661
Likes: 5
From: On a small Island near France
Default

Originally Posted by 16vmarc
Whenever I click a link in Google I get redirected to suspected websites/search engines.

I've used Windows Defender which removed some spy ware but the problem persists. I've also tried Ad-Aware and AVG, which both remove files yet I still have the problem. The files appear to come back after removal. McAffee is detecting no virus so I'm assuming its all spy ware.

I've browsed ad remove programs and can't see anything suspect.

How do I get rid of them for good?
and again

Control pannel, (Classic view), network connections, right click your connection go to properties, double click TCP/IP in the list, normally at the bottom and set DNS to obtain auto !

Reply
Old May 26, 2007 | 11:39 AM
  #4  
16vmarc's Avatar
16vmarc
Thread Starter
Scooby Regular
 
Joined: May 2004
Posts: 10,059
Likes: 0
From: Shell Garage, York
Default

And what does that do exactly?
Reply
Old May 26, 2007 | 01:52 PM
  #5  
HankScorpio's Avatar
HankScorpio
Scooby Regular
 
Joined: Feb 2004
Posts: 5,848
Likes: 0
Default

Have a look at the file called "hosts" which is in
C:\WINDOWS\system32\drivers\etc
Open with notepad or wordpad.

Some nasties hijack this and make your system go to dodgy sites in place of normal ones.

If there are any entries for common sites like google, msn etc, delete those lines and restart.
Reply
Old May 26, 2007 | 04:33 PM
  #6  
pimmo2000's Avatar
pimmo2000
Scooby Regular
iTrader: (6)
 
Joined: Sep 2004
Posts: 14,661
Likes: 5
From: On a small Island near France
Default

Originally Posted by 16vmarc
And what does that do exactly?

Although you type names for web pages (URL's) the internet works on numbers. DNS is the protocol that changes names to numbers and its possible to set a static DNS server... there is spyware that does this !

Just set it to Auto and your issue will be resolved.

If your not going to trust the replies dont ask questions
Reply
Old May 26, 2007 | 05:00 PM
  #7  
dan83590's Avatar
dan83590
Scooby Regular
 
Joined: Aug 2006
Posts: 3,214
Likes: 0
Default

Originally Posted by pimmo2000
Although you type names for web pages (URL's) the internet works on numbers. DNS is the protocol that changes names to numbers and its possible to set a static DNS server... there is spyware that does this !

Just set it to Auto and your issue will be resolved.

If your not going to trust the replies dont ask questions
The guy was only asking a question and you answered it anyway..
Reply
Old May 26, 2007 | 05:02 PM
  #8  
pimmo2000's Avatar
pimmo2000
Scooby Regular
iTrader: (6)
 
Joined: Sep 2004
Posts: 14,661
Likes: 5
From: On a small Island near France
Default

Originally Posted by dan83590
The guy was only asking a question and you answered it anyway..
I just read it back and it did sound like I was shouting

I'm sorry I didnt mean it like that
Reply
Old May 26, 2007 | 05:05 PM
  #9  
dan83590's Avatar
dan83590
Scooby Regular
 
Joined: Aug 2006
Posts: 3,214
Likes: 0
Default

Reply
Old May 26, 2007 | 06:56 PM
  #10  
16vmarc's Avatar
16vmarc
Thread Starter
Scooby Regular
 
Joined: May 2004
Posts: 10,059
Likes: 0
From: Shell Garage, York
Default

Didn't solve the problem anyway.
Reply
Old May 26, 2007 | 07:01 PM
  #11  
millersoviet's Avatar
millersoviet
Scooby Regular
 
Joined: Feb 2005
Posts: 36
Likes: 0
Default

You could try reseting all internet explorer settings back to their defaults and clearing all cookies and temp files etc.
Reply
Old May 26, 2007 | 07:02 PM
  #12  
16vmarc's Avatar
16vmarc
Thread Starter
Scooby Regular
 
Joined: May 2004
Posts: 10,059
Likes: 0
From: Shell Garage, York
Default

First thing I did!
Reply
Old May 26, 2007 | 07:19 PM
  #13  
mike1210's Avatar
mike1210
Scooby Regular
 
Joined: Apr 2004
Posts: 1,928
Likes: 0
From: Cardiff
Default

on a machine that you can get to google, do a search for "browser re-directs to xxxxx" where xxx is the homepage in question. May be answers for that particular problem. You may need to dig into the registry safe mode etc but the answer may be more specific to your problem.

If that fixes it, check running processes etc. Also do start > run > msconfig

see what comes on on startup, reg entries may be also in here that is causing the redirect to come back so if you take things off startup and they come back on, that's something else to look at
Reply
Old May 26, 2007 | 07:30 PM
  #14  
16vmarc's Avatar
16vmarc
Thread Starter
Scooby Regular
 
Joined: May 2004
Posts: 10,059
Likes: 0
From: Shell Garage, York
Default

I can get to Google, its the links that change, I've being searching then pasting the address'!

I get redirected to differant websites, some are legitimate such as Virgin Broadband.

I've done a system restore but it only let me restore today, which was pointless!

Last edited by 16vmarc; May 26, 2007 at 07:33 PM.
Reply
Old May 26, 2007 | 08:34 PM
  #15  
mike1210's Avatar
mike1210
Scooby Regular
 
Joined: Apr 2004
Posts: 1,928
Likes: 0
From: Cardiff
Default

Originally Posted by lightning101

If they don't help, post up a cut and paste from hijackthis and i'll tell you what's doing it.
give that a whirl, a rebuild may be on the horizon

my 2p worth, go with this next time

Antivirus Software - Eliminate Spyware and Adware with NOD32 Antivirus from ESET
Reply
Old May 26, 2007 | 08:40 PM
  #16  
16vmarc's Avatar
16vmarc
Thread Starter
Scooby Regular
 
Joined: May 2004
Posts: 10,059
Likes: 0
From: Shell Garage, York
Default

Anyone got a link for Hijackthis?
Reply
Old May 26, 2007 | 08:41 PM
  #17  
mike1210's Avatar
mike1210
Scooby Regular
 
Joined: Apr 2004
Posts: 1,928
Likes: 0
From: Cardiff
Default

Merijn.org
Reply
Old May 26, 2007 | 08:51 PM
  #18  
dan83590's Avatar
dan83590
Scooby Regular
 
Joined: Aug 2006
Posts: 3,214
Likes: 0
Default

Originally Posted by HankScorpio
Have a look at the file called "hosts" which is in
C:\WINDOWS\system32\drivers\etc
Open with notepad or wordpad.

Some nasties hijack this and make your system go to dodgy sites in place of normal ones.

If there are any entries for common sites like google, msn etc, delete those lines and restart.

Did you try this too?
Reply
Old May 26, 2007 | 09:46 PM
  #19  
pimmo2000's Avatar
pimmo2000
Scooby Regular
iTrader: (6)
 
Joined: Sep 2004
Posts: 14,661
Likes: 5
From: On a small Island near France
Default

Originally Posted by 16vmarc
Didn't solve the problem anyway.

Reply
Old May 27, 2007 | 08:35 AM
  #20  
HankScorpio's Avatar
HankScorpio
Scooby Regular
 
Joined: Feb 2004
Posts: 5,848
Likes: 0
Default

If it's still going on, have a look for a rootkit

Tutorial is here:
http://www.bleepingcomputer.com/tuto...torial124.html

Software is here:
https://europe.f-secure.com/exclude/...ht/index.shtml
Reply
Related Topics
Thread
Thread Starter
Forum
Replies
Last Post
Abx
Subaru
22
Jan 9, 2016 05:42 PM
PetrolHeadKid
Driving Dynamics
10
Oct 5, 2015 05:19 PM
T.K
General Technical
10
Oct 2, 2015 11:35 AM
the shreksta
Other Marques
26
Oct 1, 2015 02:30 PM
minguela
Wheels And Tyres For Sale
0
Sep 29, 2015 11:28 AM




All times are GMT +1. The time now is 03:08 PM.