Spyware problem
25 May 2007, 01:54 PM
#1
Scooby Regular
Thread Starter
Spyware problem
Whenever I click a link in Google I get redirected to suspected websites/search engines.
I've used Windows Defender which removed some spy ware but the problem persists. I've also tried Ad-Aware and AVG, which both remove files yet I still have the problem. The files appear to come back after removal. McAffee is detecting no virus so I'm assuming its all spy ware.
I've browsed ad remove programs and can't see anything suspect.
How do I get rid of them for good?
I've used Windows Defender which removed some spy ware but the problem persists. I've also tried Ad-Aware and AVG, which both remove files yet I still have the problem. The files appear to come back after removal. McAffee is detecting no virus so I'm assuming its all spy ware.
I've browsed ad remove programs and can't see anything suspect.
How do I get rid of them for good?
25 May 2007, 02:23 PM
#2
Scooby Regular
Join Date: Oct 2004
Location: Never do names esp. Joey, spaz or Mong
Posts: 39,688
Likes: 0
Received 0 Likes
on
0 Posts
Lavasoft ad-aware (free)
Spybot (free)
CCLEANER (free)
If they don't help, post up a cut and paste from hijackthis and i'll tell you what's doing it.
Spybot (free)
CCLEANER (free)
If they don't help, post up a cut and paste from hijackthis and i'll tell you what's doing it.
25 May 2007, 09:26 PM
#3
Whenever I click a link in Google I get redirected to suspected websites/search engines.
I've used Windows Defender which removed some spy ware but the problem persists. I've also tried Ad-Aware and AVG, which both remove files yet I still have the problem. The files appear to come back after removal. McAffee is detecting no virus so I'm assuming its all spy ware.
I've browsed ad remove programs and can't see anything suspect.
How do I get rid of them for good?
I've used Windows Defender which removed some spy ware but the problem persists. I've also tried Ad-Aware and AVG, which both remove files yet I still have the problem. The files appear to come back after removal. McAffee is detecting no virus so I'm assuming its all spy ware.
I've browsed ad remove programs and can't see anything suspect.
How do I get rid of them for good?
and againControl pannel, (Classic view), network connections, right click your connection go to properties, double click TCP/IP in the list, normally at the bottom and set DNS to obtain auto !
26 May 2007, 01:52 PM
#5
Scooby Regular
Join Date: Feb 2004
Posts: 5,848
Likes: 0
Received 0 Likes
on
0 Posts
Have a look at the file called "hosts" which is in
C:\WINDOWS\system32\drivers\etc
Open with notepad or wordpad.
Some nasties hijack this and make your system go to dodgy sites in place of normal ones.
If there are any entries for common sites like google, msn etc, delete those lines and restart.
C:\WINDOWS\system32\drivers\etc
Open with notepad or wordpad.
Some nasties hijack this and make your system go to dodgy sites in place of normal ones.
If there are any entries for common sites like google, msn etc, delete those lines and restart.
26 May 2007, 04:33 PM
#6
Although you type names for web pages (URL's) the internet works on numbers. DNS is the protocol that changes names to numbers and its possible to set a static DNS server... there is spyware that does this !
Just set it to Auto and your issue will be resolved.
If your not going to trust the replies dont ask questions
26 May 2007, 05:00 PM
#7
Scooby Regular
Join Date: Aug 2006
Posts: 3,214
Likes: 0
Received 0 Likes
on
0 Posts
Although you type names for web pages (URL's) the internet works on numbers. DNS is the protocol that changes names to numbers and its possible to set a static DNS server... there is spyware that does this !
Just set it to Auto and your issue will be resolved.
If your not going to trust the replies dont ask questions
Just set it to Auto and your issue will be resolved.
If your not going to trust the replies dont ask questions
Trending Topics
I just read it back and it did sound like I was shouting 
26 May 2007, 07:19 PM
#13
Scooby Regular
Join Date: Apr 2004
Location: Cardiff
Posts: 1,928
Likes: 0
Received 0 Likes
on
0 Posts
on a machine that you can get to google, do a search for "browser re-directs to xxxxx" where xxx is the homepage in question. May be answers for that particular problem. You may need to dig into the registry safe mode etc but the answer may be more specific to your problem.
If that fixes it, check running processes etc. Also do start > run > msconfig
see what comes on on startup, reg entries may be also in here that is causing the redirect to come back so if you take things off startup and they come back on, that's something else to look at
If that fixes it, check running processes etc. Also do start > run > msconfig
see what comes on on startup, reg entries may be also in here that is causing the redirect to come back so if you take things off startup and they come back on, that's something else to look at
26 May 2007, 07:30 PM
#14
Scooby Regular
Thread Starter
I can get to Google, its the links that change, I've being searching then pasting the address'!
I get redirected to differant websites, some are legitimate such as Virgin Broadband.
I've done a system restore but it only let me restore today, which was pointless!
I get redirected to differant websites, some are legitimate such as Virgin Broadband.
I've done a system restore but it only let me restore today, which was pointless!
Last edited by 16vmarc; 26 May 2007 at 07:33 PM.
26 May 2007, 08:34 PM
#15
Scooby Regular
Join Date: Apr 2004
Location: Cardiff
Posts: 1,928
Likes: 0
Received 0 Likes
on
0 Posts
my 2p worth, go with this next time
Antivirus Software - Eliminate Spyware and Adware with NOD32 Antivirus from ESET
26 May 2007, 08:41 PM
#17
Scooby Regular
Join Date: Apr 2004
Location: Cardiff
Posts: 1,928
Likes: 0
Received 0 Likes
on
0 Posts
26 May 2007, 08:51 PM
#18
Scooby Regular
Join Date: Aug 2006
Posts: 3,214
Likes: 0
Received 0 Likes
on
0 Posts
Have a look at the file called "hosts" which is in
C:\WINDOWS\system32\drivers\etc
Open with notepad or wordpad.
Some nasties hijack this and make your system go to dodgy sites in place of normal ones.
If there are any entries for common sites like google, msn etc, delete those lines and restart.
C:\WINDOWS\system32\drivers\etc
Open with notepad or wordpad.
Some nasties hijack this and make your system go to dodgy sites in place of normal ones.
If there are any entries for common sites like google, msn etc, delete those lines and restart.
Did you try this too?
27 May 2007, 08:35 AM
#20
Scooby Regular
Join Date: Feb 2004
Posts: 5,848
Likes: 0
Received 0 Likes
on
0 Posts
If it's still going on, have a look for a rootkit
Tutorial is here:
http://www.bleepingcomputer.com/tuto...torial124.html
Software is here:
https://europe.f-secure.com/exclude/...ht/index.shtml
Tutorial is here:
http://www.bleepingcomputer.com/tuto...torial124.html
Software is here:
https://europe.f-secure.com/exclude/...ht/index.shtml
Thread
Thread Starter
Forum
Replies
Last Post