Re: Home page gets redirected.

From: Mike Burgess (winhelp2002_at_spamthis.com)
Date: 02/10/04


Date: Mon, 9 Feb 2004 22:20:17 -0500

Boria,
Install Ad-Aware and\or SpyBot and scan your system for any leftovers.
http://mvps.org/winhelp2002/unwanted.htm

Follow thru with the other steps on the page = "How did this happen"
and "What to do to prevent ..."
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 02-07-04]
Please post replies to this Newsgroup, email address is invalid

--
"Boria Condrey" <boria@bellsouth.net> wrote in message
news:uBLwMc37DHA.3704@tk2msftngp13.phx.gbl...
> Hi Mike,
>
> I am up to date on my virus definitions.  Did a complete scan and no virus
> detected.
>
> I believe I have done everything you suggested.  I have also install the
SP1
> and critical updates.
>
> I checked the firewall and its seems to be set up correctly,
>
> What else do I need to do?
>
> Thanks
>
> Boria
>
> "Mike Burgess" <winhelp2002@spamthis.com> wrote in message
> news:%234TG9Op7DHA.2404@TK2MSFTNGP12.phx.gbl...
> > Boria,
> > I see someone else started on your log, so I won't jump in ........
> > **Yikes** winppr32.exe = W32.Sobig.F worm
> > I see you have "Trend Micro" installed?
> > Is it working properly? and Updated?
> >
>
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_SOBIG.F
> > --
> > O16 - DPF: {886DDE35-E955-11D0-A707-000000521958}
> > - hxxp://69.56.176.78/webplugin.cab
> > --
> > FYI: 69.56.176.78 = ieplugin.com
> > You'll see that IP address listed here:
> > http://mvps.org/winhelp2002/bannedIP.htm
> > [more info]
> > http://sarc.com/avcenter/venc/data/adware.ieplugin.html
> > --
> > After you get cleaned up:
> > You *need* to visit Windows Update and install *all* the "Critical
> > Updates"!!
> > (your log header)
> > Platform: Windows XP (WinNT 5.01.2600)
> > MSIE: Internet Explorer v6.00 SP1 (6.00.2600.0000)
> >
> > Should Read:
> > Platform: Windows XP SP1 (WinNT 5.01.2600)
> > MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
> >
> > Next, make *sure* your Firewall is setup properly:
> > http://mvps.org/winhelp2002/security.htm
> >
> > There are a few other things you need to do, but get the above
> > done first, then we can address the others .....
> > ____________________________________________________________
> > Mike Burgess  [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
> > Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS
file
> > http://www.mvps.org/winhelp2002/hosts.htm [updated 02-07-04]
> > Please post replies to this Newsgroup, email address is invalid
> > --
> >
> > "Boria Condrey" <boria@bellsouth.net> wrote in message
> > news:O9ed4No7DHA.2480@TK2MSFTNGP12.phx.gbl...
> > > HI Mike,
> > >
> > > I got it posted.  the topic is hijack this log and the username is
> boria.
> > >
> > > I looked through the log but don't really know much about it.
> > >
> > > thanks,
> > >
> > >
> > > "Mike Burgess" <winhelp2002@spamthis.com> wrote in message
> > > news:%23dV7g$m7DHA.2028@TK2MSFTNGP10.phx.gbl...
> > > > Boria,
> > > > Did you post your HijackThis log as suggested?
> > > > If so, who did you sign on as and I'll have a look ......
> > > >
> > > > >"could this be the reason I can't access my other forums"
> > > > Yes, it's very possible if you have a Parasite\Trojan running.
> > > > ____________________________________________________________
> > > > Mike Burgess  [MVP Windows Shell\User]
> http://www.mvps.org/winhelp2002/
> > > > Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a
HOSTS
> > file
> > > > http://www.mvps.org/winhelp2002/hosts.htm [updated 02-07-04]
> > > > Please post replies to this Newsgroup, email address is invalid
> > > > --
> > > >
> > > > "Boria Condrey" <boria@bellsouth.net> wrote in message
> > > > news:eE93f2m7DHA.2404@TK2MSFTNGP11.phx.gbl...
> > > > > Mike,
> > > > >
> > > > > I have read and tried everything available on this page with no
> luck.
> > > > > also could this be the reason I can't access my other forums
> requiring
> > > > > usernames and passwords.
> > > > >
> > > > > any other suggestions
> > > > >
> > > > > boria
> > > > >
> > > > >
> > > > > "Mike Burgess" <winhelp2002@spamthis.com> wrote in message
> > > > > news:O79tAWm7DHA.2044@TK2MSFTNGP10.phx.gbl...
> > > > > > Boria,
> > > > > > Dealing with Unwanted Spyware, Parasites, Toolbars and Search
> > Engines
> > > > > > http://mvps.org/winhelp2002/unwanted.htm
> > > > > > ____________________________________________________________
> > > > > > Mike Burgess  [MVP Windows Shell\User]
> > > http://www.mvps.org/winhelp2002/
> > > > > > Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a
> > HOSTS
> > > > file
> > > > > > http://www.mvps.org/winhelp2002/hosts.htm [updated 02-07-04]
> > > > > > Please post replies to this Newsgroup, email address is invalid
> > > > > > --
> > > > > >
> > > > > > "Boria Condrey" <boria@bellsouth.net> wrote in message
> > > > > > news:%23Iwqpul7DHA.2644@TK2MSFTNGP11.phx.gbl...
> > > > > > > I am using IE 6. Under internet options where you enter you
home
> > > page
> > > > > > > address, I can enter my homepage address and it redirects me
to
> > > ebay.
> > > > > > >
> > > > > > > Could someone give me an idea of what is going on.
> > > > > > >
> > > > > > > Thanks
> > > > > > >
> > > > > > >
> > > > > >
> > > > > >
> > > > >
> > > > >
> > > >
> > > >
> > >
> > >
> >
> >
>
>


Relevant Pages

  • Re: WindowsUpdate_80244019 Help
    ... we'll recommend a tool that will install ... the latest Windows Update Agent and reset automatic updates [aka Windows ... Update in Vista]. ... Is that entry in HOSTS, ...
    (microsoft.public.windowsupdate)
  • Re: WindowsUpdate_80244019 Help
    ... we'll recommend a tool that will install the latest Windows Update Agent and reset automatic updates [aka Windows Update in Vista]. ... The HOSTS.sam file has been overwritten with a backup of the HOSTS file on my system so I can't see if that entry is unusual or atypical, but it should have no bearing as to any of the MS update servers. ...
    (microsoft.public.windowsupdate)
  • Re: Home page gets redirected.
    ... You *need* to visit Windows Update and install *all* the "Critical ... Mike Burgess http://www.mvps.org/winhelp2002/ ... Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file ... the topic is hijack this log and the username is boria. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: IE wont load certain web pages anymore
    ... Installed XP support tools. ... Ran cmd prompt. ... The only thing I saw in SPYBOT was an explanation as to what the "hosts" ... > You may have to install XP Pro Support Tools to be able to use ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Unknown Hosts file
    ... Setting hosts to bogus/erroneous address is one way that anti add/popup ... Some of these, when installed, also install a integration plugin to ... "blackhole" the given website. ... > and tracking system please see: http://aris.securityfocus.com ...
    (Incidents)