Re: IE Browser redirection

From: Duane Arnold (notme_at_notme.com)
Date: 07/17/04 

Date: Sat, 17 Jul 2004 23:11:32 GMT

>
> What can I do to prevent this or discover the program that is changing
> the registry entries?
>

If you suspect it's a program or malware that's doing it, then using
Process Explorer and looking at running processes and what's running inside
a running process may help you pin point the culprit.

http://www.devhood.com/tools/tool_details.aspx?tool_id=743

http://www.windowsecurity.com/articles/Hidden_Backdoors_Trojan_Horses_and_R
ootkit_Tools_in_a_Windows_Environment.html

Duane :)

Relevant Pages

  • Re: Xp wont boot
    ... I suspect that only the registry entries for the malware were deleted by ... doing the system restore and that your PC may still be loaded with infected ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: IE Browser redirection
    ... > the registry entries? ... If you suspect it's a program or malware that's doing it, ... Process Explorer and looking at running processes and what's running inside ...
    (alt.computer.security)
  • Re: IE Browser redirection
    ... > the registry entries? ... If you suspect it's a program or malware that's doing it, ... Process Explorer and looking at running processes and what's running inside ...
    (microsoft.public.security)
  • Re: IE Browser redirection
    ... > the registry entries? ... If you suspect it's a program or malware that's doing it, ... Process Explorer and looking at running processes and what's running inside ...
    (comp.security.firewalls)
  • Registry editing problem
    ... Having recently been cobbled by the rather finely named ‘Lo thuong’ ... adware pest, I have had some difficulty with one element of the removal ... First of I killed these running processes in task manager ... The next stage is to delete the following registry entries, ...
    (microsoft.public.windowsxp.security_admin)