Re: UNWANTED URLS showing up in web pages
From: Jan Il (abuse_at_localhost.com)
Date: 09/23/04
- Next message: Cassandra: "Help Me to find My Proxy Dialog Box, Please?"
- Previous message: Jan Il: "Re: IE gone nuts, won't delete either"
- In reply to: RJC752: "UNWANTED URLS showing up in web pages"
- Next in thread: RJC752: "Re: UNWANTED URLS showing up in web pages"
- Reply: RJC752: "Re: UNWANTED URLS showing up in web pages"
- Messages sorted by: [ date ] [ thread ]
Date: Wed, 22 Sep 2004 21:38:56 -0700
Hi RJC752 :-)
You may have a hijacker, malware, spyware or parasites on your system
causing this problem. In addition to running your updated anti-virus
program, you should do the following to be sure none of these are present on
your system. Some variants of malware can replicate themselves over and
over if not removed properly. Please follow all instructions carefully to
be sure your system is thoroughly cleaned
Dealing with Unwanted Spyware and Parasites:
http://mvps.org/winhelp2002/unwanted.htm
Be sure to run CWShredder, Ad-aware and Spybot.
Also be sure to use the HijackThis. Please do not post your log to this
newsgroup, but to the SpywareInfo or the Aumha HiJackThis forums
http://forum.aumha.org/viewforum.php?f=30, to allow the experts there to
evaluate your log and advise you of the necessary steps to clean your
system.
also.........
Courtesy of Jim Byrd -
Download Sysclean.com, from Trend Micro, here:
http://www.trendmicro.com/download/dcs.asp along with the latest pattern
file, here: http://www.trendmicro.com/download/pattern.asp Be sure to read
the "How-to" info here:
http://www.trendmicro.com/ftp/products/tsc/readme.txt
(You might also want to get Art's updater, SYS-UP.Zip, here for future
updating of these:
http://home.epix.net/~artnpeg/). (If you download and use the updater from
the beginning, it will automatically handle downloading the other files.
Place them in a dedicated folder after appropriate unzipping, and then run.
This scan may take a long time, as Sysclean is VERY extensive and thorough
CAUTION!!!!! Before you try to remove spyware using any of the programs
below, download a copy of LSPFIX from any of the following sites:
http://www.cexx.org/lspfix.htm
http://www.spychecker.com/program/winsockxpfix.html
(if your OS is Win2k or XP) The process of removing certain malware may kill
your internet connection. If this should occur, this program, LSPFIX, will
enable you to regain your connection.
Also, get a copy of WINSOCKFIX available at:
http://www.spychecker.com/program/winsockxpfix.html
and WinsockXP Fix- WinXP http://www.spychecker.com/program/winsockxpfix.html
Also, with instructions, at http://www.iup.edu/house/resnet/winfix.shtm
also From LavaSoft- all versions of Windows-
http://digital-solutions.co.uk/lavasoft/whndnfix.zip
and......
AdAware SE
http://www.lavasoftusa.com/support/download/
Update immediately after installing before using
Additional information on how to protect your PC:
The Parasite Fight http://www.aumha.org/a/quickfix.htm
More security tips at http://www.aumha.org/a/parasite.htm
Bugs, Glitches & Stuffups: http://www.mvps.org/inetexplorer/Darnit.htm
So how did I get infected in the first place?
http://boards.cexx.org/viewtopic.php?t=957&start=0&postdays=0&postorder=asc&highlight=&sid=53751d8ff5915261af727df08e66ce0d
or
http://snipurl.com/980t
If these steps do not resolve your problem, please post back to this thread
with the details and any error messages.
Hope this helps
Jan :)
Smiles are meant to be shared,
that's why they're so contagious.
Please reply to the newsgroup so others may benefit.
Replies are posted only to the newsgroup for the benefit or other readers.
How to make a good newsgroup post:
http://www.dts-l.org/goodpost.htm
<rjc752@hotmail.com> wrote in message
news:54d94e60.0409222032.7a9fc0fb@posting.google.com...
> Internet Explorer Version 6.0.2800.1106.xpsp2.030422.1633IC
>
> Recently I started seeing URLs in web pages that clearly were
> not placed there by the author. An example comes from a forum
> that included the words 'surround sound' in a message. It is just
> supposed to be text, but 'surround sound' has been converted to a URL
> points to http://www.srch-results.com/lm/rtl.asp?k=surround%20sound.
> These pirate URLS are scattered throughout various websites that
> I visit. I searched using good old Google, but my search skills
> were not up to finding out what is going on here.
>
> I finally did a test, and fired up a version of Mozilla FireFox which
> I installed and only used once or twice. FireFox shows the websites
> the way the authors intended, without extra junk.
>
> I've been trying to research this particular type of malware, but
> I don't even know the terminology to describe it. It's not really
> a 'pop-up'. It's doesn't seem to be a 'hijack'. It could kind of
> be 'ad-ware'. Anyway, rather than run through my limited list of
> tags for nasty pieces of junk software, I'll ask. What do you call
> this sort of abusive software?
>
> EVEN AS I TRY TO TYPE THIS MESSAGE, WHEN I TRY TO EDIT I AM FINDING
> URLS ADDED TO MY TEXT. THIS COULD DRIVE A PERSON TO TYPE IN ALL CAPS!
- Next message: Cassandra: "Help Me to find My Proxy Dialog Box, Please?"
- Previous message: Jan Il: "Re: IE gone nuts, won't delete either"
- In reply to: RJC752: "UNWANTED URLS showing up in web pages"
- Next in thread: RJC752: "Re: UNWANTED URLS showing up in web pages"
- Reply: RJC752: "Re: UNWANTED URLS showing up in web pages"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
