Hi Mike
If you're being redirected to another page, then you most likely have a
hijacker, or worse, which AdAware, Spybot nor even the AV are programmed to
detect or remove. You may also have malware or other scumware on your
system that will also need to be removed. You may not be able to install
any updates until the scumware on the machine is removed. Thus, you should
perform the steps below to be sure none of these are present on the system.
Although you may have already run one or more of the programs, please do so
again according to the instructions below. Be aware that, some very
aggressive and damaging variants of malware can replicate themselves
repeatedly if not removed properly. Please follow all instructions
carefully to be sure your system is thoroughly cleaned.
Dealing with Unwanted Spyware and Parasites:
http://mvps.org/winhelp2002/unwanted.htm
Be sure to run CWShredder (newest version 2.1 here),
http://www.majorgeeks.com/download3019.html
AdAware and Spybot.
Download the newest version of HiJackThis here:
http://www.bleepingcomputer.com/files/hijackthis.php
(or Spybot - Search and Destroy DSO Exploit Fix 1.3.1 TX)
http://www.majorgeeks.com/download4392.html
Also be sure to use the HijackThis. Please DO NO post your log to this
newsgroup, but to one of the HiJackThis Support Forums below:
http://www.hijackthis.de/forum/forumdisplay.php?f=10&guestlanguageid=4
the Aumha HiJackThis forums
http://forum.aumha.org/viewforum.php?f=30
or Spyware Beware:
http://forums.maddoktor2.com/index.php?showforum=17
to allow the experts there to evaluate your log and advise you of the
necessary steps to clean your system.
Also this program searches for hidden .dlls that recreate the malware.
About Buster:
http://www.majorgeeks.com/download4289.html
CAUTION!!!!! Before you try to remove spyware using any of the programs
below, download a copy of LSPFIX from any of the following sites:
http://www.cexx.org/lspfix.htm
http://www.spychecker.com/program/winsockxpfix.html
(if your OS is Win2k or XP) The process of removing certain malware may kill
your internet connection. If this should occur, this program, LSPFIX, will
enable you to regain your connection.
Also, get a copy of WINSOCKXPFIX available at:
http://www.spychecker.com/program/winsockxpfix.html
and
WinsockXP Fix- WinXP
http://www.spychecker.com/program/winsockxpfix.html
Also, with instructions, at
http://www.iup.edu/house/resnet/winfix.shtm
also
From LavaSoft- all versions of Windows-
http://digital-solutions.co.uk/lavasoft/whndnfix.zip
also ....
(NOTE: It is reported that in XP SP2, the command netsh winsock reset
will fix this problem without the need for these programs.)
or ........
Winsock Fix Utility
http://www.dfwonline.net/files/WinsockFix.zip
Also.........
Courtesy of Jim Byrd -
Download Sysclean.com, from Trend Micro, here:
http://www.trendmicro.com/download/dcs.asp along with the latest pattern
file, here:
http://www.trendmicro.com/download/pattern.asp
Be sure to read the "How-to" info here:
http://www.trendmicro.com/ftp/products/tsc/readme.txt
You might also want to get Art's updater, SYS-UP.Zip, here for future
updating of these:
http://home.epix.net/~artnpeg/.
(If you download and use the updater from the beginning, it will
automatically handle downloading the other files. Place them in a dedicated
folder after appropriate unzipping, and then run. This scan may take a long
time, as Sysclean is VERY extensive and thorough
If these steps do not resolve your problem, or you need help with the above,
please post back to this thread with the details and any error messages.
Hope this helps
Jan
Smiles are meant to be shared,
that's why they're so contagious.
Replies are posted only to the newsgroup for the benefit or other readers.
How to make a good newsgroup post:
http://www.dts-l.org/goodpost.htm
Is it possible to disable web page forwarding? Is it possible to change a
registry key to do so? I need to access windows update on a computer that
has been hijacked by spam. With every attempt to load the page, I am
automatically forwarded. I really do not wish to order a CD and wait a month
before I can do anything. I am not quite ready to reformat the computer yet,
so I was hoping to alleviate the problem before I destroy it. Thanks
Mike.