Need help IE uncrontrollable website access

Discussion in 'Virus Information' started by AL, Oct 13, 2004.

  1. AL

    AL Guest

    Hi
    Sorry if this is a stupid problem.

    I have an ADSL connection with a physical firewall (router) and zone alarm.
    Also have AVG. Whenever I use IE I am taken to a search page (not google or
    other main engines). If I try to change my home page back to microsoft.com
    ~(or any other site) it does not work, just goes back to search site. If i
    manually type in a website of any sort it directs me to a porn site!
    The following link is an example, so I don't know if this is a cause of the
    problem or just the reult of the trojan (if it is one.)

    http://www.heretofind.com/show.php?id=118&q=www.kjdhcijucj.com

    PLEASE DO NOT CLICK ON THIS!

    Any help would be great, what is here to find? and how can I stop it. I
    have been a complete idiot and am only just dloading SP2, then will dload
    office updates. Thank god I had Firefox on a CD somewhere, otherwise I
    would not have been able to do this. PLease help.

    Thank you
    Andy
     
    AL, Oct 13, 2004
    #1
    1. Advertisements

  2. AL

    AL Guest

    Additional, the last part of the link:

    ww. kjdhcijucj.com
    The same thing happens for anysite except it forms part of thr address
    leading the the heretofind.com website.

    Thanks
    Andy
     
    AL, Oct 13, 2004
    #2
    1. Advertisements

  3. I had no problem with that Web site.

    1) Download the following three items...

    Trend Sysclean Package
    http://www.trendmicro.com/download/dcs.asp

    Latest Trend signature files.
    http://www.trendmicro.com/download/pattern.asp

    Adaware SE (personal free version)
    http://www.lavasoftusa.com/

    Create a directory.
    On drive "C:\"
    (e.g., "c:\New Folder")
    or the desktop
    (e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")

    Download sysclean.com and place it in that directory.
    Dowload the signature files (pattern files) by obtaining the ZIP file.
    For example; lpt194.zip

    Extract the contents of the ZIP file and place the contents in the same directory as
    sysclean.com.

    2) Update Adware with the latest definitions.
    3) If you are using WinME or WinXP, disable System Restore
    http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
    4) Reboot your PC into Safe Mode
    5) Using both the Trend Sysclean utility and Adaware, perform a Full Scan of your
    platform and clean/delete any infectors/parasites found.
    6) Restart your PC and perform a "final" Full Scan of your platform using both the
    Trend Sysclean utility and Adaware
    7) If you are using WinME or WinXP,Re-enable System Restore and re-apply any
    System Restore preferences, (e.g. HD space to use suggested 400 ~ 600MB),
    8) Reboot your PC.
    9) If you are using WinME or WinXP, create a new Restore point
    10) Please report back your results

    Dave





    | Hi
    | Sorry if this is a stupid problem.
    |
    | I have an ADSL connection with a physical firewall (router) and zone alarm.
    | Also have AVG. Whenever I use IE I am taken to a search page (not google or
    | other main engines). If I try to change my home page back to microsoft.com
    | ~(or any other site) it does not work, just goes back to search site. If i
    | manually type in a website of any sort it directs me to a porn site!
    | The following link is an example, so I don't know if this is a cause of the
    | problem or just the reult of the trojan (if it is one.)
    |
    | http://www.heretofind.com/show.php?id=118&q=www.kjdhcijucj.com
    |
    | PLEASE DO NOT CLICK ON THIS!
    |
    | Any help would be great, what is here to find? and how can I stop it. I
    | have been a complete idiot and am only just dloading SP2, then will dload
    | office updates. Thank god I had Firefox on a CD somewhere, otherwise I
    | would not have been able to do this. PLease help.
    |
    | Thank you
    | Andy
    |
    |
    | ---
    | Outgoing mail is certified Virus Free.
    | Checked by AVG anti-virus system (http://www.grisoft.com).
    | Version: 6.0.776 / Virus Database: 523 - Release Date: 12/10/2004
    |
    |
     
    David H. Lipman, Oct 13, 2004
    #3
  4. Try this: http://www.mvps.org/sramesh2k/toolbarcop.htm (I haven't tried it
    myself yet). Interested to hear if it works for you.

    Other tools for weeding out this vile stuff are autoruns and
    process-explorer from sysinternals.com, also HijackThis (see
    http://www.aumha.org/a/hjttutor.php and http://www.aumha.org/a/hjttutor.php)
    but these are tools for the expert, I'm afraid.
     
    Philip Herlihy, Oct 14, 2004
    #4
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.