my work computer - DFWstangs Forums
 
LinkBack Thread Tools Display Modes
post #1 of 5 (permalink) Old 07-26-2010, 11:47 AM Thread Starter
Lifer
 
Join Date: Oct 2004
Posts: 7,548
my work computer

for some reason, when you pull up IE and type in a web address, it opens another window at pulls up google. and, in the original window, it opens a different site all together. if you type the name in again, it pulls up a totally different site the the first time. it's weird, i have never seen anything like this. it has done it since new. the computer guy came in and set it up brand new. i have run 3-4 different anti virus programs and none found anything. but, i run adaware and another malware program and they found something. so, i used rollback RX, a program that was on here already, and rolled it back to the beginning. any ideas what i can do to fix this?

FTP!!!!!!!!!!!!!!
jlyon is offline  
Sponsored Links
Advertisement
 
post #2 of 5 (permalink) Old 07-26-2010, 11:59 AM
Lifer
 
slow06's Avatar
 
Join Date: Jul 2006
Location: Arlington
Posts: 2,075
Quote:
Originally Posted by jlyon View Post
for some reason, when you pull up IE and type in a web address, it opens another window at pulls up google. and, in the original window, it opens a different site all together. if you type the name in again, it pulls up a totally different site the the first time. it's weird, i have never seen anything like this. it has done it since new. the computer guy came in and set it up brand new. i have run 3-4 different anti virus programs and none found anything. but, i run adaware and another malware program and they found something. so, i used rollback RX, a program that was on here already, and rolled it back to the beginning. any ideas what i can do to fix this?
EDIT: Just realized that won't help you if you can't get to the website. You can do everything I said on a known clean computer and put the files on a Disk or flash drive and then take them to your infected computer.

Im not an expert but I always start with these:
I would go to bleepingcomputer.com and download rkill.

Once you run rkill a couple of times download Malwarebytes Anti-Malware (if you don't already have it)

(Rkill stops process that would otherwise keep MBAM from downloading/runing properly.)


If for some reason you can't get either of them to download rename them to something random like eXplore.exe and eXplore1.exe so that the virus doesn't know what you are dl ing.

"A government big enough to give you everything you want, is strong enough to take everything you have."
-Gerald Ford/Thomas Jefferson

"A Republic, if you can keep it"
- Benjamin Franklin

The way to peaceably remove elected officials who deviate from the constitution of the United States of America...
www.blowoutcongress.com
slow06 is offline  
post #3 of 5 (permalink) Old 07-26-2010, 12:43 PM
Rockin' da fumanchu
 
Join Date: Nov 2005
Location: On the straight and narrow,stumbling at best, only by Gods grace.
Posts: 7,224
Just speculating, but it sounds like the IT folks used a custom Hosts File or DNS Server to keep yall from going to specific sites.

Run MBAM and see if it shows anything.

What malware scanners did you use and do you still have log files from them?





Listen to my buddy, Jeff Bolton, from 6-9 AM Mon-Fri.

Obamanomics = Trickle Up Poverty

Think you need to format/reinstall your OS(XP), read this first.

Last edited by Tx Redneck; 07-26-2010 at 01:02 PM.
Tx Redneck is offline  
 
post #4 of 5 (permalink) Old 07-26-2010, 01:19 PM Thread Starter
Lifer
 
Join Date: Oct 2004
Posts: 7,548
i did use malwarebytes anti malware before i reset the computer backwards, and using adaware now. this is the only computer it does it on. the other one is perfectly fine. it drives me crazy typing in a address and getting something else.

FTP!!!!!!!!!!!!!!
jlyon is offline  
post #5 of 5 (permalink) Old 07-26-2010, 01:44 PM
Rockin' da fumanchu
 
Join Date: Nov 2005
Location: On the straight and narrow,stumbling at best, only by Gods grace.
Posts: 7,224
http://www.funkytoad.com/index.php?o..._content&id=13

DL this and see what it says your Hosts File contains.

Or, try this and reset the Hosts File and see if the redirects stop.

http://support.microsoft.com/kb/972034





Listen to my buddy, Jeff Bolton, from 6-9 AM Mon-Fri.

Obamanomics = Trickle Up Poverty

Think you need to format/reinstall your OS(XP), read this first.
Tx Redneck is offline  
Sponsored Links
Advertisement
 
Reply

Bookmarks

Quick Reply
Message:
Options

Register Now



In order to be able to post messages on the DFWstangs Forums forums, you must first register.
Please enter your desired user name, your email address and other required details in the form below.

User Name:
Password
Please enter a password for your user account. Note that passwords are case-sensitive.

Password:


Confirm Password:
Email Address
Please enter a valid email address for yourself.

Email Address:
OR

Log-in










Thread Tools
Show Printable Version Show Printable Version
Email this Page Email this Page
Display Modes
Linear Mode Linear Mode



Posting Rules  
You may post new threads
You may post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is On
Trackbacks are On
Pingbacks are On
Refbacks are On

 
For the best viewing experience please update your browser to Google Chrome