Pages redirected to a bad site has viruses

[Faheem786]

Dear Experts,

I'm having this problem for the past few days.

When I was accessing the internet unknowingly some program installed on my win2k (running IE 5.0 SP4) machine

Now whenever I click some links I have been taken to one bad website where a save dialg always coming prompting me to save an exe file. What I did was I found the site address and put in the restricted urls. But still the same problem but IE says "Your current security settings do not allow this file to be downloaded"

If click yes.. My Nortan AV detects a virus called Downloader.Trojan

This problem coming all the way in accessing any page and also cannot access many sites almost all the sites properly. But the internet is working perfectly.

In my internet settings the default page is set to blank and also I deleted all the histories and temp files.

I don't know how to find which illegal program is running. I uninstalled all the suspected programs as well

I also installed the Spy Bot at

http://spybot.eon.net.au/

which destroyed all the unwanted regiteries and spy robots.. but still I have this problem

Pls help me to get rid of this.

Thanks
Ahmad

 

[tb525]

Hi Faheem786,
Download 'Hijack This!'. Unzip, doubleclick HijackThis.exe, and hit "Scan".
When the scan is finished, click "Save Log", and copy and paste it in a reply.

http://216.180.252.218/~spywareinfo.com/downloads/tools/hijackthis.zip

 

[Faheem786]

Thanks TB

Ok I will do tonight at home and paste here

Regards
Ahmad
Hong Kong

 

[Kaicolo]

Sounds more likely that you have the Qhosts virus.

Check out this link

http://www3.ca.com/virusinfo/virus.aspx?ID=37191

Also when did you last update with Microsoft patches?

http://www.microsoft.com/security/

http://v4.windowsupdate.microsoft.com/en/default.asp

 

[marymmcc]

check out this thread for more possibilities

http://www.tek-tips.com/viewthread.cfm?spid=779&newpid=779&sqid=695775