problem with companyweb/default.aspx

[ski1535]

I have 1 cpu on the network that has a problem with the companyweb page. When I type it in the broswer or have it as the default page, as soon as it loads it goes to myspace.com

No other sites do this except the companyweb page.

I have cleaned the registry on the pc and cannot find any references of myspace.

Could it be coming from the sbs?

 

[gavm99]

Put Firefox or Chrome onto the computer in question and try again - this will tell you if it is an IE issue or an overall problem with that computer.


Gavin Moorhouse

http://www.lucidcomputersolutions.co.uk

Follow me on Twitter

http://www.twitter.com/lucidblog

 

[ski1535]

Same thing happens in Firefox. So could it be something on the server?

 

[wahnula]

Sounds like you've got re-direction malware. Download & run MBAM on the client and see if it changes the behavior of the system. I doubt it's the server since only one client is affected.

Tony

Users helping Users...

 

[ski1535]

I've tried Adaware and Spybot with nothing. Why would malware send anything to myspace and only on 1 address

 

[noveyron]

Have a look at the hosts file on the PC?

 

[ski1535]

Yes, I renamed the host file to hostold and flushed the dns, but same issue.

 

[markdmac]

Check hosts and lmhosts file. Better yet, disable their use in the TCP/IP advanced settings.

Ping companyweb and see if it returns the IP of your server or not. Repeat the ping directly on the server.

Does this only happen on one PC or all PCs in the domain?


I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.

 

[ski1535]

This only happens on 1 pc all others are fine

 

[wahnula]

Try setting up IE with companyweb/default.aspx as the home page. If it goes somewhere else, you've got redirection malware on that PC. Adaware and Spybot don't catch EVERYTHING, that's why I suggested MBAM. SuperAntiSpyware is good too, despite the name.

Tony

Users helping Users...

 

[ski1535]

Tried that and it still redirects it. The funny thing is, it only redirects the company webpage, I can put any site in the ie home page and it works fine.

The only page directed is the company webpage and it only redirects to myspace, which this user used to visit daily.

I've never seen malware redirect just one page and to redirect to myspace.

 

[markdmac]

Sounds like it is time to wipe the box. Then block access to MySpace at work!

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.

 

[wahnula]

Sounds like it is time to wipe the box

...with extreme prejudice

Tony

Users helping Users...