redirected to inappropriate web pages

[josh3217]

just recently ordered a new laptop for the company. used system, windows 98 SE.

when i browse to a website,

http://www.microsoft.com

for example, i am redirected to a porographic website. i have seen this before on computers before and it is usually easy to remove.
this computer has no viruses, adaware detects nothing. it is the same website every single time. i will only be redirected when i go to specific websites. there is no spyware running that i can detect in anyway. the system is as bare as i can strip it. the only think i can think of is that the previous owner somehow got his registry changed, causing this effect. If anyone can help in this it would be greatly appreciated.

 

[jrbarnett]

Hi

Run HijackThis and post a log file here.

http://www.spywareinfo.com/~merijn/downloads.html

John

 

[torturedmind]

i had the same prob before. what i did is i tried looking up in the registry the URL of the site am redirected to and deleted it. i also looked at the startup apps (by running MSCONFIG) and see if there are registries being registered at startup and found a TMP file doing so. when i viewed the content, REGSVR32 is registering a porn site at startup.

i hope this helped.

kilroy
philippines
"and that's what we call creativity..."

 

[josh3217]

i have scanned the registry for any part of the website that i am redirected to. i found a few entries and deleted them, but it still happens. i also checked the msconfig and found no abnormal process in the startup. i am still trying every option i can get.

 

[avspool]

If you get ad-watch monitor, it will tell you when something tries to alter the reg. and tell you what prog is trying to alter it. (this is how I was able to remove that stupid onflow bug) which was not detected by any spywear remover or virus killer.)

AVS Pool

 

[mattjurado]

You might also try spybot, an alternative to adaware. Update it and scan.

http://security.kolla.de

Also, edit your c:\windows\hosts file, might be entries in there....

Matt J.

P.S. Please always take the time to backup any and all data before performing any actions suggested for ANY problem, regardless of how minor a change it might seem. Also test the backup to make sure it is intact.

 

[josh3217]

i was about to look into all of the software offered in the many previous messages, but i thought i would try to check the hosts file befor doing so. the file was completely full of entries that were not supposed to be there. i never knew this file existed or even what its for, but that was the problem. thanks for the help everyone.

 

[mainegeek]

Check in Internet Options,Setting,View Objects and remove the unknowns from there. Also delete temp internet files,clear history and check what is set for home page.

 

[smah]

sawer, please provide a source for your information about Spybot Search and Destroy's "spies" and why it is not wise to use this program. I have not seen any such behavior from this program.

 

[okcomp]

I have used Spybot S&D for a long while. It has helped me on many occasions when other programs have failed, also have never seen any indications of spies from this program.
Would like to know the source of this information.

thanks
okcomp

 

[mainegeek]

I use SpyBot also.

 

[mattjurado]

Yes, spybot does not install anything other than the program itself. Please don't post information that you don't know to be true. Spybot gets downloaded hundreds of times a day, if not more. There would be posts up the wazzoo about this if it were true.

Glad I could help Jost.

Matt J.

P.S. Please always take the time to backup any and all data before performing any actions suggested for ANY problem, regardless of how minor a change it might seem. Also test the backup to make sure it is intact.

 

[KimLeece]

Sawyer -
I also use SpyBot AND Adaware.
SpyBot detects Adaware when you run it and warns that if you use Adaware it might detect some SpyBot entries and identify them as spyware when in fact they are not. This has something to do with SpyBots' definition files and backup files as far as I know - Adaware apparantly doesn't recognise that these are only definitions and backups - rather than real entries ( or at least didn't) Since I updated Adaware to version 6.181 it no longer does this.
I wonder which build you are using? If this is not the reason that you made your complaint about SpyBot - I would also like to know the source of it!
One function that SpyBot has that isn't in AdAware is the Immunize function - since using this function I get almost no more spyware (detectable by either SpyBoy OR AdAware)
Please prove - or retract - your claim.

Kim.

 

[torturedmind]

sawer,

i, too, use SpyBot S&D and have no problem with it what-so-ever. if your issue is when both AdAware and Spybots are installed on the same machine and that the "spies" were detected by AdAware, please upgrade your copy of AdAware to ver6.0 build 6.181 or its latest. this will eliminate any of your so called "spy" detection by AdAware. (or we may be wrong about all these if you prove your claim.)

peace!

kilroy
philippines
"and that's what we call creativity..."