Warning

 

Close
Confirm Action

Are you sure you wish to do this?

Cancel Confirm
AR15.COM
3/30/2009 8:17:35 AM EDT
My niece brought over her laptop. It is all messed up. I loaded AVG and cleaned 2 virus off. However, there is still a big problem. It seems that any attempt to access an external web site is re-directed. If I go to google and do a search, anytime I click on a link, it takes me to some other random place. What the hell is it? How do I clean it off/fix it?
3/30/2009 8:21:09 AM EDT
[#1]
tag
I have the same problem
3/30/2009 8:22:56 AM EDT
[#2]
Sounds like your Browser is Hijacked.





Try Malwarebytes and Spybot if you haven't already done so.
3/30/2009 8:22:58 AM EDT
[#3]
Those redirectors fuck up a system good...back up what you can and wipe that harddrive, preferably with a magnet...
3/30/2009 8:23:13 AM EDT
[#4]


I've been in the business for a while.  If at all possible reload it.  You can use tools like AVG, Spybot, etc to clean things up but the machine will never be the same.  I also don't trust them once they've been compromised.  Does she have a restore CD from the vendor?
3/30/2009 8:25:57 AM EDT
[#5]
Quoted:


I've been in the business for a while.  If at all possible reload it.  You can use tools like AVG, Spybot, etc to clean things up but the machine will never be the same.  I also don't trust them once they've been compromised.  Does she have a restore CD from the vendor?


I have a restore CD from Dell.

It won't even load spybot. It can't update AVG. It can't install the new spybot. This thing is hosed.
3/30/2009 8:27:56 AM EDT
[#6]
save files you need to a flash drive, FDISK the hard drive, then reinstall the OS, then install AVAST. Free and works way better than AVG.

I used to run AVG too before I realized it was full of holes.
3/30/2009 8:33:37 AM EDT
[#7]
backup needed file.

wipe.

its a pain, but typically is the best solution
3/30/2009 8:33:41 AM EDT
[#8]
i deal wit this on a fairly regular basis with family members. what i do is take out their drive (they almost always have only one), attach it to something like this, and scan it with one of my servers. but it would work with any pc that had virus scanning software. this almost always removes the virus. after this, i mount it back in the host pc, boot up and run a local scan. using that pc's virus software. this usually works pretty well

USB to SATA and IDE 2.5 and 3.5 disk adapater for 20 bucks



btw.. if you get this.. get a second ide drive (cheapest) do a system backup to that and you can do restore from that easily.
3/30/2009 8:36:35 AM EDT
[#9]
Quoted:
save files you need to a flash drive, FDISK the hard drive, then reinstall the OS, then install AVAST. Free and works way better than AVG.

I used to run AVG too before I realized it was full of holes.


+ 1 for Avast. I've been using it for years, catches things registered copies of McAfee miss. The forum is monitored by the developers, they were the first to have a working solution for the Vista beta. Free for life if you register, and never even one piece of spam from them. I can't say enough good things.

3/30/2009 8:48:01 AM EDT
[#10]
I had the same thing on my laptop last week.  I "wiped" it with AVG, but it still exhibited the behavior.  I ran another scan, then did a system restore to the last point before the infection, totally OK now.
3/30/2009 8:52:36 AM EDT
[#11]
Sounds like a browser hijack. If you can find out what it is, check the Control Panel >Add/Remove Programs option and System Configuration Utility (MSCONFIG) in the startup to see if they are there as well.
3/31/2009 4:00:39 PM EDT
[#12]
BTT
Any other ideas?
3/31/2009 4:08:33 PM EDT
[#13]
Try simply wiping your HOSTS file.

This link shows how:

http://malektips.com/spyware_adware_0017.html
3/31/2009 4:08:55 PM EDT
[#14]
There are so many ways a windows machine can get jacked up might want to try this forum: http://www.adoko.com/msg_board/default.asp
3/31/2009 4:18:19 PM EDT
[#15]
Why doesn't anybody ever post questions in the forum that is filled with the same type of questions?

Urban Commandos
3/31/2009 4:21:47 PM EDT
[#16]
High Risk Browsing.........

Depending on her age I would say
Anime
Downloading "Free" Music or
Porn

All are about equally risky.
3/31/2009 4:22:47 PM EDT
[#17]
Go here, DSLReports these people know their shit, I am a member of the security updates committee.
3/31/2009 5:01:49 PM EDT
[#18]
Root kit?

I suggest reformatting. I wouldn't trust any information on that computer and I wouldn't copy it to any other computer. Also I would SO not do any online banking or email checking with that thing(ever until it's been 100% reformatted).
3/31/2009 5:05:06 PM EDT
[#19]
there is a program out called hijackthis. i think thats the name. ive used it before a long time ago.
3/31/2009 5:47:03 PM EDT
[#20]
Quoted:
Sounds like your Browser is Hijacked.


Try Malwarebytes and Spybot if you haven't already done so.


1+

I had a this problem awhile back. I haven't had it since I downloaded Malwarebytes.
3/31/2009 5:48:02 PM EDT
[#21]
Format & reinstall FTMFW... anything else is just a waste of time, like bubble gum to plug a leak in the hoover dam
3/31/2009 5:50:11 PM EDT
[#22]
Quoted:
Quoted:
Sounds like your Browser is Hijacked.


Try Malwarebytes and Spybot if you haven't already done so.


1+

I had a this problem awhile back. I haven't had it since I downloaded Malwarebytes.


I carry a copy of Malwarebytes on a flash drive on my key chain.  I end up installing it about once a month on someone's computer that either can't connect or is redirected to the internet.  Those virsuses are popping up everywhere.