Jump to content


Photo

I'm having a redirect problem!


  • Please log in to reply
7 replies to this topic

#1 rsgdecals

rsgdecals

    Member

  • Full Member
  • Pip
  • 5 posts

Posted 23 June 2004 - 12:37 AM

I've run hijacker and did the scan and found where each redirect is from and when I check it to fix it, it still comes back and is on the next scan. Please help! I have ran spybot and adaware. When I get on the web it automatically goes to this blue "spyware" page and it directs me to this spyware site. when you close out or are idle, a sex ad comes over and you can't get out of it, unless you control/alt/del.



Logfile of HijackThis v1.97.7
Scan saved at 12:25:56 AM, on 6/23/2004
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\HIJACKTHIS\HIJACKTHIS.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://myyahoo.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://213.159.117.132/redir.php
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://213.159.117.132/redir.php
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://213.159.117.132/redir.php
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = http://213.159.117.132/redir.php
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = http://213.159.117.132/redir.php

Edited by rsgdecals, 23 June 2004 - 08:47 AM.


#2 Older__

Older__

    Member

  • Full Member
  • Pip
  • 11 posts

Posted 23 June 2004 - 12:39 AM

click save log then open and copy and paste....dont know how to fix it but do know that :D

#3 rsgdecals

rsgdecals

    Member

  • Full Member
  • Pip
  • 5 posts

Posted 23 June 2004 - 12:45 AM

thanks! i edited my post with the log and now all I need is some help fixing it!

Edited by rsgdecals, 23 June 2004 - 12:54 AM.


#4 rsgdecals

rsgdecals

    Member

  • Full Member
  • Pip
  • 5 posts

Posted 23 June 2004 - 08:27 AM

ttt

#5 theXplore

theXplore

    Member

  • Full Member
  • Pip
  • 11 posts

Posted 23 June 2004 - 08:31 AM

Please post the log in full, it doesnt look complete

#6 rsgdecals

rsgdecals

    Member

  • Full Member
  • Pip
  • 5 posts

Posted 23 June 2004 - 08:41 AM

I am running in the safe start-up mode, to try and help me get around easier. I had already ran hijacker once and that cleared out alot of stuff but these files are the ones that keep coming back. This is the ip address that I get directed to and it is in these files. I thought I copied the whole file or log though.

#7 theXplore

theXplore

    Member

  • Full Member
  • Pip
  • 11 posts

Posted 23 June 2004 - 08:50 AM

Restart the system in NORMAL MODE and run Hijack This , then paste the log, fixing this entries wont solve the problem, need to find out the root cause

Edited by theXplore, 23 June 2004 - 08:50 AM.


#8 rsgdecals

rsgdecals

    Member

  • Full Member
  • Pip
  • 5 posts

Posted 23 June 2004 - 09:11 AM

OK, Thanks I will do that this afternoon.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

Member of ASAP and UNITE
Support SpywareInfo Forum - click the button