Skip to main content
Start a Conversation

Unsolved

This post is more than 5 years old

eearnhart

3 Posts

4264

February 11th, 2005 02:00

IE Web Address Hijack

I maintain 2 computers for a non profit org.  Both computers were hit the same day a couple weeks ago with what appears to have been a trojan virus that has left commands somewhere that intercepts web addresses typed into IE and redirects to an MSN search page.
 
The virus definitions are up to date with all Windows updates.  I have turned off system restore, rebooted in safe mode and done a virus scan, AdAware and Spybot and found nothing.  I updated AdAware and Spybot from a CD as these web sites would be redirected also.
 
The hyjack does not intercept Yahoo.com, Google.com or CNN.com for example.  I cannot make any sense of the web addresses that do get redirected.  THe hosts file is clean and I cannot find anything of interest in the registry files.
 
Please help.

NS_MaNiAc

117 Posts

February 11th, 2005 16:00

Download a program called HiJack This. This will create a log file, simply post the log file in this thread if you do not know what to remove and I will tell you. You must be careful as this program can mess up your system if you remove the wrong thing.

eearnhart

3 Posts

March 16th, 2005 01:00

Been some time since you advised that I run HiJack this and post the log here.  Just wanted to let you know that I found the problem last night and it had nothing to do with the computer at all.  The problem was with a wireless router.

I did not post a hijack this log, because I ran it reviewed it and found nothing.

After many many many frustrating hours looking for a virus, I finally downloaded Firefox only to find the problem repeated there.  So, it was not an IE hijack.  So I tested further and last night I isolated the problem to a DLink 614+ wireless router being used.  I had already checked, and checked the settings and even did a hard reboot of the router.   Last night I downloaded a firmware upgrade.  Installed it and wallah!!

Odd, very odd that the router was blocking certain sites.  There was a power outage in the area about the time of what appeared to be a hijack began.  I can only summize that possibly a power surge corrupted the flash memory on the router.  I run the same router in my home and have never had a problem with it.

Anyway,  it's fixed.

Thanks for your help.

 

Was this post helpful?

View All

Top