web address redirected

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by TJB3, Jun 10, 2005.

  1. TJB3

    TJB3 Private E-2

    I have looked through as many of the pages as I could think of how to describe the problem. With no luck. The problem is this, When I type in a web address my computer rediects me to a different ip address that has been made to look like the original page. I discovered this when I spoke to the company of the website and they did not get my info. We pinged the ip address from my computer and found it was being redirected to another site. It is a scam to try to get people into business transactions while appearing as the legitamate site. The people at the company thought I might have been infected when I viewed an image file, but didn't know how to clean it off my computer. They did have the site shut down, but now when I go to the site it shows error even though I know the true site is up. Any idea how to find the file that is redirecting and remove it. Thank you
     
    TJB3, Jun 10, 2005
    #1
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Please follow the steps below:

    - Run ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal

    Make sure you check version numbers and get all updates.

    - Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.

    Also try the following. Download HOSTER and then follow the below steps.
    • Unzip Hoster to a convenient folder such as C:\Hoster
    • Run Hoster.exe, click Restore Original Hosts and then click OK.
    • Click the X to exit the program

    After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps below:

    - Download HijackThis 1.99.1

    - Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

    - Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file.

    - Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

    - Run HijackThis and save your log file.

    - Post your log as an ATTACHMENT to your next message. (Do NOT copy/paste the log into your post).
     
    chaslang, Jun 10, 2005
    #2
  3. TJB3

    TJB3 Private E-2

    Thank you for the help. I ran Trend Micro scan and found 7 trojan files and removed. Also tried to run Symantec securiuty check and it would open and then go to a blank page. Thought it might take awhile to perform, but after 10 minute closed it and tried again with the same result. Moved onto trying Hoster and it went right to the problem. Listed 10 redirects that I removed. Works great now. Thanks again.
     
    TJB3, Jun 12, 2005
    #3
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You're welcome! But it maybe a good idea to complete all the steps of the READ ME FIRST and then to post your HJT log. Sounds like you had a few problems and when this happens there are normally more things hanging around that need fixing.
     
    chaslang, Jun 12, 2005
    #4

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds