Auto Redirect?

[Occhidiangela]

Each time I try to put the URL of the Amazon Basin D2 forums into my address bar, I get an autoredirect to foxmovies.com.

This started when I first clicked a link to Baron's Bizarre, from a link in Atma's Tavern here.

WTF?

Is this an ISP issue, a virus, or something weird otherwise? I clicked on the link from Google, for The Amazon Basin, and I get.

foxmovies.com

I cleared files and cookies in IE, to no avail.

Rupert Murdoch, you got some 'splainin' to do!

Occhi

[Tal]

Each time I try to put the URL of the Amazon Basin D2 forums into my address bar, I get an autoredirect to foxmovies.com.

This started when I first clicked a link to Baron's Bizarre, from a link in Atma's Tavern here.

WTF?

Is this an ISP issue, a virus, or something weird otherwise? I clicked on the link from Google, for The Amazon Basin, and I get.

foxmovies.com

I cleared files and cookies in IE, to no avail.

Rupert Murdoch, you got some 'splainin' to do!

Occhi

Run adaware ASAP.

[Occhidiangela]

Run adaware ASAP.

Thanks.

Occhi

[vor_lord]

I cleared files and cookies in IE, to no avail.

Try clearing out IE altogether :P

[Occhidiangela]

Try clearing out IE altogether :P

Not an option.

Occhi

[Delc]

Check your hosts file.

C:\WINDOWS\system32\drivers\etc\hosts

Its just a text file. Check that you don't have a line something like

64.70.103.122 theamazonbasin.com

(or some other ip address other than 208.109.106.110)

[Occhidiangela]

Check your hosts file.

C:\WINDOWS\system32\drivers\etc\hosts

Its just a text file. Check that you don't have a line something like

64.70.103.122 theamazonbasin.com

(or some other ip address other than 208.109.106.110)

It wasn't there, either by IP address or by name. (Which I guess is good)

My first run with Adaware came up with some directory warnings, and two cookies. I deleted the cookies.

Same problem.

Running Symantec Client Security, it allegedly seeks out spyware and ad ware.

We shall see.

EDITED: Ha, Symantec didn't find anything "wrong." Gee, what a surprise. :P

Back to Adaware again . . .

Occhi

[Quark]

Skip the trash, go straight to the source;)

Mind running HijackThis! and posting a log? http://www.spywareinfo.com/~merijn/programs.php

A posted log or some google searches can pretty much determine what doesn't belong with HijackThis.

[Occhidiangela]

Skip the trash, go straight to the source;)

Mind running HijackThis! and posting a log? http://www.spywareinfo.com/~merijn/programs.php

A posted log or some google searches can pretty much determine what doesn't belong with HijackThis.

I'll post a log. I don't like to kill anything in the registry if I don't have to. I have regiphobia. :shuriken:

Occhi

[Occhidiangela]

I'll post a log. I don't like to kill anything in the registry if I don't have to. I have regiphobia. :shuriken:

Occhi

Alexa got me.:(

I got rid of her residue.

Thanks for the help.

Occhi

[DeeBye]

AdAware is good, but I find that a combination of AdAware and Spybot kills 99.9% of any level of infestation.

[Occhidiangela]

AdAware is good, but I find that a combination of AdAware and Spybot kills 99.9% of any level of infestation.

Yep. It was nice for Quark to share yet another resource, since one can never have too much of a good thing.

Occhi

[Taem]

Not an option.

Occhi

That's too bad. Firefox is vastly superior, and much more secure so long as you don't download a bazillion modifiers for it.

[Quark]

Yep. It was nice for Quark to share yet another resource, since one can never have too much of a good thing.

Occhi

When I was working at the school Help Desk, let's just say spyware was a common issue ...

I saw all kinds of things that never should be on computers. In the end, I came down with a system of using HijackThis!, cleaning up all the entries, then using AdAware and Spybot to delete useless trailing files (while HijackThis! will remove the executable code, it won't snag associated files).

Spyware that did Winsocks hijacking ended up getting a WinsockFix run, while one particularly horrible piece of spyware (forget which) needed a HijackThis run under a BartPE boot with manual file deletions to successfully clean.

[Occhidiangela]

That's too bad. Firefox is vastly superior, and much more secure so long as you don't download a bazillion modifiers for it.

Tell that to the sysadmins at work. They don't take kindly to that sort of suggestion.

Occhi

[Zippyy]

Tell that to the sysadmins at work. They don't take kindly to that sort of suggestion.

Occhi

Do you work at Microsoft?

[Tal]

Do you work at Microsoft?

IIRC Occhi is a contractor with the Navy and many of the apps and such developed for navy computers only work in conjunction with IE.

[Archon_Wing]

You may as well read this
http://forums.spywareinfo.com/index.php?showtopic=60955

Prevention is much better than the cure, since spyware has gotten more sophisticated the years and is a lot harder to remove. After viweing some of the fixes for the newest in crapware, I would almost suggest throwing the computer out the window.;)

[Occhidiangela]

Do you work at Microsoft?

Sirrah, no one talks to me like that.

Pistols, or sabers, at dawn.

Bring your seconds! :P

Occhi

[kandrathe]

When I was working at the school Help Desk, let's just say spyware was a common issue ...

I saw all kinds of things that never should be on computers. In the end, I came down with a system of using HijackThis!, cleaning up all the entries, then using AdAware and Spybot to delete useless trailing files (while HijackThis! will remove the executable code, it won't snag associated files).

Spyware that did Winsocks hijacking ended up getting a WinsockFix run, while one particularly horrible piece of spyware (forget which) needed a HijackThis run under a BartPE boot with manual file deletions to successfully clean.

The worst I've seen is when they insert into the networking stack.