Something has commandeered my IE

Discussion in 'Computers' started by Todd K, Sep 30, 2003.

  1. Todd K

    Todd K Second Unit

    Joined:
    Oct 21, 2001
    Messages:
    477
    Likes Received:
    0
    This problem is on my computer at work, which is connected to the Internet through our office's network.

    Something happened today that made my Internet Explorer go haywire. Whenever I first start the program after restarting my computer, the status bar just reads "detecting proxy settings" forever, then finally connects to my homepage. Everything then acts as normal, but I can't visit any search engines. If I type in, for example, www.google.com, the lower status bar will say "opening page www.www.google.com.com" and after about 20 seconds it will take me to "The gigantic search engine at com.net."

    Obviously something is telling IE to behave in this way, but I don't know what. I have looked in the "add/remove" programs for anything suspicious and found nothing, and I've run AdAware and System Mechanic and they didn't help.

    Has anyone ever seen this before?

    Todd
     
  2. Romier S

    Romier S Producer

    Joined:
    Sep 2, 1999
    Messages:
    3,526
    Likes Received:
    0
     
  3. Todd K

    Todd K Second Unit

    Joined:
    Oct 21, 2001
    Messages:
    477
    Likes Received:
    0
    Romier, Thanks -- that seems to have worked. At least, I restarted the computer, and then opened IE, and my homepage loaded right away.

    I don't know how it could have gotten this way, since I hadn't made any changes to the computer.

    I still, however, have the search engine problem, where it won't allow me to type in "www.altavista.com" or "www.google.com" without taking me to this weird com.net web portal page.
     
  4. JamesHl

    JamesHl Supporting Actor

    Joined:
    May 8, 2003
    Messages:
    813
    Likes Received:
    0
    I would say look in your hosts file, but I'm not sure if that's the problem here. It would be good to write off just in case, though.

    It sounds like it's going through the steps that it would normally go through to try and resolve something, but it is being blocked in some way, so that's why I would guess hosts would be a good way of doing that...
     
  5. John Watson

    John Watson Screenwriter

    Joined:
    Jul 14, 2002
    Messages:
    1,937
    Likes Received:
    0
  6. Todd K

    Todd K Second Unit

    Joined:
    Oct 21, 2001
    Messages:
    477
    Likes Received:
    0
    Yes, sounds like almost exactly the same problem. I had a similar problem on my home computer a few months ago, but the solution was much easier -- when I went into the control panel under "add/remove programs," the malicious entity was right there, and removeable with a click of a button. This time it's not so easy.

    And I already ran AdAware and it didn't do anything.

    Also note that I am running Windows 98 at work, and and not being redirected to the same site as Scooter in the above mentioned thread.
     
  7. John_Berger

    John_Berger Cinematographer

    Joined:
    Nov 1, 2001
    Messages:
    2,489
    Likes Received:
    0
     
  8. Todd K

    Todd K Second Unit

    Joined:
    Oct 21, 2001
    Messages:
    477
    Likes Received:
    0
    OK, I'm back at work now and have solved the problem thanks to all your help.

    The problem did in fact lie in the hosts file.
     
  9. JamesHl

    JamesHl Supporting Actor

    Joined:
    May 8, 2003
    Messages:
    813
    Likes Received:
    0
    The new version of adaware scans your hosts file as well, I've noticed.
     
  10. Todd K

    Todd K Second Unit

    Joined:
    Oct 21, 2001
    Messages:
    477
    Likes Received:
    0
    Ah yes, I see that now. I didn't have that checked previously.
     
  11. Kimmo Jaskari

    Kimmo Jaskari Screenwriter

    Joined:
    Feb 27, 2000
    Messages:
    1,528
    Likes Received:
    0
    There is also a new trojan beginning to make the rounds that alters your DNS settings and makes all your DNS lookups go via some third party servers. You also get popups and stuff because of that.

    You'd think people would learn not to use IE and get either http://www.opera.com or http://www.mozilla.org but I guess not...

    At the VERY LEAST, go to Windowsupdate and download the security patches that make these trojans ineffective, they've been available for weeks and months.
     

Share This Page