weird, spyware?? virus??

[johnnymier]

Hi, I started Internet Explorer today, and my default start page was changed to: http://search-click.com/
Also if I try to browse to my router's address by typing 192.168.1.1 it redirects me to: http://www.lookfor.cc/index.php?pin=


If I type http://192.168.1.1 it works fine. I have ran Spybot S&D and Ad-aware as well as fully updated Norton AV. And found no viruses or spyware. Also I got a sex pop-up today when I accessed AO!
Has anybody encountered this same problem, what is going on?? Maybe new spyware which isn't detected by current progs.


thanks

J

[jehnx]

On your S&D, Norton, and Ad-aware, have you done the updates and gotten the very latest definitions?

[groovicus]

Try here:

http://forums.techguy.org/t186709/s9...7b044f9a6.html

One word of caution...if you go with Hijackthis, be very careful....it is unforgiving if you accidentally delete the wrong thing.

[Wazz]

See my post here: http://www.antionline.com/showthread...856#post674059 This should do it for you.... You may also want to check your Trusted and Restricted sites list for anything weird in Internet Explorer if you use it (Tools, Internet Options).....Good Luck

[nihil]

You might also try:

http://www.webattack.com/get/hostadmin.html

And check what is in your Windows "hosts" folder............some of the more recent stuff hides there.

Cheers

[Wazz]

Exactly nihil, that's what my post I mentioned above had to do with. That is most definately the problem.

[johnnymier]

Wazz: I have deleted all entries in the "hosts" file except the 127.0.0.1 loopback, but I have still got the same problem, what else can I try?

thanks

[nihil]

Try http://www.merijn.org/downloads.html

Get CWShredder and HijackThis (already suggested). Run CWShredder and then re-boot. If yoy still have a problem, run HijackThis, save the log and post it here.

Good Luck

[Wazz]

Ok, I should probably do a little Tut on this but I'm to lazy.....so what I usually do is: 1) Make sure you home page is set to Blank (or something you choose), 2) Check your Allowed/Restricted sites list in the Internet Explorer/Security options, 3) Delete All of your cookies manually, 4) Recheck the Hosts file, 5) Check MSconfig for anything fishy, 6) Do a find in the Registry for http://www.lookfor.cc/index.php?pin= or http://search-click.com/ and 6) Hit the system with an Adware and Spybot scan again with the latest Defs. Hopefully, that will do it....if not we'll try to figure something else out.....Good Luck.

[nihil]

Spybot S&D does not get rid of everything CWShredder is an additional tool. Whilst you are on Merijn's site you might as well get "Startup List" as well and check what is autostarting on your machine.

Good luck