I have a system in the office where both Firefox and IE8 are forced to a
"http:\\\" url (not a valid webpage) when the user tries to go to any search
engine website (Google, Bing, etc.) I ran Malbytes and found 4 Trojans that
were isloated and deleted.

Rebooted the machine and have the same results in trying to reach a search
engine website. I then ran a complete scan in McAfee and Malbytes and both
came up clean.

Suggestions on what to do next?

--
NC Beach Bum

NC Beach Bum wrote:

> I have a system in the office where both Firefox and IE8 are forced to a
> "http:\\\" url (not a valid webpage) when the user tries to go to any
> search
> engine website (Google, Bing, etc.) I ran Malbytes and found 4 Trojans
> that were isloated and deleted.
>
> Rebooted the machine and have the same results in trying to reach a search
> engine website. I then ran a complete scan in McAfee and Malbytes and
> both came up clean.
>
> Suggestions on what to do next?

Since this is an office computer, restore the computer to a clean state by
using your backup image. Don't image your workstations? Then do a clean
install of Windows. I assume you don't keep data on the workstation, but if
you do (!), back it up first.

http://michaelstevenstech.com/cleanxpinstall.html - Clean Install How-To
http://www.elephantboycomputers.com/...alling_Windows - What
you will need on-hand

If you aren't already doing these things, create and implement a backup
strategy that includes imaging (I like Acronis products) and keeping data off
individual workstations.

Malke
--
MS-MVP
Elephant Boy Computers - Don't Panic!
http://www.elephantboycomputers.com/#FAQ

it may simply be that the browser
has been hijacked.

what you can try out is running
"hijackthis" to find that bug and
remove.


--
db·´¯`·...¸><)))º>
DatabaseBen, Retired Professional
- Systems Analyst
- Database Developer
- Accountancy
- Veteran of the Armed Forces
- @Hotmail.com
- nntp Postologist
~ "share the nirvana" - dbZen

~~~~~~~~~~~~~~~
>
>

"NC Beach Bum" <(E-Mail Removed)> wrote in message
news:C0E438F6-7395-4091-BE1F-(E-Mail Removed)...
> I have a system in the office where both Firefox and IE8 are forced to a
> "http:\\\" url (not a valid webpage) when the user tries to go to any
> search
> engine website (Google, Bing, etc.) I ran Malbytes and found 4 Trojans
> that
> were isloated and deleted.
>
> Rebooted the machine and have the same results in trying to reach a search
> engine website. I then ran a complete scan in McAfee and Malbytes and
> both
> came up clean.
>
> Suggestions on what to do next?
>
> --
> NC Beach Bum