Corrupted URLs

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

When I type www.google.co.nz into my browser (IE 6.0) I get connected to
www.webroot.com . If I type www.goggle.com I get connected to another
spurious, but similar site. Something has obviously got in and corrupted
somewhere in my computer, but where do I start looking?

I have searched for and deleted any files that mention goggle but that did
not resolve anything. I have also cleared all of my temporary internet files.

Any pointers as to where I should go from here?

I operate Windows 2000 5.0 build 2195: Service Pack 4. IE 6.0.2800.1106CO SP1.

Thanks for your help.
Ray
 
1) Download the following three items...

Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp

Latest Trend signature files.
http://www.trendmicro.com/download/pattern.asp

Adaware SE (free personal version v1.05)
http://www.lavasoftusa.com/

Create a directory.
On drive "C:\"
(e.g., "c:\New Folder")
or the desktop
(e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")

Download SYSCLEAN.COM and place it in that directory.
Download the Trend Pattern File by obtaining the ZIP file.
For example; lpt307.zip

Extract the contents of the ZIP file and place the contents in the same directory as
SYSCLEAN.COM.

2) Update Adaware with the latest definitions.
3) If you are using WinME or WinXP, disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
4) Reboot your PC into Safe Mode and shutdown as many applications as possible.
5) Using both the Trend Sysclean utility and Adaware, perform a Full Scan of your
platform and clean/delete any infectors/parasites found.
(a few cycles may be needed)
6) Restart your PC and perform a "final" Full Scan of your platform using both the
Trend Sysclean utility and Adaware
7) If you are using WinME or WinXP,Re-enable System Restore and re-apply any
System Restore preferences, (e.g. HD space to use suggested 400 ~ 600MB),
8) Reboot your PC.
9) If you are using WinME or WinXP, create a new Restore point

* * * Please report back your results * * *

Dave





| When I type www.google.co.nz into my browser (IE 6.0) I get connected to
| www.webroot.com . If I type www.goggle.com I get connected to another
| spurious, but similar site. Something has obviously got in and corrupted
| somewhere in my computer, but where do I start looking?
|
| I have searched for and deleted any files that mention goggle but that did
| not resolve anything. I have also cleared all of my temporary internet files.
|
| Any pointers as to where I should go from here?
|
| I operate Windows 2000 5.0 build 2195: Service Pack 4. IE 6.0.2800.1106CO SP1.
|
| Thanks for your help.
| Ray
 
In addition to David's suggestions, you should take a look at your hosts file, since that is a common way of redirecting common url's to other sites.

C:\winnt\system32\drivers\etc\hosts

(change winnt if that is not your Windows directory)

--

Bill James
Microsoft MVP - Shell/User

Windows VBScript Utilities » www.billsway.com/vbspage/
Windows Tweaks & Tips » www.billsway.com/notes_public/
 
Thanks for that David. I tried it exactly as you specified. The Sysclean took
ages but didn't find anything. The Adaware SE did find 16 suspects, which I
deleted. I was already using Adaware 6 and that originally came up clean, so
I was surprised the the SE version came up with so many.

I ran them both twice until they both came up clean. I then rebooted the PC
and tried www.google.co.nz and it again changed to www.webroot.com.

I looked at C:\winnt\system32\drivers\etc\hosts as Bill James suggested.
There is only one line in there
127.0.0.1 AdSubtract # Added by AdSubtract for auto-dial.

I left it there, although I haven't used AdSubtract for ages.

Thanks for the try both David and Bill. Any further suggestions?
Ray
 
Adaware6 was superceded by Adaware SE and Adaware6 is no longer supported.

Dave



| Thanks for that David. I tried it exactly as you specified. The Sysclean took
| ages but didn't find anything. The Adaware SE did find 16 suspects, which I
| deleted. I was already using Adaware 6 and that originally came up clean, so
| I was surprised the the SE version came up with so many.
|
| I ran them both twice until they both came up clean. I then rebooted the PC
| and tried www.google.co.nz and it again changed to www.webroot.com.
|
| I looked at C:\winnt\system32\drivers\etc\hosts as Bill James suggested.
| There is only one line in there
| 127.0.0.1 AdSubtract # Added by AdSubtract for auto-dial.
|
| I left it there, although I haven't used AdSubtract for ages.
|
| Thanks for the try both David and Bill. Any further suggestions?
| Ray
|
|
|
| "David H. Lipman" wrote:
|
| > 1) Download the following three items...
| >
| > Trend Sysclean Package
| > http://www.trendmicro.com/download/dcs.asp
| >
| > Latest Trend signature files.
| > http://www.trendmicro.com/download/pattern.asp
| >
| > Adaware SE (free personal version v1.05)
| > http://www.lavasoftusa.com/
| >
| > Create a directory.
| > On drive "C:\"
| > (e.g., "c:\New Folder")
| > or the desktop
| > (e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")
| >
| > Download SYSCLEAN.COM and place it in that directory.
| > Download the Trend Pattern File by obtaining the ZIP file.
| > For example; lpt307.zip
| >
| > Extract the contents of the ZIP file and place the contents in the same directory as
| > SYSCLEAN.COM.
| >
| > 2) Update Adaware with the latest definitions.
| > 3) If you are using WinME or WinXP, disable System Restore
| > http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
| > 4) Reboot your PC into Safe Mode and shutdown as many applications as possible.
| > 5) Using both the Trend Sysclean utility and Adaware, perform a Full Scan of your
| > platform and clean/delete any infectors/parasites found.
| > (a few cycles may be needed)
| > 6) Restart your PC and perform a "final" Full Scan of your platform using both the
| > Trend Sysclean utility and Adaware
| > 7) If you are using WinME or WinXP,Re-enable System Restore and re-apply any
| > System Restore preferences, (e.g. HD space to use suggested 400 ~ 600MB),
| > 8) Reboot your PC.
| > 9) If you are using WinME or WinXP, create a new Restore point
| >
| > * * * Please report back your results * * *
| >
| > Dave
| >
| >
| >
| >
| >
| > | > | When I type www.google.co.nz into my browser (IE 6.0) I get connected to
| > | www.webroot.com . If I type www.goggle.com I get connected to another
| > | spurious, but similar site. Something has obviously got in and corrupted
| > | somewhere in my computer, but where do I start looking?
| > |
| > | I have searched for and deleted any files that mention goggle but that did
| > | not resolve anything. I have also cleared all of my temporary internet files.
| > |
| > | Any pointers as to where I should go from here?
| > |
| > | I operate Windows 2000 5.0 build 2195: Service Pack 4. IE 6.0.2800.1106CO SP1.
| > |
| > | Thanks for your help.
| > | Ray
| >
| >
| >
 
Back
Top