Adaware6 was superceded by Adaware SE and Adaware6 is no longer supported.
Dave
| Thanks for that David. I tried it exactly as you specified. The Sysclean took
| ages but didn't find anything. The Adaware SE did find 16 suspects, which I
| deleted. I was already using Adaware 6 and that originally came up clean, so
| I was surprised the the SE version came up with so many.
|
| I ran them both twice until they both came up clean. I then rebooted the PC
| and tried
www.google.co.nz and it again changed to
www.webroot.com.
|
| I looked at C:\winnt\system32\drivers\etc\hosts as Bill James suggested.
| There is only one line in there
| 127.0.0.1 AdSubtract # Added by AdSubtract for auto-dial.
|
| I left it there, although I haven't used AdSubtract for ages.
|
| Thanks for the try both David and Bill. Any further suggestions?
| Ray
|
|
|
| "David H. Lipman" wrote:
|
| > 1) Download the following three items...
| >
| > Trend Sysclean Package
| >
http://www.trendmicro.com/download/dcs.asp
| >
| > Latest Trend signature files.
| >
http://www.trendmicro.com/download/pattern.asp
| >
| > Adaware SE (free personal version v1.05)
| >
http://www.lavasoftusa.com/
| >
| > Create a directory.
| > On drive "C:\"
| > (e.g., "c:\New Folder")
| > or the desktop
| > (e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")
| >
| > Download SYSCLEAN.COM and place it in that directory.
| > Download the Trend Pattern File by obtaining the ZIP file.
| > For example; lpt307.zip
| >
| > Extract the contents of the ZIP file and place the contents in the same directory as
| > SYSCLEAN.COM.
| >
| > 2) Update Adaware with the latest definitions.
| > 3) If you are using WinME or WinXP, disable System Restore
| >
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
| > 4) Reboot your PC into Safe Mode and shutdown as many applications as possible.
| > 5) Using both the Trend Sysclean utility and Adaware, perform a Full Scan of your
| > platform and clean/delete any infectors/parasites found.
| > (a few cycles may be needed)
| > 6) Restart your PC and perform a "final" Full Scan of your platform using both the
| > Trend Sysclean utility and Adaware
| > 7) If you are using WinME or WinXP,Re-enable System Restore and re-apply any
| > System Restore preferences, (e.g. HD space to use suggested 400 ~ 600MB),
| > 8) Reboot your PC.
| > 9) If you are using WinME or WinXP, create a new Restore point
| >
| > * * * Please report back your results * * *
| >
| > Dave
| >
| >
| >
| >
| >
| > | > | When I type
www.google.co.nz into my browser (IE 6.0) I get connected to
| > |
www.webroot.com . If I type
www.goggle.com I get connected to another
| > | spurious, but similar site. Something has obviously got in and corrupted
| > | somewhere in my computer, but where do I start looking?
| > |
| > | I have searched for and deleted any files that mention goggle but that did
| > | not resolve anything. I have also cleared all of my temporary internet files.
| > |
| > | Any pointers as to where I should go from here?
| > |
| > | I operate Windows 2000 5.0 build 2195: Service Pack 4. IE 6.0.2800.1106CO SP1.
| > |
| > | Thanks for your help.
| > | Ray
| >
| >
| >