Homepage redirect

[R. Choate]

After installing the Windows patch this week, my browser is redirecting me
from my homepage. It does not reset the home page, it just send me to a
website that appears to be an ad for MSN8. Immediately before it sends me to
the other site, it get an "action cancelled" page with the following in the
address bar: res://C:\WINNT\System32\shdoclc.dll/navcancl.htm then I am
sent to: http://join.msn.com/?page=affiliate/offer&UNC=1&pgmarket=en-us

Can anybody tell me what is happening?

 

[siljaline]

After installing the Windows patch this week, my browser is redirecting me
from my homepage. It does not reset the home page, it just send me to a
website that appears to be an ad for MSN8. Immediately before it sends me to
the other site, it get an "action cancelled" page with the following in the
address bar: res://C:\WINNT\System32\shdoclc.dll/navcancl.htm then I am
sent to: http://join.msn.com/?page=affiliate/offer&UNC=1&pgmarket=en-us

Can anybody tell me what is happening?

Spyware Removal Tools, Lavasoft's "Ad-aware",
Direct download -
http://ftp.pcworld.com/pub/new/privacy___security/aaw6181.exe

Lavasoft/Ad-aware home: http://www.lavasoftusa.com
Mirror site: http://www.lavasoft.de/

*Also* install and run SpyBot Search & Destroy,
Direct download -
http://studserver.uni-dortmund.de/~su1669/spybotsd12.exe

SpyBot home: http://security.kolla.de/
SpyBot How-To: http://www.tomcoyote.org/SPYBOT/
More detailed help: http://tomcoyote.org/~mosaic1/spybot/
Support Forum, http://net-integration.net/cgi-bin/forum/ikonboard.cgi
Navigate to the SpyBot S&D section.

Install, reboot, read FAQ and overview, use online update feature to obtain
the
latest reference files, scan for Spyware much like you would with your
pre-installed anti-virus scanner. Rid your machine of unwanted Spyware
pests.

HTH

--

siljaline

"Arguing with anonymous strangers on the Internet is a sucker's game
because they almost always turn out to be -- or to be indistinguishable from
-- self-righteous sixteen-year-olds possessing infinite amounts of free
time."
- Neil Stephenson, _Cryptonomicon_

 

[R. Choate]

Yes, you were right. I did what you said and it appears to have worked. I
hate spyware and I'm tired of fighting with internet a-holes who are trying
to break into my computers.

Thanks !
--
RMC,CPA

After installing the Windows patch this week, my browser is redirecting me
from my homepage. It does not reset the home page, it just send me to a
website that appears to be an ad for MSN8. Immediately before it sends me to
the other site, it get an "action cancelled" page with the following in the
address bar: res://C:\WINNT\System32\shdoclc.dll/navcancl.htm then I am
sent to: http://join.msn.com/?page=affiliate/offer&UNC=1&pgmarket=en-us

Can anybody tell me what is happening?

Spyware Removal Tools, Lavasoft's "Ad-aware",
Direct download -
http://ftp.pcworld.com/pub/new/privacy___security/aaw6181.exe

Lavasoft/Ad-aware home: http://www.lavasoftusa.com
Mirror site: http://www.lavasoft.de/

*Also* install and run SpyBot Search & Destroy,
Direct download -
http://studserver.uni-dortmund.de/~su1669/spybotsd12.exe

SpyBot home: http://security.kolla.de/
SpyBot How-To: http://www.tomcoyote.org/SPYBOT/
More detailed help: http://tomcoyote.org/~mosaic1/spybot/
Support Forum, http://net-integration.net/cgi-bin/forum/ikonboard.cgi
Navigate to the SpyBot S&D section.

Install, reboot, read FAQ and overview, use online update feature to obtain
the
latest reference files, scan for Spyware much like you would with your
pre-installed anti-virus scanner. Rid your machine of unwanted Spyware
pests.

HTH

--

siljaline

"Arguing with anonymous strangers on the Internet is a sucker's game
because they almost always turn out to be -- or to be indistinguishable from
-- self-righteous sixteen-year-olds possessing infinite amounts of free
time."
- Neil Stephenson, _Cryptonomicon_

 

[Jim Byrd]

Hi R. Choate - In addition to Mike's settings suggestions, you might want to
consider installing the SpywareBlaster and SpywareGuard here to help prevent
this kind of thing from happening in the future:
http://www.wilderssecurity.com/spywareblaster.html (Prevents malware Active
X installs) (BTW, SpyWare Blaster is not memory resident ... no CPU or
memory load - but keep it updated) The latest version as of this writing
will prevent installation or prevent the malware from running if it is
already installed, and it provides information and fixit-links for a variety
of parasites.
http://www.wilderssecurity.net/spywareguard.html (Monitors for attempts to
install malware) Both Very Highly Recommended.

--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP



In

 

[R. Choate]

Thanks Mike,
You know, I've always been curious about how I should set things. This is
such a pain. Most of the time, I find that when I have security set more
restrictive, about 3/4 of sites I go to start coughing up error messages
because they just can't deal with it. I'm talking about above-board
companies that you would otherwise not suspect of having gremlins attached.
I'm very careful about where I go and I'm very suspicious of sites, yet this
crap still happens. I feel like almost no sites can handle a browser with
higher security settings. They moan and give messages telling you that you
have to somehow lower your security to view their content, or you have to
allow their cookies. Again, I'm not talking about suspicious sites. Can
somebody tell me what is the bottom line here? Do I basically need to give
up using the internet?
--
RMC,CPA


R. Choate,
In most cases this happens via what is referred to as a "drive-by install"
.........
When your Security settings are "soft" these sites take advantage of this
and actually install software on your system without your knowledge or
consent. In other cases downloaded software comes bundled with other
"components" (spyware\adware) that you don't realize exists until you start
having problems or discover your browser has been hijacked.
__Recommended Minimal Security Settings__
http://mvps.org/winhelp2002/restricted.htm#Setting
_______________________________________
Mike Burgess http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 8-11-03]
Please post replies to this Newsgroup, email address is invalid