I have windows XP Prof. desktop and Windows XP Home laptop connected through a
router and working properly for months. The Laptop is wireless and is working fine. The desktop stop working last night when I stop about 20 popup windows from installing software on the desktop.
Now I can't received a ip address from the router to get on the internet. I try plugging the cable moden directly in to the desktop and it still will not get an address. When opening IE it trys to go to my home page them it auto changed to a site call
www.eunivers.com and does nothing.
I have tried to ipconfig /renew to get a new address but it doesn't work.
I need help bad.
Eddie,
What you have, pretty obviously, is a browser or dns hijack. You'll need to do
some downloading. Since the hijacking software has messed your system up,
you'll probably need to use the laptop to do the downloads, then move the
software to the desktop. Be thankful you have 2 computers.
Search your entire system drive, including hidden and system folders, for file
"hosts". There is one legit copy, in C:\WINDOWS\system32\drivers\etc\. The
others are bogus, and part (but just part) of the problem. Also, examine the
contents of the legit copy, using Notepad, too. Cleanup what you can.
Now check for, and learn to defend against, additional carriers of infection.
Have you downloaded these programs before? Download them again, as many are
revised frequently, to keep up with the current level of malware being attempted
constantly - get the absolutely most current version of each product listed.
They're all free - and most pretty small, so they download quickly enough.
First, download LSP-Fix and WinsockXPFIx from <
http://www.cexx.org/lspfix.htm>,
and CWShredder from <
http://www.majorgeeks.com/download4086.html>. All are
free.
Next, close all Internet Explorer and Outlook windows, then run CWShredder.
Have it fix all variants.
Now check for, and remove, spyware. Get HijackThis
<
http://www.majorgeeks.com/download.php?det=3155> and Spybot S&D
<
http://www.safer-networking.org/index.php?page=download>. Both free.
1) Install and run Spybot. First update it ("Search for updates"), then run a
scan ("Check for problems"). Trust Spybot, and make all recommended deletions.
2) Install and run HijackThis. Do NOT make any changes immediately. Save the
HJT Log.
3) Have your HJT log interpreted by experts at one or more of the following
forums (and post it here):
<
http://forums.net-integration.net/>
<
http://www.spywareinfo.com/forums/>
<
http://forums.tomcoyote.org/>
<
http://www.wilderssecurity.com/>
If removal of any spyware affects your ability to access the internet (some
spyware builds itself into the network software, and its removal may damage your
network), run LSP-Fix and / or WinsockXPFIx.
And Eddie, please don't contribute to the spread, and success, of email address
mining viruses. Learn to munge your email address properly, to keep yourself a
bit safer when posting to open forums. Protect yourself and the rest of the
internet - never post your address unmunged.
http://www.mailmsg.com/SPAM_munging.htm
Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.
