msn.com problems

[Sander]

We have a number of employees here who consistently get errors when clicking
on a link on msn.com

A "Object Moved. This document may be found here" screen is displayed. When
they click on "here" they get "The page cannot be displayed" error and the
address in the address field is http:/// All users are running XP
Sp1 and 2k Sp4 with IE 6 sp1. Thanks

 

[Mike Burgess]

Sander,
If the 3 slashes in your example is NOT a typo, that
indicates a Coolwebsearch trojan .......

How to remove Coolwebsearch and affiliates
http://mvps.org/winhelp2002/unwanted.htm#Coolwebsearch

Note: this type hijack indicates an unpatched machine, that is lacking
in "Defense". Please visit Windows Update to avoid these exploits.
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 03-02-04]
Please post replies to this Newsgroup, email address is invalid

 

[Sander]

I ran that utility and it didn't find anything wrong. We run Norton and do
full scans regurlarly.

Sander,
If the 3 slashes in your example is NOT a typo, that
indicates a Coolwebsearch trojan .......

How to remove Coolwebsearch and affiliates
http://mvps.org/winhelp2002/unwanted.htm#Coolwebsearch

Note: this type hijack indicates an unpatched machine, that is lacking
in "Defense". Please visit Windows Update to avoid these exploits.
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 03-02-04]
Please post replies to this Newsgroup, email address is invalid
--

We have a number of employees here who consistently get errors when clicking
on a link on msn.com

A "Object Moved. This document may be found here" screen is displayed. When
they click on "here" they get "The page cannot be displayed" error and
the
address in the address field is http:/// All users are running XP
Sp1 and 2k Sp4 with IE 6 sp1. Thanks

 

[Mike Burgess]

Sander,
Was that a typo? (///) ........
You ran CWShredder, Ad-Aware\SpyBot and posted your HijackThis log?
Where did you post your log (URL) and I'll have a look.

FYI: NAV is for virus' and is NOT effective on trojans ....
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 03-02-04]
Please post replies to this Newsgroup, email address is invalid
--

I ran that utility and it didn't find anything wrong. We run Norton and do
full scans regurlarly.

Sander,
If the 3 slashes in your example is NOT a typo, that
indicates a Coolwebsearch trojan .......

How to remove Coolwebsearch and affiliates
http://mvps.org/winhelp2002/unwanted.htm#Coolwebsearch

Note: this type hijack indicates an unpatched machine, that is lacking
in "Defense". Please visit Windows Update to avoid these exploits.
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 03-02-04]
Please post replies to this Newsgroup, email address is invalid
--

We have a number of employees here who consistently get errors when clicking
on a link on msn.com

A "Object Moved. This document may be found here" screen is displayed. When
they click on "here" they get "The page cannot be displayed" error and
the
address in the address field is http:/// All users are running XP
Sp1 and 2k Sp4 with IE 6 sp1. Thanks

 

[PA Bear]

And you must run CWShredder v1.53.0.1, no other.
--
HTH - Please Reply to This Thread

~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE), AH-VSOP

AumHa Forums
http://forum.mvps.org/

Protect Your PC
http://www.microsoft.com/security/protect

Sander,
Was that a typo? (///) ........
You ran CWShredder, Ad-Aware\SpyBot and posted your HijackThis log?
Where did you post your log (URL) and I'll have a look.

FYI: NAV is for virus' and is NOT effective on trojans ....
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 03-02-04]
Please post replies to this Newsgroup, email address is invalid

I ran that utility and it didn't find anything wrong. We run Norton and
do full scans regurlarly.

Sander,
If the 3 slashes in your example is NOT a typo, that
indicates a Coolwebsearch trojan .......

How to remove Coolwebsearch and affiliates
http://mvps.org/winhelp2002/unwanted.htm#Coolwebsearch

Note: this type hijack indicates an unpatched machine, that is lacking
in "Defense". Please visit Windows Update to avoid these exploits.
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS
file http://www.mvps.org/winhelp2002/hosts.htm [updated 03-02-04]
Please post replies to this Newsgroup, email address is invalid
--

We have a number of employees here who consistently get errors when
clicking on a link on msn.com

A "Object Moved. This document may be found here" screen is displayed.
When they click on "here" they get "The page cannot be displayed"
error and the
address in the address field is http:/// All users are running
XP Sp1 and 2k Sp4 with IE 6 sp1. Thanks

 

[Piano]

I had the same problem with NIS. It has to do with privacy
settings in the firewall. Must allow MSN to identify
browser and web sites visited.

-----Original Message-----
I ran that utility and it didn't find anything wrong. We run Norton and do
full scans regurlarly.

Sander,
If the 3 slashes in your example is NOT a typo, that
indicates a Coolwebsearch trojan .......

How to remove Coolwebsearch and affiliates
http://mvps.org/winhelp2002/unwanted.htm#Coolwebsearch

Note: this type hijack indicates an unpatched machine, that is lacking
in "Defense". Please visit Windows Update to avoid these exploits.

___________________________________________________________
_

Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 03- 02-04]
Please post replies to this Newsgroup, email address is invalid
--

We have a number of employees here who consistently

get errors when
clicking

on a link on msn.com

A "Object Moved. This document may be found here"

screen is displayed.
When

they click on "here" they get "The page cannot be displayed" error and
the
address in the address field is http:/// All users are running XP
Sp1 and 2k Sp4 with IE 6 sp1. Thanks

.