Solved

*.wmf hack?

Posted on 2006-12-01
5
212 Views
Last Modified: 2013-12-04
A client of mine has an odd problem that has got me stumped.   He logged into a website that sells guitars and when he navigated to another page, IE explorer redirected him to a website that does not exist.  The site is trust4free.ws.  

Now he can go to other websites without any issue.  However, this one...and another site he visits will automatically redirect him.   When I visit the same sites, on a different computer there is no issue at all.  

I have run AVG, and AD Aware...with no infections found.   To work around the problem I installed Firefox on his computer and he can use it to visit the guitar site.

I have removed cookies, temp internet files, and history from IE explorer.  But the problem persists.  What ya think?
0
Comment
Question by:captblackeagle
  • 2
  • 2
5 Comments
 
LVL 27

Expert Comment

by:David-Howard
ID: 18055997
Sounds as if his Hosts file has been modified.
Locate the correct OS and then search for the Hosts file.
You can then right click the file, select Open and use Notepad to view the file.
Look for any redirect entries such as you listed in your post.
Hosts file locations:
Windows 3.1/95/98/ME c:\windows\hosts
Windows NT/2000/XP Pro c:\winnt\system32\drivers\etc\hosts or c:\windows\system32\drivers\etc\hosts
Windows XP Home c:\windows\system32\drivers\etc\hosts
You can read up on the Hosts file here if you care to.
http://www.bleepingcomputer.com/tutorials/tutorial51.html
David
0
 
LVL 27

Expert Comment

by:David-Howard
ID: 18056161
Sorry for the long delay here in between posts. (Work called)
One other thought. You stated that you've cleared cookies, etc.
You might want to flush the DNS cache as well. It can't hurt.
Go to Run
Type in CMD
Type CD\
You should be presented with C:\>
Type in ipconfig /flushdns
Hit Enter
Reboot
David
0
 

Author Comment

by:captblackeagle
ID: 18056761
thanks will try that.
0
 

Author Comment

by:captblackeagle
ID: 18056877
I will try this on Monday...client went home for the day and turned his computer off...I love remoting.
0
 
LVL 32

Accepted Solution

by:
rsivanandan earned 500 total points
ID: 18076602
Do not look like 'hosts' file problem to me since it works fine with Firefox.

This is probably a browser hijack.

Do this;

Download ewido from www.grisoft.com and let it scan, delete all the entries it finds.

Download Adaware from www.lavasoftusa.com and let it scan, delete all the entries it finds.

It should be okay then.

Cheers,
Rajesh
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In today's information driven age, entrepreneurs have so many great tools and options at their disposal to help turn good ideas into a thriving business. With cloud-based online services, such as Amazon's Web Services (AWS) or Microsoft's Azure, bus…
Article by: btan
The intent is not to repeat what many has know about Ransomware but more to join its dots of what is it, who are the victims, why it exists, when and how we respond on infection. Lastly, sum up in a glance to share such information with more to help…
In a recent question (https://www.experts-exchange.com/questions/29004105/Run-AutoHotkey-script-directly-from-Notepad.html) here at Experts Exchange, a member asked how to run an AutoHotkey script (.AHK) directly from Notepad++ (aka NPP). This video…
I've attached the XLSM Excel spreadsheet I used in the video and also text files containing the macros used below. https://filedb.experts-exchange.com/incoming/2017/03_w12/1151775/Permutations.txt https://filedb.experts-exchange.com/incoming/201…

679 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question