Solved

*.wmf hack?

Posted on 2006-12-01
5
213 Views
Last Modified: 2013-12-04
A client of mine has an odd problem that has got me stumped.   He logged into a website that sells guitars and when he navigated to another page, IE explorer redirected him to a website that does not exist.  The site is trust4free.ws.  

Now he can go to other websites without any issue.  However, this one...and another site he visits will automatically redirect him.   When I visit the same sites, on a different computer there is no issue at all.  

I have run AVG, and AD Aware...with no infections found.   To work around the problem I installed Firefox on his computer and he can use it to visit the guitar site.

I have removed cookies, temp internet files, and history from IE explorer.  But the problem persists.  What ya think?
0
Comment
Question by:captblackeagle
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
5 Comments
 
LVL 27

Expert Comment

by:David-Howard
ID: 18055997
Sounds as if his Hosts file has been modified.
Locate the correct OS and then search for the Hosts file.
You can then right click the file, select Open and use Notepad to view the file.
Look for any redirect entries such as you listed in your post.
Hosts file locations:
Windows 3.1/95/98/ME c:\windows\hosts
Windows NT/2000/XP Pro c:\winnt\system32\drivers\etc\hosts or c:\windows\system32\drivers\etc\hosts
Windows XP Home c:\windows\system32\drivers\etc\hosts
You can read up on the Hosts file here if you care to.
http://www.bleepingcomputer.com/tutorials/tutorial51.html
David
0
 
LVL 27

Expert Comment

by:David-Howard
ID: 18056161
Sorry for the long delay here in between posts. (Work called)
One other thought. You stated that you've cleared cookies, etc.
You might want to flush the DNS cache as well. It can't hurt.
Go to Run
Type in CMD
Type CD\
You should be presented with C:\>
Type in ipconfig /flushdns
Hit Enter
Reboot
David
0
 

Author Comment

by:captblackeagle
ID: 18056761
thanks will try that.
0
 

Author Comment

by:captblackeagle
ID: 18056877
I will try this on Monday...client went home for the day and turned his computer off...I love remoting.
0
 
LVL 32

Accepted Solution

by:
rsivanandan earned 500 total points
ID: 18076602
Do not look like 'hosts' file problem to me since it works fine with Firefox.

This is probably a browser hijack.

Do this;

Download ewido from www.grisoft.com and let it scan, delete all the entries it finds.

Download Adaware from www.lavasoftusa.com and let it scan, delete all the entries it finds.

It should be okay then.

Cheers,
Rajesh
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Recently, a new law in my state forced us to get a top-to-bottom analysis of all of our contract client's networks. While we have documentation, it was spotty at best for some - and in any event it needed to be checked against reality. That was m…
Recently, I read that Microsoft has analysed statistics for their security intelligence report. It revealed: still, the clear majority of windows users do their daily work as administrator. An administrative account is a burden, security-wise. My ar…
In a recent question (https://www.experts-exchange.com/questions/29004105/Run-AutoHotkey-script-directly-from-Notepad.html) here at Experts Exchange, a member asked how to run an AutoHotkey script (.AHK) directly from Notepad++ (aka NPP). This video…

739 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question