Browser Hijack?


Go Back   Computer Help Articles > Windows XP Security Admin
User Name
Password
FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
Thread Tools Search this Thread Display Modes
  #1  
Old 01-05-2006, 11:14 PM
UfGatrDave
 
Posts: n/a
Default Browser Hijack?

I am suddenly unable to access any Federal Court website that has
"uscourts.gov" in its address. This suddenly started occurring after Jan 1st.
When i attempt to go to such a website (www.uscourts.gov, for example) i
either get a "cannot find server" error message or "invalid syntax error"
message. On a few occasions i was directed to a website
"www.www.uscourts.gov.com." I also saw res://shdoclc/syntax.htm at the bottom
of my explorer window. These websites are able to be reached via other
computers in my building. I have run Ad-Aware, Spybot, and Symantic with no
success... Any ideas?
Reply With Quote
  #2  
Old 01-05-2006, 11:14 PM
Wesley Vogel
 
Posts: n/a
Default Re: Browser Hijack?

Try cleaning out your Temporary Internet Files.

To delete *all* Temporary Internet Files...

1) Start | Run | Type: inetcpl.cpl | Click OK
Or right click the Internet Explorer icon on your Desktop
Or Start | Settings | Control Panel | Internet Options
Best to do this with all instances of Internet Explorer closed. Especially
if there are a large number of files.
2) On the General Tab, in the middle of the screen, click on Delete Files
3) Check the box Delete all offline content {This cleans >>
%userprofile%\Local Settings\Temporary Internet Files
AND
%userprofile%\Local Settings\Temporary Internet Files\Content.IE5
and \Content.MSO (Created by an MS Office program)}
4) Click on OK and wait for the hourglass icon to stop after it deletes the
temporary internet files
5) You can now click on Delete Cookies and click OK to delete cookies that
websites have placed on your hard drive.

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In news:AB5B65F1-2257-487C-BF93-B30A099E79AB@microsoft.com,
UfGatrDave <UfGatrDave@discussions.microsoft.com> hunted and pecked:
> I am suddenly unable to access any Federal Court website that has
> "uscourts.gov" in its address. This suddenly started occurring after Jan
> 1st. When i attempt to go to such a website (www.uscourts.gov, for
> example) i either get a "cannot find server" error message or "invalid
> syntax error" message. On a few occasions i was directed to a website
> "www.www.uscourts.gov.com." I also saw res://shdoclc/syntax.htm at the
> bottom of my explorer window. These websites are able to be reached via
> other computers in my building. I have run Ad-Aware, Spybot, and
> Symantic with no success... Any ideas?


Reply With Quote
  #3  
Old 01-05-2006, 11:14 PM
David H. Lipman
 
Posts: n/a
Default Re: Browser Hijack?

From: "UfGatrDave" <UfGatrDave@discussions.microsoft.com>

| I am suddenly unable to access any Federal Court website that has
| "uscourts.gov" in its address. This suddenly started occurring after Jan 1st.
| When i attempt to go to such a website (www.uscourts.gov, for example) i
| either get a "cannot find server" error message or "invalid syntax error"
| message. On a few occasions i was directed to a website
| "www.www.uscourts.gov.com." I also saw res://shdoclc/syntax.htm at the bottom
| of my explorer window. These websites are able to be reached via other
| computers in my building. I have run Ad-Aware, Spybot, and Symantic with no
| success... Any ideas?

I certainly hope that you are using Ad-aware SE v1.06 and SpyBot Search and Destroy v1.4

After the software is updated, I suggest scanning the system in Safe Mode.

I also suggest downloading, installing and updating BHODemon for any Browser Helper Objects
that may be on the PC.

* BHODemon

http://www.majorgeeks.com/downloadge...4332b4b8b8442d

For viral malware...

* Download MULTI_AV.EXE from the URL --
http://www.ik-cs.com/programs/virtools/Multi_AV.exe

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to allow it to download the needed AV vendor related files.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal Mode.
This way all the components can be downloaded from each AV vendor's web site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC.

You can choose to go to each menu item and just download the needed files or you can
download the files and perform a scan in Normal Mode. Once you have downloaded the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
during boot] and re-run the menu again and choose which scanner you want to run in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
file. http://www.ik-cs.com/multi-av.htm


* * * Please report back your results * * *


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm


Reply With Quote
Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Re: IE6 in New Browser - Command Line Switch Hal Anderson Internet Explorer 6 0 01-05-2006 11:15 PM
Can't Type In Browser DesertChildAZ Internet Explorer 6 3 01-05-2006 04:33 PM
browser change. spyware hijack? an annoyed mouse Internet Explorer 6 1 01-05-2006 04:21 PM
Can't Ping My Own IP Address - Part 2 Don Windows XP Network Web 3 01-05-2006 04:10 AM
browser hijack seanpaul99 Windows XP New Users 2 01-05-2006 03:54 AM


All times are GMT. The time now is 08:50 AM.


Powered by vBulletin Version 3.5.2
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd. SEO by vBSEO 2.3.2 © 2005, Crawlability, Inc.

Browser Hijack?