SunQuest
           Antivirus Protection
 
Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
User Name:
Password:
Remember me
Go Back   Dev Shed ForumsSystem AdministrationAntivirus Protection

Reply
Add This Thread To:
  Del.icio.us   Digg   Google   Spurl   Blink   Furl   Simpy   Y! MyWeb 
Thread Tools Search this Thread Rate Thread Display Modes
 
Unread Dev Shed Forums Sponsor:
Get inside! Sample the range of functionality easily built with JMSL Library for Time Series Data Analysis, Heat Maps, Portfolio Optimization, Monte Carlo Simulation, Stock Price Charting and more. Download Now!
  #1  
Old January 25th, 2004, 12:41 AM
marron79's Avatar
marron79 marron79 is offline
Rut row Raggy!
Dev Shed Novice (500 - 999 posts)
 
Join Date: Jul 2001
Location: Tornado Alley
Posts: 558 marron79 User rank is Private First Class (20 - 50 Reputation Level)marron79 User rank is Private First Class (20 - 50 Reputation Level) 
Time spent in forums: 9 h 41 sec
Reputation Power: 8
IE redirects bad URLs to search-about.net

I'm an advanced computer user who can almost always spot bad programs, files, notices, etc. on my computer. However, I've noticed that lately my browser (Internet Explorer 6.0 on a Windows XP Pro machine) is redirecting all failed URL entries to the search-about.net website. It won't even let me enter my local intranet address (localhost) w/out typing in the http:// part. I've searched high and low and can't find what's causing this. I've run Ad-Aware 6 a few times, and while it always finds some minor spyware stuff, it never gets rid of this problem. My next step is to remove IE and reinstall it, but before I do that...I'm curious if there's a place in the registry that I can look for that might remove this redirection, as I know nothing about the layout of the registry. Thanks!
__________________
Matt

Reply With Quote
  #2  
Old January 25th, 2004, 11:14 AM
drgroove's Avatar
drgroove drgroove is offline
pushing envelopes, not pencils
Dev Shed God 2nd Plane (6000 - 6499 posts)
 
Join Date: Feb 2002
Posts: 6,224 drgroove User rank is First Lieutenant (10000 - 20000 Reputation Level)drgroove User rank is First Lieutenant (10000 - 20000 Reputation Level)drgroove User rank is First Lieutenant (10000 - 20000 Reputation Level)drgroove User rank is First Lieutenant (10000 - 20000 Reputation Level)drgroove User rank is First Lieutenant (10000 - 20000 Reputation Level)drgroove User rank is First Lieutenant (10000 - 20000 Reputation Level)drgroove User rank is First Lieutenant (10000 - 20000 Reputation Level)drgroove User rank is First Lieutenant (10000 - 20000 Reputation Level) 
Time spent in forums: 1 Day 4 h 34 m 57 sec
Reputation Power: 174
mcafee has a good free online service for locating virus/trojan apps on your PC ... you might want to give it a run before messing around in the registry (which probably wouldn't help you anyhow...).
__________________
Give a person code, and they'll hack for a day; Teach them how to code, and they'll hack forever.
Analyze twice; hack once.
The world's first existential ITIL question: If a change is released into production without a ticket to track it,
was it actually released?


About DrGroove: ITIL-Certified IT Process Engineer - Enterprise Application Architect -
Freelance IT Journalist - Devshed Moderator - Funk Bassist Extraordinaire


Reply With Quote
  #3  
Old January 28th, 2004, 04:30 PM
Redtailed's Avatar
Redtailed Redtailed is offline
Contributing User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Nov 2003
Location: Utah, USA
Posts: 83 Redtailed User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 15 m 31 sec
Reputation Power: 5
You also might want to see what you get back on your DNS lookups. Try opening a command prompt window and pinging a few known sites. Then ping one that does not exist. See if you get a failure, or if your DNS server is returning the same IP for all non-existant sites.

Reply With Quote
  #4  
Old January 28th, 2004, 07:28 PM
marron79's Avatar
marron79 marron79 is offline
Rut row Raggy!
Dev Shed Novice (500 - 999 posts)
 
Join Date: Jul 2001
Location: Tornado Alley
Posts: 558 marron79 User rank is Private First Class (20 - 50 Reputation Level)marron79 User rank is Private First Class (20 - 50 Reputation Level) 
Time spent in forums: 9 h 41 sec
Reputation Power: 8
Thanks for your replys.

This is the url that comes up when I enter a bad URL:

res://mshp.dll/http_404.htm

I deleted the mshp.dll file in my Windows folder, but it still does this.

I tried the McAfee thing and it found no viruses.

Reply With Quote
  #5  
Old January 28th, 2004, 11:10 PM
mttatkns mttatkns is offline
Got source?
Dev Shed Regular (2000 - 2499 posts)
 
Join Date: Mar 2003
Location: Laguna Niguel, California, USA
Posts: 2,332 mttatkns User rank is Private First Class (20 - 50 Reputation Level)mttatkns User rank is Private First Class (20 - 50 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 8

Reply With Quote
  #6  
Old January 29th, 2004, 10:07 PM
marron79's Avatar
marron79 marron79 is offline
Rut row Raggy!
Dev Shed Novice (500 - 999 posts)
 
Join Date: Jul 2001
Location: Tornado Alley
Posts: 558 marron79 User rank is Private First Class (20 - 50 Reputation Level)marron79 User rank is Private First Class (20 - 50 Reputation Level) 
Time spent in forums: 9 h 41 sec
Reputation Power: 8
Thanks. According to that program, I had the CWS Affiliate: Winshow installed. Running the program appears to have resolved the problem. Thanks!!!

Reply With Quote
  #7  
Old January 30th, 2004, 02:45 AM
paparika paparika is offline
Contributing User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Oct 2003
Posts: 31 paparika User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 17 m 37 sec
Reputation Power: 5
i had something simular
i had a virus
symantec web site can help, check to see if you have any new folders in your c drive called shareddocs and check ur startup folder for unusal stuff that u know shouldnt be there

Reply With Quote
  #8  
Old February 29th, 2004, 04:54 PM
marron79's Avatar
marron79 marron79 is offline
Rut row Raggy!
Dev Shed Novice (500 - 999 posts)
 
Join Date: Jul 2001
Location: Tornado Alley
Posts: 558 marron79 User rank is Private First Class (20 - 50 Reputation Level)marron79 User rank is Private First Class (20 - 50 Reputation Level) 
Time spent in forums: 9 h 41 sec
Reputation Power: 8
Quote:
Originally Posted by mttatkns

For those who have tried to download the program, you've found that this website no longer exists. Well I'm happy to announce that I found I still had the program on my computer. So I've uploaded it to my webserver. Feel free to download it:

http://www.twcclassics.com/aboutnet/CWShredder.exe

Reply With Quote
  #9  
Old June 28th, 2004, 05:39 PM
marron79's Avatar
marron79 marron79 is offline
Rut row Raggy!
Dev Shed Novice (500 - 999 posts)
 
Join Date: Jul 2001
Location: Tornado Alley
Posts: 558 marron79 User rank is Private First Class (20 - 50 Reputation Level)marron79 User rank is Private First Class (20 - 50 Reputation Level) 
Time spent in forums: 9 h 41 sec
Reputation Power: 8
Quote:
Originally Posted by marron79
For those who have tried to download the program, you've found that this website no longer exists. Well I'm happy to announce that I found I still had the program on my computer. So I've uploaded it to my webserver. Feel free to download it:

http://www.twcclassics.com/aboutnet/CWShredder.exe

To save on bandwidth/server space on my paid server, I've moved this file to my Geocities site.

http://www.geocities.com/twcmusicguy/searchabout.zip (I had to zip it, otherwise Geocities wouldn't let me upload it)

Last edited by marron79 : June 28th, 2004 at 05:42 PM.

Reply With Quote
  #10  
Old June 29th, 2004, 08:17 AM
edwinbrains's Avatar
edwinbrains edwinbrains is offline
Retired Moderator
Dev Shed God 4th Plane (6500 - 6999 posts)
 
Join Date: Jan 2004
Location: London, UK
Posts: 6,670 edwinbrains User rank is Second Lieutenant (5000 - 10000 Reputation Level)edwinbrains User rank is Second Lieutenant (5000 - 10000 Reputation Level)edwinbrains User rank is Second Lieutenant (5000 - 10000 Reputation Level)edwinbrains User rank is Second Lieutenant (5000 - 10000 Reputation Level)edwinbrains User rank is Second Lieutenant (5000 - 10000 Reputation Level)edwinbrains User rank is Second Lieutenant (5000 - 10000 Reputation Level)edwinbrains User rank is Second Lieutenant (5000 - 10000 Reputation Level)  Folding Points: 85411 Folding Title: Advanced FolderFolding Points: 85411 Folding Title: Advanced FolderFolding Points: 85411 Folding Title: Advanced FolderFolding Points: 85411 Folding Title: Advanced FolderFolding Points: 85411 Folding Title: Advanced Folder
Time spent in forums: 1 Week 6 Days 23 h 36 m 40 sec
Reputation Power: 92
This thread is pretty old, but I've moved it anyway.

And do you realise that you can download the file from its official site?

http://www.spywareinfo.com/~merijn/downloads.html
__________________
- Edwin -

The General Rules Thread | The General FAQ Thread

Reply With Quote
Reply

Viewing: Dev Shed ForumsSystem AdministrationAntivirus Protection > IE redirects bad URLs to search-about.net


Thread Tools  Search this Thread 
Search this Thread:

Advanced Search
Display Modes  Rate This Thread 
Rate This Thread:


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
View Your Warnings | New Posts | Latest News | Latest Threads | Shoutbox
Forum Jump


Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
  
 





© 2003-2008 by Developer Shed. All rights reserved. DS Cluster 6 hosted by Hostway