Compatible Support Forums: Spyware Or Trojan???

Jump to content

Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

Spyware Or Trojan???

#1 User is offline   canman 

  • stranger
  • Group: Members
  • Posts: 6
  • Joined: 04-October 04

Posted 05 October 2004 - 05:12 PM

When I boot my win2k system and opened I/E the only favorite I had was "LINKS". I looked in all folders and found the Favorite folder in my C:\Winnt folder. I went into the regisrty and found in Users/Software/microsoft/windows/current version/explorer/ shell folders that the favorites has changed to :\winnt\Favorites. When I typed in the correct path it will recreate itself every time I open I/E. I have tried Hijack, Spybot,Ad-Aware, Spy Doctor, and Spy Sweeper. Nothing helps. I did get it to stop redirecting the favorites one time but now in the C"\ root I get a %USERPROFILE%\ self generated folder on bootup and it has the same results. The only favorite in I/E is Links. All my favorites are in Documents and settings. I am really lost on this one send help please.


0

#2 User is offline   adamvjackson 

  • Pooh-Bah
  • Group: Members
  • Posts: 2174
  • Joined: 26-August 02

Posted 05 October 2004 - 08:06 PM

Sounds like a corrupt user profile more than anything else.
0

#3 User is offline   canman 

  • stranger
  • Group: Members
  • Posts: 6
  • Joined: 04-October 04

Posted 05 October 2004 - 08:30 PM

How can I tell if my profile is corrupt? I only use one profile but it might be worth a shot to logon as another user.

Thanks
0

#4 User is offline   adamvjackson 

  • Pooh-Bah
  • Group: Members
  • Posts: 2174
  • Joined: 26-August 02

Posted 05 October 2004 - 09:00 PM

I'm not sure if there is a definative way to check for profile corruption, you could try logging in as another user, and check for similar activity.
0

#5 User is offline   canman 

  • stranger
  • Group: Members
  • Posts: 6
  • Joined: 04-October 04

Posted 06 October 2004 - 11:25 PM

Thanks, Still have the problem but I will now keep an update user profile.

0

#6 User is offline   canman 

  • stranger
  • Group: Members
  • Posts: 6
  • Joined: 04-October 04

Posted 07 October 2004 - 02:53 PM

Thanks, I make a ghost image every two weeks but this time I didn't have any reason to open I/E so I copied over a known good image with a unknown bad one. Oh well this is one to put in th ecookie jar for future use. I will NEVER delete a known image with a new one until everything is working. But I did better on a recovery then it sounds like you did. Luckly I had an 8-04 image that all I had to do was install everything from then to today. I am still interested if anyone has ever figured this I/E hijack thing.



0

Share this topic:


Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users