| Forum Home | ||||
| Press F1 | ||||
| Thread ID: 60031 | 2005-07-20 10:14:00 | redirecting to porn site | bartsdadhomer (80) | Press F1 |
| Post ID | Timestamp | Content | User | ||
| 373843 | 2005-07-20 10:14:00 | Hate to admit defeat but I'm stumped Have a customer who got infested with porn popups etc I have cleaned the machine out but still have 1 problem Logging into flybuys.co.nz redirects to the porn page aboutfirm.com The flybuys page appears correctly but when user info is inserted to login fields and the submit button is hit, they are redirected to the porn page This only happen on the flybuys site We have tried a dozen other sites where login is required and they all perform normally Doesn't matter whose or what info is inserted, same result. I have done the following: Ad Aware Spybot MS Antispy Spyware blaster CCleaner Cleaned registry with 2 proggys Cleared prefetch folder Hijackthis Manually checked the hosts file Manually checked the registry Manually checked Windows & System32 folders Cleared all cookies, favourites, history etc CW Shredder Turned off System Restore Deleted Dialup connection and renewed Checked msconfig & services Full AV Scan Zone Alarm & Windows firewall All up to date definitions and Windows updates Anything I've obvious I've missed? Must of cleaned hundreds of machines over the years but this one has got me Thanks for any ideas bdh |
bartsdadhomer (80) | ||
| 373844 | 2005-07-20 10:27:00 | You've not only done everything I know how to do but about 10 times more. How wierd. You'd think it was something to do the flybuys site but I can only suppose this doesn't happen on other computers so there's some reference from flybuys on this one to the other site. How can that be if you've cleaned everything out? Sure that it is the real flybuys site and not some trick with the url? |
mark c (247) | ||
| 373845 | 2005-07-20 10:27:00 | Y | mark c (247) | ||
| 373846 | 2005-07-20 10:30:00 | This is a long-shot guess, but could it be a misconfigured proxy server? - is the computer set to use some rogue proxy server somewhere which is responsible for the redirects? | somebody (208) | ||
| 373847 | 2005-07-20 10:30:00 | You've not only done everything I know how to do but about 10 times more. How wierd. You'd think it was something to do the flybuys site but I can only suppose this doesn't happen on other computers so there's some reference from flybuys on this one to the other site. How can that be if you've cleaned everything out? Sure that it is the real flybuys site and not some trick with the url? Do you type in the url or get it from bookmarks? Doesn't happen from other computers and I've typed in the URL as well as from bookmarks I've run all the above proggys 3 or 4 times each Even went to the extent of creating a new user account on the machine in question and the same thing happens |
bartsdadhomer (80) | ||
| 373848 | 2005-07-20 10:31:00 | A full format assuming there is nothing irreplacable on the computer??? | bob_doe_nz (92) | ||
| 373849 | 2005-07-20 10:31:00 | This is a long-shot guess, but could it be a misconfigured proxy server? - is the computer set to use some rogue proxy server somewhere which is responsible for the redirects? No proxy servers |
bartsdadhomer (80) | ||
| 373850 | 2005-07-20 10:31:00 | Dam the only way i get to porn sites is on purpose :eek: Itr could be time to do a fresh install, probably be faster then tring to sort the cause of the problem |
plod (107) | ||
| 373851 | 2005-07-20 10:32:00 | A full format assuming there is nothing irreplacable on the computer??? That's the only option I seem to have left...bummer |
bartsdadhomer (80) | ||
| 373852 | 2005-07-20 10:34:00 | Have you cleared th autocomplete entries - Internet options/ Content/Autocomplete Tried another browser? |
Safari (3993) | ||
| 1 2 3 4 5 | |||||