Internet explorer going to unwanted web sites by itself

[richardmaibes]

When my friend is in a particular web site, without doing anything, a new web
site with come up. It's always a porn site. I didn't believe this until it
happened to me (using his computer). His wife had the same thing happen
where she works.

[kc0arf]

Hello,

You have adware / spyware on your computer. You might wish to switch to Mozilla Firefox to avoid this problem. IE likes to come down with bugs a lot.

I am also sending your post to the Security group, where the fine folks there will walk you through the debug process.

Christian

[crunchie]

Download & instal Adaware from here
& update it before scanning.
In settings under 'scanning,' have it set to
'scan within archives,'
'scan active processes,'
'scan registry,'
'deepscan registry'
'scan my IE Favourites for banned URL's,'
'scan my host's file.'
In 'tweaks' under 'scanning engine' set it to 'unload recognised processes during scanning.'
Also in 'tweaks' under 'cleaning engine' set it to 'Automatically try to unregister objects prior to deletion' & 'let Windows remove files in use at next reboot.'
Select 'activate in-depth scan' before starting scan.
When the scan is finished select 'next.'
Remove what it finds by placing a check in the box to the left of the object. Reboot

Download & instal Spybot S&D from here. Update it before scanning.
After the scan is complete, have spybot fix everything marked RED.
On the page that first opens when you start Spybot there is an option to immunise, you should do this. In the immunise section there is also a link to download Spywareblaster. This program will prevent the install of bad activex controls that it has knowledge of. Download that & you can keep it updated by selecting the same link that you use to download it. Reboot

If the problem persists, Download HijackThis from here & unzip it into it's own, permanent folder, (Not a temporary folder or the desktop (in a folder on the desktop is fine) & not directly on your hard drive).
If you have anything disabled in MsConfig, please re-enable it/them.
Start HJT & with all browser windows closed, press the scan button. When the scan is finished the scan button will change to save. Save the log to a text file, copy the entire contents of the text file & paste it into the body of your post. DO NOT FIX ANYTHING YET. Most of what is there is necessary for the running of your system.

[owo2]

:rolleyes:

When my friend is in a particular web site, without doing anything, a new web
site with come up. It's always a porn site. I didn't believe this until it
happened to me (using his computer). His wife had the same thing happen
where she works.

I absolutely had the same problem as you have described, but my particular problem had to do with whenever I did a search using any search engine, I would always be redirected to a porn page.

Your computer is probably the victim of a re-direct virus.

I downloaded and installed HijackThis from ZD Net (free download). After running the software, the problem was taken care of.

Neither spybot nor adaware will solve this for you.............

[Killer_Typo]

get spywareblaster and spywareguard from my sig, they are tools that dont scan for, but actively watch to make sure that it isnt put onto the machine so you dont have to worry about it being installed. as for the switching browsers, personally myself, i use IE, and run Adaware, Spybot, Norton, Spywareblaster, and Spywareguard, and i havnt had an infection in a long time. no real need to switch browsers unless you just dont like the one your using.

[mikeandike22]

Well follow crunchie's advice and scan with ad-aware, spybot search and destroy, and hijackthis. Do it in that order (spybot and ad-aware can be interchangebal) then post your hijackthis log here.

[crunchie]

:rolleyes:

I downloaded and installed HijackThis from ZD Net (free download). After running the software, the problem was taken care of.

Neither spybot nor adaware will solve this for you.............

Simply running hijackthis solves nothing. It only reveals what is running, you have to input what you want removed.