10 replies to this topic

[ROBBYRIG]

Hey, I'm having some weird things going on with my home computer.  I noticed a couple of weeks ago that when I do a google search and click on the found link, it takes me to some other site that has nothing to do with the search. 

I've run all the McAfee scans, disk cleanup and such but I can't get defrag to run.  I'm not even sure that running it will rectify my problem, but I was hoping that it would. 

Anyone out there have any suggestions?

[RegUS_PatOff]

DEFRAG won't run at all ?  or won't finish (runs forever) ?

It may have problems if the C drive is almost full

 

open your C:/WINDOWS/SYSTEM32/DRIVERS/ECT/HOSTS with a text editor

That's where your computer stores info for re-routing some internet addresses to others.

See if there's anything suspicious in there (valid entries may have an explanation)

Have you  run "Adaware 2008 Free" ?

http://www.download....4-10045910.html

[ROBBYRIG]

Won't run at all.  I checked the C: drive volume, it was only 64% full.  I have a D: drive too that is 20 some % full and the defrag won't start there either.

Thanks for the suggestions Reg.  The mean old boss is making me work today, so I'll give those a try this weekend.  Wish me luck. 

[KCSERV]

Sounds like you have a couple of hijackers. Defrag, should it run wouldn't really help anyway, but why it doesn't run is of interest. What OS are you running? For some things to try now, there are a few utils that can help you out along with the recommended Adaware. HiJackThis is one I like. It will return a list of entries pertaining to your Internet Explorer settings, key registry settings and startup objects. The list returned is for everything it finds both good and bad so be careful what you select for removal. Most bad stuff is self evident (running from temp directories, bogus web names, etc) if you are unsure you can post your log here and I will take a look for you. I also have had some recent good luck with Malwarebytes. Both can be downloaded for free from download.com. Hope this helps and happy hunting.

[RegUS_PatOff]

there's also the free version of http://www.winpatrol.com/download.html

I use the PLUS version with online info (one time fee)

[johnjohn]

try this software....i have had great results with it on numerous occasions on both my computer and many others ...its very effective
http://www.download....4-10804572.html

[callpocket]

The Malwarebytes, along with Ccleaner, are excellent ways to rid the system of the infections that are out right now -- namely antivirus XP, antivirus 2008 and antivirus 2009.

These nasties take over the machine and cause the redirects and problems you are talking about.

My recommendation is to run Ccleaner http://www.ccleaner.com/download in safe mode and then malwarebytes in safe mode with networking.  Be sure to update the malwarebytes application and then run a full scan.  It can take a while.

Reboot into regular mode and run ccleaner and the malwarebytes on each and every user profile you have on the computer.

Notes on Ccleaner:  click on the "download from filehippo.com" link and then on Download latest version on the right.  Let it run from current location and install it -- but only click to install a desktop shortcut and to get auto updates for the program -- uncheck all the other boxes as you don't need all those other shortcuts/options and you definately don't need a yahoo tool bar (instrument of the devil, IMHO).

Run the cleaner option and check ALL the boxes.  This will get rid of cookies/cashe, temp internet files, temp files and it will get rid of auto fill passwords and reorder your start menu into alphabetical order.  If you don't know your passwords, you need to find them because all the auto fill and remembering will be gone.

Run the registry option -- it will find things, you tell it to fix, don't worry about backing up the registry, fix all.  Run it again and again until it doesn't find any thing else -- usually 3 or 4 passes.

Then run malwarebytes full scan.  Change to the next user profile, rinse and repeat. 

[SunTzu]

Your ISP's DNS server was probably hijacked.

As far as Defrag not running, run chkdsk c: /r and fix your drive.

[Swinada]

Run CCleaner as mentioned above. An other one would be WindowsCleanup that you can get here http://www.stevengou...ntent&task=view
I prefer this one over CCleaner.
To defrag your HDD's forget about the built in Windows defrag use JKdefrag it does a way nicer job of defragging your drives its free and can be found here
http://www.kessels.com/Jkdefrag/

[Dan Webster]

My nephew told me to close out all my running processes by hitting control alt and delete. Before that the dang thang would not defrag. Afterwards it managed to defrag.

[freedomfighter_87]

Malicious code will not always show up in the process list. And if it does, its usually disguised as a legitimate system process, or has an innocent name that is intended to make it look harmless, like its supposed to be there. Aborting all processes will only cause vital system functions to cease, and as soon as they are back up, the malware has probably restarted itself automatically.

It might benefit you to change your antivirus software. I reccomend Avira Antivir. It's not a well known product, but it is probably the best one out there. Not only does it offer superior heuristics scanning, but it is easy on system resources and even easier on the wallet. Norton Antivirus and McAffe Viruscan are so resource intensive. And their heuristics scanners are inferior to Avira Antivir. I should also note that many, many viruses, trojans, etc are designed specifically to subvert and terminate all processes of those two programs. I have yet to see one single bit of malicious code shut down Avira. Best of all, Avira's basic version is free for personal use, and the premium versions can be had at a very affordable price.

Moving right along...

You could also have errors or corrupt data in the registry which could cause the symptoms you describe. This can happen without having viruses, although tons of viruses are designed to emacerate the registry. Try using a registry scan/repair tool. CCleaner has some level of registry scan/repair ability but is very limited on what it can and cannot fix, or even detect.


If it were me, I would just do a fresh install of Windows. Immediately install Avira Antivir, CCleaner, Ad-Aware, and some kind of registry watchdog program (I don't have a favorite). Pay attention to what programs you give what permissions to when the Windows firewall asks. If you don't know recognize the program making the request, block it until you can verify that it is legit. I could go all night about fine-tuning the firewall but the default settings should work for most people, if you have it backed by a decent virus scanner.

Okay well I have got to go. I may or may not have helped you, as I did not give you a direct answer, but I hope it may help you find the solution, and keep you safer in the future.



Travis