Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


Internet redirection/blocking /Moved

  • Please log in to reply
1 reply to this topic

#1 tejano


  • Members
  • 5 posts
  • Local time:02:32 AM

Posted 19 March 2009 - 12:51 AM

Hi, Guys!

I've got a nasty piece of work which I've traced to a single registry entry. That entry is:

O17 - HKLM\System\CCS\Services\Tcpip\..\{F30CDACA-7494-406E-9FE5-29732560E5C7}: NameServer =,

The IP referred to is ostensibly Earthlink, my ISP. But, this is a second variation. Previously, the IP in the entry was my PC. Don't know how I managed to get a different one.

With this in play, I get redirected somewhat randomly to Shopica, Findstuff, etc. I've tried to find the culprit with SpyBot, MalwareBytes. AVG, Spynomore, HJT, RegCure, you name it. NOTHING.

If I fix it with HJT, I cannot connect to any web site - Page Load Error. When I restore it, I get redirect again. I can do this in the middle of a surfing session. That is, fix it and be unable to connect then restore it and be redirected.

Any thoughts, procedures?

BC AdBot (Login to Remove)


#2 garmanma


    Computer Masochist

  • Members
  • 27,809 posts
  • Gender:Male
  • Location:Cleveland, Ohio
  • Local time:03:32 AM

Posted 19 March 2009 - 06:41 PM

We do not analyze HJT logs or entries in this forum
You can try a rootkit scan if you'd like
Posted Image
why won't my laptop work?

Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time around
Do not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefits
Become a BleepingComputer fan: Facebook and Twitter

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users