Quote:
Originally posted by Ludedude
OK, I'm about at the end of my rope. I pride myself on the ability to outfuck the fuckers when they attempt to do shit to my machines but this one has me stumped.
On two of my machines here, my 404 and DNS Error pages are being hijacked by a Directnic search page. I've done all the usual including running spytbot, hijack, adaware etc. There is nothing unusual in my hosts files. My IE search pages or home pages have not been affected, there is no new stuff in my IE favorites. If I disconnec the machine from the net then all is normal but if I type in a non-existing domain while connected then I get the Directnic page.
Yes, there is a Directnic affiliate ID attached to it so MikeAI if you're seeing this then please ICQ me 53618488 for more info.
Has anyone run across this before? Any suggestions?
Thanks,
Lude
|
Check your registry , then go into your windows folder and system folder and sort files by last modified and look for anything new check your main dir as well
This was the one on madsexorgy.com i think. Sounds like the same trick.
There will prob be a few new html files in your c: or c:\windows or c:\windows\system
And some exe's too boot
Watch out cause one of them is an smtp server that prob got installed as well.
I checked a test system and it came up clean with spychecker but the problems were still there