.

[Deleted member 139972]

.

 

[corkyg]

What anti spyware/malware software do you run?

 

[Deleted member 139972]

.

 

[BigPoppa]

Try:

www.superantispyware.com - free
Google for Combofix - also free.

I've had a bad redirector before that Combofix took care of. For manual removal:

In device manager, show hidden devices. Look in I believe network connections for things like "TDSSS..." or "Tsss..." etc. Uninstall, reboot. May be able to just manually delete the files by searching in C:\windows\system32 and C:\windows\system32\drivers. Sort by last modified date as newest. See anything odd looking ie "saer342.ini" etc, they're usually malware and deleteable. Again, combofix and SAS should most likely do this for you automatically.

 

[Deleted member 139972]

.

 

[Deleted member 139972]

.

 

[mechBgon]

Speculation... DNS servers might be poisoned? Relevant article: http://blogs.zdnet.com/security/?p=1776

 

[Deleted member 139972]

.

 

[MadAmos]

Will hijackthis run on server 2003? If so you could try uploading a log file here and see if anything looks bad.

Amos

 

[Deleted member 139972]

.