help: IE keeps referring me to porn sites

LS20

Banned
Jan 22, 2002
5,858
0
0
okay, im not on my computer, trying to access this site http://www.utexas.edu/web/redirect.php?url=https://utdirect.utexas.edu/utdirect/&wl=side and it keeps referring me to a porn site. well, different porn sites, as a matter of fact. each time i try to open this page its a new site. this is whether by clicking on that link via the main www.utexas.edu website, or by entering that url into the address bar, or linking from IM window.

i went on this computer yesterday, and immediately ran Spybot Search & Destroy, with the latest updates. I manually removed everything from the Startup folder. I manually cleaned up the registry (current user/local machine->software->ms->win->currentversion->run). I cleaned IE history, temp internet files/cache, and cookies.

I pretty much purged the entire machine. There is absolutely nothing that wasnt with windows running in the systray, or any new processes running in the background. The only thing loaded with IE is the Google toolbar.

I've no problems with popups, or any other spyware related problems... except that above link referring me to a porn site. What's the problem here???? (no, cannot install firefox here... again, not my comp)
 

eLiTeGoodGuy

Golden Member
Jun 6, 2001
1,175
0
86
try Adaware see if that does the trick... I've noticed alot of popups on mine and I think it may be that adaware hasn't caught up yet
 

Spencer278

Diamond Member
Oct 11, 2002
3,637
0
0
Send an email to uTaxes that some one is "hacking" your computer and give them that address. It will not fix IE but it would piss of the guy making money on your referals.
 

LS20

Banned
Jan 22, 2002
5,858
0
0
Originally posted by: nick1985
stop looking at pron

no can do. i love porn. its a matter of what porn, where, and when :D

when i started this machine, i went so far as to disable a huge chunk of the services--QoS RSVP, Remote Desktop Help, Netlogon, Netmeeting, MsShadow Copy COntroller, etc...

i kept this machines as barebones as possible.. i dont know how it can be afflicted by this junk!!!!
 

LS20

Banned
Jan 22, 2002
5,858
0
0
Originally posted by: RagingBITCH
Check your HOSTS file

yup, already checked. the only referrral is localhost to 127.0.0.1 as default... im no stranger to the pc so this problem totally irks me :|

edit: what's more, one of the porn sites i was referred to (vikingporn.com?? i cleaned history again) had pictures of underage girls AND boys :|

i would send admin@utexas a mail but the problem is localized with my machine... not some hacker on the site
 

shuan24

Platinum Member
Jul 17, 2003
2,558
0
0
dude there are more tools out there:

try cvs shredder, hijackthis, adaware, spybot, spyware (dont remember the exact name)....all freeware. If you run them all one after each other, it will most likely get rid of your problem.

If you *know* the name of the hijacker, you could go into the registry and do a search for all files or keys with that name, and delete them. See, the problem is that these .dll files are deeply embedded in your system folder, and deleting cookies dont do squat. Once you uninstall the program and delete the program folder, it will appear again after another system startup. Why? Because the driver containing the executable file is still on your computer. So search your windows system folder and your registry and delete them all. (plus the program file itself).

Then download and install the freesurfer from bevoware (again, freeware), which should block popups and sites that try to install crap onto your computer.
 

Spencer278

Diamond Member
Oct 11, 2002
3,637
0
0
Originally posted by: LS20
Originally posted by: RagingBITCH
Check your HOSTS file

yup, already checked. the only referrral is localhost to 127.0.0.1 as default... im no stranger to the pc so this problem totally irks me :|

edit: what's more, one of the porn sites i was referred to (vikingporn.com?? i cleaned history again) had pictures of underage girls AND boys :|

i would send admin@utexas a mail but the problem is localized with my machine... not some hacker on the site

You should still email them because chances are the box serving up your porn has been hacked and they are wasting the schools bandwidth. At least if you email them then the server will get taken off line and you will stop getting free porn.
 

LS20

Banned
Jan 22, 2002
5,858
0
0
im not able to find 'Hijack This!" anywhere... tho i can find Browser Hijack Blaster but no valid DL sites
 

nick1985

Lifer
Dec 29, 2002
27,158
6
81
Originally posted by: LS20
im not able to find 'Hijack This!" anywhere... tho i can find Browser Hijack Blaster but no valid DL sites

i have it. PM me and i will give it to you through AIM or something. BTW, i was having god awful pop up troube, and it worked for me. im leaving to go home for spring break, so i wont be able to give it to you until later tonight