Windows starts and so does a web page?

[quadcells]

Hi all,
I did a little search for this but didn't get any matches.
I have a friend's computer that when windows starts and the desktop is on screen, IE starts and tries to go to a web page (http://sslsitee872.info/phpbb/index2.html) it can't find it. What I want to do is stop this from happening everytime the computer boots.
I looked in the Startup folder, msconfig and can't find it. Would anyone know were this is starting from?
BTW: The computer is running Windows XP home w/SP2
Thanks in advance

 

[wpshooter]

Did you search in the registry ? WARNING, BE CAREFUL WHEN WORKING WITH THE REGISTRY.

 

[quadcells]

Thanks, I didn't do that yet. I'll check it when I get home. Thanks I'll becarefull

 

[JRock]

Sounds like it could be a malware/spyware problem.

Try any of the following applications.

Adaware

Microsoft Anti-Spyware

Spybot

 

[quadcells]

I did run Microsofts Antispyware and it didn't find that one, but others which have been removed.
Thanks

 

[mechBgon]

Now do an antivirus scan with a current-generation, fully-updated antivirus scanner with all the options turned on.

 

[quadcells]

Thanks,
Yes I did that and Norton said that it could not fix the problem by it's self.
I did some research and found that this is a Hijack. It came from AOL's IM.
I guess now I need to get into the Reg. to remove it.
I will keep you informed of my progress
Thanks again
-quadcells

 

[wpshooter]

Originally posted by: quadcells
Thanks,
Yes I did that and Norton said that it could not fix the problem by it's self.
I did some research and found that this is a Hijack. It came from AOL's IM.
I guess now I need to get into the Reg. to remove it.
I will keep you informed of my progress
Thanks again
-quadcells

Just another reason to NOT use IM.

 

[mechBgon]

Originally posted by: quadcells
Thanks,
Yes I did that and Norton said that it could not fix the problem by it's self.
I did some research and found that this is a Hijack. It came from AOL's IM.
I guess now I need to get into the Reg. to remove it.
I will keep you informed of my progress
Thanks again
-quadcells

All right, try this:

1) disable System Restore. I assume WindowsXP here? Right-click My Computer, go to the System Restore tab, and turn it off.

2) right-click this link & save target as This is a text file showing how to use a McAfee scanning utility, and tells where to get it. Reboot the computer in Safe Mode to run the scan. While you're in Safe Mode, also run a scan with Norton too.

3) Consider setting your friend up with a second account named "Limited" and make it a Limited-class account, not a Computer Administrator-class account. He can run high-risk stuff like browsers, IM and email programs under his Limited account.

 

[quadcells]

Originally posted by: mechBgon

Originally posted by: quadcells
Thanks,
Yes I did that and Norton said that it could not fix the problem by it's self.
I did some research and found that this is a Hijack. It came from AOL's IM.
I guess now I need to get into the Reg. to remove it.
I will keep you informed of my progress
Thanks again
-quadcells

All right, try this:

1) disable System Restore. I assume WindowsXP here? Right-click My Computer, go to the System Restore tab, and turn it off.

2) right-click this link & save target as This is a text file showing how to use a McAfee scanning utility, and tells where to get it. Reboot the computer in Safe Mode to run the scan. While you're in Safe Mode, also run a scan with Norton too.

3) Consider setting your friend up with a second account named "Limited" and make it a Limited-class account, not a Computer Administrator-class account. He can run high-risk stuff like browsers, IM and email programs under his Limited account.

That sounds like a great Idea about the limited account for Im. I will also try 1 and 2.
Thanks again
BTW: Fourms like this one (Anandtech) and people like you all that helped make the web a great place. Thanks

 

[daveshel]

Sounds like a rootkit. M$ antispyware along with Ad Aware should be able to deal with it.