Unable to Access Gmail/Hotmail- Hijacking

organica · Sep 22, 2006

Hope one of you can help with this: everytime I type <a href="http://www.gmail.com" target="_blank">www.gmail.com</a> or <a href="http://www.hotmail.com" target="_blank">www.hotmail.com</a> in the address bar at the top of my screen, the computer opens a page automatically with an address I did NOT enter: <a href="http://www.www.gmail.com.org" target="_blank">www.www.gmail.com.org</a> or <a href="http://www.www.hotmail.com.org" target="_blank">www.www.hotmail.com.org</a>, which are just crap marketing sites. 
This computer was checked for viruses today & showed none, although I believe the scan showed that 4 spyware programs or "other items" were running. Could this explain this phenomenon? 
Is there any way to circumvent this crazy "hijacking"?

Joe · Sep 22, 2006

<div class="quote-container">Quote:
<div class="quote-block">Originally Posted by organica <a href="/forum/post/0"><img alt="View Post" class="inlineimg" src="/img/forum/go_quote.gif" style=""></a> 
Hope one of you can help with this: everytime I type <a href="http://www.gmail.com" target="_blank">www.gmail.com</a> or <a href="http://www.hotmail.com" target="_blank">www.hotmail.com</a> in the address bar at the top of my screen, the computer opens a page automatically with an address I did NOT enter: <a href="http://www.www.gmail.com.org" target="_blank">www.www.gmail.com.org</a> or <a href="http://www.www.hotmail.com.org" target="_blank">www.www.hotmail.com.org</a>, which are just crap marketing sites. 
This computer was checked for viruses today & showed none, although I believe the scan showed that 4 spyware programs or "other items" were running. Could this explain this phenomenon? 
Is there any way to circumvent this crazy "hijacking"?</div>
</div>
 
Try using the anti-spyware program called HijackThis, available at: <a href="http://www.download.com/HijackThis/3000-8022_4-10379544.html" target="_blank">http://www.download.com/HijackThis/3...-10379544.html</a> 
also available at the author's homepage at: <a href="http://www.spywareinfo.com/~merijn/index.php" target="_blank">http://www.spywareinfo.com/~merijn/index.php</a> 
Merijn helpfully translates his web address into numerical format for people with infected computers, i.e., <a href="http://216.180.233.162/~merijn/" target="_blank">http://216.180.233.162/~merijn/</a> 
While on this page, on the right hand side is a link to Spybot. Download and run that anti-spyware program as well.

organica · Sep 22, 2006

Thank you Joe!! I will try it right now!! <img alt="" class="inlineimg" src="/images/smilies/smiley.gif" style="border:0px solid;" title="

">

organica · Sep 22, 2006

Crap, now it's saying it can't find the server... I will try this again tomorrow, I have to buy groceries soon. Thanks Joe.

organica · Sep 23, 2006

Is there anything I can do when the computer keeps saying the server is down when I try to install Hijack This or try roundabout ways of accessing hotmail thru msn.com? 
Maybe this computer needs professional help...

Joe · Sep 23, 2006

Try using <a href="http://216.239.37.99/" target="_blank">http://216.239.37.99/</a> 
to access Google. Then click on "more" and click on mail/Gmail on the next page to access GMail. 
For GMail directly, try <a href="http://66.249.83.19/" target="_blank">http://66.249.83.19/</a> 
For Hotmail, try: <a href="http://208.172.48.221/" target="_blank">http://208.172.48.221/</a>

Joe · Sep 23, 2006

Here is the program attached below: 
Use it very carefully, though. If you have the option to save something to another directory or place rather than deleting it completely, try to save it. This would include registry keys, etc. Create a directory or folder called, say, SUSPECT and save everything there.
 


<a
class="attachment loginreq" href="/attachments/1358" title="">hijackthis.zip 207.8603515625k . file
</a>

~Wonder · Sep 23, 2006

I don't think hijack this is easy enough for the novice computer user to use successfully. I recommend Ad-Aware. Here's a direct link to the application in case your spyware prevents you from going there directly: <a href="http://software-files.download.com/sd/vUzii_tWxSjBq2SkXFKDOkIg5YVN9AtgyDksLZgK53jYTKhpKNQk4-7OiuY0EX1WYzHXhqKZPlixOg59E1xngOV0ah-vF6n4/software/10399602/10045910/3/aawsepersonal.exe?lop=link&ptype=3000&ontid=8022&siteId=4&edId=3&pid=10399602&psid=10045910" target="_blank">http://software-files.download.com/s...&psid=10045910</a> 
Make sure you have it check for new updates. It's pretty easy to use and should get rid of most, if not all, of your spyware. Some spyware can be pretty nasty and stubborn, so you may need to reformat your harddrive and install a fresh version of windows. 
HTH, 
~Wonder <img alt="" class="inlineimg" src="/images/smilies/biker.gif" style="border:0px solid;" title=":ymca:">

Joe · Sep 23, 2006

<div class="quote-container">Quote:
<div class="quote-block">Originally Posted by ~Wonder <a href="/forum/post/0"><img alt="View Post" class="inlineimg" src="/img/forum/go_quote.gif" style=""></a> 
I don't think hijack this is easy enough for the novice computer user to use successfully. I recommend Ad-Aware. Here's a direct link to the application in case your spyware prevents you from going there directly: <a href="http://software-files.download.com/sd/vUzii_tWxSjBq2SkXFKDOkIg5YVN9AtgyDksLZgK53jYTKhpKNQk4-7OiuY0EX1WYzHXhqKZPlixOg59E1xngOV0ah-vF6n4/software/10399602/10045910/3/aawsepersonal.exe?lop=link&ptype=3000&ontid=8022&siteId=4&edId=3&pid=10399602&psid=10045910" target="_blank">http://software-files.download.com/s...&psid=10045910</a> 
Make sure you have it check for new updates. It's pretty easy to use and should get rid of most, if not all, of your spyware.</div>
</div>
 
You are right that it would probably be better to try Ad-aware first.

Thalia · Sep 23, 2006

Also, with <a href="http://www.spybot.info/" target="_blank">spybot search and destroy</a>, one can view one's own host file and edit it. It is a file often edited by malicious programs to prevent you from going to certain sites by redirecting you. Fortunately, the novice can edit this him or herself. Also Spybot might detect a malcious program that is on the system startup list. You might not be able to completely keep it from re-entering itself to system startup, but you can try, or at least get a clue as to what is on your computer. 
I do agree that while Hijack this is very powerful, most people need to go to a forum to get an expert to interpret the results, or do a lot of googling to figure out which processes are malicious. I've removed viruses by hand myself, but still overwhelmed by my hijack this results. 
Organica- just curious- what kind of security software, practices do you use? Gone to any unusual websites lately? Install any obscure programs or anything? 
ETA- what I do when I have a problem is start googling it. put those URLs in google, and I bet you'll find a ton of forums where computer people have had the same thing and found resolutions. No reason to re-invent the wheel.

Thalia · Sep 23, 2006

I did a search and found this person who got a possible solution. <a href="http://forums.spywareinfo.com/lofiversion/index.php/t64107.html" target="_blank">http://forums.spywareinfo.com/lofive...hp/t64107.html</a>

GhostUser · Sep 23, 2006

<div class="quote-container">Quote:
<div class="quote-block">Originally Posted by organica <a href="/forum/post/0"><img alt="View Post" class="inlineimg" src="/img/forum/go_quote.gif" style=""></a> 
Is there anything I can do when the computer keeps saying the server is down when I try to install Hijack This or try roundabout ways of accessing hotmail thru msn.com? 
Maybe this computer needs professional help...</div>
</div>
 
I got a real bad virus or trojan..maybe it was a couple things. Anyhow, it ended up burning out 2 ethernet cards. I bet that's what just happened to you. You probably will have to scrub your hard drive and reinstall everthing.

GhostUser · Sep 23, 2006

Oh, and you can access hotmail through msn.com

organica · Sep 24, 2006

Thank you all but esp. Joe- the problem is now resolved after I finally installed HijackThis!!! 
Things like this are why VB is awesome. <img alt="" class="inlineimg" src="/images/smilies/smiley.gif" style="border:0px solid;" title="

">

organica · Sep 24, 2006

btw, I have never installed anything before, but I'm assuming I did Hijack This correctly because the computer is now running fine. 
Thalia, it's a work computer that I'm sure is used by others for all kinds of nasty, spyware-installing crap!! And poorly maintained by the computer-savvy folks here. Thanks again.

Joe · Sep 25, 2006

<div class="quote-container">Quote:
<div class="quote-block">Originally Posted by organica <a href="/forum/post/0"><img alt="View Post" class="inlineimg" src="/img/forum/go_quote.gif" style=""></a> 
Thank you all but esp. Joe- the problem is now resolved after I finally installed HijackThis!!! 
Things like this are why VB is awesome. <img alt="" class="inlineimg" src="/images/smilies/smiley.gif" style="border:0px solid;" title="

"></div>
</div>
 
You are welcome. 
I'm glad you were able to fix the problem without further complications. 
Say, this is too late for your problem, but may help in the future. 
Fred Langa sent out a newsletter today in which he mentions a free anti-spyware/anti-hijacking program called eiwdo (free for non-commercial use only). I had heard of it before but never used it. But one thing I learned from Langa that I did not know is that the ewido site also offers a free on-line (no install) scanner. Just visit <a href="http://www.ewido.net/en/" target="_blank">http://www.ewido.net/en/</a> 
and click where it says <div class="quote-container">Quote:
<div class="quote-block">Scan your computer now online 
and clean it for free! 
Your computer can be free of 
malware in just a few 
clicks. 
Scan now</div>
</div>
 
in the upper left hand section of the screen.

Unable to Access Gmail/Hotmail- Hijacking

organica

Registered

Joe

Registered

organica

Registered

organica

Registered

organica

Registered

Joe

Registered

Joe

Registered

Attachments

~Wonder

Registered

Joe

Registered

Thalia

Registered

Thalia

Registered

GhostUser

Registered

GhostUser

Registered

organica

Registered

organica

Registered

Joe

Registered