My coworker has a problem with malicious browser redirection on his home PC(ME).
It seems to be random. After booting up, Internet Explorer automatically fires up on its on and starts linking to the my.yahoo website. It may go for hours without anyactivity and then starts up again like it’s on a random timer. If it successfully connects to my.yahoo, moving to another site results in a redirect back to my.yahoo. He found a text file in a yahoo folder with redirect instructions to my.yahoo and got rid of it. Didn’t work – guess there were other files or new ones were generated somewhere else. Anyway, he is on a 56K dialup, so when the browser fires up immediately after booting it trys about twice per second to connect to my.yahoo unsuccessfully since a connection to the ISP hasn’t been established yet. These efforts fill up the bottom of the screen with instances of IE each showing the expected “website not found” err msg. It’s not possible to start any other apps while these attemptsare going on. Apparently, the program is so determined to make a connection that the only way to terminate the activity is by killing power to the PC. The startup folder and autoexec were checked for entries that might cause IE to start up – nothing. McAfee is run in the background. He installed and ran The Cleaner (moosoft.com) to clear any trojans. He then installed Zone Alarm. Problem still there. Task Manager just shows IE running, whatever initiated IE must have terminated on its own. If he knew what type of file to look for, a search and destroy from DOS could be executed. Any ideas?
