Spyware Or Trojan???

This is a discussion about Spyware Or Trojan??? in the Windows Software category; When I boot my win2k system and opened I/E the only favorite I had was LINKS. I looked in all folders and found the Favorite folder in my C:\Winnt folder. I went into the regisrty and found in Users/Software/microsoft/windows/current version/explorer/ shell folders that the favorites has changed to :\winnt\Favorites.

Windows Software 5498 This topic was started by ,


data/avatar/default/avatar30.webp

6 Posts
Location -
Joined 2004-10-04
When I boot my win2k system and opened I/E the only favorite I had was "LINKS". I looked in all folders and found the Favorite folder in my C:\Winnt folder. I went into the regisrty and found in Users/Software/microsoft/windows/current version/explorer/ shell folders that the favorites has changed to :\winnt\Favorites. When I typed in the correct path it will recreate itself every time I open I/E. I have tried Hijack, Spybot,Ad-Aware, Spy Doctor, and Spy Sweeper. Nothing helps. I did get it to stop redirecting the favorites one time but now in the C"\ root I get a %USERPROFILE%\ self generated folder on bootup and it has the same results. The only favorite in I/E is Links. All my favorites are in Documents and settings. I am really lost on this one send help please.
 
 

Participate in our website and join the conversation

You already have an account on our website? To log in, use the link provided below.
Login
Create a new user account. Registration is free and takes only a few seconds.
Register
This subject has been archived. New comments and votes cannot be submitted.
Oct 5
Created
Oct 7
Last Response
0
Likes
2 minutes
Read Time
User User
Users

Responses to this topic


data/avatar/default/avatar35.webp

2172 Posts
Location -
Joined 2002-08-26
Sounds like a corrupt user profile more than anything else.

data/avatar/default/avatar30.webp

6 Posts
Location -
Joined 2004-10-04
OP
How can I tell if my profile is corrupt? I only use one profile but it might be worth a shot to logon as another user.
 
Thanks

data/avatar/default/avatar35.webp

2172 Posts
Location -
Joined 2002-08-26
I'm not sure if there is a definative way to check for profile corruption, you could try logging in as another user, and check for similar activity.

data/avatar/default/avatar30.webp

6 Posts
Location -
Joined 2004-10-04
OP
Thanks, Still have the problem but I will now keep an update user profile.
 

data/avatar/default/avatar30.webp

6 Posts
Location -
Joined 2004-10-04
OP
Thanks, I make a ghost image every two weeks but this time I didn't have any reason to open I/E so I copied over a known good image with a unknown bad one. Oh well this is one to put in th ecookie jar for future use. I will NEVER delete a known image with a new one until everything is working. But I did better on a recovery then it sounds like you did. Luckly I had an 8-04 image that all I had to do was install everything from then to today. I am still interested if anyone has ever figured this I/E hijack thing.