Firefox (Help!): Being redirected to other pages...

[Hanniganite]

In the last couple of days, I've been constantly redirected to other pages when I surf. For instance, if I put in espn.com, it'd load and then immediately take me to some gambling page or something like that. Just about every other site I go to I get redirected (even RFD) and it's getting annoying. I switched from IE because it was all poisoned with problems and this is the first I've encountered with firefox but it's really really annoying...any help would be appreciated. Thanks

[luthair]

You probably have spyware in your system, have you tried Spybot or another program?

[Hanniganite]

Spybot S&D, Adaware, Hijack this, the works..
Can't seem to find out what's causing it but it's annoying...anytime I visit any sports related site, it redirects me to a betting site and I have to hit "back".

[goofball]

does this happen only in firefox or does it also happen in IE?

[Brandon]

Post the Hijack This scan log.

[Hanniganite]

does this happen only in firefox or does it also happen in IE?

I think it sorta started in IE which is why I switched to Firefox. Firefox was fine until a couple days ago..

Logfile of HijackThis v1.99.1
Scan saved at 9:24:18 AM, on 9/19/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Roxio\Easy CD Creator 6\DragToDisc\DrgToDsc.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\ewido\security suite\ewidoguard.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Hank Huang\Desktop\HijackThis.exe

O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [RoxioEngineUtility] "C:\Program Files\Common Files\Roxio Shared\System\EngUtil.exe"
O4 - HKLM\..\Run: [RoxioDragToDisc] "C:\Program Files\Roxio\Easy CD Creator 6\DragToDisc\DrgToDsc.exe"
O4 - HKLM\..\Run: [RoxioAudioCentral] "C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\RxMon.exe"
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/actives...ree/asinst.cab
O20 - Winlogon Notify: SideBySide - C:\WINDOWS\system32\mborcl32.dll
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido\security suite\ewidoguard.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: System Startup Service (SvcProc) - Unknown owner - C:\WINDOWS\svcproc.exe (file missing)

[Madcatmk2]

O23 - Service: System Startup Service (SvcProc) - Unknown owner - C:\WINDOWS\svcproc.exe (file missing)
[/b]

http://www.liutilities.com/products/...brary/svcproc/
Looks like this is your problem...


Did you got infected by a virus? What antivirus do you have?
Can you do a scan at http://housecall.trendmicro.com/ ?


You may have to clean your host files after:
http://accs-net.com/hosts/how_to_use_hosts.html

[Madcatmk2]

Ok it seems it didn't worked...
Ask for help at this forum: http://www.dslreports.com/forum/security