[Resolved] being directed to another ip address

greetings,

……new here to THIS forum. have a problem that i have read about in previous posts (see bottom of page) here but, am afraid i need a "walk through" in order to solve it.

…..win xp pro, sp1+2 , 300+gb sata hd, 4.0gb processor (+/-), 1gb ram, ie and firefox as browsers.

….today, i attempted to go on the net and zone alarm (free version) alerted me that it was accessing 85.255.118.26:http .

….i killed it and said "no". i have downloaded "combofix" and energized it to more or less see what it did/does. after it did it's thing, i noticed some changes as to my configuration settings, such as having the windows firewall shut off and security center disabled.

…at any rate, i noticed a few minutes ago when i hit the net, the same "warning" came up and according to a previous post, that ip originated from the Ukraine.

…ok, walk me through this if someone can to kill this. btw, i am using antivir as an anti virus program and have zone alarm and sygate as firewalls.

http://forums.whatthetech.com/hijacked_on_IEexplorer_on_second_attempt_to_search_the_t83821.html

Thanks for any assistance i can get!

Welcome to the forum.

Can you post a HiJackThis log of the system.

http://forums.whatthetech.com/Welcome_New_…ers_t34502.html


Thanks, MrC

……thanks for the reply….i had run super spy-ware and combofix and so far i have not seen any "redirection" so far…..so, i am gonna sit on this a while longer to see what happens….i absolutely appreciate the assistance!!

OK….but that's really not the complete fix…see below:


http://forums.whatthetech.com/How_To_Remov…ons_t83698.html

MrC

…..i see, however, i have both firewalls indicating that what was happening before is no longer happening…..i have downloaded the other program mentione and would inquire as to what specifically it does….

Example below…it's called a wareout infection:


http://forums.whatthetech.com/Help_being_r…ngs_t84582.html

It won't hurt to run the program and then post a fresh HJT log and the log from wareout.

MrC

…i have downloaded and examined the very short log file it created and see nothing suspicious at this time. i still have no "redirections" taking place so, i will wait a bit before i post a log on my particular issue as i think i was able to whack it before i was responed to…thanks again for the help and i will monitor my system during the week and see what happens…..thanks again…

Since this issue appears to be resolved … this Topic has been closed. Glad we could be of assistance. If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread. Everyone else please begin a New Topic.