IE being redirected

[blubomber]

IE on a coworkers computer is being redirected to http:/// everytime she opens IE. Her home page is www.msn.com

I would guess that there is some sort of spyware or something running in the background that is doing this. Ran spybot and adaware which did not come up with anything that got rid of the problem. Also did a virus scan which did not find anything.

Any suggestions on what i should look for in task manager or that is in the startup process?

Thank you for any help.

[osprey4]

Start here:

http://www.spychecker.com/program/hijackthis.html

[cryptoguy]

Yes, get hijackthis, or you could google the processes you have in your background to see if one of them is spyware.

[blubomber]

Thank you for the links and replies. I will give those a shot and see what happens.

Thanks again.

[desmocat]

That looks like what happened when I got cool web search.
Does a lot of garbage show up in the favorites that you didn't put there?
I ended up creating a whole new profile and deleting the one that was assocaited with the browser that caught that %^##&%#.
I would try to remove all references to it in the reg, and it would be back after about 10 minutes.
I then got spysweeper. it's free for a 30 trial and you can also get the program at bestbuy.

[dcat]

I am sort of having the same problem--I try to get the "holylemon" page--I get the message that MSN CANNOT FIND IT. My daughters computer, which is linked wireless with Linksys router,gets it no problem. Not that this page is so important--is funny--but it is driving me crazy as to why. I have been back and forth with Microsoft for a couple of weeks now, doing things, but still no luck.
I run Nortons on my computer and PC Cillan on hers, but now my son, who is also wireless on our network, cannot get the page either. I downloaded Mozilla, and still couldn't get it. Changed so many things they told me to do, to check IE settings, and could not find anything--anyone have any ideas. Did the "Hijack this" thing too, they didn't see anything suspicious. I do run adaware, and spybot also. Probably some stupid little thing.

tks,

[jrsweger]

Maybe this will lead you somewhere: http://www.mvps.org/winhelp2002/hosts.htm