my friend phoned me a minute ago, to ask you guys a question! problem he has is everytime he tries to log into a .co.uk site, it is trying to open a page called grandlotto.co.uk it then goes to url http://jupk.com/?/dm=intense-rape.com
it does sound particularily nasty, and he is wondering if it is a bug, spyware or malware, or other, and he's asking you guys if there is a fix for the problem! Also has anyone had a similar experience!
it seems so as he cannot enter any uk site, including ebay!
I thank you guys for helping him out on this one!
2006-11-30 04:11:46 · 7 answers · asked by AZRAEL è 5 in Computers & Internet ➔ Internet
This attack aims to redirect your browser using DNS settings.
In windows XP open up the 'show connections' dialog box from the start menu.
Select the 'dial up' or 'Lan or high-speed internet connection' item by double clicking it.
The new dialog box has a button called 'Properties' - click it.
This will get you yet another, new dialog box this time with tabs.
What you are looking for is a tab that contains the following - 'Internet Protocol {TCP/IP}' with a tick in front of it.
Select it (turns blue) and the click on 'Proporties' - you will then get a new dialog box.
This dialog box lists the proporties for TCP/IP and will have 'Use the following DNS server addresses' with the radio button checked - the address is the redirection address for JUPK.CO.
What you actually want is to select the other button - 'Obtain DNS server address automatically' - this will allow your ISP to take care of any redirections - jupk aint in the list of official ISP redirections.
Hope this rambling discription helps!
2006-11-30 05:37:22 · answer #1 · answered by Mark R 2 · 0⤊ 0⤋
Mark R is correct; this isn't conventional spyware/malware and so far seems undetectable, running all this other stuff to get rid of it is quite useless. Try his solution first (I found it on another forum and it really DOES work) and see what happens. Of course run the other software afterwards; since other things may be 'piggybacking' onto your PC, using this loophole. Running the new AVG anti-spyware; I found a particularly nasty trojan that was not there yesterday before I had this problem, so be aware!
2006-11-30 17:04:59 · answer #2 · answered by Lowri_Mai 2 · 0⤊ 0⤋
This is a browser hijack, caused by ..ware virus/trojan. Use an antivirus to do a full system scan. Or trojan remover, if none find anything download a rootkit virus detection program and scan your system.
You can also download hijack this, a utility that will show all of your running processes and all of your web start up plugins and homepages and programs. You can delete unwanted entries from the log file it produces. (Despite the name it is a safe and secure application!)
2006-11-30 12:23:05 · answer #3 · answered by Anonymous · 0⤊ 0⤋
try going to add / remove programs and see if it is listed in there and if so remove or do a system restore to a previous date and then a full system scan and make sure your virus definitions are upto date (this is what i had to do as had something similar
all the best
2006-11-30 13:59:42 · answer #4 · answered by NICHOLAS M 1 · 0⤊ 0⤋
Sounds like spyware to me. I'd go to lavasoft.com and download the free ad-aware program.
2006-11-30 12:23:14 · answer #5 · answered by jerrys_love 3 · 0⤊ 0⤋
definately a virus
2006-11-30 12:20:06 · answer #6 · answered by andygos 3 · 0⤊ 0⤋
download and run this very good.
2006-11-30 12:18:02 · answer #7 · answered by Anonymous · 0⤊ 0⤋