Editing Profiles Brings German Porn

[BfB]

Any time I edit a users profile from the admin cp their homepage is changed to a random german teen porn address.....

what happened????

[MindTrix]

Very odd :s Dont like German porn myself :) lol

Have you added any hacks recently at all?

[MaDCaT75]

wow.... thats an odd one

[Brad]

From the admin cp!?

Change all your passwords quick, might want to upload a new set of php files to...really you need to find out how they are doing this, im guessing it is serverside, but mabey they have gotton something into your browser somehow. At any rate someone that knows more about these issues can mabey enlighten you more then I.

[BfB]

It started a week ago.... I havnt changed anything vbb wise. I changed the admin password after I noticed it. Nothing else really has changed, I can not figure out if its in the PHP files or maybe somewhere in the DB. I have ad-aware, I guess I wouldnt put it past being on the browser side, lately there has been a bunch of "creative" programming out there. I tried to upload a new user.php and that didnt seem to help things.

[BfB]

odd..... i did some testing between two computers, it seems to be my laptop doing this. It SEEMS that whenever there is a form and there is a text field that is called "homepage" that is empty it wants to put these URL's in that field invisiably..... how weird and odd.

Any ideas on how to fix this? (ad-aware didnt find it)

I did have this weird thing happen before, where no matter what IE wanted to use this one windows.cc URL as the start page... I had to go into the registry to clear it out totally.

I really have to stop the retards at my work from touching this thing.

[MindTrix]

Have you deleted all cookies and temp internet files?

Otherwise search google to see if anyone else has had the problem

[Brad]

Or install anthor browser other then IE, honestly man after I stoped using IE I got alot less stuff like this on my computer. I use mozilla firebird, but there are others that are good to.

Otherwise search around on google, thats how I always found a fix for IE when crap like this got installed, hope everything works out for you.

[BfB]

well ...... cleared the temp internet files and installed ie6 sp1 and still have the problem.....

the addresses are nowhere in the reg.

this is getting frusturating and confusing.

[Dean C]

I'll put money that you have a virus/spyware. Time to go out and buy norton anti-virus/internet security and do a scan :)

[MindTrix]

Or you can search google and usualy find a good FREE online virus detector. Once you know the name of the virus you can search google again for a removal tool.

Works for me when i get troubles with viruses :p

[BfB]

Nope ... no viri

[BfB]

This was all caused by CoolWebSearch and a nasty BHO... taken care of by CWshredder AND BHODemon

:) all good now

[lucky64]

I have noticed a similar strain (in regards to being invisible and unremovable) as of late, that nothing can seem to pick up...Certain words on text pages are highlighted and green with two lines under them. When you hover the mouse over them they become ads, and you can click on it and it takes you to the page about the product. Ex; Nintendo takes you to a website where you can buy a nintendo, etc etc.

Anyone heard of these?

[BfB]

There seems to be like 20 different varaitions of the CoolWebSearch "virus"

http://www.spywareinfo.com/~merijn/cwschronicles.html

[lucky64]

Go here http://pc.ign.com/articles/445/445781p1.html and under the first pic, second paragraph
'While Silent Hill 2 took a while to get rolling, Silent Hill 3 immediately finds'
is Silent Hill 2 and Silent Hill 3 highlighted with green for anyone else?