IE Redirect & IIS Restart

[drisley]

Not very often I use my own forum for help, but I'm a bit stumped on this one, guys.

I was investigating a potential client website this afternoon when all of a sudden my PC started installing all kinds of spyware. After several hours, I believe I have removed everything, but I have two problems remaining I can't seem to debug:

My homepage is usually set to localhost, and it displays a homepage of my own making. Right now, when I go to http://localhost, it does a "cannot find server" error as usual, then quickly redirects to sirsearch.com. So, this points to two problems:

(1) Why the heck is this thing redirecting to sirsearch.com? Like I said, I've used every spyware app in the book and I think the thing is clean, but maybe not.

(2) I don't think it would be happening if IIS was operating and, thus, localhost was operational. As it is, I think my IIS is fubar. I've gone into Services to try to restart it, but cannot find where to do so. The normal IIS options seem to be missing.

Thanks for any help, guys.

[drisley]

OK, well, I re-installed IIS and that seems to have fixed one major problem. That makes the other one disappear, too, but its probably still there. We'll see.

[Statica]

Your best bet is to look at your hijackthis log for entries pertaining to the spyware. Anyway, here are sites that outlines some of it: http://www.spyany.com/program/articl...KeenValue.html
http://www.spy-bot.net/KeenValue.asp

[drisley]

I've got things handled. What I did in a nutshell:

(1) Ran Ad-Aware.
(2) Bought and ran ScanSpyWare.
(3) Ran Registry Checkup.
(4) Ran CWShredder.
(5) Re-installed IIS
(6) Re-installed PHP (because it seems to have messed that up, too).

It seems to be running pretty well now. Maybe this experience will motivate me to write an article on the subject.