Welcome, Guest. Please Login 3dfx Archive
 
  HomeHelpSearchLogin  
 
Page Index Toggle Pages: 1
Send Topic Print
HELP! (Read 79 times)
paulpsomiadis
God Member
*****
Offline


-=3Dfx still rox!=-

Posts: 2011
Newcastle U.K.
Gender: male
HELP!
22.09.08 at 10:46:40
 
Okay guys, I got a problem...

Some REALLY nasty spyware has hijacked BOTH I.E.7 and Firefox.

It seems to have "overlayed" itself on top of Google searches.

Each link (if you hover the pointer on it) now says:

//go.google.com/(some random letters)711.691.111.46

Every time you click a link in your search results you see it "cycling" random pages in the status bar at the bottom of Firefox.

Then it will usually just load an ad-page or a blank page, etc...

Also, there seems to be an "iexplore.exe" process running by itself from time to time - but no internet explorer window to correspond to it.

In Firefox I have also noticed that some of the "search result" links come from the files:

c.php
rej.php
(but these don't exist on my PC!!!)

I am also trying to screen cap. some of the I.P. addresses this bugger is using:

64.111.196.117
66.154.9.30

Since I'm pretty stuck without Google...can you guys look around and see what you can find about this.

D@MN this thing is annoying!

(At least I can still post on the forum!)
Back to top
« Last Edit: 22.09.08 at 11:09:37 by paulpsomiadis »  

-=To MOD or not to MOD, that is a DUMB question - just MOD it!=-&&&&+May God stand between you and harm in all the empty places you must walk.+
themadhaxor  
IP Logged
 
paulpsomiadis
God Member
*****
Offline


-=3Dfx still rox!=-

Posts: 2011
Newcastle U.K.
Gender: male
Re: HELP!
Reply #1 - 22.09.08 at 12:00:23
 
Well I've been lucky...

I just repaired the PSU for my Torrenting machine yesterday afternoon (it had a leaky capacitor).

I used my torrenting machine and found this:

http://forums.techguy.org/malware-removal-hijackthis-logs/746850-go-google-redir...

So I scanned with MalwareBytes' Anti-malware...and...

I'M BACK BABY!

WOOT!

Some more details on the "infection" as it was:

TYPE: Trojan - Malware - Redirector
SYMPTOMS: Redircts all MSN and Google links to "go.google.com" and "go.msn.com" - basically will not let you search.
SOLUTION: Do a quick scan with MalwareBytes' Anti-Malware
Back to top
« Last Edit: 22.09.08 at 19:45:13 by paulpsomiadis »  

-=To MOD or not to MOD, that is a DUMB question - just MOD it!=-&&&&+May God stand between you and harm in all the empty places you must walk.+
themadhaxor  
IP Logged
 
Page Index Toggle Pages: 1
Send Topic Print