BleepingComputer.com: Testend Online Hijack?

Okay, my results are below. For some reason, my ping is going as low as 52(not bad) But my download speed is as low as 1 mbps and my upload speed can go down to 0.3 mbps. Currently it's fine, but when it goes to its low, everything slows to a standstill so it's very hard to reply to you lol. I think this actually might be a router problem or something since my Xbox Live and other computer are running terribly too, and disconnecting frequently. I suppose I'll leave that topic for another time though.






Anyway, it scanned, and once it finished, there was no option to do anything except buy the full version.





Also, I just received a popup leading to http://delivery.jemacpv.com/network/c/adclick.php?ad=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;939e188c46f41f5c9192f67dc6d7d7b1

As usual, it went to a firefox error page saying the page could not load.



EDIT: Reading this, it seems like this popup is pretty good at going undetected. http://forums.spybot.info/showthread.php?t=63576

Would contacting the admin at the domain whois here help any do you think? http://www.neatstat.com/www.jemacpv.com

This post has been edited by Lazukin: 24 September 2011 - 11:08 PM

As for your slow internet I suggest you connect computer straight to the modem bypassing router and see how it goes.
If it's good you may suspect bad router.
If it's still slow test some other device, like XBox in a very same way (bypassing router).
If still bad call your ISP. Possible bad line.

Now I don't like those pop-ups.
Do they happen ONLY when Firefox is open?
Can you test if IE is having same issue?

Finally...

Please download GooredFix from one of the locations below and save it to your Desktop
Download Mirror #1
Download Mirror #2

• Ensure all Firefox windows are closed.
  
• To run the tool, double-click it (XP), or right-click and select Run As Administrator (Vista).
  
• When prompted to run the scan, click Yes.
  
• GooredFix will check for infections, and then a log will appear. Please post the contents of that log in your next reply (it can also be found on your desktop, called GooredFix.txt).

So far, IE has had the google redirect (Which I suspect is separate from the popups), but not the popups.

Downloading GooredFix now. Also, I just noticed I broke the page with that lol.

Alright, that went extremely quickly.


GooredFix by jpshortstuff (03.07.10.1)
Log created at 21:31 on 23/09/2011 (Hunter)
Firefox version 6.0.2 (en-US)

========== GooredScan ==========


========== GooredLog ==========

C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd} [04:46 24/09/2011]

[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]
"searchpredict@speedbit.com"="C:\Program Files (x86)\SearchPredict\PRFireFox" [02:51 23/09/2011]
"{0329E7D6-6F54-462D-93F6-F5C3118BADF2}"="C:\Program Files (x86)\SpeedBit Video Downloader\SPFireFox" [02:51 23/09/2011]

-=E.O.F=-

In that case (FF pop-ups and IE redirection) you must have something on your computer which we can't detect with tools allowed in this forum.

With the information you have provided I believe you will need help from the malware removal team.
Please make sure that you read the information about getting started first.
Then start a new thread HERE and include or required logs.
Including a link to this thread will be helpful.

Good luck and be patient. Help is on the way!

Thanks!

(Internet connection fixed. NAT closed for some reason, which might have been the problem, I don't know. Either way, it's better in that regard :D)

This post has been edited by Lazukin: 25 September 2011 - 12:30 AM

You're very welcome

Hello,

Now that you have posted a log here: you should NOT make further changes to your computer (install/uninstall programs, use special fix tools, delete files, edit the registry, etc) unless advised by a MRT Team member, nor should you ask for help elsewhere. Doing so can result in system changes which may not show in the log you already posted. Further, any modifications you make on your own may cause confusion for the helper assisting you and could complicate the malware removal process which would extend the time it takes to clean your computer.

From this point on the MRT Team should be the only members that you take advice from, until they have verified your log as clean.

Please be patient. It may take a while to get a response because the MRT Team members are EXTREMELY busy working logs posted before yours. They are volunteers who will help you out as soon as possible. Once you have made your post and are waiting, please DO NOT make another reply until it has been responded to by a member of the MRT Team. Generally the staff checks the forum for postings that have 0 replies as this makes it easier for them to identify those who have not been helped. If you post another response there will be 1 reply. A team member, looking for a new log to work may assume another MRT Team member is already assisting you and not open the thread to respond.

Please be patient. It may take several days to get a response but your log will be reviewed and answered as soon as possible. I advise checking your topic once a day for responses as the e-mail notification system is unreliable.

If HelpBot replies to your topic, PLEASE follow Step One so it will report your topic to the team members.

To avoid confusion, I am closing this topic. Good luck with your log.

Orange Blossom