Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Words Randomly Underlined and Linked


  • Please log in to reply
12 replies to this topic

#1 metrosoccer

metrosoccer

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:05:45 PM

Posted 24 May 2005 - 08:02 PM

Hello,

I have been having a problem with what I thought was a browser hijacker but I am not sure. No matter what website I am it takes longer to load and afterwards random words are linked. I have run Spysweeper and Virus Scans and though these tell me I am clean, this is the one problem that remains. I have looked through my processes as well and nothing out of the ordinary is running , so I am do not know where or what this problem is at all. I am using Windows XP home edition. If anyone knows what this is and/or how to get rid of it it be a great help. Thank you!

Edited by metrosoccer, 24 May 2005 - 08:06 PM.


BC AdBot (Login to Remove)

 


m

#2 jgweed

jgweed

  • Staff Emeritus
  • 28,473 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Chicago, Il.
  • Local time:05:45 PM

Posted 24 May 2005 - 09:40 PM

What browser are you using? Can you give an example of page and note a couple of examples of words that are linked for you?
Regards,
John
Whereof one cannot speak, thereof one should be silent.

#3 the_thom

the_thom

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:05:45 PM

Posted 25 May 2005 - 09:19 AM

Hi!

yeah, I've been having the same problem today... for example, a topic in this forum (can't remember which one though...) had words like "worms" or "windows" double underlined and linked. On mouse over, tabs read advertisements for buying computer products and such...
I am dealing with the Aurora popup at the moment... could there be a link? :thumbsup:

Edited by the_thom, 25 May 2005 - 09:20 AM.


#4 metrosoccer

metrosoccer
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:05:45 PM

Posted 25 May 2005 - 01:59 PM

I am using internet explorer 6.0 and it is not consistent of what words it links but for example when I am at CNNs website words being linked right now are free, loan, clothing, Las Vegas. When I hover over these link in the toolbar it says it leads to a 69.42.xx.xxx address... I have not clicked on any of these however because being unsure if they would install anything else.

thanks


//Mod edit: URL modified to protect members.

Edited by KoanYorel, 25 May 2005 - 05:59 PM.


#5 jgweed

jgweed

  • Staff Emeritus
  • 28,473 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Chicago, Il.
  • Local time:05:45 PM

Posted 25 May 2005 - 02:47 PM

URL for CNN?
John
Whereof one cannot speak, thereof one should be silent.

#6 metrosoccer

metrosoccer
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:05:45 PM

Posted 25 May 2005 - 02:56 PM

http://www.cnn.com/

#7 ddeerrff

ddeerrff

    Retired


  • Malware Response Team
  • 2,717 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Upper Midwest, US
  • Local time:04:45 PM

Posted 25 May 2005 - 02:58 PM

URL for CNN?
John

www.cnn.com :thumbsup:
Derfram
~~~~~~

#8 KoanYorel

KoanYorel

    Bleepin' Conundrum


  • Staff Emeritus
  • 19,461 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:65 miles due East of the "Logic Free Zone", in Md, USA
  • Local time:06:45 PM

Posted 25 May 2005 - 03:18 PM

Metrosoccer & the_Tom...

You may be seeing advertising links here at BC as well as some other sites.

Check these two Threads at BC for a bit more info.

http://www.bleepingcomputer.com/forums/ind...ouble+underline

http://www.bleepingcomputer.com/forums/ind...ouble+underline

regards,
Koan
The only easy day was yesterday.

...some do, some don't; some will, some won't (WR)

#9 Scarlett

Scarlett

    Bleeping Diva


  • Members
  • 7,479 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:As always I'm beside myself ;)
  • Local time:05:45 PM

Posted 25 May 2005 - 03:33 PM

I am wondering if something suspicious is going on. I went to www.cnn.com and I see no highlighted words/links.
Posted Image

#10 metrosoccer

metrosoccer
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:05:45 PM

Posted 25 May 2005 - 04:21 PM

Okay.. lol.. it does it to EVERY website I go to I just used cnn.com as an example to say what kind of words were being underlined.. Ill go to gaming sites, education sites, even this site.. its attacking all websites and I cant find it origins. Sorry if thats what you thought I meant, its not just CNN its all my websites its something infected in my computer and nothing is picking it up.

And mine are not double-underlined its just one underlined to be a link and the word is turned green (the one being linked)

Edited by metrosoccer, 25 May 2005 - 04:23 PM.


#11 Scarlett

Scarlett

    Bleeping Diva


  • Members
  • 7,479 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:As always I'm beside myself ;)
  • Local time:05:45 PM

Posted 25 May 2005 - 04:26 PM

Maybe you should consider posting a Highjack This Log. This link will take you to a detailed tutorial on how to post a log.

Good Luck! :thumbsup:

How to Post a Highjack This Log

Just please keep in mind that all Highjack This Team Members are volunteers. One must practice a little patience, when waiting for help. I promise you though that they will get to you as soon as they are able.

And above all do not attempt to work on your log yourself. And only take the advice from an official HJT Team Member. Which will show under thier name and avatar.

One more thing. Do not reply to your own post. As the Team keeps an eye out for zero replies. If they see a reply they will assume that someone is already helping you out. Then I'm afraid that you may get lost in the shuffle.
Posted Image

#12 metrosoccer

metrosoccer
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:05:45 PM

Posted 25 May 2005 - 04:55 PM

I ran hijack this and read thru it and found the problem is it a trojan listed under svcproc.exe.. or so when I searched the file name it was listed as Trojan.Win32.Stervis.b . I attempted to have hijack this fix the file but it seemed to come right back so now that I think I know this is the issue any help on getting rid of it?

#13 KoanYorel

KoanYorel

    Bleepin' Conundrum


  • Staff Emeritus
  • 19,461 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:65 miles due East of the "Logic Free Zone", in Md, USA
  • Local time:06:45 PM

Posted 25 May 2005 - 04:59 PM

Yes, Metrosoccer.

Please follow Scarlett's instructions above and post your HJT log in the HJT forum
so that a Tech can review it and help you clean up your system.

regards,
Koan
The only easy day was yesterday.

...some do, some don't; some will, some won't (WR)




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users