Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

CWS Infection?


  • Please log in to reply
No replies to this topic

#1 ladygish

ladygish

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Rolla, MO
  • Local time:05:09 PM

Posted 09 October 2009 - 04:19 PM

Starting about 2 days ago, I noticed that my husband's Windows XP computer is acting strangely with Google. After a search, about half of the time links will open, but go to random URLs which do not work. When clicking "Back" on my browser, I find it takes multiple clicks because it has been redirected through several pages. Sometimes it takes 3 or 4 tries before a site will load. I can visit a few sites in a row with no problem, then several in a row won't work, then several do and so on. I tried Googling the problem and see there is the CWS infection that sends people to random websites, but none of these links work. Most often I get the "Internet Explorer cannot display the webpage" message though occasionally I get a domain for sale type of page.
A sample URL that I am redirected to. (Sorry, to show how long it is I had to add a space after the "h"):

h ttp://z43523673.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

So my question is this still a CWS infection if it doesn't take me to any actual sites? Is there a purpose to this infection if it's not to redirect? And how can I remove it? I read about the CWSShredder and tried that, but it says the machine is clean.

Edited by ladygish, 09 October 2009 - 04:25 PM.


BC AdBot (Login to Remove)

 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users