Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Firefox Redirects to The News Pedia


  • This topic is locked This topic is locked
5 replies to this topic

#1 VagabondOfLimbo

VagabondOfLimbo

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:03:51 PM

Posted 13 December 2009 - 04:56 PM

Apparently I am infected with an unknown virus/ browser hijacker. At random times it opens a separate firefox window usually leading to this site
hxxp://www.thenewspedia.com/index.php/components/education (The News Pedia)
and more rarely to some other weird sites.

My antivirus (avast! 4.8 home edition) cant find anything.

Also, when I tried to run the DDS tool, i couldn't get any results, just a text file opened filed with lots of weird symbols without meaning. So i will only present the RootRepeal log file here.

Attached Files

  • Attached File  ark.txt   29.36KB   5 downloads

Edited by Orange Blossom, 13 December 2009 - 05:37 PM.
Deactivate link. ~ OB


BC AdBot (Login to Remove)

 


#2 m0le

m0le

    Can U Dig It?


  • Malware Response Team
  • 34,527 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:London, UK
  • Local time:02:51 PM

Posted 26 December 2009 - 07:38 AM

Hi,

Welcome to Bleeping Computer. My name is m0le and I will be helping you with your log.
  • Please subscribe to this topic, if you haven't already. You can subscribe by clicking the Options box to the right of your topic title and selecting Track This Topic.

  • Please avoid installing/uninstalling or updating any programs and attempting any unsupervised fixes or scans. This can make helping you impossible.

  • Please reply to this post so I know you are there.
The forum is busy and we need to have replies as soon as possible. If I haven't had a reply after 3 days I will bump the topic and if you do not reply by the following day after that then I will close the topic.

Once I receive a reply then I will return with your first instructions.

Thanks :(
Posted Image
m0le is a proud member of UNITE

#3 VagabondOfLimbo

VagabondOfLimbo
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:03:51 PM

Posted 26 December 2009 - 05:34 PM

While waiting for the reply i found a topic on the forum describing a similar problem where it was suggested to use Malwarebytes' Anti-Malware to find and delete the virus. I did just that and it found a file called "NISSAN.EXE" which I removed. After that I noticed no redirecting and no problems whatsoever.

Anyways, thanks for the great forum and all the effort you put in it.

#4 m0le

m0le

    Can U Dig It?


  • Malware Response Team
  • 34,527 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:London, UK
  • Local time:02:51 PM

Posted 26 December 2009 - 05:41 PM

Thanks for letting me know.

Are you happy for me to close this topic?
Posted Image
m0le is a proud member of UNITE

#5 VagabondOfLimbo

VagabondOfLimbo
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:03:51 PM

Posted 26 December 2009 - 06:06 PM

Yes, problem solved.

#6 m0le

m0le

    Can U Dig It?


  • Malware Response Team
  • 34,527 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:London, UK
  • Local time:02:51 PM

Posted 26 December 2009 - 07:09 PM

Okay, thanks again :(

--------------------------------------------------------

Since this issue appears to be resolved ... this topic has been closed. Glad we could help. :(

If you're the topic starter, and need this topic reopened, please contact me via pm with the address of the thread.

Everyone else please begin a New Topic.
Posted Image
m0le is a proud member of UNITE




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users