Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Google redirecting, new tab opens for some other site randomly


  • Please log in to reply
6 replies to this topic

#1 leg4385

leg4385

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:02:52 PM

Posted 01 January 2010 - 05:48 PM

The other day a 'security warning' tab popped up on my Firefox and would not close until I opened Task manager and closed the whole window. Now I'm getting random pop-up tabs for directrdr.com or something like that and it is redirecting my google search results. I was getting a pop-up for thewebsitesurvey.com as well. I've run Malwarebytes, Adaware, Spybot, and SuperAntispyware with no success. Please help! I don't know much about how to fix these problems :/ Thank you!

BC AdBot (Login to Remove)

 


#2 Orange Blossom

Orange Blossom

    OBleepin Investigator


  • Moderator
  • 36,804 posts
  • ONLINE
  •  
  • Gender:Not Telling
  • Location:Bloomington, IN
  • Local time:03:52 PM

Posted 01 January 2010 - 09:19 PM

As no logs have been posted, I am shifting this topic from the specialized HiJack This forum to the Am I Infected forum.

==>PLEASE DO NOT NOW POST LOGS<== unless a log is specifically requested.
Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom

An ounce of prevention is worth a pound of cure

SpywareBlaster, WinPatrol Plus, ESET Smart Security, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript

#3 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,740 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:03:52 PM

Posted 01 January 2010 - 11:00 PM

Hello and welcome. Malwarebytes and SUPER found nothing??
Which Antivirus is running? Is this XP or Vista etc??

We Need to check for Rootkits with RootRepeal
  • Download RootRepeal from the following location and save it to your desktop.
  • Extract RootRepeal.exe from the archive (If you did not use the "Direct Download" mirror).
  • Open Posted Image on your desktop.
  • Click the Posted Image tab.
  • Click the Posted Image button.
  • Check all seven boxes: Posted Image
  • Push Ok
  • Check the box for your main system drive (Usually C:), and press Ok.
  • Allow RootRepeal to run a scan of your system. This may take some time.
  • Once the scan completes, push the Posted Image button. Save the log to your desktop, using a distinctive name, such as RootRepeal.txt. Include this report in your next reply, please.

I'd like us to scan your machine with ESET OnlineScan
  • Hold down Control and click on the following link to open ESET OnlineScan in a new window.
    ESET OnlineScan
  • Click the Posted Image button.
  • For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
    • Click on Posted Image to download the ESET Smart Installer. Save it to your desktop.
    • Double click on the Posted Image icon on your desktop.
  • Check Posted Image
  • Click the Posted Image button.
  • Accept any security warnings from your browser.
  • Check Posted Image
  • Push the Start button.
  • ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
  • When the scan completes, push Posted Image
  • Push Posted Image, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
  • Push the Posted Image button.
  • Push Posted Image

How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#4 leg4385

leg4385
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:02:52 PM

Posted 02 January 2010 - 11:33 AM

To answer your previous questions, I am using Vista. Superantispyware and Malwarebytes found some items but nothing that fixed the problem. I have Norton Antivirus running and it keeps sending messages that a recent attempt to attack my computer has been blocked. This happens several times an hour but I'm still getting the pop-up tabs and the redirecting websites.

I'm trying to run RootRepeal but it stops when it gets to something called C:\Windows\winsxs\Manifests\

Edited by leg4385, 02 January 2010 - 11:55 AM.


#5 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,740 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:03:52 PM

Posted 02 January 2010 - 02:20 PM

Ok, and now the ESET and Rootrepeal logs.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#6 leg4385

leg4385
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:02:52 PM

Posted 02 January 2010 - 06:36 PM

All it said at the end of the ESET scan was that there were no threats found. It didn't give me an option for exporting a list of found threats. Also, I'm still getting an error when I try to run RootRepeal. It freezes when it gets to the part I said earlier and won't go any further. It also won't let me save any reports after it freezes.

#7 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,740 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:03:52 PM

Posted 03 January 2010 - 01:17 PM

Ok looks like we need to post the HJT log properly.
Mention that you cant run Rootrepeal.
To run HJT/DDS.TPlease follow this guide. go and do steps 6 thru 8 ,, Preparation Guide For Use Before Using Hijackthis. Then go here HijackThis Logs and Virus/Trojan/Spyware/Malware Removal ,click New Topic,give it a relevant Title and post that complete log.

Let me know if it went OK.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users