Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Help with a browser Hijacker


  • This topic is locked This topic is locked
16 replies to this topic

#1 copotay

copotay

  • Members
  • 33 posts
  • OFFLINE
  •  
  • Local time:04:01 AM

Posted 06 February 2010 - 08:28 PM

I have IE8 with XP home and have a browser redirector that keeps sending me to random and search sites after clicking on a Google result. If I back the page up it goes to link I chose with the correct page. I have ran Spybot and am currently running Malawarebytes. Spybot found several things but I have since repaired them with no success. I ran Hijackthis and here is the log: tks ahead for any help if someone could see in the log what is incorrect

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:27:33 PM, on 2/6/2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32nvsvc32.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:Program FilesCommon FilesEPSONEBAPIeEBSVC.exe
C:WINDOWSsystem32ASWLSVC.exe
C:WINDOWSeHomeehRecvr.exe
C:WINDOWSeHomeehSched.exe
C:Program FilesIntelIntel Matrix Storage Manageriaantmon.exe
C:Program FilesJavajre6binjqs.exe
C:WINDOWSsystem32ASWL2K.exe
C:Program FilesPhotodexProShowGoldScsiAccess.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesCommon FilesPure Networks SharedPlatformnmsrvc.exe
C:WINDOWSExplorer.EXE
C:WINDOWSsystem32dllhost.exe
C:Program FilesIntelIntel Matrix Storage Manageriaanotif.exe
C:Program FilesMicrosoft IntelliType Protype32.exe
C:Program FilesCommon FilesPure Networks SharedPlatformnmctxth.exe
C:WINDOWSstsystra.exe
C:PROGRA~1EPSONS~1EVENTM~1EEventManager.exe
C:WINDOWSsystem32RUNDLL32.EXE
C:Program FilesMicrosoft IntelliPointipoint.exe
C:WINDOWSSystem32svchost.exe
C:Program FilesNorton Internet SecurityEngine16.8.0.41ccSvcHst.exe
C:Program FilesNorton Internet SecurityEngine16.8.0.41ccSvcHst.exe
C:Program FilesIconoidiconoid.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesMalwarebytes' Anti-Malwarembam.exe
C:Program FilesInternet Exploreriexplore.exe
C:Program FilesInternet Exploreriexplore.exe
C:Program FilesInternet Exploreriexplore.exe
C:Program FilesTrend MicroHijackThisHijackThis.exe
C:Program FilesInternet Exploreriexplore.exe
C:Program FilesOutlook Expressmsimn.exe
C:Program FilesInternet Exploreriexplore.exe

R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLMSoftwareMicrosoftInternet ExplorerSearch,Default_Page_URL = www.google.com/ig/dell?hl=en&client=dell-usuk&channel=us
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Local Page =
R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Local Page =
R1 - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyServer = :
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:Program FilesAdobeAcrobat 7.0ActiveXAcroIEHelper.dll
O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:Program FilesNorton Internet SecurityEngine16.8.0.41coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:Program FilesNorton Internet SecurityEngine16.8.0.41IPSBHO.DLL
O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:Program FilesBAEBAE.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:Program FilesJavajre6binjp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:Program FilesJavajre6libdeployjqsiejqs_plugin.dll
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:Program FilesNorton Internet SecurityEngine16.8.0.41coIEPlg.dll
O4 - HKLM..Run: [IAAnotif] "C:Program FilesIntelIntel Matrix Storage Manageriaanotif.exe"
O4 - HKLM..Run: [type32] "C:Program FilesMicrosoft IntelliType Protype32.exe"
O4 - HKLM..Run: [nmctxth] "C:Program FilesCommon FilesPure Networks SharedPlatformnmctxth.exe"
O4 - HKLM..Run: [SigmatelSysTrayApp] "C:WINDOWSstsystra.exe"
O4 - HKLM..Run: [EEventManager] C:PROGRA~1EPSONS~1EVENTM~1EEventManager.exe
O4 - HKLM..Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSsystem32NvCpl.dll,NvStartup
O4 - HKLM..Run: [NvMediaCenter] RUNDLL32.EXE C:WINDOWSsystem32NvMcTray.dll,NvTaskbarInit
O4 - HKLM..Run: [IntelliPoint] "c:Program FilesMicrosoft IntelliPointipoint.exe"
O4 - HKLM..Run: [KernelFaultCheck] %systemroot%system32dumprep 0 -k
O4 - HKLM..Run: [SunJavaUpdateSched] "C:Program FilesJavajre6binjusched.exe"
O4 - HKLM..Run: [QuickTime Task] "C:Program FilesQuickTimeqttask.exe" -atboottime
O4 - HKLM..RunOnce: [Malwarebytes' Anti-Malware] C:Program FilesMalwarebytes' Anti-Malwarembamgui.exe /install /silent
O4 - HKCU..Run: [Iconoid] "C:Program FilesIconoidiconoid.exe"
O4 - HKCU..Run: [ctfmon.exe] C:WINDOWSsystem32ctfmon.exe
O4 - HKUSS-1-5-18..RunOnce: [RunNarrator] Narrator.exe (User 'SYSTEM')
O4 - HKUS.DEFAULT..RunOnce: [RunNarrator] Narrator.exe (User 'Default user')
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:WINDOWSsystem32Shdocvw.dll
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:Program FilesYahoo!MessengerYahooMessenger.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:Program FilesYahoo!MessengerYahooMessenger.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} - http://support.fastaccess.com/sdccommon/download/tgctlcm.cab
O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/softwareupdate/su/...031/CTSUEng.cab
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} - http://downloads.ewido.net/ewidoOnlineScan.cab
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} (System Requirements Lab) - http://www.nvidia.com/content/DriverDownlo...sreqlab_nvd.cab
O16 - DPF: {3451DEDE-631F-421C-8127-FD793AFC6CC8} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsupp/as...rl/SymAData.cab
O16 - DPF: {556DDE35-E955-11D0-A707-000000521957} - http://www.xblock.com/download/xclean_micro.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1260112725015
O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} - https://webdl.symantec.com/activex/symdlmgr.cab
O16 - DPF: {6C269571-C6D7-4818-BCA4-32A035E8C884} (Creative Software AutoUpdate) - http://ccfiles.creative.com/Web/softwareup...101/CTSUEng.cab
O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} - http://support.f-secure.com/ols/fscax.cab
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} -
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://ccfiles.creative.com/Web/softwareup...15106/CTPID.cab
O17 - HKLMSystemCCSServicesTcpip..{1DD93A85-E6C3-4C9C-A039-4BC5A04C8740}: NameServer = 93.188.163.37,93.188.161.36
O17 - HKLMSystemCS1ServicesTcpipParameters: NameServer = 93.188.163.37,93.188.161.36
O17 - HKLMSystemCS1ServicesTcpip..{1DD93A85-E6C3-4C9C-A039-4BC5A04C8740}: NameServer = 93.188.163.37,93.188.161.36
O17 - HKLMSystemCCSServicesTcpipParameters: NameServer = 93.188.163.37,93.188.161.36
O18 - Protocol: symres - {AA1061FE-6C41-421F-9344-69640C9732AB} - C:Program FilesNorton Internet SecurityEngine16.8.0.41coIEPlg.dll
O23 - Service: ASWLSVC - Unknown owner - C:WINDOWSsystem32ASWLSVC.exe
O23 - Service: Creative Labs Licensing Service - Creative Labs - C:Program FilesCommon FilesCreative Labs SharedServiceCreativeLicensing.exe
O23 - Service: IntelŽ Quick Resume Technology Drivers (ELService) - Intel Corporation - C:Program FilesIntelIntelDHIntelŽ Quick Resume TechnologyELService.exe
O23 - Service: EpsonBidirectionalService - SEIKO EPSON CORPORATION - C:Program FilesCommon FilesEPSONEBAPIeEBSVC.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:Program FilesCommon FilesMacrovision SharedFLEXnet PublisherFNPLicensingService.exe
O23 - Service: IntelŽ Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:Program FilesIntelIntel Matrix Storage Manageriaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:Program FilesCommon FilesInstallShieldDriver1050Intel 32IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:Program FilesJavajre6binjqs.exe
O23 - Service: Linksys Updater (LinksysUpdater) - Unknown owner - C:Program FilesLinksysLinksys UpdaterbinLinksysUpdater.exe
O23 - Service: Intel NCS NetService (NetSvc) - IntelŽ Corporation - C:Program FilesIntelPROSetWiredNCSSyncNetSvc.exe
O23 - Service: Pure Networks Platform Service (nmservice) - Pure Networks, Inc. - C:Program FilesCommon FilesPure Networks SharedPlatformnmsrvc.exe
O23 - Service: Norton Internet Security - Symantec Corporation - C:Program FilesNorton Internet SecurityEngine16.8.0.41ccSvcHst.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:WINDOWSsystem32nvsvc32.exe
O23 - Service: LiveShare P2P Server 9 (RoxLiveShare9) - Unknown owner - C:Program FilesCommon FilesRoxio Shared9.0SharedCOMRoxLiveShare9.exe (file missing)
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:Program FilesWinPcaprpcapd.exe
O23 - Service: ScsiAccess - Unknown owner - C:Program FilesPhotodexProShowGoldScsiAccess.exe
O23 - Service: Acronis Try And Decide Service (TryAndDecideService) - Unknown owner - C:Program FilesCommon FilesAcronisFomatikTrueImageTryStartService.exe

--

Edit: Moved topic from XP to the more appropriate forum. ~ Animal

I did find that I have this also:

z00clicker.dll

___________________________

UPDATE 02/07/10 12:30 pm

I began reading through the forums looking for nfo and found TDDSKiller. I ended up running it and it did appear to work I no longer have browser redirection. I then decided to run dds.scr and gmer.exe to see if it would find anything else. Gmer did not find anything after two hours of scanning. Note I also had to run it in safe mode because it kept locking up and freezing a short time after it began scanning in full windows mode. I am attaching all logs. I believe I am now clean, but just to make sure will one of the experts please review my updated logs files. Tks.

Attached Files


Edited by copotay, 07 February 2010 - 01:40 PM.


BC AdBot (Login to Remove)

 


#2 copotay

copotay
  • Topic Starter

  • Members
  • 33 posts
  • OFFLINE
  •  
  • Local time:04:01 AM

Posted 13 February 2010 - 09:11 AM

bump, awaiting assistance, tks

#3 m0le

m0le

    Can U Dig It?


  • Malware Response Team
  • 34,527 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:London, UK
  • Local time:10:01 AM

Posted 13 February 2010 - 08:25 PM

Hi,

Welcome to Bleeping Computer. My name is m0le and I will be helping you with your log.
  • Please subscribe to this topic, if you haven't already. You can subscribe by clicking the Options box to the right of your topic title and selecting Track This Topic.

  • Please avoid installing/uninstalling or updating any programs and attempting any unsupervised fixes or scans. This can make helping you impossible.

  • Please reply to this post so I know you are there.
The forum is busy and we need to have replies as soon as possible. If I haven't had a reply after 3 days I will bump the topic and if you do not reply by the following day after that then I will close the topic.

Once I receive a reply then I will return with your first instructions.

Thanks thumbup2.gif
Posted Image
m0le is a proud member of UNITE

#4 copotay

copotay
  • Topic Starter

  • Members
  • 33 posts
  • OFFLINE
  •  
  • Local time:04:01 AM

Posted 14 February 2010 - 08:49 AM

Tks m0le, I am here. Appreciate the help

#5 m0le

m0le

    Can U Dig It?


  • Malware Response Team
  • 34,527 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:London, UK
  • Local time:10:01 AM

Posted 14 February 2010 - 11:01 AM

The TDSSKiller log was clean. Gmer was also clean.

The browser redirects would have been to do with the z00clicker adware which Gmer would pick up on but the only evidence of that was you saying that you found that you had it. Where did you find that out?

We could try another rootkit scanner though just to make sure.

We Need to check for Rootkits with RootRepeal
  • Download RootRepeal from the following location and save it to your desktop.

    First Location
    Second Location
    Third Location

  • Open on your desktop.
  • Click the tab.
  • Click the button.
  • Check all seven boxes:
  • Push Ok
  • Check the box for your main system drive (Usually C:), and press Ok.
  • Allow RootRepeal to run a scan of your system. This may take some time.
  • Once the scan completes, push the button. Save the log to your desktop, using a distinctive name, such as RootRepeal.txt. Include this report in your next reply, please.
Thanks thumbup2.gif
Posted Image
m0le is a proud member of UNITE

#6 copotay

copotay
  • Topic Starter

  • Members
  • 33 posts
  • OFFLINE
  •  
  • Local time:04:01 AM

Posted 14 February 2010 - 11:19 AM

To tell you the truth I can't remember, I think it was after running spybot, Malawarebytes or something and reading a whole lot of posts regarding the exact problem I was having.

I am ready to try root repeal but when I tried to download from any of the three links I am getting a Suspicious.MH690.A Norton alert preventing the download saying its a heuristic virus, I will turn off Norton to download it once you tell me it would be ok to do so, just want to make sure its not some type of onboard virus or spyware not letting me download that specific .exe

Btw, I must not have noticed it before and I am really paying attention now to and looking for redirects, but when I am clicking on a google link in IE8, I am getting a "double click" (the start navigation sound twice), sort of like a redirect but the url that is coming up before the actual page hits begins with this "http://www.google.com/url?sa=" with a long string after the = sign, then the actual url of page shows and goes to the page. This happens within a split second but after reading a few articles in looks like google is using some type of java script for searching now that also includes tracking links you click on. I don't think this is a result of the problem I had, unless it is something I still have.

tks

Edited by copotay, 14 February 2010 - 11:32 AM.


#7 m0le

m0le

    Can U Dig It?


  • Malware Response Team
  • 34,527 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:London, UK
  • Local time:10:01 AM

Posted 14 February 2010 - 11:33 AM

Yes, please disable all security programs for each part of the fix. Thanks thumbup2.gif
Posted Image
m0le is a proud member of UNITE

#8 copotay

copotay
  • Topic Starter

  • Members
  • 33 posts
  • OFFLINE
  •  
  • Local time:04:01 AM

Posted 14 February 2010 - 11:37 AM

Got it, I am running it right now and will post as soon as it finishes, tks alot

#9 copotay

copotay
  • Topic Starter

  • Members
  • 33 posts
  • OFFLINE
  •  
  • Local time:04:01 AM

Posted 14 February 2010 - 11:57 AM

Here is the log

Attached Files



#10 m0le

m0le

    Can U Dig It?


  • Malware Response Team
  • 34,527 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:London, UK
  • Local time:10:01 AM

Posted 14 February 2010 - 12:33 PM

Yes, clean as well. I spy a pattern tongue.gif

One more scan then, this is an online scan

I'd like us to scan your machine with ESET OnlineScan
  1. Hold down Control and click on the following link to open ESET OnlineScan in a new window.
    ESET OnlineScan
  2. Click the button.
  3. For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
    1. Click on to download the ESET Smart Installer. Save it to your desktop.
    2. Double click on the icon on your desktop.
  4. Check
  5. Click the button.
  6. Accept any security warnings from your browser.
  7. Check
  8. Push the Start button.
  9. ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
  10. When the scan completes, push
  11. Push , and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
  12. Push the button.
  13. Push

Posted Image
m0le is a proud member of UNITE

#11 copotay

copotay
  • Topic Starter

  • Members
  • 33 posts
  • OFFLINE
  •  
  • Local time:04:01 AM

Posted 14 February 2010 - 12:44 PM

ok I am going to run it now

#12 copotay

copotay
  • Topic Starter

  • Members
  • 33 posts
  • OFFLINE
  •  
  • Local time:04:01 AM

Posted 14 February 2010 - 02:26 PM

Ok, finished it found one thing that was in spybots quarantine

Attached Files



#13 m0le

m0le

    Can U Dig It?


  • Malware Response Team
  • 34,527 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:London, UK
  • Local time:10:01 AM

Posted 14 February 2010 - 02:35 PM

Yes, you're clean there copotay

Let's do some clearing up

Download and Run OTC

We will now remove the tools we used during this fix using OTC.
  • Download OTC by OldTimer and save it to your desktop.
  • Double click icon to start the program. If you are using Vista, please right-click and choose run as administrator
  • Then Click the big button.
  • You will get a prompt saying "Being Cleanup Process". Please select Yes.
  • Restart your computer when prompted.

Now you should Set a New Restore Point to prevent possible reinfection from an old one. Some of the malware you picked up could have been saved in System Restore. Since System Restore is a protected directory, your tools can not access it to delete these bad files which sometimes can reinfect your system. Setting a new restore point AFTER cleaning your system will help prevent this and enable your computer to "roll-back" to a clean working state.

The easiest and safest way to do this is:
  • Go to Start > Programs > Accessories > System Tools and click "System Restore".
  • Choose the radio button marked "Create a Restore Point" on the first screen then click "Next". Give the R.P. a name then click "Create". The new point will be stamped with the current date and time. Keep a log of this so you can find it easily should you need to use System Restore.
  • Then go to Start > Run and type: Cleanmgr
  • Click "OK".
  • Click the "More Options" Tab.
  • Click "Clean Up" in the System Restore section to remove all previous restore points except the newly created one.

------------------------------------------------------------------------------------------------------------------------

Here's some advice on how you can keep your PC clean


Update your AntiVirus Software

It is imperative that you update your Antivirus software at least once a week (Even more if you wish). If you do not update your antivirus software then it will not be able to catch any of the new variants that may come out. If you use a commercial antivirus program you must make sure you keep renewing your subscription. Otherwise, once your subscription runs out, you may not be able to update the programs virus definitions.


Make sure your applications have all of their updates

It is also possible for other programs on your computer to have security vulnerability that can allow malware to infect you. Therefore, it is also a good idea to check for the latest versions of commonly installed applications that are regularly patched to fix vulnerabilities. You can check these by visiting Secunia Software Inspector and Calendar of Updates.


Install an AntiSpyware Program

A highly recommended AntiSpyware program is SuperAntiSpyware. You can download the free Home Version. or the Pro version for a 15 day trial period.

Installing this or another recommended program will provide spyware & hijacker protection on your computer alongside your virus protection. You should scan your computer with an AntiSpyware program on a regular basis just as you would an antivirus software.


Finally, here's a treasure trove of antivirus, antimalware and antispyware resources


That's it copotay, happy surfing!

Cheers.

m0le
Posted Image
m0le is a proud member of UNITE

#14 copotay

copotay
  • Topic Starter

  • Members
  • 33 posts
  • OFFLINE
  •  
  • Local time:04:01 AM

Posted 14 February 2010 - 02:53 PM

Tks m0le, you are great, I really appreciate the assistance, btw did you understand what I was saying about Google searching with the redirecting in my previous post. Kinda weird that it does exactly like a redirector virus.

You have a great day, and its a good thing we have people like you to help out.

#15 m0le

m0le

    Can U Dig It?


  • Malware Response Team
  • 34,527 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:London, UK
  • Local time:10:01 AM

Posted 14 February 2010 - 06:46 PM

QUOTE
btw did you understand what I was saying about Google searching with the redirecting in my previous post. Kinda weird that it does exactly like a redirector virus.


Yeah, I know what you mean. It uses the same principle and so you hear the double-click on both the new Google interface and Redirector. The difference is where you get redirected to. smile.gif

Cheers, copotay
Posted Image
m0le is a proud member of UNITE




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users