Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

results.googlesyndication... need help!!!


  • Please log in to reply
8 replies to this topic

#1 rahrah094

rahrah094

  • Members
  • 28 posts
  • OFFLINE
  •  
  • Local time:09:49 PM

Posted 13 August 2010 - 07:59 PM

Hey guys,

I am getting really tired of being redirected everytime I try to access a website... sometimes it just shows the Oops error (google chrome's way of saying your site can't be found) and most of the times i am redirected through www.results5-googlesyndication and its variants. Let me give you an example. I typed in yahoo.com in google search and clicked the first link (which is to yahoo); but instead of sending me to yahoo, i am redirected via results5-googlesyndication.com asking me to buy maternity clothing. My malwarebytes auto protection is stopping a lot of the sites in the background, but a whole lot are still getting through. Also, malwarebytes is not detecting anything in either its flash scan nor its regular scan. I have been researching about this and it seems like a lot of people have a lot of opinions and the facts are very obscure, but I know bleepingcomputer is there. Please help me because both of my laptops are stricken with this!

I am using a dell inspiron 600m with windows xp 32-bi

Edited by rahrah094, 13 August 2010 - 08:12 PM.
Move to AII as no logs posted and prep. guide not followed. ~ OB


BC AdBot (Login to Remove)

 


#2 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,566 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:08:49 PM

Posted 13 August 2010 - 09:25 PM

Let's do this first.

The problem is actually based in your router.
Open MBAM in normal mode and click Update tab, select Check for Updates
Next disconnect your system from the internet, and your router, then…
Open MBAM in normal mode and click Scanner tab,select Quick scan and scan (normal mode).
After scan click Remove Selected,

Next you must reset the router to its default configuration. This can be done by inserting something tiny like a paper clip end or pencil tip into a small hole labeled "reset" located on the back of the router. Press and hold down the small button inside until the lights on the front of the router blink off and then on again (usually about 10 seconds). If you don’t know the router's default password, you can look it up HERE


However, if there are other infected machines using the same router, they will need to be cleared with the above steps before resetting the router. Otherwise, the malware will simply go back and change the router's DNS settings. You also need to reconfigure any security settings you had in place prior to the reset. Check out this site here for video tutorials on how to properly configure your router's encryption and security settings. You may also need to consult with your Internet service provider to find out which DNS servers your network should be using.

Once you have ran Malwarebytes' Anti-Malware on the infected system, and reset the router to its default configuration you can reconnect to the internet, and router. Then return to this site to post your logs
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#3 rahrah094

rahrah094
  • Topic Starter

  • Members
  • 28 posts
  • OFFLINE
  •  
  • Local time:09:49 PM

Posted 14 August 2010 - 12:36 AM

I am unable to update mbam due to an error 12007 which I found generally occurs when something is blocking access. I checked the firewall and avg and both allow mbam. Is there a way to manually update?

#4 rahrah094

rahrah094
  • Topic Starter

  • Members
  • 28 posts
  • OFFLINE
  •  
  • Local time:09:49 PM

Posted 14 August 2010 - 01:26 AM

Ok. I found the reason for the above problem. Apparently the altered DNS settings are not allowing mbam to update on any machine, so i bipassed my router and directly connected the modem through an ethernet cable. Now its working on all machines. I will now continue as instructed.

#5 rahrah094

rahrah094
  • Topic Starter

  • Members
  • 28 posts
  • OFFLINE
  •  
  • Local time:09:49 PM

Posted 14 August 2010 - 02:14 AM

I have completed the instructions you gave me and it is quite apparent that my router was comprised since the DNS servers seemed to be located somewhere in Russia! However, I am puzzled as to what caused this because neither the mbam scan before or after altering all settings revealed an infection. Is it possible that this machine was not infected and that an infection in another machine caused the alteration of the DNS settings? I am saying this because I had a friend over a few days ago and we discovered that her machine was infected with a malware under the name of "security suite" (she was on my connection for the three days). Anyway here is the follow up mbam log:


Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 4427

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

8/14/2010 2:47:19 PM
mbam-log-2010-08-14 (14-47-19).txt

Scan type: Quick scan
Objects scanned: 134581
Time elapsed: 16 minute(s), 20 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

Also, a log of the protection mbam was providing me while I was being redirected:

07:14:18 Uma Grover MESSAGE Protection started successfully
07:14:23 Uma Grover MESSAGE IP Protection started successfully
07:14:50 Uma Grover IP-BLOCK 95.143.192.240
07:14:51 Uma Grover IP-BLOCK 95.143.192.30
07:14:53 Uma Grover IP-BLOCK 95.143.192.240
07:14:54 Uma Grover IP-BLOCK 95.143.192.30
07:14:59 Uma Grover IP-BLOCK 95.143.192.240
07:15:00 Uma Grover IP-BLOCK 95.143.192.30
07:17:29 Uma Grover IP-BLOCK 94.96.51.252
07:17:40 Uma Grover IP-BLOCK 94.96.51.252
07:17:43 Uma Grover IP-BLOCK 94.96.51.252
07:18:11 Uma Grover IP-BLOCK 95.143.192.30
07:18:19 Uma Grover IP-BLOCK 95.143.192.30
07:18:25 Uma Grover IP-BLOCK 94.96.51.252
07:18:25 Uma Grover IP-BLOCK 95.143.192.240
07:18:28 Uma Grover IP-BLOCK 94.96.51.252
07:18:28 Uma Grover IP-BLOCK 95.143.192.240
07:18:34 Uma Grover IP-BLOCK 95.143.192.30
07:18:34 Uma Grover IP-BLOCK 95.143.192.240
07:18:37 Uma Grover IP-BLOCK 95.143.192.30
07:18:43 Uma Grover IP-BLOCK 95.143.192.30
07:18:57 Uma Grover IP-BLOCK 95.143.192.240
07:18:59 Uma Grover IP-BLOCK 95.143.192.240
07:19:05 Uma Grover IP-BLOCK 95.143.192.240
07:19:06 Uma Grover IP-BLOCK 95.143.192.30
07:19:08 Uma Grover IP-BLOCK 95.143.192.30
07:19:14 Uma Grover IP-BLOCK 95.143.192.30
07:19:18 Uma Grover IP-BLOCK 95.143.192.240
07:19:21 Uma Grover IP-BLOCK 95.143.192.240
07:19:27 Uma Grover IP-BLOCK 95.143.192.30
07:19:27 Uma Grover IP-BLOCK 95.143.192.240
07:19:29 Uma Grover IP-BLOCK 95.143.192.30
07:19:35 Uma Grover IP-BLOCK 95.143.192.30
07:45:43 Uma Grover MESSAGE IP Protection stopped
07:45:44 Uma Grover MESSAGE IP Protection started successfully
07:53:59 Uma Grover IP-BLOCK 78.159.105.35
07:54:02 Uma Grover IP-BLOCK 78.159.105.35
07:54:03 Uma Grover IP-BLOCK 78.159.105.35
07:54:08 Uma Grover IP-BLOCK 78.159.105.35
07:54:09 Uma Grover IP-BLOCK 78.159.105.35
07:54:21 Uma Grover IP-BLOCK 78.159.105.35
07:54:21 Uma Grover IP-BLOCK 78.159.105.35
07:54:23 Uma Grover IP-BLOCK 78.159.105.35
07:54:24 Uma Grover IP-BLOCK 78.159.105.35
07:54:29 Uma Grover IP-BLOCK 78.159.105.35
07:54:30 Uma Grover IP-BLOCK 78.159.105.35
07:54:42 Uma Grover IP-BLOCK 78.159.105.35
07:54:42 Uma Grover IP-BLOCK 78.159.105.35
07:54:44 Uma Grover IP-BLOCK 78.159.105.35
07:54:45 Uma Grover IP-BLOCK 78.159.105.35
07:54:51 Uma Grover IP-BLOCK 78.159.105.35
07:54:51 Uma Grover IP-BLOCK 78.159.105.35
07:55:28 Uma Grover IP-BLOCK 78.159.105.35
07:55:28 Uma Grover IP-BLOCK 78.159.105.35
07:55:31 Uma Grover IP-BLOCK 78.159.105.35
07:55:31 Uma Grover IP-BLOCK 78.159.105.35
07:55:35 Uma Grover IP-BLOCK 78.159.105.35
07:55:35 Uma Grover IP-BLOCK 78.159.105.35
07:55:37 Uma Grover IP-BLOCK 78.159.105.35
07:55:38 Uma Grover IP-BLOCK 78.159.105.35
07:55:44 Uma Grover IP-BLOCK 78.159.105.35
07:55:44 Uma Grover IP-BLOCK 78.159.105.35
07:55:54 Uma Grover IP-BLOCK 78.159.105.35
07:55:56 Uma Grover IP-BLOCK 78.159.105.35
07:55:57 Uma Grover IP-BLOCK 78.159.105.35
07:55:59 Uma Grover IP-BLOCK 78.159.105.35
07:56:03 Uma Grover IP-BLOCK 78.159.105.35
07:56:05 Uma Grover IP-BLOCK 78.159.105.35
07:56:15 Uma Grover IP-BLOCK 78.159.105.35
07:56:16 Uma Grover IP-BLOCK 78.159.105.35
07:56:16 Uma Grover IP-BLOCK 78.159.105.35
07:56:17 Uma Grover IP-BLOCK 78.159.105.35
07:56:18 Uma Grover IP-BLOCK 78.159.105.35
07:56:19 Uma Grover IP-BLOCK 78.159.105.35
07:56:19 Uma Grover IP-BLOCK 78.159.105.35
07:56:20 Uma Grover IP-BLOCK 78.159.105.35
07:56:24 Uma Grover IP-BLOCK 78.159.105.35
07:56:25 Uma Grover IP-BLOCK 78.159.105.35
07:56:25 Uma Grover IP-BLOCK 78.159.105.35
07:56:26 Uma Grover IP-BLOCK 78.159.105.35
07:57:42 Uma Grover IP-BLOCK 78.159.105.35
07:57:42 Uma Grover IP-BLOCK 78.159.105.35
07:57:45 Uma Grover IP-BLOCK 78.159.105.35
07:57:45 Uma Grover IP-BLOCK 78.159.105.35
07:57:51 Uma Grover IP-BLOCK 78.159.105.35
07:57:51 Uma Grover IP-BLOCK 78.159.105.35
07:58:03 Uma Grover IP-BLOCK 78.159.105.35
07:58:03 Uma Grover IP-BLOCK 78.159.105.35
07:58:06 Uma Grover IP-BLOCK 78.159.105.35
07:58:12 Uma Grover IP-BLOCK 78.159.105.35
08:29:18 Uma Grover IP-BLOCK 78.159.105.35
08:29:18 Uma Grover IP-BLOCK 78.159.105.35
08:29:21 Uma Grover IP-BLOCK 78.159.105.35
08:29:27 Uma Grover IP-BLOCK 78.159.105.35
08:37:26 Uma Grover IP-BLOCK 78.159.105.35
08:37:26 Uma Grover IP-BLOCK 78.159.105.35
08:37:29 Uma Grover IP-BLOCK 78.159.105.35
08:37:29 Uma Grover IP-BLOCK 78.159.105.35
08:37:35 Uma Grover IP-BLOCK 78.159.105.35
08:37:35 Uma Grover IP-BLOCK 78.159.105.35
08:40:11 Uma Grover IP-BLOCK 78.159.105.35
08:40:14 Uma Grover IP-BLOCK 78.159.105.35
08:40:15 Uma Grover IP-BLOCK 78.159.105.35
08:40:20 Uma Grover IP-BLOCK 78.159.105.35
08:40:21 Uma Grover IP-BLOCK 78.159.105.35
08:40:47 Uma Grover IP-BLOCK 78.159.105.35
08:40:47 Uma Grover IP-BLOCK 78.159.105.35
08:40:50 Uma Grover IP-BLOCK 78.159.105.35
08:40:50 Uma Grover IP-BLOCK 78.159.105.35
08:40:56 Uma Grover IP-BLOCK 78.159.105.35
08:40:56 Uma Grover IP-BLOCK 78.159.105.35
08:41:08 Uma Grover IP-BLOCK 78.159.105.35
08:41:11 Uma Grover IP-BLOCK 78.159.105.35
08:41:17 Uma Grover IP-BLOCK 78.159.105.35
09:02:45 Uma Grover IP-BLOCK 78.159.105.35
09:02:48 Uma Grover IP-BLOCK 78.159.105.35
09:02:54 Uma Grover IP-BLOCK 78.159.105.35
09:02:54 Uma Grover IP-BLOCK 78.159.105.35
09:05:01 Uma Grover IP-BLOCK 64.106.198.74
09:05:01 Uma Grover IP-BLOCK 64.106.198.74
09:05:04 Uma Grover IP-BLOCK 64.106.198.74
09:05:04 Uma Grover IP-BLOCK 64.106.198.74
09:05:10 Uma Grover IP-BLOCK 64.106.198.74
09:05:10 Uma Grover IP-BLOCK 64.106.198.74
09:05:52 Uma Grover IP-BLOCK 64.106.198.79
09:05:52 Uma Grover IP-BLOCK 64.106.198.79
09:05:55 Uma Grover IP-BLOCK 64.106.198.79
09:05:55 Uma Grover IP-BLOCK 64.106.198.79
09:06:01 Uma Grover IP-BLOCK 64.106.198.79
09:09:43 Uma Grover IP-BLOCK 64.106.198.79
09:09:43 Uma Grover IP-BLOCK 64.106.198.79
09:09:46 Uma Grover IP-BLOCK 64.106.198.79
09:09:46 Uma Grover IP-BLOCK 64.106.198.79
09:09:52 Uma Grover IP-BLOCK 64.106.198.79
09:09:52 Uma Grover IP-BLOCK 64.106.198.79
09:15:02 Uma Grover IP-BLOCK 78.159.105.35
09:15:02 Uma Grover IP-BLOCK 78.159.105.35
09:15:05 Uma Grover IP-BLOCK 78.159.105.35
09:15:05 Uma Grover IP-BLOCK 78.159.105.35
09:15:11 Uma Grover IP-BLOCK 78.159.105.35
09:15:11 Uma Grover IP-BLOCK 78.159.105.35
09:15:23 Uma Grover IP-BLOCK 78.159.105.35
09:15:24 Uma Grover IP-BLOCK 78.159.105.35
09:15:26 Uma Grover IP-BLOCK 78.159.105.35
09:15:27 Uma Grover IP-BLOCK 78.159.105.35
09:15:32 Uma Grover IP-BLOCK 78.159.105.35
09:15:33 Uma Grover IP-BLOCK 78.159.105.35
09:23:43 Uma Grover IP-BLOCK 78.159.105.35
09:23:46 Uma Grover IP-BLOCK 78.159.105.35
09:23:46 Uma Grover IP-BLOCK 78.159.105.35
09:23:52 Uma Grover IP-BLOCK 78.159.105.35
09:23:52 Uma Grover IP-BLOCK 78.159.105.35
09:24:04 Uma Grover IP-BLOCK 78.159.105.35
09:24:06 Uma Grover IP-BLOCK 78.159.105.35
09:24:07 Uma Grover IP-BLOCK 78.159.105.35
09:24:09 Uma Grover IP-BLOCK 78.159.105.35
09:24:13 Uma Grover IP-BLOCK 78.159.105.35
09:24:15 Uma Grover IP-BLOCK 78.159.105.35
09:53:02 Uma Grover IP-BLOCK 78.159.105.35
09:53:05 Uma Grover IP-BLOCK 78.159.105.35
09:53:05 Uma Grover IP-BLOCK 78.159.105.35
09:53:11 Uma Grover IP-BLOCK 78.159.105.35
09:53:11 Uma Grover IP-BLOCK 78.159.105.35
09:53:23 Uma Grover IP-BLOCK 78.159.105.35
09:53:24 Uma Grover IP-BLOCK 78.159.105.35
09:53:26 Uma Grover IP-BLOCK 78.159.105.35
09:53:27 Uma Grover IP-BLOCK 78.159.105.35
09:53:32 Uma Grover IP-BLOCK 78.159.105.35
09:53:33 Uma Grover IP-BLOCK 78.159.105.35
10:13:22 Uma Grover IP-BLOCK 78.159.105.35
10:13:22 Uma Grover IP-BLOCK 78.159.105.35
10:13:25 Uma Grover IP-BLOCK 78.159.105.35
10:13:25 Uma Grover IP-BLOCK 78.159.105.35
10:13:31 Uma Grover IP-BLOCK 78.159.105.35
10:13:31 Uma Grover IP-BLOCK 78.159.105.35
10:13:43 Uma Grover IP-BLOCK 78.159.105.35
10:13:44 Uma Grover IP-BLOCK 78.159.105.35
10:13:46 Uma Grover IP-BLOCK 78.159.105.35
10:13:47 Uma Grover IP-BLOCK 78.159.105.35
10:13:52 Uma Grover IP-BLOCK 78.159.105.35
10:13:53 Uma Grover IP-BLOCK 78.159.105.35
10:38:01 Uma Grover IP-BLOCK 78.159.105.35
10:38:04 Uma Grover IP-BLOCK 78.159.105.35
10:38:04 Uma Grover IP-BLOCK 78.159.105.35
10:38:10 Uma Grover IP-BLOCK 78.159.105.35
10:38:10 Uma Grover IP-BLOCK 78.159.105.35
10:38:22 Uma Grover IP-BLOCK 78.159.105.35
10:38:24 Uma Grover IP-BLOCK 78.159.105.35
10:38:25 Uma Grover IP-BLOCK 78.159.105.35
10:38:26 Uma Grover IP-BLOCK 78.159.105.35
10:38:31 Uma Grover IP-BLOCK 78.159.105.35
10:38:32 Uma Grover IP-BLOCK 78.159.105.35
10:40:21 Uma Grover IP-BLOCK 78.159.105.35
10:40:21 Uma Grover IP-BLOCK 78.159.105.35
10:40:24 Uma Grover IP-BLOCK 78.159.105.35
10:40:24 Uma Grover IP-BLOCK 78.159.105.35
10:40:30 Uma Grover IP-BLOCK 78.159.105.35
10:40:30 Uma Grover IP-BLOCK 78.159.105.35
10:40:42 Uma Grover IP-BLOCK 78.159.105.35
10:40:43 Uma Grover IP-BLOCK 78.159.105.35
10:40:45 Uma Grover IP-BLOCK 78.159.105.35
10:40:46 Uma Grover IP-BLOCK 78.159.105.35
10:40:51 Uma Grover IP-BLOCK 78.159.105.35
10:40:52 Uma Grover IP-BLOCK 78.159.105.35
10:44:33 Uma Grover IP-BLOCK 78.159.105.35
10:44:33 Uma Grover IP-BLOCK 78.159.105.35
10:44:36 Uma Grover IP-BLOCK 78.159.105.35
10:44:36 Uma Grover IP-BLOCK 78.159.105.35
10:44:42 Uma Grover IP-BLOCK 78.159.105.35
10:44:42 Uma Grover IP-BLOCK 78.159.105.35
10:44:54 Uma Grover IP-BLOCK 78.159.105.35
10:44:57 Uma Grover IP-BLOCK 78.159.105.35
10:45:03 Uma Grover IP-BLOCK 78.159.105.35
10:50:30 Uma Grover IP-BLOCK 78.159.105.35
10:50:30 Uma Grover IP-BLOCK 78.159.105.35
10:50:32 Uma Grover IP-BLOCK 78.159.105.35
10:50:33 Uma Grover IP-BLOCK 78.159.105.35
10:50:38 Uma Grover IP-BLOCK 78.159.105.35
10:50:39 Uma Grover IP-BLOCK 78.159.105.35
10:50:51 Uma Grover IP-BLOCK 78.159.105.35
10:50:52 Uma Grover IP-BLOCK 78.159.105.35
10:50:54 Uma Grover IP-BLOCK 78.159.105.35
10:50:55 Uma Grover IP-BLOCK 78.159.105.35
10:51:00 Uma Grover IP-BLOCK 78.159.105.35
10:51:01 Uma Grover IP-BLOCK 78.159.105.35
10:51:34 Uma Grover IP-BLOCK 78.159.105.35
10:51:34 Uma Grover IP-BLOCK 78.159.105.35
10:51:37 Uma Grover IP-BLOCK 78.159.105.35
10:51:37 Uma Grover IP-BLOCK 78.159.105.35
10:51:43 Uma Grover IP-BLOCK 78.159.105.35
10:51:43 Uma Grover IP-BLOCK 78.159.105.35
10:51:54 Uma Grover IP-BLOCK 78.159.105.35
10:51:57 Uma Grover IP-BLOCK 78.159.105.35
10:52:03 Uma Grover IP-BLOCK 78.159.105.35
10:52:14 Uma Grover IP-BLOCK 78.159.105.35
10:52:15 Uma Grover IP-BLOCK 78.159.105.35
10:52:17 Uma Grover IP-BLOCK 78.159.105.35
10:52:18 Uma Grover IP-BLOCK 78.159.105.35
10:52:23 Uma Grover IP-BLOCK 78.159.105.35
10:52:24 Uma Grover IP-BLOCK 78.159.105.35
10:52:36 Uma Grover IP-BLOCK 78.159.105.35
10:52:37 Uma Grover IP-BLOCK 78.159.105.35
10:52:39 Uma Grover IP-BLOCK 78.159.105.35
10:52:40 Uma Grover IP-BLOCK 78.159.105.35
10:52:45 Uma Grover IP-BLOCK 78.159.105.35
10:52:46 Uma Grover IP-BLOCK 78.159.105.35
10:52:57 Uma Grover IP-BLOCK 78.159.105.35
10:53:00 Uma Grover IP-BLOCK 78.159.105.35
10:53:06 Uma Grover IP-BLOCK 78.159.105.35
10:53:12 Uma Grover IP-BLOCK 78.159.105.35
10:53:15 Uma Grover IP-BLOCK 78.159.105.35
10:53:21 Uma Grover IP-BLOCK 78.159.105.35
10:53:48 Uma Grover IP-BLOCK 78.159.105.35
10:53:48 Uma Grover IP-BLOCK 78.159.105.35
10:53:51 Uma Grover IP-BLOCK 78.159.105.35
10:53:51 Uma Grover IP-BLOCK 78.159.105.35
10:53:57 Uma Grover IP-BLOCK 78.159.105.35
10:53:57 Uma Grover IP-BLOCK 78.159.105.35
10:54:06 Uma Grover IP-BLOCK 78.159.105.35
10:54:09 Uma Grover IP-BLOCK 78.159.105.35
10:54:15 Uma Grover IP-BLOCK 78.159.105.35
10:54:26 Uma Grover IP-BLOCK 78.159.105.35
10:54:29 Uma Grover IP-BLOCK 78.159.105.35
10:54:34 Uma Grover IP-BLOCK 78.159.105.35
10:54:53 Uma Grover IP-BLOCK 78.159.105.35
10:54:53 Uma Grover IP-BLOCK 78.159.105.35
10:54:55 Uma Grover IP-BLOCK 78.159.105.35
10:54:56 Uma Grover IP-BLOCK 78.159.105.35
10:55:02 Uma Grover IP-BLOCK 78.159.105.35
10:55:02 Uma Grover IP-BLOCK 78.159.105.35
10:55:15 Uma Grover IP-BLOCK 78.159.105.35
10:55:15 Uma Grover IP-BLOCK 78.159.105.35
10:55:18 Uma Grover IP-BLOCK 78.159.105.35
10:55:18 Uma Grover IP-BLOCK 78.159.105.35
10:55:24 Uma Grover IP-BLOCK 78.159.105.35
10:55:24 Uma Grover IP-BLOCK 78.159.105.35
10:55:32 Uma Grover IP-BLOCK 78.159.105.35
10:55:35 Uma Grover IP-BLOCK 78.159.105.35
10:55:41 Uma Grover IP-BLOCK 78.159.105.35
10:55:49 Uma Grover IP-BLOCK 78.159.105.35
10:55:52 Uma Grover IP-BLOCK 78.159.105.35
10:55:58 Uma Grover IP-BLOCK 78.159.105.35
10:56:02 Uma Grover IP-BLOCK 78.159.105.35
10:56:05 Uma Grover IP-BLOCK 78.159.105.35
10:56:11 Uma Grover IP-BLOCK 78.159.105.35
10:56:20 Uma Grover IP-BLOCK 78.159.105.35
10:56:23 Uma Grover IP-BLOCK 78.159.105.35
10:56:29 Uma Grover IP-BLOCK 78.159.105.35
10:56:30 Uma Grover IP-BLOCK 78.159.105.35
10:56:33 Uma Grover IP-BLOCK 78.159.105.35
10:56:39 Uma Grover IP-BLOCK 78.159.105.35
10:56:43 Uma Grover IP-BLOCK 78.159.105.35
10:56:46 Uma Grover IP-BLOCK 78.159.105.35
10:56:52 Uma Grover IP-BLOCK 78.159.105.35
10:57:00 Uma Grover IP-BLOCK 78.159.105.35
10:57:03 Uma Grover IP-BLOCK 78.159.105.35
10:57:09 Uma Grover IP-BLOCK 78.159.105.35
10:57:10 Uma Grover IP-BLOCK 78.159.105.35
10:57:13 Uma Grover IP-BLOCK 78.159.105.35
10:57:19 Uma Grover IP-BLOCK 78.159.105.35
10:57:24 Uma Grover IP-BLOCK 78.159.105.35
10:57:27 Uma Grover IP-BLOCK 78.159.105.35
10:57:37 Uma Grover IP-BLOCK 78.159.105.35
10:57:37 Uma Grover IP-BLOCK 78.159.105.35
10:57:39 Uma Grover IP-BLOCK 78.159.105.35
10:57:40 Uma Grover IP-BLOCK 78.159.105.35
10:57:45 Uma Grover IP-BLOCK 78.159.105.35
10:57:46 Uma Grover IP-BLOCK 78.159.105.35
10:57:59 Uma Grover IP-BLOCK 78.159.105.35
10:57:59 Uma Grover IP-BLOCK 78.159.105.35
10:58:02 Uma Grover IP-BLOCK 78.159.105.35
10:58:02 Uma Grover IP-BLOCK 78.159.105.35
10:58:08 Uma Grover IP-BLOCK 78.159.105.35
10:58:08 Uma Grover IP-BLOCK 78.159.105.35
10:58:20 Uma Grover IP-BLOCK 78.159.105.35
10:58:20 Uma Grover IP-BLOCK 78.159.105.35
10:58:23 Uma Grover IP-BLOCK 78.159.105.35
10:58:23 Uma Grover IP-BLOCK 78.159.105.35
10:58:29 Uma Grover IP-BLOCK 78.159.105.35
10:58:29 Uma Grover IP-BLOCK 78.159.105.35
10:58:35 Uma Grover IP-BLOCK 78.159.105.35
10:58:38 Uma Grover IP-BLOCK 78.159.105.35
10:58:44 Uma Grover IP-BLOCK 78.159.105.35
10:58:45 Uma Grover IP-BLOCK 78.159.105.35
10:58:48 Uma Grover IP-BLOCK 78.159.105.35
10:58:58 Uma Grover IP-BLOCK 78.159.105.35
10:58:58 Uma Grover IP-BLOCK 78.159.105.35
10:59:01 Uma Grover IP-BLOCK 78.159.105.35
10:59:01 Uma Grover IP-BLOCK 78.159.105.35
10:59:07 Uma Grover IP-BLOCK 78.159.105.35
10:59:11 Uma Grover IP-BLOCK 78.159.105.35
10:59:14 Uma Grover IP-BLOCK 78.159.105.35
10:59:20 Uma Grover IP-BLOCK 78.159.105.35
10:59:30 Uma Grover IP-BLOCK 78.159.105.35
10:59:33 Uma Grover IP-BLOCK 78.159.105.35
10:59:39 Uma Grover IP-BLOCK 78.159.105.35
10:59:43 Uma Grover IP-BLOCK 78.159.105.35
10:59:45 Uma Grover IP-BLOCK 78.159.105.35
10:59:50 Uma Grover IP-BLOCK 78.159.105.35
10:59:51 Uma Grover IP-BLOCK 78.159.105.35
10:59:53 Uma Grover IP-BLOCK 78.159.105.35
11:00:03 Uma Grover IP-BLOCK 78.159.105.35
11:00:06 Uma Grover IP-BLOCK 78.159.105.35
11:00:12 Uma Grover IP-BLOCK 78.159.105.35
11:00:14 Uma Grover IP-BLOCK 78.159.105.35
11:00:17 Uma Grover IP-BLOCK 78.159.105.35
11:00:23 Uma Grover IP-BLOCK 78.159.105.35
11:00:40 Uma Grover IP-BLOCK 78.159.105.35
11:00:40 Uma Grover IP-BLOCK 78.159.105.35
11:00:43 Uma Grover IP-BLOCK 78.159.105.35
11:00:43 Uma Grover IP-BLOCK 78.159.105.35
11:00:49 Uma Grover IP-BLOCK 78.159.105.35
11:00:53 Uma Grover IP-BLOCK 78.159.105.35
11:00:56 Uma Grover IP-BLOCK 78.159.105.35
11:01:02 Uma Grover IP-BLOCK 78.159.105.35
11:01:09 Uma Grover IP-BLOCK 78.159.105.35
11:01:12 Uma Grover IP-BLOCK 78.159.105.35
11:01:18 Uma Grover IP-BLOCK 78.159.105.35
11:01:19 Uma Grover IP-BLOCK 78.159.105.35
11:01:22 Uma Grover IP-BLOCK 78.159.105.35
11:01:28 Uma Grover IP-BLOCK 78.159.105.35
11:01:41 Uma Grover IP-BLOCK 78.159.105.35
11:01:42 Uma Grover IP-BLOCK 78.159.105.35
11:01:44 Uma Grover IP-BLOCK 78.159.105.35
11:01:45 Uma Grover IP-BLOCK 78.159.105.35
11:01:50 Uma Grover IP-BLOCK 78.159.105.35
11:01:51 Uma Grover IP-BLOCK 78.159.105.35
11:21:19 Uma Grover IP-BLOCK 78.159.105.35
11:21:19 Uma Grover IP-BLOCK 78.159.105.35
11:21:22 Uma Grover IP-BLOCK 78.159.105.35
11:21:22 Uma Grover IP-BLOCK 78.159.105.35
11:21:28 Uma Grover IP-BLOCK 78.159.105.35
11:21:28 Uma Grover IP-BLOCK 78.159.105.35
11:21:40 Uma Grover IP-BLOCK 78.159.105.35
11:21:41 Uma Grover IP-BLOCK 78.159.105.35
11:21:43 Uma Grover IP-BLOCK 78.159.105.35
11:21:44 Uma Grover IP-BLOCK 78.159.105.35
11:21:49 Uma Grover IP-BLOCK 78.159.105.35
11:21:50 Uma Grover IP-BLOCK 78.159.105.35
11:23:36 Uma Grover IP-BLOCK 78.159.105.35
11:23:36 Uma Grover IP-BLOCK 78.159.105.35
11:23:39 Uma Grover IP-BLOCK 78.159.105.35
11:23:39 Uma Grover IP-BLOCK 78.159.105.35
11:23:45 Uma Grover IP-BLOCK 78.159.105.35
11:23:45 Uma Grover IP-BLOCK 78.159.105.35
11:23:57 Uma Grover IP-BLOCK 78.159.105.35
11:23:59 Uma Grover IP-BLOCK 78.159.105.35
11:24:00 Uma Grover IP-BLOCK 78.159.105.35
11:24:02 Uma Grover IP-BLOCK 78.159.105.35
11:24:06 Uma Grover IP-BLOCK 78.159.105.35
11:24:08 Uma Grover IP-BLOCK 78.159.105.35
11:26:34 Uma Grover IP-BLOCK 78.159.105.35
11:26:35 Uma Grover IP-BLOCK 78.159.105.35
11:26:37 Uma Grover IP-BLOCK 78.159.105.35
11:26:38 Uma Grover IP-BLOCK 78.159.105.35
11:26:43 Uma Grover IP-BLOCK 78.159.105.35
11:26:43 Uma Grover IP-BLOCK 78.159.105.35
11:26:55 Uma Grover IP-BLOCK 78.159.105.35
11:26:58 Uma Grover IP-BLOCK 78.159.105.35
11:27:00 Uma Grover IP-BLOCK 78.159.105.35
11:27:03 Uma Grover IP-BLOCK 78.159.105.35
11:27:04 Uma Grover IP-BLOCK 78.159.105.35
11:27:09 Uma Grover IP-BLOCK 78.159.105.35
11:27:48 Uma Grover IP-BLOCK 78.159.105.35
11:27:48 Uma Grover IP-BLOCK 78.159.105.35
11:27:51 Uma Grover IP-BLOCK 78.159.105.35
11:27:51 Uma Grover IP-BLOCK 78.159.105.35
11:27:57 Uma Grover IP-BLOCK 78.159.105.35
11:27:57 Uma Grover IP-BLOCK 78.159.105.35
11:28:09 Uma Grover IP-BLOCK 78.159.105.35
11:28:11 Uma Grover IP-BLOCK 78.159.105.35
11:28:12 Uma Grover IP-BLOCK 78.159.105.35
11:28:14 Uma Grover IP-BLOCK 78.159.105.35
11:28:18 Uma Grover IP-BLOCK 78.159.105.35
11:28:20 Uma Grover IP-BLOCK 78.159.105.35
11:48:33 Uma Grover IP-BLOCK 78.159.105.35
11:48:33 Uma Grover IP-BLOCK 78.159.105.35
11:48:35 Uma Grover IP-BLOCK 78.159.105.35
11:48:36 Uma Grover IP-BLOCK 78.159.105.35
11:48:41 Uma Grover IP-BLOCK 78.159.105.35
11:48:42 Uma Grover IP-BLOCK 78.159.105.35
11:48:53 Uma Grover IP-BLOCK 78.159.105.35
11:48:55 Uma Grover IP-BLOCK 78.159.105.35
11:48:56 Uma Grover IP-BLOCK 78.159.105.35
11:48:58 Uma Grover IP-BLOCK 78.159.105.35
11:49:02 Uma Grover IP-BLOCK 78.159.105.35
11:49:04 Uma Grover IP-BLOCK 78.159.105.35
11:49:29 Uma Grover IP-BLOCK 78.159.105.35
11:49:30 Uma Grover IP-BLOCK 78.159.105.35
11:49:32 Uma Grover IP-BLOCK 78.159.105.35
11:49:33 Uma Grover IP-BLOCK 78.159.105.35
11:49:38 Uma Grover IP-BLOCK 78.159.105.35
11:49:39 Uma Grover IP-BLOCK 78.159.105.35
11:49:50 Uma Grover IP-BLOCK 78.159.105.35
11:49:52 Uma Grover IP-BLOCK 78.159.105.35
11:49:53 Uma Grover IP-BLOCK 78.159.105.35
11:49:54 Uma Grover IP-BLOCK 78.159.105.35
11:49:59 Uma Grover IP-BLOCK 78.159.105.35
11:50:00 Uma Grover IP-BLOCK 78.159.105.35
11:52:11 Uma Grover IP-BLOCK 78.159.105.35
11:52:11 Uma Grover IP-BLOCK 78.159.105.35
11:52:14 Uma Grover IP-BLOCK 78.159.105.35
11:52:14 Uma Grover IP-BLOCK 78.159.105.35
11:52:20 Uma Grover IP-BLOCK 78.159.105.35
11:52:20 Uma Grover IP-BLOCK 78.159.105.35
11:52:32 Uma Grover IP-BLOCK 78.159.105.35
11:52:33 Uma Grover IP-BLOCK 78.159.105.35
11:52:35 Uma Grover IP-BLOCK 78.159.105.35
11:52:36 Uma Grover IP-BLOCK 78.159.105.35
11:52:41 Uma Grover IP-BLOCK 78.159.105.35
11:52:42 Uma Grover IP-BLOCK 78.159.105.35
12:13:06 Uma Grover IP-BLOCK 78.159.105.35
12:13:06 Uma Grover IP-BLOCK 78.159.105.35
12:13:09 Uma Grover IP-BLOCK 78.159.105.35
12:13:09 Uma Grover IP-BLOCK 78.159.105.35
12:13:15 Uma Grover IP-BLOCK 78.159.105.35
12:13:15 Uma Grover IP-BLOCK 78.159.105.35
12:13:27 Uma Grover IP-BLOCK 78.159.105.35
12:13:28 Uma Grover IP-BLOCK 78.159.105.35
12:13:30 Uma Grover IP-BLOCK 78.159.105.35
12:13:31 Uma Grover IP-BLOCK 78.159.105.35
12:13:36 Uma Grover IP-BLOCK 78.159.105.35
12:13:37 Uma Grover IP-BLOCK 78.159.105.35
12:16:11 Uma Grover IP-BLOCK 78.159.105.35
12:16:11 Uma Grover IP-BLOCK 78.159.105.35
12:16:14 Uma Grover IP-BLOCK 78.159.105.35
12:16:14 Uma Grover IP-BLOCK 78.159.105.35
12:16:20 Uma Grover IP-BLOCK 78.159.105.35
12:16:20 Uma Grover IP-BLOCK 78.159.105.35
12:16:32 Uma Grover IP-BLOCK 78.159.105.35
12:16:33 Uma Grover IP-BLOCK 78.159.105.35
12:16:35 Uma Grover IP-BLOCK 78.159.105.35
12:16:36 Uma Grover IP-BLOCK 78.159.105.35
12:16:41 Uma Grover IP-BLOCK 78.159.105.35
12:16:42 Uma Grover IP-BLOCK 78.159.105.35
12:17:22 Uma Grover IP-BLOCK 78.159.105.35
12:17:22 Uma Grover IP-BLOCK 78.159.105.35
12:17:24 Uma Grover IP-BLOCK 78.159.105.35
12:17:25 Uma Grover IP-BLOCK 78.159.105.35
12:17:30 Uma Grover IP-BLOCK 78.159.105.35
12:17:31 Uma Grover IP-BLOCK 78.159.105.35
12:17:42 Uma Grover IP-BLOCK 78.159.105.35
12:17:44 Uma Grover IP-BLOCK 78.159.105.35
12:17:45 Uma Grover IP-BLOCK 78.159.105.35
12:17:46 Uma Grover IP-BLOCK 78.159.105.35
12:17:52 Uma Grover IP-BLOCK 78.159.105.35
12:17:53 Uma Grover IP-BLOCK 78.159.105.35
12:20:20 Uma Grover IP-BLOCK 78.159.105.35
12:20:20 Uma Grover IP-BLOCK 78.159.105.35
12:20:23 Uma Grover IP-BLOCK 78.159.105.35
12:20:23 Uma Grover IP-BLOCK 78.159.105.35
12:20:29 Uma Grover IP-BLOCK 78.159.105.35
12:20:29 Uma Grover IP-BLOCK 78.159.105.35
12:20:41 Uma Grover IP-BLOCK 78.159.105.35
12:20:42 Uma Grover IP-BLOCK 78.159.105.35
12:20:44 Uma Grover IP-BLOCK 78.159.105.35
12:20:45 Uma Grover IP-BLOCK 78.159.105.35
12:20:50 Uma Grover IP-BLOCK 78.159.105.35
12:20:51 Uma Grover IP-BLOCK 78.159.105.35
12:46:01 Uma Grover IP-BLOCK 64.106.198.79
12:46:02 Uma Grover IP-BLOCK 64.106.198.79
12:46:04 Uma Grover IP-BLOCK 64.106.198.79
12:46:05 Uma Grover IP-BLOCK 64.106.198.79
12:46:10 Uma Grover IP-BLOCK 64.106.198.79
12:46:11 Uma Grover IP-BLOCK 64.106.198.79
12:55:59 Uma Grover MESSAGE IP Protection stopped
12:56:01 Uma Grover MESSAGE IP Protection started successfully
12:59:21 Uma Grover IP-BLOCK 64.106.198.79
12:59:21 Uma Grover IP-BLOCK 64.106.198.79
12:59:24 Uma Grover IP-BLOCK 64.106.198.79
12:59:30 Uma Grover IP-BLOCK 64.106.198.79
13:01:10 Uma Grover MESSAGE IP Protection stopped
13:01:12 Uma Grover MESSAGE IP Protection started successfully
13:19:25 Uma Grover IP-BLOCK 78.159.105.35
13:19:28 Uma Grover IP-BLOCK 78.159.105.35
13:19:28 Uma Grover IP-BLOCK 78.159.105.35
13:19:34 Uma Grover IP-BLOCK 78.159.105.35
13:19:34 Uma Grover IP-BLOCK 78.159.105.35
13:19:59 Uma Grover IP-BLOCK 78.159.105.35
13:19:59 Uma Grover IP-BLOCK 78.159.105.35
13:20:02 Uma Grover IP-BLOCK 78.159.105.35
13:20:02 Uma Grover IP-BLOCK 78.159.105.35
13:20:08 Uma Grover IP-BLOCK 78.159.105.35
14:13:08 Uma Grover MESSAGE Protection started successfully
14:13:12 Uma Grover MESSAGE IP Protection started successfully
14:24:36 Uma Grover MESSAGE IP Protection stopped
14:24:51 Uma Grover MESSAGE Database updated successfully
14:24:53 Uma Grover MESSAGE IP Protection started successfully

#6 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,566 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:08:49 PM

Posted 14 August 2010 - 10:05 AM

The problem is actually based in your router.
Open MBAM in normal mode and click Update tab, select Check for Updates
Next disconnect your system from the internet, and your router, then…
Open MBAM in normal mode and click Scanner tab,select Quick scan and scan (normal mode).
After scan click Remove Selected,

Next you must reset the router to its default configuration. This can be done by inserting something tiny like a paper clip end or pencil tip into a small hole labeled "reset" located on the back of the router. Press and hold down the small button inside until the lights on the front of the router blink off and then on again (usually about 10 seconds). If you don’t know the router's default password, you can look it up HERE


However, if there are other infected machines using the same router, they will need to be cleared with the above steps before resetting the router. Otherwise, the malware will simply go back and change the router's DNS settings. You also need to reconfigure any security settings you had in place prior to the reset. Check out this site here for video tutorials on how to properly configure your router's encryption and security settings. You may also need to consult with your Internet service provider to find out which DNS servers your network should be using.

Once you have ran Malwarebytes' Anti-Malware on the infected system, and reset the router to its default configuration you can reconnect to the internet, and router. Then return to this site to post your logs
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#7 rahrah094

rahrah094
  • Topic Starter

  • Members
  • 28 posts
  • OFFLINE
  •  
  • Local time:09:49 PM

Posted 14 August 2010 - 05:28 PM

Um boopme, I already did that thank you.

#8 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,566 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:08:49 PM

Posted 14 August 2010 - 06:21 PM

i bipassed my router

I didn't understand this ti be disconnect ,reset and scan.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#9 Trekkiemaiden

Trekkiemaiden

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:01:49 AM

Posted 21 September 2011 - 09:01 AM

Hi all, first post here, sso hello there, but at last am pleased to have found somthing about this problem. I'm using Safari, and Firefox on Mac OSx 10.4 Safari is driving me crazy with redirects, as soon as I open a page it goes to soemthing like http://search3.google.com/?_kwd=http%3A%2F%2Fresults.googlesyndication.com%2F&lnk=http://www.bleepingcomputer.com/forums/topic339592.html&t=g

sometimes a blank page sometimes a completely random other website, nothing to do with what i searched for. Firefox is a little better but still redirects me ususally to a groupon.pt webpage. Otherwise i was getting the correct page and then a google 404 error message up. Loading cached pages is 10 times worse, the redirects go crazy.
Also being redirected to a blank page at http://results.googlesyndication.com/
and search.googlesyndication.com which loads to yahoo!!
I have run a macscan, cleared out all the tracking cookies and there's no spyware but it's still happening and I think the frequency is get worse!!

There's a bit of help here too http://www.techsupportforum.com/forums/f217/how-do-i-get-rid-of-google-analytics-pop-ups-473505.html but no definitive answer. this seems to havevbeen happening to folks since early last year!! I shall try resetting the router tonight, but I think i remember resetting it about a month ago so I'm sure that's not the problem. Any other suggestions - clearing out all the google files/software may be an answer/option. HELP!!!!




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users