I have noticed a few strange things with my Firefox and Internet Explorer recently.
It started off about a couple of weeks back, but only with one or two sites. for some reason I couldn't get access to parked.com from Firefox, but I could with internet explorer. Likewise with Yola.com.
About a week ago or so I noticed a problem in Google searches. I'd click a link and instead of going to the site I'd get redirected to iSearchpile or Asklots or a similar sort of site. i also noticed that every now and again when I'd click a link in a forum or similar a new window would open at Google.
I activated noscript on Firefox and this seemed to identify the problem. When I'd click on a search, I'd go to a blank page first with a redirect message that noscript had blocked. after a while the search would open normally. Still copudln't get to some sites though and figured there must be a virus at work.
Ran symantec and it quarantined a couple of files which I thought would fix the probelm but it didn't. Ran Adaware and that also picked a few things up but again didn't fix the problem.
I've started to notice problem connecting and downloading from the internet now as well. I've tried to install Spybot Search and Destroy but it won't install properly, likewise Adaware says there's a connection error when I try to run the update feature. Symantec updated fine this morning but it seems that some software can't update poroperly. I also tried to download new copies if Internet Explorer and Firefox figuring that if the problem was linked to the browsers then perhaps I should just unistall them and reinstall again. Initally i couldn't download the software, but eventually I managed to.
uninstalled firefox, then reinstalled it completely fresh - no bookmarks or add ons. Tried to get the noscript add-on but now I get an error saying it can't connect and download the add-on. Upgraded to IE8 which is what I'm using now. i've also downloaded ComboFix but haven't tried to use it yet.
I'm now running a complete, comprehensive scan of the system with AdAware, which has apparently found 1 thing so far but I can't see what.
IE8 seems to be preforming OK, but I'm concerned about the inability to connect to the net properly, and the fact that there's obviously an underlying propblem.
I don't know if this is just a Browser redirect virus like I've seen others write about, something more insidious, or perhaps even more than one virus is at work? In any case I'd be glad of any help.
oh yeah, while I think of it, here's one of the viruses picked up by Adaware intially:
trojan.win32.generic!BT does that mean anything to you?
one more thing, the last time Symantec antivirus picked up an infection was 10 September (other scans since have been clean) and here's the names of what got found then:
Risk Action Filename
Hacktool.Rootkit Restart Required - Cleaned i5qG5.sys
Trojan Horse Quarantined jar_cache21496.tmp
Trojan Horse Quarantined AppleT.class
here's more in the log but I figure that stuff might be the most helpful?
Edited by heidrek, 16 September 2010 - 07:56 PM.