Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

What to do??


  • Please log in to reply
9 replies to this topic

#1 LynSire

LynSire

  • Members
  • 33 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:06:06 PM

Posted 23 June 2011 - 09:24 PM

It doesn't happen with other browsers that I have, only with Firefox.
I'll go to Google to type in a question and when a click on a link,
a totally different page opens up. What's wrong??
I already did a virus scan to get rid of all the bad stuff.
What else can I do? Help please!!

Edited by Andrew, 23 June 2011 - 09:32 PM.
Mod Edit: Moved To "Am I Infected?" Due To Likely Infection - AA


BC AdBot (Login to Remove)

 


#2 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,679 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:04:06 PM

Posted 23 June 2011 - 09:46 PM

Please download GooredFix from one of the locations below and save it to your Desktop
Download Mirror #1
Download Mirror #2
  • Ensure all Firefox windows are closed.
  • To run the tool, double-click it (XP), or right-click and select Run As Administrator (Vista).
  • When prompted to run the scan, click Yes.
  • GooredFix will check for infections, and then a log will appear. Please post the contents of that log in your next reply (it can also be found on your desktop, called GooredFix.txt).

My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 


#3 LynSire

LynSire
  • Topic Starter

  • Members
  • 33 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:06:06 PM

Posted 23 June 2011 - 10:36 PM

Thanks, here it is...


GooredFix by jpshortstuff (03.07.10.1)
Log created at 23:35 on 23/06/2011 (Rozy)
Firefox version 3.6.8 (en-US)

========== GooredScan ==========


========== GooredLog ==========

C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd} [05:52 08/02/2009]
{B13721C7-F507-4982-B2E5-502A71474FED} [00:40 09/02/2010]
{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} [18:56 25/02/2009]
{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA} [04:20 08/04/2010]

C:\Users\Rozy\Application Data\Mozilla\Firefox\Profiles\v5f8z5s0.default\extensions\
anycolor.pavlos256@gmail.com [18:46 16/11/2010]
engine@conduit.com [03:41 10/06/2011]
plugin@yontoo.com [03:41 10/06/2011]
{20a82645-c095-46ed-80e3-08825760534b} [05:58 25/06/2010]
{64161300-e22b-11db-8314-0800200c9a66} [03:41 10/06/2011]
{6AC85730-7D0F-4de0-B3FA-21142DD85326} [03:41 10/06/2011]
{ba14329e-9550-4989-b3f2-9732e92d17cc} [03:41 10/06/2011]

[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]
"{20a82645-c095-46ed-80e3-08825760534b}"="c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\" [06:47 06/06/2009]

---------- Old Logs ----------
GooredFix[03.34.48_24-06-2011].txt
GooredFix[03.35.16_24-06-2011].txt

-=E.O.F=-

#4 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,679 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:04:06 PM

Posted 23 June 2011 - 10:39 PM

Close Firefox. Go Start>All Programs>Mozilla Firefox, click on Mozilla Firefox (safe mode).
If you're using Firefox 4, go [b]Help>Restart Firefox with Add-ons Disabled.
Same issue?

My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 


#5 LynSire

LynSire
  • Topic Starter

  • Members
  • 33 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:06:06 PM

Posted 23 June 2011 - 10:54 PM

So good so far.
That means I have to use it on safe mode from now on?
Goored fix got rid of any infection??

#6 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,679 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:04:06 PM

Posted 23 June 2011 - 11:08 PM

GooredFix actually didn't fix anything, but since the redirection doesn't happen in Firefox Safe Mode, it means, that some of your add-ons is causing the problem.

Restart Firefox normally, disable all add-ons.
Restart FF again.
Re-enable just ONE add-on.
Restart FF.
No redirection?
Re-enable next one.
Restart....and so on until you'll find the culprit.

I suspect, it may be Conduit.

My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 


#7 LynSire

LynSire
  • Topic Starter

  • Members
  • 33 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:06:06 PM

Posted 23 June 2011 - 11:34 PM

So I kept using Firefow in safe mode and same thing happened :((

#8 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,679 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:04:06 PM

Posted 24 June 2011 - 10:02 AM

OK, we have to do more checking then...

Download Malwarebytes' Anti-Malware (aka MBAM): https://www.bleepingcomputer.com/download/malwarebytes-anti-malware/ to your desktop.

* Double-click mbam-setup.exe and follow the prompts to install the program.
* At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version.
* Once the program has loaded, select Perform quick scan, then click Scan.
* When the scan is complete, click OK, then Show Results to view the results.
* Be sure that everything is checked, and click Remove Selected.
* When completed, a log will open in Notepad.
* Post the log back here.

Be sure to restart the computer.

The log can also be found here:
C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txt
Or at C:\Program Files\Malwarebytes' Anti-Malware\Logs\log-date.txt

==============================================================================

Download Security Check from HERE, and save it to your Desktop.

* Double-click SecurityCheck.exe
* Follow the onscreen instructions inside of the black box.
* A Notepad document should open automatically called checkup.txt; please post the contents of that document.

My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 


#9 LynSire

LynSire
  • Topic Starter

  • Members
  • 33 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:06:06 PM

Posted 25 June 2011 - 08:50 PM

Thank you! I think that's what it was, Conduit.
I don't even know why I even had this.
My internet is working just fine.

#10 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,679 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:04:06 PM

Posted 25 June 2011 - 10:44 PM

You're very welcome Posted Image

My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users