Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

What to do??


  • Please log in to reply
9 replies to this topic

#1 LynSire

LynSire

  • Members
  • 33 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:09:58 AM

Posted 23 June 2011 - 09:24 PM

It doesn't happen with other browsers that I have, only with Firefox.
I'll go to Google to type in a question and when a click on a link,
a totally different page opens up. What's wrong??
I already did a virus scan to get rid of all the bad stuff.
What else can I do? Help please!!

Edited by Andrew, 23 June 2011 - 09:32 PM.
Mod Edit: Moved To "Am I Infected?" Due To Likely Infection - AA


BC AdBot (Login to Remove)

 


#2 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,738 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:07:58 AM

Posted 23 June 2011 - 09:46 PM

Please download GooredFix from one of the locations below and save it to your Desktop
Download Mirror #1
Download Mirror #2
  • Ensure all Firefox windows are closed.
  • To run the tool, double-click it (XP), or right-click and select Run As Administrator (Vista).
  • When prompted to run the scan, click Yes.
  • GooredFix will check for infections, and then a log will appear. Please post the contents of that log in your next reply (it can also be found on your desktop, called GooredFix.txt).

My Website

My help doesn't cost a penny, but if you'd like to consider a donation, click DONATE

 


#3 LynSire

LynSire
  • Topic Starter

  • Members
  • 33 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:09:58 AM

Posted 23 June 2011 - 10:36 PM

Thanks, here it is...


GooredFix by jpshortstuff (03.07.10.1)
Log created at 23:35 on 23/06/2011 (Rozy)
Firefox version 3.6.8 (en-US)

========== GooredScan ==========


========== GooredLog ==========

C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd} [05:52 08/02/2009]
{B13721C7-F507-4982-B2E5-502A71474FED} [00:40 09/02/2010]
{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} [18:56 25/02/2009]
{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA} [04:20 08/04/2010]

C:\Users\Rozy\Application Data\Mozilla\Firefox\Profiles\v5f8z5s0.default\extensions\
anycolor.pavlos256@gmail.com [18:46 16/11/2010]
engine@conduit.com [03:41 10/06/2011]
plugin@yontoo.com [03:41 10/06/2011]
{20a82645-c095-46ed-80e3-08825760534b} [05:58 25/06/2010]
{64161300-e22b-11db-8314-0800200c9a66} [03:41 10/06/2011]
{6AC85730-7D0F-4de0-B3FA-21142DD85326} [03:41 10/06/2011]
{ba14329e-9550-4989-b3f2-9732e92d17cc} [03:41 10/06/2011]

[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]
"{20a82645-c095-46ed-80e3-08825760534b}"="c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\" [06:47 06/06/2009]

---------- Old Logs ----------
GooredFix[03.34.48_24-06-2011].txt
GooredFix[03.35.16_24-06-2011].txt

-=E.O.F=-

#4 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,738 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:07:58 AM

Posted 23 June 2011 - 10:39 PM

Close Firefox. Go Start>All Programs>Mozilla Firefox, click on Mozilla Firefox (safe mode).
If you're using Firefox 4, go [b]Help>Restart Firefox with Add-ons Disabled.
Same issue?

My Website

My help doesn't cost a penny, but if you'd like to consider a donation, click DONATE

 


#5 LynSire

LynSire
  • Topic Starter

  • Members
  • 33 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:09:58 AM

Posted 23 June 2011 - 10:54 PM

So good so far.
That means I have to use it on safe mode from now on?
Goored fix got rid of any infection??

#6 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,738 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:07:58 AM

Posted 23 June 2011 - 11:08 PM

GooredFix actually didn't fix anything, but since the redirection doesn't happen in Firefox Safe Mode, it means, that some of your add-ons is causing the problem.

Restart Firefox normally, disable all add-ons.
Restart FF again.
Re-enable just ONE add-on.
Restart FF.
No redirection?
Re-enable next one.
Restart....and so on until you'll find the culprit.

I suspect, it may be Conduit.

My Website

My help doesn't cost a penny, but if you'd like to consider a donation, click DONATE

 


#7 LynSire

LynSire
  • Topic Starter

  • Members
  • 33 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:09:58 AM

Posted 23 June 2011 - 11:34 PM

So I kept using Firefow in safe mode and same thing happened :((

#8 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,738 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:07:58 AM

Posted 24 June 2011 - 10:02 AM

OK, we have to do more checking then...

Download Malwarebytes' Anti-Malware (aka MBAM): https://www.bleepingcomputer.com/download/malwarebytes-anti-malware/ to your desktop.

* Double-click mbam-setup.exe and follow the prompts to install the program.
* At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version.
* Once the program has loaded, select Perform quick scan, then click Scan.
* When the scan is complete, click OK, then Show Results to view the results.
* Be sure that everything is checked, and click Remove Selected.
* When completed, a log will open in Notepad.
* Post the log back here.

Be sure to restart the computer.

The log can also be found here:
C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txt
Or at C:\Program Files\Malwarebytes' Anti-Malware\Logs\log-date.txt

==============================================================================

Download Security Check from HERE, and save it to your Desktop.

* Double-click SecurityCheck.exe
* Follow the onscreen instructions inside of the black box.
* A Notepad document should open automatically called checkup.txt; please post the contents of that document.

My Website

My help doesn't cost a penny, but if you'd like to consider a donation, click DONATE

 


#9 LynSire

LynSire
  • Topic Starter

  • Members
  • 33 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:09:58 AM

Posted 25 June 2011 - 08:50 PM

Thank you! I think that's what it was, Conduit.
I don't even know why I even had this.
My internet is working just fine.

#10 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,738 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:07:58 AM

Posted 25 June 2011 - 10:44 PM

You're very welcome Posted Image

My Website

My help doesn't cost a penny, but if you'd like to consider a donation, click DONATE

 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users