Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Firefox redirect issue cropped up, at risk :/


  • Please log in to reply
8 replies to this topic

#1 crzyakta

crzyakta

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ
  • Local time:06:59 AM

Posted 03 August 2011 - 12:28 AM

Hi long time Windows user, seemed to have picked this Firefox google redirect bug that is driving me crazy. Not sure if it is taking any of my information as well, would greatly appreciate help with this. Ran updated Malwarebytes full scan and it didnt take it out as of yet.

Thank you for any support!

BC AdBot (Login to Remove)

 


#2 Budapest

Budapest

    Bleepin' Cynic


  • Moderator
  • 23,573 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:59 PM

Posted 03 August 2011 - 12:48 AM

Try this:

http://www.bleepingcomputer.com/virus-removal/remove-tdss-tdl3-alureon-rootkit-using-tdsskiller
The power of accurate observation is commonly called cynicism by those who haven't got it.

—George Bernard Shaw

#3 crzyakta

crzyakta
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ
  • Local time:06:59 AM

Posted 03 August 2011 - 10:27 PM

Followed those steps to the T, and actually ran it before...either way, no issues found, but problem still remains.

Its only with Firefox (5.0), still there unfortunately, any other ideas?

Thanks

#4 Budapest

Budapest

    Bleepin' Cynic


  • Moderator
  • 23,573 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:59 PM

Posted 03 August 2011 - 10:37 PM

Please download GooredFix from one of the locations below and save it to your Desktop
Download Mirror #1
Download Mirror #2
  • Ensure all Firefox windows are closed.
  • To run the tool, double-click it (XP), or right-click and select Run As Administrator (Vista).
  • When prompted to run the scan, click Yes.
  • GooredFix will check for infections, and then a log will appear. Please post the contents of that log in your next reply (it can also be found on your desktop, called GooredFix.txt).

The power of accurate observation is commonly called cynicism by those who haven't got it.

—George Bernard Shaw

#5 crzyakta

crzyakta
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ
  • Local time:06:59 AM

Posted 04 August 2011 - 06:21 PM

Hi Budapest, thanks for the assist. I have pasted the Log info below:

GooredFix by jpshortstuff (03.07.10.1)
Log created at 19:20 on 04/08/2011 (Amit)
Firefox version 5.0 (en-US)

========== GooredScan ==========

Deleting "C:\Users\Amit\Application Data\Mozilla\Firefox\Profiles\9nei15bx.default\extensions\{3628bd78-7fed-4b38-a7bf-ea63839ec565}" -> Success!

========== GooredLog ==========

C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd} [16:25 26/03/2011]
{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA} [01:38 12/04/2010]
{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} [04:34 16/04/2010]

C:\Users\Amit\Application Data\Mozilla\Firefox\Profiles\9nei15bx.default\extensions\
{E2883E8F-472F-4fb0-9522-AC9BF37916A7} [17:10 08/11/2009]

[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]
(Key not found)

-=E.O.F=-

#6 Budapest

Budapest

    Bleepin' Cynic


  • Moderator
  • 23,573 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:59 PM

Posted 04 August 2011 - 06:22 PM

Did that solve the redirect?
The power of accurate observation is commonly called cynicism by those who haven't got it.

—George Bernard Shaw

#7 crzyakta

crzyakta
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ
  • Local time:06:59 AM

Posted 05 August 2011 - 09:18 PM

Yes it did!!! Thank you for that! Now did it just quarantine the threat, or has it been removed from the PC as well?

#8 Budapest

Budapest

    Bleepin' Cynic


  • Moderator
  • 23,573 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:59 PM

Posted 05 August 2011 - 11:58 PM

It has been deleted.
The power of accurate observation is commonly called cynicism by those who haven't got it.

—George Bernard Shaw

#9 crzyakta

crzyakta
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ
  • Local time:06:59 AM

Posted 08 August 2011 - 12:14 AM

Thanks! :thumbup2:




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users