Posted 09 January 2012 - 05:17 PM
I've apparently got a redirect virus that I believe is commonly referred to as the "ClickCheck" virus.
When visiting various legitimate website pages using Firefox 8.0, an interior page link will transport me instead to the same website: theclickcheck.com.
(So far, visiting Google.com hasn't triggered the behavior. It only happens when I've been visiting some other legitimate website. (Unlike some other people's reports, I'm not transported (so far) to any .ru, domain, including clickcheck.ru.)
MSE (Microsoft Security Essentials) doesn't detect it, nor does
- Malwarebytes (free, database version 2012.01.09.07),
- SpyBot Search & Destroy,
- or Kapersky's TDSS Killer.
My hosts file appears to be ok. (Contains just the one entry for my provider + "::1 localhost)
I've run Process Explorer and HijackThis, but don't know what to look for.
Thanks for any help.