Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

ClickCheck virus, apparently


  • Please log in to reply
No replies to this topic

#1 ChrisLW

ChrisLW

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:04:09 PM

Posted 09 January 2012 - 05:17 PM

I've apparently got a redirect virus that I believe is commonly referred to as the "ClickCheck" virus.
When visiting various legitimate website pages using Firefox 8.0, an interior page link will transport me instead to the same website: theclickcheck.com.
(So far, visiting Google.com hasn't triggered the behavior. It only happens when I've been visiting some other legitimate website. (Unlike some other people's reports, I'm not transported (so far) to any .ru, domain, including clickcheck.ru.)

MSE (Microsoft Security Essentials) doesn't detect it, nor does
- Malwarebytes (free, database version 2012.01.09.07),
- SpyBot Search & Destroy,
- or Kapersky's TDSS Killer.
My hosts file appears to be ok. (Contains just the one entry for my provider + "::1 localhost)

I've run Process Explorer and HijackThis, but don't know what to look for.
Thanks for any help.

BC AdBot (Login to Remove)

 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users