Internet being redirected

Anything goes, all topics welcome!

Moderator: CameronBornAndBred

Post Reply
User avatar
DukieInKansas
PWing School Endowed Professor
Posts: 6611
Joined: May 3rd, 2009, 11:48 pm
Location: Kansas - scientist's say it's flatter than a pancake - cross it on a bicycle and you won't agree.

Internet being redirected

Post by DukieInKansas » June 22nd, 2010, 3:45 pm

Anyone have any ideas on why the following is happening and how to stop it?

If I google something to find a website, I get a list of links. When I click on the link I want, it doesn't go to the website. Instead, it takes me to another search engine with a list of links. I have up to date virus definitions on my computer and a scan is done nightly. I also deleted my history and cookies the other day. That stopped this annoying process for about a day and it has started again.

Sometimes, another tab will open with a search site when I am going to a website that is one of my favorites. For example, I open internet explorer and go to CTN. A second tab will open, but not all the time, for a search engine site.

Any ideas or suggestions would be most appreciated.
Life is good!
User avatar
DukeUsul
PWing School Assistant Professor
PWing School Assistant Professor
Posts: 2390
Joined: April 14th, 2009, 9:30 am
Location: Back in the dirty Jerz
Contact:

Re: Internet being redirected

Post by DukeUsul » June 22nd, 2010, 4:05 pm

You are infected with malware (not a virus per se). Download malwarebytes: http://www.malwarebytes.org/mbam.php

The malware you are infected with may block access to malwarebytes. In which case, you may have to get on a different computer or ask a friend to download it and put it on a CD for you to install from.
-- DukeUsul
User avatar
DukieInKansas
PWing School Endowed Professor
Posts: 6611
Joined: May 3rd, 2009, 11:48 pm
Location: Kansas - scientist's say it's flatter than a pancake - cross it on a bicycle and you won't agree.

Re: Internet being redirected

Post by DukieInKansas » June 22nd, 2010, 4:08 pm

Thank you. I knew I'd get a quick response here.
Life is good!
User avatar
DukieInKansas
PWing School Endowed Professor
Posts: 6611
Joined: May 3rd, 2009, 11:48 pm
Location: Kansas - scientist's say it's flatter than a pancake - cross it on a bicycle and you won't agree.

Re: Internet being redirected

Post by DukieInKansas » June 22nd, 2010, 4:32 pm

Next Question: Can I safely remove any items it finds? There are 4 that start with Trojan.xxxxx and appear to be in the registry. I'm not worried about removing the ones that are in other files and folders. I just hate touching things associated with the registry.
Life is good!
User avatar
TillyGalore
PWing School Professor
Posts: 4016
Joined: April 8th, 2009, 8:15 pm

Re: Internet being redirected

Post by TillyGalore » June 22nd, 2010, 7:03 pm

DukieInKansas wrote:Anyone have any ideas on why the following is happening and how to stop it?

If I google something to find a website, I get a list of links. When I click on the link I want, it doesn't go to the website. Instead, it takes me to another search engine with a list of links. I have up to date virus definitions on my computer and a scan is done nightly. I also deleted my history and cookies the other day. That stopped this annoying process for about a day and it has started again.

Sometimes, another tab will open with a search site when I am going to a website that is one of my favorites. For example, I open internet explorer and go to CTN. A second tab will open, but not all the time, for a search engine site.

Any ideas or suggestions would be most appreciated.
That happened to me yesterday at work. I didn't google anything today so will have to try again tomorrow.
I worship the Blue Devil!
Image
User avatar
DukeUsul
PWing School Assistant Professor
PWing School Assistant Professor
Posts: 2390
Joined: April 14th, 2009, 9:30 am
Location: Back in the dirty Jerz
Contact:

Re: Internet being redirected

Post by DukeUsul » June 22nd, 2010, 8:18 pm

DukieInKansas wrote:Next Question: Can I safely remove any items it finds? There are 4 that start with Trojan.xxxxx and appear to be in the registry. I'm not worried about removing the ones that are in other files and folders. I just hate touching things associated with the registry.
Yes go and delete those. You're probably safe to delete anything it tells you to.
-- DukeUsul
User avatar
DukieInKansas
PWing School Endowed Professor
Posts: 6611
Joined: May 3rd, 2009, 11:48 pm
Location: Kansas - scientist's say it's flatter than a pancake - cross it on a bicycle and you won't agree.

Re: Internet being redirected

Post by DukieInKansas » June 22nd, 2010, 9:50 pm

DukeUsul wrote:
DukieInKansas wrote:Next Question: Can I safely remove any items it finds? There are 4 that start with Trojan.xxxxx and appear to be in the registry. I'm not worried about removing the ones that are in other files and folders. I just hate touching things associated with the registry.
Yes go and delete those. You're probably safe to delete anything it tells you to.
Thanks! I deleted them. I figured you wouldn't send me to a site that would create a problem. Thanks for your help.
Life is good!
User avatar
CameronBornAndBred
PWing School Chancellor
Posts: 16139
Joined: April 8th, 2009, 7:03 pm
Location: New Bern, NC
Contact:

Re: Internet being redirected

Post by CameronBornAndBred » June 22nd, 2010, 11:07 pm

DukeUsul wrote:You are infected with malware (not a virus per se). Download malwarebytes: http://www.malwarebytes.org/mbam.php

The malware you are infected with may block access to malwarebytes. In which case, you may have to get on a different computer or ask a friend to download it and put it on a CD for you to install from.
Dukeusul is correct, but malwarebytes alone won't kill this one, it's a rootkit. You need to get combofix, and run it. Get it here. http://www.bleepingcomputer.com/combofi ... e-combofix
Two of my clients had this, the first one drove me batty figuring out what was going on.
Duke born, Duke bred, cooking on a grill so I'm tailgate fed.
User avatar
DukieInKansas
PWing School Endowed Professor
Posts: 6611
Joined: May 3rd, 2009, 11:48 pm
Location: Kansas - scientist's say it's flatter than a pancake - cross it on a bicycle and you won't agree.

Re: Internet being redirected

Post by DukieInKansas » June 22nd, 2010, 11:28 pm

CameronBornAndBred wrote:
DukeUsul wrote:You are infected with malware (not a virus per se). Download malwarebytes: http://www.malwarebytes.org/mbam.php

The malware you are infected with may block access to malwarebytes. In which case, you may have to get on a different computer or ask a friend to download it and put it on a CD for you to install from.
Dukeusul is correct, but malwarebytes alone won't kill this one, it's a rootkit. You need to get combofix, and run it. Get it here. http://www.bleepingcomputer.com/combofi ... e-combofix
Two of my clients had this, the first one drove me batty figuring out what was going on.
I'll keep this in mind if it starts happening again.
Life is good!
User avatar
CameronBornAndBred
PWing School Chancellor
Posts: 16139
Joined: April 8th, 2009, 7:03 pm
Location: New Bern, NC
Contact:

Re: Internet being redirected

Post by CameronBornAndBred » June 22nd, 2010, 11:40 pm

DukieInKansas wrote:
CameronBornAndBred wrote:
DukeUsul wrote:You are infected with malware (not a virus per se). Download malwarebytes: http://www.malwarebytes.org/mbam.php

The malware you are infected with may block access to malwarebytes. In which case, you may have to get on a different computer or ask a friend to download it and put it on a CD for you to install from.
Dukeusul is correct, but malwarebytes alone won't kill this one, it's a rootkit. You need to get combofix, and run it. Get it here. http://www.bleepingcomputer.com/combofi ... e-combofix
Two of my clients had this, the first one drove me batty figuring out what was going on.
I'll keep this in mind if it starts happening again.
Do it now. I promise you, you have a rootkit virus. Even if you don't see any further symptoms, it's there.
Duke born, Duke bred, cooking on a grill so I'm tailgate fed.
Post Reply