Page 2 of 3 FirstFirst 123 LastLast
Results 11 to 20 of 24

Thread: Browser redirects

  1. #11
    Security Expert Juliet's Avatar
    Join Date
    Feb 2007
    Location
    Deep South
    Posts
    3,794

    Default

    I think we can close this out now.

    • Please download DelFix or from Here and save the file to your Desktop.
    • Double-click DelFix.exe to run the programme.
    • Place a checkmark next to the following items:
    • Activate UAC
    • Remove disinfection tools
    • Click the Run button.
    • -- This will remove the specialized tools we used to disinfect your system.
      Any leftover logs, files, folders or tools remaining on your Desktop which were not removed can be deleted manually (right-click the file + delete
      ).

    ************


    • AdBlock is a browser add-on that blocks annoying banners, pop-ups and video ads.
    • CryptoPrevent places policy restrictions on loading points for ransomware (eg. CryptoWall), helping prevent the execution of malware.
    • Malwarebytes Anti-Exploit (MBAE) is designed to prevent zero-day malware from exploiting vulnerable software.
    • Malwarebytes Anti-Malware Premium (MBAM) works in real-time along side your Anti-Virus to prevent malware execution.
    • NoScript is a Firefox add-on that blocks the actions of malicious scripts by using whitelisting and other technology.
    • Sandboxie isolates programmes of your choice, preventing files from being written to your HDD unless approved by you.
    • Secunia PSI will scan your computer for vulnerable softwarethat is outdated, and automatically find the latest update for you.
    • Unchecky automatically removes checkmarks for bunlded software in programme installers; helping you avoid adware and PUPs.
    Windows Insider MVP Consumer Security 2009 - 2017
    Please do not PM me for Malware help, we all benefit from posting on the open board.

  2. #12
    Member
    Join Date
    Nov 2007
    Posts
    56

    Default

    well, just got another browser redirect to a "Norton" site. said my computer was infected....

  3. #13
    Member
    Join Date
    Nov 2007
    Posts
    56

    Default

    now, just got another one from website uaf6hnatulan.com wanting me to install player 154582681.hta. This one is the fake flashplayer one that I keep getting.... That's 2 redirects within 5 minutes. I was just on yahoo .com when it happened the main page. Not really doing anything.

  4. #14
    Security Expert Juliet's Avatar
    Join Date
    Feb 2007
    Location
    Deep South
    Posts
    3,794

    Default

    Follow the instructions in the thread below. Make sure to download the MBAR version linked in it.
    Pay no attention to the title of the topic.

    https://forums.malwarebytes.com/topi...-malwarebytes/

    Run the scan, delete everything it finds, and then copy/paste the content of the mbar-log-DATE-(TIME).txt log that is located in the MBAR folder here after.

    Also
    **************************
    Please click HERE to download Kaspersky Virus Removal Tool.
    • Double click on the file you just downloaded and let it install.
    • It will install to your desktop (be patient; it may take a while).
    • Accept license agreement and click "Start" button.
    • Click on Settings button
      • In Scan scope leave pre-checked items as they're and also checkmark My Computer
      • In Actions checkmark Select action: (disinfect; delete if disinfection fails) instead of preselected Prompt on detection

    • Click on Automatic Scan tab and then click on Start scanning button.
    • Before it is done it may prompt for action regardless of the setting so choose delete if prompted.
    • When the scan is done NO log will be produced.
    • Click on Report button then on Automatic Scan report tab.[
    • Right click anywhere within right pane, click Select All then right click again and click Copy.
    • This will copy the items that it found to the clipboard you can then open notepad (go to start then run then type in notepad) and choose paste to paste the contents into Notepad.
    • You can save this on the desktop.
    • Post the contents of the document in your next reply.

    Please post these 2 logs when finished.

    Also, tell me how the computer is now.
    Windows Insider MVP Consumer Security 2009 - 2017
    Please do not PM me for Malware help, we all benefit from posting on the open board.

  5. #15
    Security Expert Juliet's Avatar
    Join Date
    Feb 2007
    Location
    Deep South
    Posts
    3,794

    Default

    I was just on yahoo .com
    "scareware." Designed to generate alerts and scare you to the point where you will contact and pay for the removal of infections that do not exist.
    There was an active java script on that page.

    Hardening your web browser means to install extensions that will help it protect itself (and your system on the same occasion) against Exploit Kits, MiTM attacks, etc. but also you at the same time. Here are a few extensions that I recommend you to install.
    • uBlock Origin: Efficient multi-purpose blocker that is lightweight on RAM and CPU usage (Google Chrome, Mozilla Firefox, Microsoft Edge, Opera and most Chromium and Firefox-based browsers)
      Read over the link below
      https://www.bleepingcomputer.com/for...ing-analytics/

    • NoScript: NoScript is a script blocker (Java, Flash, JavaScript, etc.) for Mozilla Firefox and Firefox-based browsers (Mozilla Firefox and Firefox-based web browsers)

    https://noscript.net/
    Windows Insider MVP Consumer Security 2009 - 2017
    Please do not PM me for Malware help, we all benefit from posting on the open board.

  6. #16
    Member
    Join Date
    Nov 2007
    Posts
    56

    Default

    The link for Kaspersky comes up 404 when I click your link. But here is the MBAR scan result.

    Malwarebytes Anti-Rootkit BETA 1.10.3.1001
    www.malwarebytes.org

    Database version:
    main: v2018.12.23.04
    rootkit: v2018.12.23.04

    Windows 7 Service Pack 1 x86 NTFS
    Internet Explorer 11.0.9600.19230
    Eric :: ERIC-PC [administrator]

    12/23/2018 3:40:04 PM
    mbar-log-2018-12-23 (15-40-04).txt

    Scan type: Quick scan
    Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
    Scan options disabled:
    Objects scanned: 149839
    Time elapsed: 19 minute(s), 35 second(s)

    Memory Processes Detected: 0
    (No malicious items detected)

    Memory Modules Detected: 0
    (No malicious items detected)

    Registry Keys Detected: 0
    (No malicious items detected)

    Registry Values Detected: 0
    (No malicious items detected)

    Registry Data Items Detected: 0
    (No malicious items detected)

    Folders Detected: 0
    (No malicious items detected)

    Files Detected: 0
    (No malicious items detected)

    Physical Sectors Detected: 0
    (No malicious items detected)

    (end)


    I also saw your links to some blockers. I only have IE installed on this computer. Do you recommend a different browser?

  7. #17
    Security Expert Juliet's Avatar
    Join Date
    Feb 2007
    Location
    Deep South
    Posts
    3,794

    Default

    Try this link for Kaspersky
    https://usa.kaspersky.com/downloads/...s-removal-tool

    Myself I use Firefox
    https://www.mozilla.org/en-US/firefox/new/

    Try it and see if you like it.
    Many addons can be applied.
    Windows Insider MVP Consumer Security 2009 - 2017
    Please do not PM me for Malware help, we all benefit from posting on the open board.

  8. #18
    Member
    Join Date
    Nov 2007
    Posts
    56

    Default

    I cannot do anything with the report, but it says no threats found...

    It seems to be ok again, just weird that it randomly redirected twice after being good for a day or so.

    I guess I will try a different browser and see if that helps.

  9. #19
    Security Expert Juliet's Avatar
    Join Date
    Feb 2007
    Location
    Deep South
    Posts
    3,794

    Default

    No threats found is good news.

    I guess I will try a different browser and see if that helps.
    Also try the script blocker, it can stop a ton of pop ups.
    Windows Insider MVP Consumer Security 2009 - 2017
    Please do not PM me for Malware help, we all benefit from posting on the open board.

  10. #20
    Member
    Join Date
    Nov 2007
    Posts
    56

    Default

    downloaded firefox and added ad block plus add on. Seems much better, by that I mean no redirects and seems to be much faster. Fingers crossed!!!

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •