Jump to content

Some kind of adware or virus or whatever?


Recommended Posts

Everytime I search for something at Google, and then click the link, I get redirected to some strange site like this, for example, I searched for 'tesnexus' and then clicked on the tesnexus.com link, but this shows instead:

http://images.evandarsmods.webbland.se/wtf.jpg

(I censored some words there)

Everytime it shows a different website, but with the same layout, just different title, colors, words and images.

I just searched my computer with Spybot Search & Destroy, it didn't find anything, but will search with NOD32 later too.

Link to comment
Share on other sites

You have picked up a browser redirect malware. They can sometimes be a bear to get rid of. They hide a piece of code in the registry and when you manage to wipe it from memory, it shows back up again. Look for anything that looks like a toolbar that was installed recently. They like to ride on those.

 

Run hijack this and save the logfile. there are several sites that may help you if you post the log.

http://www.download.com/Trend-Micro-Hijack...4-10227353.html

 

Be careful, Hijack this lists everything that even vaguely looks like malware, so don't delete it unless you know it's not something you need. If you don't know what an entry is, search it on google for info before killing it.

 

My recommended punishment for anyone doing this kind of stuff comes under cruel and unusual.

Link to comment
Share on other sites

The way to use the Hijack this is to post your log file on a site where someone that knows what to look for can help - Not Tesnexus though.
Link to comment
Share on other sites

Something else to do while your PC is clean is to run hijack and save the log so you can compare it for differences.

 

hijackthis.exe /autolog

 

You could even schedule hijack to run on a normal basis and save the results. Then use a utility like TextDiff to compare the results of the files.

 

Anytime things start to look suspicious, generate a new log file and compare it to versions you have made in the past to spot differences. ;)

 

LHammonds

Link to comment
Share on other sites

Ah, thanks guys!

I tried Hijack This first, but I didn't understand much of it, so I tried Malwarebytes' Anti-Malware, I had three problems, two Trojan.FakeAlert (OMG, does this mean I had trojans?), and one Hijack.UserInit.

Trojans aren't really that big of a deal since they need to be accessed before they can do harm. It's not good to have them, but I wouldn't panic because you caught 1 or two. The real threats are whatever is contained inside the trojan. Although this usually ends up being malware, spyware, and adware these days, they can contain viruses or worms. Viruses destory your system, worms provide a gateway for another user to access your system. It's these two which are the real threats.

 

An any rate, hopefully you removed whatever was causing the problem. This does not mean that you are free of threats, just that hopefully things are back to how they were. This is why intelligent browsing and good security are critical.

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...