|02 Aug 2012||#1|
Strange google redirects.
Recently i've noticed that when i open google and enter my search in the bar and press enter,
the results show up but the URL of the page is really weird.
normally it is www.google.co.in/#http://www.google.co.in/blank.html
when i click on one of the results, they open up normally,
but when i press the 'back' button, i do not get back to the results page, instead i'm redirected to some other google homepage, which is slightly different from my actual homepage. But the URL is really weird,
its like http://www.google.co.in/webhp?ech=1&psi=tY0SUKL2IYjqrAeK8oDQBg.1343393267500.3&emsg=NCSR&noj=1&ei=0I0SUPORGcLorQfXhYCwCQ
and when i press 'back' again, i reach my original home page, ie. "http://www.google.co.in/"
you can check the differences in the pages urself if you like.
Other times when my URL doesnt end with "blank.html", it is usually pretty long,
something like this
on the other hand, when i searched the same thing on my friend's computer, the URL wasn't as complicated as this, and it was pretty short.
i dont understand what is wrong with my computer,
i tried different browsers and faced the same problem,
is it XSS
or a rootkit?
or some other spy stuff?
because its really weird being redirected to the page i never opened.
especially that "google.co.in/webph?..." one
i scanned my computer with anti-viruses and anti-spywares and even anti-rootkits, but no results found.
but as far as i know, rootkits are the hardest to be found, and theres no gaurantee of it being removed either, unless we reformat the computer.
What do u think it might be? Has anyone else faced this either?
one last thing i would like to know is that if i go for reformatting my window, and i copy some of my data, like movies, songs and images to an external device and add it to my new window,
will i have the threat of being infected by those files again?
i wouldnt copy any .exe files though.
|My System Specs|
|02 Aug 2012||#2|
Welcome to SevenForums.
HOW TO USE WINDOWS DEFENDER OFFLINE ON A USB STICK
Windows Defender Offline
· is a free standalone, bootable malware and virus remover from Microsoft.
· performs an offline scan of an infected PC to remove viruses, rootkits and other advanced malware.
Download Windows Defender Offline (about 764 kB)
You will have the choice of downloading the 32bit version (x86) or the 64 bit version (x64).
The link will help you determine whether you are running a 32 bit version or 64 bit version of Windows
NOTE!! You can download and prepare a 32 bit version using a 64 bit version of Windows
NOTE!! You can download and prepare a 64 bit version using a 32bit version of Windows.
You run the 32 bit version on a 32 bit version of Windows.
You run the 64 bit version on a 64 bit version of Windows.
The 32 bit download file name is: mssstool32.exe
The 64 bit download file name is: mssstool64.exe
For the curious, this program was originally name Microsoft Standalone System Sweeper.
You will need an Internet Connection.
Insert 512 mB (Microsoft’s 256 mB is no longer accurate) or larger USB stick into a usb port.
Run the downloaded program--mssstool64.exe or mssstool32.exe
Choose the option On a USB flash drive that is not password protected
The install program will format the usb stick using the NTFS format.
The install program will download about 210 mB.
The install program will name the USB stick WDO_Media32 or WDO_Media64
The WDO_Media32 usb stick will have used space of 255 mB (268,140,544 bytes)
The WDO_Media64 usb stick will have used space of 282 mB (296,165,376 bytes)
You can expect the number of mB to increase as more malware appears.
UPDATE Windows Defender Offline USB stick:
· reinsert the usb stick
· run the installation program, mssstool64.exe or mssstool32.exe, again.
· the update will download about 66 mB (mssstool32.exe) and 68 mB (mssstool64.exe).
Since the malware database is sometimes updated several times in a day, always update before running.
PERFORM AN OFFLINE SCAN
Bootup your computer from the USB stick
Windows Defender Offline will automatically perform a quick scan.
After the quick scan finishes, Choose Full Scan
Select all of your drives
The initial, full scan can easily take several hours, but
Remember, your computer is being very thoroughly checked for all types of malware.
|My System Specs|
|Thread Tools||Search this Thread|
|Similar help and support threads|
Help with redirects on every site opened
I seem to have the same site keep opening in a new tab on the internet. I use Firefox and have have good luck, better than IE10, buts that me. I am inserting an image of the screen to which I have been unable to locate the culprit to this.
|Browsers & Mail|
HAPPILI and possible other infections/redirects
I recently came here to the forums to remove HAPPILI. I followed several of the steps in a certain thread but still got redirected to HAPPILI. Now (a couple days later) I have stopped seeing HAPPILI redirect but am getting redirected to another fake search results page...very generic looking,...
|Performance & Maintenance|
I get this every now and then, just with Facebook, no other web site. I use Chrome. Just now I tried to go to Facebook and was directed to Stock Market Not sure what this is. I've found that clearing temp data doesn't help. I use: ipconfig /flushdns ipconfig /release ipconfig /renew
|Browsers & Mail|
i don't know when it started, but google's been getting redirected to cr0zybaner.com more often than it's been going to the intended link. just today it got redirected to hornymatches.com here's my most recent hijackthis log, if it helps: Logfile of Trend Micro HijackThis v2.0.4 Scan saved...
Strange google chrome error
Hello guys, I this strange error in google chrome, where I post in these forums. These strange red lines appear under each word telling me that are missplet when they are not? Please help me. (Screenshot below).
|Browsers & Mail|
WARNING: Redirects from RLSLOG
I'm a active user of RLSLOG.net and have just been redirected to a site containing the 'Personal Antivirus' fake AV looking malware. Do not browse http://****.RLSLOG.net unless you have adequate security features installed Here a pic of the page I was redirected to The site then acts as...
© Designer Media Ltd
All times are GMT -5. The time now is 12:18.