Staredit Network > Forums > Technology & Computers > Topic: Everything Redirects
Everything Redirects
Oct 9 2010, 10:22 pm
By: Dem0n  

Oct 9 2010, 10:22 pm Dem0n Post #1

ᕕ( ᐛ )ᕗ

Every time I click on a link in google search, it says "Waiting for www.google-analytics.com" and then redirects to some random page. Every time. The only way I can get to the page is to copy/paste the link into my address bar. It even happens to other sites, like campaign creations. I can't even get there anymore because I always get redirected. Could this be due to some malware or something?




Oct 9 2010, 10:44 pm NudeRaider Post #2

We can't explain the universe, just describe it; and we don't know whether our theories are true, we just know they're not wrong. >Harald Lesch

That's a virus of some sort. Browser hijacker or something like that.
Try running Malwarebytes' Anti Malware and let it remove anything it finds then report back.




Oct 9 2010, 11:05 pm Dem0n Post #3

ᕕ( ᐛ )ᕗ

Wow I can't even download it because every link I click on redirects. This is incredibly annoying. :hurr:




Oct 9 2010, 11:13 pm NudeRaider Post #4

We can't explain the universe, just describe it; and we don't know whether our theories are true, we just know they're not wrong. >Harald Lesch

Try safe mode




Oct 9 2010, 11:14 pm Centreri Post #5

Relatively ancient and inactive

Err.. try running it in safe mode? Restore to a restore point?



None.

Oct 9 2010, 11:51 pm CecilSunkure Post #6



You're going to need to run through this:

http://forums.majorgeeks.com/showthread.php?t=35407

Restoring to an earlier point won't do anything as your restore points are likely infected as well.



None.

Oct 10 2010, 12:22 am Falkoner Post #7



Installing another browser, such as Google Chrome, tends to at least give you a means of downloading the tools necessary, since the newer browser's settings have not been hijacked, but be sure not to automatically import the settings from IE when installing.



None.

Oct 10 2010, 3:17 pm Dem0n Post #8

ᕕ( ᐛ )ᕗ

Well, for some reason Malwarebytes' Anti-Malware won't open. When I have task manager open and try to run the anti-malware, something called SysFader shows up in Applications for a second and then disappears. :ermm:




Oct 10 2010, 3:28 pm NudeRaider Post #9

We can't explain the universe, just describe it; and we don't know whether our theories are true, we just know they're not wrong. >Harald Lesch

Any luck in safe mode? Or at least getting into safe mode?




Oct 10 2010, 10:06 pm O)FaRTy1billion[MM] Post #10

👻 👾 👽 💪

Rename the mwbytes EXE and try that ... I remember seeing in that guide somewhere to do something like that.



TinyMap2 - Latest in map compression! ( 7/09/14 - New build! )
EUD Action Enabler - Lightweight EUD/EPD support! (ChaosLauncher/MPQDraft support!)
EUDDB - topic - Help out by adding your EUDs! Or Submit reference files in the References tab!
MapSketch - New image->map generator!
EUDTrig - topic - Quickly and easily convert offsets to EUDs! (extended players supported)
SC2 Map Texture Mask Importer/Exporter - Edit texture placement in an image editor!
\:farty\: This page has been viewed [img]http://farty1billion.dyndns.org/Clicky.php?img.gif[/img] times!

Oct 11 2010, 6:54 pm Dem0n Post #11

ᕕ( ᐛ )ᕗ

Does booting the computer in safe mode affect if programs will run or not? I was running in safe mode and I still couldn't run the anti-malware. And farty, what should I rename that EXE to?




Oct 11 2010, 7:24 pm O)FaRTy1billion[MM] Post #12

👻 👾 👽 💪

I remember seeing to rename it to basically anything ... It said certain malwares will detect the EXE name running, so if you change it then they will miss it.



TinyMap2 - Latest in map compression! ( 7/09/14 - New build! )
EUD Action Enabler - Lightweight EUD/EPD support! (ChaosLauncher/MPQDraft support!)
EUDDB - topic - Help out by adding your EUDs! Or Submit reference files in the References tab!
MapSketch - New image->map generator!
EUDTrig - topic - Quickly and easily convert offsets to EUDs! (extended players supported)
SC2 Map Texture Mask Importer/Exporter - Edit texture placement in an image editor!
\:farty\: This page has been viewed [img]http://farty1billion.dyndns.org/Clicky.php?img.gif[/img] times!

Oct 11 2010, 7:43 pm DavidJCobb Post #13



Boot up in Safe Mode, run MSCONFIG, and remove any suspicious startup programs. Open IE's Internet Options, find the buried and shittily-designed BHO listing, and disable everything except obvious helpers (like Flash). If the virus is still running in Safe Mode, then you may well be fucked.



None.

Oct 12 2010, 1:07 am Dem0n Post #14

ᕕ( ᐛ )ᕗ

Well I did what farty said and ran and a scan. It's been going on for four hours now and it says that almost 25k files are infected. :crazy: :unsure: :0_0: :ermm: What do I do now?




Oct 12 2010, 1:15 am NudeRaider Post #15

We can't explain the universe, just describe it; and we don't know whether our theories are true, we just know they're not wrong. >Harald Lesch

delete them all




Oct 12 2010, 5:20 am CecilSunkure Post #16



Quote from name:Dem0nS1ayer
Well I did what farty said and ran and a scan... What do I do now?
Go through what I said.



None.

Oct 15 2010, 7:11 pm Dem0n Post #17

ᕕ( ᐛ )ᕗ

Well, I downloaded all the programs that the post said to download, but none of them ran when I clicked on them. I tried changing their names like I did with malawarebytes anti-malware, but they still don't work. :\




Oct 15 2010, 9:23 pm CecilSunkure Post #18



Go download rkill, and try running it, then run the rest of the programs, and follow all the steps in my link. If you can't run rkill, then you need to restart your pc and run it before whichever process is denying you to open it, opens.



None.

Oct 16 2010, 3:31 am Falkoner Post #19



Aw, crap, it sounds like you got a recent virus that actually injects itself into every .exe and .dll on your computer, I would recommend a fresh reinstall at this point, because even if you somehow fix it, running any of the infected files would cause the virus to come right back, you really need to purge all your executable files.

It's most likely some variant of the Virut infection, basically it adds code to every executable or .dll file on your computer, so that when they are executed, the virus is put back in place. Even if you remove it, major system executables, such as Explorer.exe, or lsass.exe, or just about any executable will simply put it right back on the computer when you restart. There is honestly no way to fix this.

Luckily it doesn't affect your data at all, other than your software, so while you'll need a fresh reinstall, and you'll need to make sure you purge your system of any old .dll or .exe files, you can still keep anything like pictures, saved games, videos, etc., so on the bright side, it hasn't really lost you anything other than time.

Post has been edited 1 time(s), last time on Oct 16 2010, 3:36 am by Falkoner.



None.

Oct 16 2010, 3:36 am CecilSunkure Post #20



Quote from Falkoner
Aw, crap, it sounds like you got a recent virus that actually injects itself into every .exe and .dll on your computer, I would recommend a fresh reinstall at this point, because even if you somehow fix it, running any of the infected files would cause the virus to come right back, you really need to purge all your executable files.
I don't think so. Last time I had a recent one like this, I couldn't open ANY .exe file. He can still open his browser and post here, so I don't that's it. I think it just doesn't allow for .exe files to open that it knows are things like mbam. That's why I suggested running rkill right after boot. Well, maybe he's just using a different PC to post here.

What I did one time is I got rkill to run before the virus' process could prevent anything from opening (I had one that prevented me from running any .exe file). After that, I was able to install whatever and run whatever I wanted.



None.

Options
  Back to forum
Please log in to reply to this topic or to report it.
Members in this topic: None.
[01:19 pm]
Vrael -- IM GONNA MANUFACTURE SOME SPORTBALL EQUIPMENT WHERE THE SUN DONT SHINE BOY
[01:35 am]
Ultraviolet -- Vrael
Vrael shouted: NEED SOME SPORTBALL> WE GOT YOUR SPORTBALL EQUIPMENT MANUFACTURING
Gonna put deez sportballs in your mouth
[2024-5-01. : 1:24 pm]
Vrael -- NEED SOME SPORTBALL> WE GOT YOUR SPORTBALL EQUIPMENT MANUFACTURING
[2024-4-30. : 5:08 pm]
Oh_Man -- https://youtu.be/lGxUOgfmUCQ
[2024-4-30. : 7:43 am]
NudeRaider -- Vrael
Vrael shouted: if you're gonna link that shit at least link some quality shit: https://www.youtube.com/watch?v=uUV3KvnvT-w
Yeah I'm not a big fan of Westernhagen either, Fanta vier much better! But they didn't drop the lyrics that fit the situation. Farty: Ich bin wieder hier; nobody: in meinem Revier; Me: war nie wirklich weg
[2024-4-29. : 6:36 pm]
RIVE -- Nah, I'm still on Orange Box.
[2024-4-29. : 4:36 pm]
Oh_Man -- anyone play Outside the Box yet? it was a fun time
[2024-4-29. : 12:52 pm]
Vrael -- if you're gonna link that shit at least link some quality shit: https://www.youtube.com/watch?v=uUV3KvnvT-w
[2024-4-29. : 11:17 am]
Zycorax -- :wob:
[2024-4-27. : 9:38 pm]
NudeRaider -- Ultraviolet
Ultraviolet shouted: NudeRaider sing it brother
trust me, you don't wanna hear that. I defer that to the pros.
Please log in to shout.


Members Online: Roy