• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

This forum thread needs a solution.
Kudos0

Redirected to unwanted sites (Possible Virus undetected by Norton)

Starting as of today, my browsers are redirecting me to download sites. I haven't downloaded anything for this to happen, but I have downloaded programs to attempt to fix the issue.

Whenever I browse the internet, on IE, Chrome or Firefox, I have a chance of being redirected to a fake Adobe Flash Installer page, letting me know it's out of date and that I need to update. It won't allow me to click off the browser so I'm left with two options : Close the box that pops up, OR accept the download. Obviously I declined it because the URL for the download isn't that of Adobe's. Once I exit the pop-up from the site, it redirects me again, to various sites, some just promoting game sites, others get blocked by Norton as a malicious website (thankfully blocked).

I've taken screen shots. I've done some research, and I had assumed it was the "Moon Trojan," as the characteristics it has is that of something that hacks the wireless router and changes the DNS server. But all other devices connected to the router are having zero issues except for the Ipod which once said "Safari cannot connect to server."

I've taken screen's of what pops up first and then what pops up second.

next pop up


I've used Norton 360 and did a full system scan. I've used Malwarebytes and did a full scan. I've used Advast as well as Sophos to scan too. Nothing is getting detected. I also thought this to possibly be a browser hijacker but nothing's been installed on my PC under "Programs," nor is there anything in my addons on IE or extensions in Chrome (as those are the two browsers I mainly use).

I'm at the point of where I'm considering a Factory Restore (not a system restore) and getting rid of the virus (or whatever it is) that way. I've been browser hijacked before by Conduit.com and the only way I could get rid of it was Factory Restoring. So I hope someone who can help, does help.

Replies

Kudos0

Re: Redirected to unwanted sites (Possible Virus undetected by Norton)

I would suggest you sign up at one of the free Malware Removal sites below. Do not try to do anything on your own as it could make things harder for the Malware Removal expert at that site to help you. Choose one and stay there until your system is clean.

http://www.bleepingcomputer.com/
http://www.geekstogo.com/forum/
http://www.cybertechhelp.com/forums/
http://forums.whatthetech.com/


 

Things happen. Export/Backup your Identity Safe data.
Kudos0

Re: Redirected to unwanted sites (Possible Virus undetected by Norton)

I've done some research, and I had assumed it was the "Moon Trojan," as the characteristics it has is that of something that hacks the wireless router and changes the DNS server.

If DNS is correctly set in your router, check the affected computer's local IPv4 and IPv6 DNS settings (under Network connections - active connection - advanced properties) - both IP stacks should be set to "Obtain DNS server address automatically" - The settings panels should look similar to these...

If there are IPs entered (and "Use the following DNS server addresses:" selected) try clearing/deleting the IP octets and re-selecting the obtain automatic setting.  If the "Obtain automatic" settings stay through a system reboot and the browser redirects cease, then you're probably done - If the settings get changed again (seemingly by themselves) then you've probably indeed picked up a "critter" that'll need to be dealt with...

Kind regards,

John

This thread is closed from further comment. Please visit the forum to start a new thread.