I seem to be having a problem going to a site I go to all the time. It's an ezine article site but it will not stay on the page. When I go to the page, it immediately redirects to Yahoo, http://search.yahoo.com/web?fr=slv502-tyc. It kind of reminds me of a rootkit virus that infected my old computer before but that was when you did a search for something using google, it redirected you to other sites.
I know the site is working because I can log in fine in IE and my Iphone using Safari. I use Firefox, the latest update.
Does anyone have any idea if this is a known virus and if there is a fix for it. Thank you.
Beverly
Hi
Does the problem occur with all browsers?
Any Toolbars you have installed/Firefox Extension?
Please Check Firefox Addon for any suspicious ones!
Also
Press Windows Key + R type Msconfig
navigate to Start up Check for any Suspicious entries
Hi Midou,
It only occurs in Firefox. The other browsers will go to this site fine. IE is fine and I went there through my Iphone. And mysteriously, it is only this one site. I suspect the infection occurred when I was on a particular site. I typed in articlesbase.comw while still on the suspect site and then immediately I was redirected.
How do I check Firefox Addon?
I don't know how I would recognize any suspicious entries in Startup from msconfig, but I will take a look.
Thank you for your help.
Beverly
[edit: Please do not direct link to potentially hazardous websites per the Participation Guidelines and Terms of Service.]
Hi Beverly
Don't worry if you aren't familiar with the "startup listing " When you have a look at your Startup entries via "msconfig" ...You will see a list of entries that will relate to known normal programs that run at Startup on your machine......Some will be registry entries....designated by capital letters starting with HKCU....or HKLM etc; at the Right hand side of your list !
Others will be designated by the postion on your hard drive C: / etc;
Programs that are on your Desktop and programs that you know are part of your system will be easy to spot by their familiar names.
If you are not familiar with anything you see on your list ...just let us know ..doesn't matter if its something that is part of your normal items ...Better safe than sorry ...just post any item you aren't sure of...and someone here will be able to give you a hand identifying if its anything safe or otherwise !
Hello blossomthyme
Welcome to the Norton Community Forum
I would first recommend a full system scan with the free version of Malwarebytes and see if that comes up with anything. It may be necessary to visit one of the malware removal sites. First let's eee what the malwarebytes scan comes up with.
Download the free version, install and update then run a FULL scan. After the scan completes you should post the logs back to this thread.
You can find Malwarebytes here
http://www.filehippo.com/download_malwarebytes_anti_malware/
It is a safer location to get the program from than malwarebytes themselves because some malware creators have large lists of sites that they block. Please be careful to down load the correct program ----the FREE version of MALWAREBYTES
(Thanks to Delph for providing the alternative site)
Please come back and let us know the results of the scan. Thanks.
Hi
After you finish the scan with Malware bytes Do post the log files as suggested
I ran Malwarebytes yesterday. I found 7 registry infections, which I OK'd to quarantine, but it didn't fix the problem after restart.
I have now downloaded COMBOFIX which corrected a rootkit virus I had on my old computer, not this one. I haven't run that yet, but I wll attach my log of Malwarebytes that I did yesterday to this post.
Thanks guys.
Beverly
I just ran COMBOFIX and I will attach that log to this post. Unfortunately, it did not fix this problem.
Thanks for all your help.
Hi
Combo fix is not something to urn on our own but unless an Malware Removal Helper asks us to
Are you recieving help from a Forum?
If not I recommend you pay a visit to one of the sites here
www.bleepingcomputer.com
http://www.geekstogo.com/forum/
http://www.cybertechhelp.com/forums/
http://forums.whatthetech.com/
(Links provided by Delphinium)
Malware Bytes and combox fix are not the same
Combo fix if run without proper knowledge can cause more harm than good
The above sites suggested do a good job at Helping people get their computers clean and running for free
I recommend you vsist them
2.
If you are recieving help from somewhere then no need to post logs here any more as the forum may not help you anymore if they see you are posting else where as well!
Simply tell us how if the forum got you cleaned up from the threat/feedback
Next Don`t run combo fix Norton Power Eraser
A Senior member said to me that they should be run under proper supervision so next time be care ful
Hello, thank you for your advice. I only tried combo fix because I had used it successfully in the past on my old computer and I was very careful. The problem seems to have been fixed. There were two copies of Firefox browser running for some reason, so I uninstalled Firefox, then reinstalled it and now there is only one firefox browser and the page that kept redirecting is now back to normal. No more redirects.
I'm still trying to initiate a case on bleepingcomputer.com, by following their instructions, so that I can find out if there is anything still lurking in my computer. I'm just in the queue right now.
I appreciate your attention to my case. And I will go ahead and follow through with bleepingcomputer.com now.
Thank you,
Beverly