idkjs
-
Posts
7 -
Joined
-
Last visited
Content Type
Events
Profiles
Forums
Posts posted by idkjs
-
-
And its back. This is the url is redirects to: `http://mysagagame.com/preland-2912_3.html?pid=10&sid=1&nonad=1&s2s=VjN8MTQyNjk4NDh8Nzc4NDU1fDk5OTMzMnwxNTE4NTQ5NTY1fDU3NjgzZWRlLTgzNjAtNDFiMC1hOTZjLTdjNjQzNzVkMWEyN3w4Mi4yNTUuNjguMTA1fDF8NTU5YzBiMjVhOTVjODZmNzFiZTI0MmY5MjYwNTA5ZTY=`
What do you need me to do to get you info you need?
-
Problem has not yet re-occured so I'll have to wait to see if it does and get you all some better details for this kind of report. New to virus reporting here.
Keep you posted.
-
Of course, you are correct.
The only add on I recently added was GreaseMonkey. Im thinking im going to wait to see if the issue reproduces before I remove it.
Im not sure exactly how it triggers. Also, the hitcpm.com url came up in one of the tools in URL search on https://www.virustotal.com/#/home/url, yesterday but not today. Whatever that means.
Do you think I should go and remove it right away? Is it worth the info to see if it happens agains?
-
I had already gone ahead and uninstalled Firefox Quantum and reinstalled. I want to say it was also happening in Chrome Canary but cant confirm. I will see what happens now and report back if it continues. Thank you for the quick response.
-
Running MalwareBytes come back clean.
-
I have the same problem indicated here,
When I run `
find . -name "$1" 2>&1 | grep -v 'Permission denied'` in the terminal it seem to keep getting hits in this folder: " Library/Application Support/Firefox/profiles". I attached the files from this directory.
Redirect domain was hitcpm.com. Searching that on the net gets you references to hitcpm.com/watch?key virus.
Anyone have any experience with this on mac? I attached
Thank you.
Browser Redirects Constantly - macOS
in Mac Malware Removal Help & Support
Posted
Happening on Firefox. I will do some stuff in Chrome Canary today to see if it happens there.
So
I'm just coding and looking up stuff on basic code as you can tell from the extensions in the screenshot above so nothing super crazy or exciting. It feels like it mostly happens after i click past the first page of results. Just tried that, did not trigger. Here is the a search result for the redirect url im talking about. Not a new thing, apparently. https://www.google.fr/search?q=how+does+hitcpm.com+work&ie=utf-8&oe=utf-8&client=firefox-b-ab&gfe_rd=cr&dcr=0&ei=VvaDWs-rKufI8gf92aOADg