Jump to content

Search the Community

Showing results for tags 'spotcenered'.

  • Search By Tags

    Type tags separated by commas.
  • Search By Author

Content Type


Forums

  • Announcements
    • Malwarebytes News
    • Beta Testing Program
  • Malware Removal Help
    • Windows Malware Removal Help & Support
    • Mac Malware Removal Help & Support
    • Mobile Malware Removal Help & Support
    • Malware Removal Self-Help Guides
  • Malwarebytes for Home Support
    • Malwarebytes for Windows Support Forum
    • Malwarebytes for Mac Support Forum
    • Malwarebytes for Android Support Forum
    • Malwarebytes for iOS Support
    • Malwarebytes Privacy
    • Malwarebytes Browser Guard
    • False Positives
    • Comments and Suggestions
  • Malwarebytes for Business Support
    • Malwarebytes Endpoint Protection
    • Malwarebytes Incident Response (includes Breach Remediation)
    • Malwarebytes Endpoint Security
    • Malwarebytes Business Products Comments and Suggestions
  • Malwarebytes Tools and Other Products
    • Malwarebytes AdwCleaner
    • Malwarebytes Junkware Removal Tool Support
    • Malwarebytes Anti-Rootkit BETA Support
    • Malwarebytes Techbench USB (Legacy)
    • Malwarebytes Secure Backup discontinued
    • Other Tools
    • Malwarebytes Tools Comments and Suggestions
  • General Computer Help and Security Updates
    • BSOD, Crashes, Kernel Debugging
    • General Windows PC Help
  • Research Center
    • Newest Rogue-Ransomware Threats
    • Newest Malware Threats
    • Newest Mobile Threats
    • Newest IP or URL Threats
    • Newest Mac Threats
    • Report Scam Phone Numbers
  • General
    • General Chat
    • Forums Announcements & Feedback

Find results in...

Find results that contain...


Date Created

  • Start

    End


Last Updated

  • Start

    End


Filter by number of...

Joined

  • Start

    End


Group


AIM


MSN


Website URL


ICQ


Yahoo


Jabber


Location


Interests

Found 4 results

  1. I also apologize for adding to this thread. I'm having the same problem. Pages being redirected when I visit Yahoo and other websites, as well as the verosmedia.com domain name being used in some redirects. I posted a thread about this at bleeping computer and the volunteer gave my computer a clean bill of health. MalwareBytes, HitmanPro, and avast also say my machine is clean. This leads me to believe that the problem is not actually malware based and is the result of someone abusing ad networks that we happen to be interacting with (at least in my case). This is only my intuition, but it seems to be supported by the fact that the redirect pages include the URL of the webpage that was hijacked. To my untrained eye that seems to be the kind of information someone running a marketing campaign would want recorded to figure out how effective their ad purchasing is. My intuition could be off though and I could be totally wrong. Again I apologize for posting in this thread. I wont post again unless requested to, I just felt the need to say that I'm experiencing the same problems with what seems to be a clean computer. Best regards.
  2. I have the same problem occurring on my desktop in both Chrome and Edge. I just rebuilt my system about 2 weeks ago with a new SSD and windows 10 OS. The problems with my previous HDD may or may not have been related to this problem, but I was experiencing issues with that set-up especially in chrome. When running Chrome I would get high levels of CUP usage. This would cause my system to become unusable at times. Ultimately CHKDSK revealed that there may been disk problems so I went down that path and replaced my OS HDD with a new SSD. I did not restore the system, I rebuilt by loading a new OS and reinstalling some of the apps. That was a little history on my system... Now I am experiencing redirects to grimsurveys,com when I am on the comcast website sitting idle. Lately it is occurring more frequently. Yesterday when I turned on my screen after being on all night there was a warning message indicating my data would be lost, passwords taken and such. The infection was a variant of yahlover.worm malware. I used CCleaner and mallwarebites and nothing was found. I searched various remedies and found that some think its a website attack and nothing on my computer needs to be cleaned. This morning I received a Mallwarebites notification of a block of a malicious web site. I assume it was the yahlover.worm attack again. Mallwarebites hasn't blocked the grimsurvey redirects... In my estimation this is all related. I am interested in finding a solution. If not I will rebuild my system again and to determine if there is still a problem. Is there firmware or something outside of the disk storage system that could be infected and could propagate a problem from the old disk to the new disk?
  3. I'm having exact same problem since today. Not sporadic for me. here is my story: I have a bookmark for watsapp for web. when I click that, it opens as normal. when I type, web.watsapp...., it autofills and when enter is pressed, it redirects to. "http://private.njoyapps.com/wim/lp/lp27/ index_23. php" happens everytime. I did whatever reset is intructed above for browser but did run any programs. Malwarebytes is unable to detect this. My question is: will reinstalling windows solve this? I recently build a new comp and installed windows 10, so I won't loose too much. Also, I know where this most likely came from. I downloaded MagicISO from a third party link and while installing I clicked a couple of 'accepts' where I shouldn't have. It installed webdiscover and chromium which I removed. ran Malwarebytes scan which remove another 30-40 registry entries and what not. but nothing on this. I also used Ninite.com to install some softwares. screenshot attached.
  4. Since the end of April, I've been experiencing a browser redirect with decreasing frequency that ultimately leads me to a fake Time Warner survey, the source of which has me completely stumped. Originally it only happened when visiting one site I frequent, and I was beginning to think the problem was on that website, however tonight it happened when I was at Yahoo's main page. The redirect does not happen when I first open the browser. It usually happens after I've been sitting idle on a page for a minute or two. At first it would happen multiple times per week but now it seems to happen once every week, and the intervals seem to be getting longer. I get redirect from whatever site I'm at in the following manner: From the site I'm at, too.... https://verosmedia.com/verosad/1181420855.js?pubid=32604593&domain=https%3A%2F%2Fs.yimg.com%2Frq%2Fdarla%2F2-9-20%2Fhtml%2Fr-sf.html&t=AAJZXUVHcHJ1b3cBAl1JX1xueXRudAQGQEhAU3F4f3V2FHY6 (Note: yimg.com is a Yahoo related domain. domain=https... will point from whatever page I'm at at the time of the redirect) From there, too... https://pub.maha-media.com/nlp/index.php?guid=a3645e25-e40a-45c1-92fe-d681cb8a2904&Hardlink=true&time=0&currenturl=32604593swix.com&url=http://engine.spotscenered.info/link.engine From there too... http://engine.spotscenered.info/Redirect.eng?MediaSegmentId=30262&dcid=1_ctx_8dbcd7e9-1bf9-48dc-82b4-6778f9500ff4&vmId=00000000-0000-0000-0000-000000000000&abr=false&timeZoneOffset=&v=hXPZuKMawgsqqaXmgsiEEscqvxeFp0YWn8oV21lbHO8iCvpmH9sk2fSprt3x5A_b-2hEatyK0i4Deb-rUYJDFrdTFYwunJKu09ZEHLHzJxZVXbejoDo8iaYVhEeoJfxmLsYuWMM8FrdrJIirVKzXk16lEXzP9HOgt66Ss7EbTNNUQfeOWR6JrG_B3izNFz-ACVhbe_0-jbltMj26dnAMQj08Gu8ccF3mgFecCfa4ST6gw_FXOGmlRerji7XxLL_7JAc8ykT4Sb9t_bYpksVZ1yIL_9192j1KNw5OoTqaDp3Pg8pl77-sZxRpnx5WwqwBkKry16rlK6C4IBmM8I4MbfssSTh8PfxBqMbExSarxW9NdGzj7JWhutcn8hU56b1GQMgtqgJ7c6oztEFyeheQxmOfo05pYJy9qNSb7r5O3QQmS7XqWR_4OHrbYoNzc6IJnsaKhxctsd4e9u62uFYeufqV3I5M_JLdqGPsVoGTLWVvSGj-a0VLB28zUvjEtXDsP8UGO30nlNIpZDHLeYmU0aJnmsTH34hg9pWM-6UkRboVGDuXTBAlzTZ_-3twRz22AD1kImQSZu4FvflYwEbeCmnwP3UK3xZlmHSYSNEEzdjvz1QDmFwSzH-mfp18hkk_JwOyKdueusNV8GgDFITeq3CUROWxNPevvVQZ6RqsRJSMmsqFQlX-8k__Vi1ZNXUNNQpdLbI9T-HbhM_n-tSVtRQyqpXgIp1Z1_2j9SCCKY17We0bdFo0Y19fKNVPLSajYkqMVUBdDE4EmWggQM7jE78tDih58VCK4sYq2uLtHJROjPgGsqyhSSyf4PAT7lOqrNrBJZDJUDXwhtKexpYwo_0vNc8ZGf_lYvYIbDWExvsdWjdYpMLqwNLuKiC7CcjNQz_p5FfqYcM-NhdFDp1loJ7t5BpJQzM5sWJBzuO8KjL5D4g7LO8-7123el4Hw2DLatbwaUSfgBTKW4BtyQcekDUKz7-rxmY84L8A5v-yYm-CrXRxZY5oUOavbTAq8c7T4eTIMNmhR9TQjrvSoLaJP5_-hGpoyyIegWQAHuJJagbphAEvA66UUasAaRQw25BXVdlc9fKH5OiQvJSvJAMlVZEWSi8neQh_gD2aM9qNUssE4ameezYMpklMn3CHPpoU0HIAaIkI7rfFYVzXlsvkRBC0hA_7rHHUVWo_XRCRXyxXLVW_bTN9UwgOKSgl9z7wEGLN3GiOlvP8JVPcCkAQxsly-krHs950L3N6Sh21UjU1 And finally from there, too... http://www.kewsurvey.com/?sid=isp.opt.3a6x&ow=us.ao96ho9gbr467d49.2col.nojs&isp=Time Warner Cable Internet Llc&browser=Chrome&os=Windows&region=California&city=Los Angeles&ip=45.50.180.155&countryname=United States&device=DESKTOP&brand=Desktop&model=Desktop&country=US&track=t.surveysance.com&tid=0ba6f51c-279d-4a68-82c0-dc5e8b9e9e67&caid=3fc624b7-4074-4b7f-aa2a-a68cbc6a0c97&head=ret.ss.asp.ncxw9c&did=5269&voluumdata=BASE64dmlkLi4wMDAwMDAwMi1hMThiLTQ5MDQtODAwMC0wMDAwMDAwMDAwMDBfX3ZwaWQuLmZmYzAwODAwLTQ1YmQtMTFlNy04MDMzLTliMGFkZTM1Nzk2MF9fY2FpZC4uM2ZjNjI0YjctNDA3NC00YjdmLWFhMmEtYTY4Y2JjNmEwYzk3X19ydC4uSEpfX2xpZC4uZmZjYzhjYjYtZGFmNy00NGUzLThiYjItZjMzNzkzNWNhODRjX19vaWQxLi5mMjQyZmIwOC05OWY5LTRiOTUtYTY5Yi00ODA4ZmY4MTE2OTlfX29pZDIuLmNmOTIwMWRiLWYyZjEtNGExYS1hZDI4LWRlYmVlNWI2ZDYxMF9fb2lkMy4uMTliZThlOTMtYzZiYS00M2FhLTgzY2UtZDYxZjhhNzE3ZDBlX19vaWQ0Li5kMjg3Y2ZlZS1jZDkzLTRkNDctOTMyZS1iY2ViM2ZlYjJjNTVfX29pZDUuLjFiY2RlMTI0LTEwYWQtNGEwNC04YWE5LTUxNzk0N2YzYjNhZV9fb2lkNi4uMjVlYzUyMGItNjc2YS00Y2Q4LWE0ZGMtMjg3M2MwMzIyMjA5X19vaWQ3Li42NDIzMGVjYy1jMTRiLTQwMTItOTI3Mi0wNzYyNTgzZjVmZDBfX29pZDguLmU0NWIxNjMyLWM3MGUtNGVjYi04YzE0LWIwYmM1NjE4MzhhMV9fb2lkOS4uNzA2NjY2MTItMTc1ZC00ZjVjLWFlZDQtOTFiMzFlOWI3YTg4X19vaWQxMC4uNGFiNTk5MjctMmU5OC00MDIwLTk0OGItZTI3NGZhN2E2ZGM3X19vaWQxMS4uMTUyZTBkYjktNTNkMy00NTkwLThlMmItMmM0N2JkNTY3NjJkX19vaWQxMi4uZjgyZmQwYTktYzQzZi00ZjY5LTgwMzQtMjNmZGNkMjJlZjE5X19vaWQxMy4uMzhkMWY0MzktMGE0NC00MzBlLWI0NGQtZTZmNWZiMjM5NDZlX192YXIxLi41MjY5X192YXIyLi4xMzAzMV9fdmFyMy4uNDU0MTRfX3ZhcjQuLlVTX192YXI1Li5Mb3MgQW5nZWxlc19fdmFyNi4uQ2hyb21lX19yZC4uZW5naW5lXC5cc3BvdHNjZW5lcmVkXC5caW5mb19fYWlkLi5fX2FiLi5fX3NpZC4uX19jcmkuLl9fcHViLi5fX2RpZC4uX19kaXQuLl9fcGlkLi5fX2l0Li5fX3Z0Li4xNDk2MjA2OTc1MDgz&c1=5269&c2=13031&c3=45414&c4=US&c5=Los Angeles&c6=Chrome Only the last one, the kewsurvey.com site with the fake Time Warner Survey actually displays in the browser window. The others show up in the browser history. OS/Browser details Windows XP, Google Chrome Version 49.0.2623.112 with only Google Docs and Google Docs offline extensions. Scanners and Cleaners etc I have tried 1. Malware Bytes, full scan. 2. TDSSKiller 3. RogueKiller 4. ESET 5. HijackThis 6. Chrome Cleanup Tool 7. ADwCleaner 8. FRST 9. Malware Bytes Junkware Removal Tool 10. Norton Power Eraser 11. AVG The scanners found nothing. Other things I have tried 1. Deleting cookies/cache. 2. Uninstalling and reinstalling Chrome. 3. Resetting hosts file. 4. Resetting router settings from an old save point from 2013. 5. Changing DNS from ISP's to Google's. 6. Searching for recently installed files or programs. 7. Searching for anything unusual in the startup services or running in the background. None of this has found the problem or solved it. This is the first time in 20 years I've not been able to locate malicious software. If you look up "spotcenered redirect" you will find a few other mentioned by others of the problem, and see what they have done to attempt to fix it, however none of these things have worked for me and I doubt they have worked for the others as well.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.