Jump to content

Search the Community

Showing results for tags 'redirect'.



More search options

  • Search By Tags

    Type tags separated by commas.
  • Search By Author

Content Type


Forums

  • Announcements
    • Malwarebytes News
    • Beta Testing Program
  • Malware Removal Help
    • Windows Malware Removal Help & Support
    • Mac Malware Removal Help & Support
    • Mobile Malware Removal Help & Support
    • Malware Removal Self-Help Guides
  • Malwarebytes for Home Support
    • Malwarebytes 3 Support Forum
    • Malwarebytes for Mac Support Forum
    • Malwarebytes for Android Support Forum
    • Malwarebytes for iOS Support
    • Malwarebytes Browser Guard
    • False Positives
    • Comments and Suggestions
  • Malwarebytes for Business Support
    • Malwarebytes Endpoint Protection
    • Malwarebytes Incident Response (includes Breach Remediation)
    • Malwarebytes Endpoint Security
    • Malwarebytes Business Products Comments and Suggestions
  • Malwarebytes Tools and Other Products
    • Malwarebytes AdwCleaner
    • Malwarebytes Junkware Removal Tool Support
    • Malwarebytes Anti-Rootkit BETA Support
    • Malwarebytes Techbench USB (Legacy)
    • Malwarebytes Secure Backup discontinued
    • Other Tools
    • Malwarebytes Tools Comments and Suggestions
  • General Computer Help and Security Updates
    • BSOD, Crashes, Kernel Debugging
    • General Windows PC Help
  • Research Center
    • Newest Rogue-Ransomware Threats
    • Newest Malware Threats
    • Newest Mobile Threats
    • Newest IP or URL Threats
    • Newest Mac Threats
    • Report Scam Phone Numbers
  • General
    • General Chat
    • Forums Announcements & Feedback

Find results in...

Find results that contain...


Date Created

  • Start

    End


Last Updated

  • Start

    End


Filter by number of...

Joined

  • Start

    End


Group


AIM


MSN


Website URL


ICQ


Yahoo


Jabber


Location


Interests

Found 18 results

  1. Hey there, on my Android phone, I've been having weird redirects to unsafe looking ("Congratulations!") sites in it's browser recently (since at the very least August 2nd). They seem to happen very infrequently, which caused me to be kind of lazy in trying to fix it. I usually browsed what I'm assuming are safe websites (can provide examples of them and the unsafe sites, not sure if I can just post those links) as the redirects occur. I tried running some anti virus scanners (including Malwarebytes, see "Screenshot_20190827-155852-edited.png" e.g.). Only Trend Micro's "Mobile Security & Antivirus" actually found something, a .crdownload file, which I removed from the phone, but am keeping on my main PC. A virustotal scan of that file. Since removing it though, the redirects still happened. I cleared my Chrome's history and cache a few minutes ago, and can report back if that changed anything (as I said, the redirects are rather infrequent). Aside from this, I have also had strange calendar entries in my Google account, similar to this. Examples of what this looks like on my end are in the attachments. The Google support post recommends setting "Automatically add invitations" to No. Doing this stops them from showing up, however I have been unable to find any emails in my inboxes that could have caused them. I searched my mails by those event titles, email address "gserviceaccount" and "(filename:ics OR filename:vcs)" for example. I'm unsure whether these two issues are related or not. Some version numbers on my phone, in case they're helpful: Android: 7.0 (I have a Huawei Honor 6X, so afaik this is the most recent Android version for it) EMUI: 5.0.3 Chrome: 76.0.3809.111 Calendar: 6.0.44-261313226-release If I could get any help with this, I'd appreciate it.
  2. I've run MalwareByte countless times but my problem hasn't solved. AdwCleaner keeps detecting 2 threats but can't remove them. I've also tried reinstalling chrome many times. Please Help.
  3. My Chrome browser has been hijacked. When I type a search topic in the address area, it first goes to Google, but it then gets redirected to www.search323892.xyz. Malwarebytes doesn't find it/remove it. I've read some of the ideas on the web about how to remove it, but none of them work. Does anyone have any ideas?
  4. Hello all, Earlier today I mistakenly installed some unknown piece of software which resulted in the infection of several Trojan and Adware files on my PC. The files were being generated everywhere, in random folders with random names upon startup and chrome would be opening new tabs indefinitely. By using Malwarebytes without internet connection it seemed that I had managed to fix this issue. The logs were coming with zero threats. However, when browsing YouTube and other sites via Chrome I seemed to get some unfamiliar behavior/ads. I checked my extensions and removed one I did not recognize (chrome_filter). Then I noticed two things: my Google page was "google.ga" (from Gabon), and when I actually searched for anything the address bar would change to my-search.com/"whatever term I searched her". Thus, I tried to reinstall chrome using MS Edge. On edge I'm getting some ads with "Aura" written on their bottom (which I searched online and seems to be malware-related) and I'm also getting Google.ga in there, but no "my-search" redirection. There are some empty popups that appear which I blocked. I tried reinstalling chrome anyway and I got an error saying that the chrome installer couldn't connect to Google's network and suggested I checked my firewalls. Finally, I've just run Malwarebytes again with Rootkit and inside archives options turned on and I got the attached log - I quarantined the 4 infected files. I'm also attaching FRTS log with the "addition.txt" file. Any help? Thanks in advance log.txt Addition.txt FRST.txt
  5. For the past few days, the Firefox browser on my PC has been opening up to the Microsoft or Google homepage, despite it being set to Firefox home. Changing the homepage to something else doesn't seem to work, although new tabs aren't affected. This prompted me to look in my NoScript extension, where I briefly noticed something along the lines of "cdn.immereeako". I looked it up and found a very detailed article about some "iTranslator" malware. It mentions the same browser redirect that I've experienced, as well as a folder in my (C:\ProgramData) that was created on the 22nd of this month. Unfortunately, McAfee, Spybot Search & Destroy and Malwarebytes have been unable to get rid of the issue, so I'm pretty stumped on getting rid of this thing. Addition.txt FRST.txt Malwarebytes threat scan.txt
  6. My mother recently informed me of invasive pop-ups on her computer, and having had previous experience with Conduit malware, my heart sank :( Sure enough, she somehow downloaded malware, showing up as "Microsoft Office 365 - en-us" from "Microsoft Corporation", "version 16.0.10730.20102". I've run Malwarebytes, HItmanpro, and have Revo uninstaller at the ready, but have not found a site that can tell me how to remove it all, and it's been years since I had Conduit, so my memory's a little fuzzy. The Malwarebytes report is attached below- Please HELP!! malware1.txt
  7. Hey there, I am unable to remove some infection that causes popups within my mozilla browser. Malewarebytes Premium on my PC blocks these sites however when I run a scan It can't seem to detect the infection. It does detect something in my my chrome browser but won't remove that permanently either. Attached are the required documents. Thanks FRST.txt Addition.txt Threat Scan Log.txt
  8. Hi all I'm a premium user and I'm constantly being redirected to different .PW domains alerting me that I have "several viruses" (fake) . It seems to happen a lot whenever I visit news sites (daily mail, the independent, etc) so I'm thinking that the redirects are triggered by malicious adverts. I'm quite surprised that Malwarebytes doesn't detect or fix this problem I'm having! I've given MB full admin rights and I always update and scan my phone regularly. What can I do? Thanks.
  9. Hi guys, Everytime I open Google Chrome, Malwarebytes blocks an Outbound Connection to hanstrakr.com. This started happening recently, and there's nothing funky going on in my Extensions, Sync, or Search Engine settings. I'm unsure of where it's coming from. Not much is said on it accept that it may be connected to Data Mining, but even those people aren't certain. Below is a list of the most recent Outbound Connection it made. Does anyone know what this is, and how to stop it? --- Malwarebytes www.malwarebytes.com -Log Details- Protection Event Date: 5/21/18 Protection Event Time: 9:16 PM Log File: b32c10ac-5d5d-11e8-851d-54ab3a4722fe.json Administrator: Yes -Software Information- Version: 3.4.5.2467 Components Version: 1.0.342 Update Package Version: 1.0.5194 License: Premium -System Information- OS: Windows 10 (Build 16299.431) CPU: x64 File System: NTFS User: System -Blocked Website Details- Malicious Website: 1 , , Blocked, [-1], [-1],0.0.0 -Website Data- Category: RiskWare Domain: www.hanstrackr.com IP Address: 34.252.20.187 Port: [54498] Type: Outbound File: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (end)
  10. Hello, my google searches are being redirected to Bing, it is not simply my default search engine being switched. I have malware busted before and this one is very well hidden. Threat Scan: Those are not the problem, regardless they have been removed. FRST.txt Addition.txt Plz send halp.
  11. I'm having trouble getting rid of some virus that's redirecting all of my google searches to extension.citypage.today and then to a similar bing search. I've tested this with both Google Chrome and Microsoft Edge so I believe it isn't browser specific. Regardless I've tried everything I can think of and nothing has gotten rid of it. While I've also tried a couple of other antiviruses, none of them (including Malwarebytes premium free trial) have helped. I downloaded and ran the FRST scan like asked and attached the files. I also attached my most recent Malwarebytes threat scan. It does say it detects several PUPs but I'm 99.9% sure those aren't related to the extension.citypage.today problem since they didn't show up until after (I think i downloaded some antivirus that wasn't 100% trustworthy in my frantic scramble to try to get rid of this virus- not the best decision, and malwarebytes is having trouble getting rid of that too, but I'll deal with it later as it isn't an immediate problem) threatscan.txt Addition.txt FRST.txt
  12. Hi All,I am having an issue where when I do a google search, it redirects to yahoo search, but shows as search.yahoo wajam. I cannot figure out how to remove this. I tried Malwarebytes and it is not picking it up. I tried chrome extensions and wajam is not listed. I removed all extensions and even removed chrome and tried to reinstall. It only affects google search. Anything I can do. This happens on all browsers. I am assuming it is spyware? I have looked at many wajam removal sites, but I do not have anything on my mac that has wajam. Here are some screenshots after google searching the word "test". Then someone suggesting altering my DNS which I tried too. Malwarebytes comes up clean. Please see what a google search for the word test redirects to. It completely changes to wajam yahoo. I do not have any wajam on my computer. Thanks,Matt
  13. Hi, Malwarebytes Premium frequently blocks malicious websites as shown below. I suspect adware infection. However, Premium and ADWCleaner logs are clean. Please advise. -Blocked Website Details- Malicious Website: 1 , , Blocked, [-1], [-1],0.0.0 -Website Data- Category: Unspecified Domain: hilltopads.net IP Address: 208.88.225.39 Port: [57157] Type: Outbound File: C:\Program Files (x86)\Mozilla Firefox\firefox.exe -Website Data- Category: Unspecified Domain: adexc.net IP Address: 163.172.21.184 Port: [53330] Type: Outbound File: C:\Program Files (x86)\Mozilla Firefox\firefox.exe -Website Data- Category: Unspecified Domain: fwbntw.com IP Address: 95.128.124.135 Port: [54561] Type: Outbound File: C:\Program Files\Opera\49.0.2725.43\opera.exe -Website Data- Category: Unspecified Domain: deloton.com IP Address: 194.187.98.220 Port: [50372] Type: Outbound File: C:\Program Files\Opera\49.0.2725.43\opera.exe mwbreport.txt Addition.txt FRST.txt AdwCleaner[S1].txt
  14. 2 threads I found were closed with no real resolution posted. Win7 64 bit reinstall(hard drive failed 2 weeks ago). Malwarebytes and Symantec find nothing. Doesn't pop up all the time. Only vulnerability I can think of is before the reinstall and after my laptop guy had me lower the whole way to make my wireless printer work. After he reinstalled win7 64 bit pro I had to do the same thing to get the printer to work. Control panel, user accounts & family, user accounts, change user account controls setting, has to be lowered the whole way in order to use my wireless HP printer. So now it will never notify me about changes to my computer. Firefox updated to the latest. Don't use IE or Chrome but may have when downloading HP driver or something that may have launched one of those browsers . laptop still usable, definitely occasionally annoying, but no idea of what other intrusions could be happening. Assistance please - or point me to a thread that has a successful resolution posted. I updated Malwarebytes last night and reran it but I will do it again tonight. Hoping that it will now find this redirect. Thanks!
  15. Hello, I just opened my chrome browser, and received a message from MalwareBytes premium that it blocked a re-direct to inclk.com due to it being a malicious website. The last thing that I did was install plug-ins for paint.net from what seemed like a legitimate website. Here is the site which discussed the add-on I was looking for: https://www.thoughtco.com/editable-text-in-paint-net-1702095 It suggested to download the add-on from here: http://www.isimonbrown.co.uk/plugin-pack/ I found a thread called" I'm infected - What do I do now?" and am following the steps. I ran a MalwareBytes scan (log attached), and no issues relating to this were found. Although there was PUP.Optional.Conduit and PUP.Optional.Spigot found. (I had these show up before the current issue too). I also downloaded the Farbar Recovery Scan Tool as instructed. Logs attached. Any help would be greatly appreciated!
  16. At some point the malware emboba.inf sneaked in to my pc, but Malwarebytes can't detect it. I have looked for abnormal programs or processes everywhere, but can't find it. It has affected Chrome browser only, and it's behaviour is to randomly pull up a new window that tries to go to a lot of different sites. Luckily Malwarebytes stops access to those sites it's trying to browse, but it'struly annoying. I have uninstalled/reinstalled Chrome, with removing all Chrome folders and profile. Also cleared registry, but it came back anyway. Heeelp!
  17. So lately, I've discovered a program that is running and in the startup called svcmcx. I don't know what it is for but searching through the internet, I see that it is a trojan or something. It's probably why I keep getting Safe Search as my search engine. I can't even start up Malwarebytes anymore!! Can someone tell me what to do to get rid of this? Thanks
  18. I'm not sure if I'm late to this but I've experienced the same problem. I'm not too sure what to do and pretty much want to give up using chrome and others. Please tell if you have found a solution.
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.