google-analytics

p00

I am a 'clicker' and since I changed to Virgin (might not be related ofcourse) my pages keep being sent here there and everywhere and constanly open a 'google' tab page too. ive read loads on the internet about his problem as it seems common - not that I understand computer jargon - and followed some of the ideas

installed malware - didnt find anything
did virus checks - didnt find anything
installed dnskiller or something - didnt find anything
did some restores to earlier date - nothing changed

Now Quidco will not open in Firefox as it goes to the Quidco front page then redirects somewhere to a blank page but it does open in IE although when I click on High Street that goes off to a google search screen.

its not just this computer either its the other one downstairs and the laptop evn though thats new - google-analytics keeps coming up on the bar at the botton or sometimes survey cnet. (thanks to those that helped with the USA keyboard thing)

Someone mentioned it as a router problem and DNS but haven a clue what they are talking about.

is there a simple solution for a dunce like me please?

xxp00

The_Grandmaster

Do you mean malwarebytes? Can you post the latest log? Has it found something recently in the past?

Also which AV do you use?

p00

nothing has been found on the computer in anyway. Ive reset the router and now I seem to differnt networks round the house - netbook is network2, laptop is dlink (which i think is the router and the computers showing network 3

Whats an AV?

xxp00

The_Grandmaster

AV - antivirus

and all your definitons are up to date?

aliEnRIK

Download MALWAREBYTES (Make sure you click 'DOWNLOAD LATEST VERSION')
http://www.filehippo.com/download_malwarebytes_anti_malware/
Open malwarebytes and goto UPDATE and click 'check for updates'. After its updated goto SCANNER and click PERFORM FULL SCAN then click SCAN
Remove everything thats found (needs to be ticked)
Post the COMPLETE log here AFTER youve deleted everything it finds

reboot
Download HIJACK THIS (Make sure you click 'DOWNLOAD THIS VERSION')
http://www.filehippo.com/download_hijackthis/2894/
Click MAIN MENU then DO A SYSTEM SCAN AND SAVE A LOGFILE(Takes seconds) then post the log so we can see whats running
(do NOT do anything else with Hijack but scan and post the FULL log)

kwikbreaks

p00 wrote: »

Someone mentioned it as a router problem and DNS but haven a clue what they are talking about.

Don't worry about that - they don't themselves.

damo24

Sounds like you have a rootkit. Try using Combofix (http://www.bleepingcomputer.com/combofix/how-to-use-combofix) That might clear it.

aliEnRIK

You should never run combofix on a whim

kwikbreaks

aliEnRIK wrote: »

You should never run combofix on a whim

Does it sometimes suffer from a final vowel change or something then?

I'm not arguing about this as my knowledge of fixing the aftermath of a malware infection is zero (I take backups) - I'm just curious how/why it could harm anything.

aliEnRIK

Ive seen people use it, without first trying to clean without using other methods (I use malwarebytes etc as you know)
Combofix HAS made a mess of trying to remove said problem and has made computers unusable in some cases

I personally wouldnt ever suggest using it as a 1st port of call. If others wish to risk their computers (or others), then so be it.

p00

I used the reset button on the router then turned it off for an hour. When i went back online I had a new ip (with virgin?) and it hasnt happened again fingers crossed. So dont know what it was.

xxp00