Help -- Browser Hijack - Page 3 - Horse Racing Forum - PaceAdvantage.Com

JustRalph · 06-02-2010, 11:21 PM

any java script, php that usually performs some mundane function like "post" or one that invokes a certain call etc.......depends on how it is written. some are actually bots sitting on the users computer like a trojan. They sit there until something wakes it up to call home and get the latest message from homebase. It can even be on a timer.........these things are nasty. It just may wait 24 hours etc and the next java app will wake it up and it will use the java app to take off.........that is how you sometimes get rotating ads on a hijack.....they rotate the ad to be displayed at the homebase.....

it's a dirty business. But until you are clean.....it could happen anywhere.

see this page

http://www.symantec.com/norton/theme...hemeid=mislead

Rwahi1 · 06-03-2010, 10:59 AM

Browsing the web as an administrator is dangerous and is not good for your computer. People keep doing that and they keep getting infected.

When I first got my computer I use to have the same problems with infections like everybody else. Now its been five or six years I have never been infected with malware and I go to lots of unsavory sites just to see if i can get infected.
Look...even if you must use administrative account when surfing the web with IE at-least have right kind of protection. AV is not going to help you. Everyone have AV, they still get infected!. You should look into GeSWall,Buffer Zone or SandBoxie. They have free version also, so you don't have to pay for it.
Me personally I like to surf the web with IE but i have disabled downloads, nothing get downloaded with IE and I surf the web as a limited user. When I want to download I use Google Chrome. Which is one of the safest browser in my books.
If you guys want to read more about it( I am not very good at explaining..my english is not very good ) these links will help you understand better.

http://msdn.microsoft.com/en-us/library/ms972827.aspx

http://cybercoyote.org/security/drop.shtml

Regards,

Raman

Rwahi1 · 06-03-2010, 11:21 AM

In my earlier post I did not mention how I learned to protect my computer.

I hang out at www.wilderssecurity.com and I got to give credit to members of this site for teaching me about securing my computer from hackers,malwares and what not.

And especially making my browser secure with the help with this link :

http://www.wilderssecurity.com/showthread.php?t=262475

trying2win · 06-04-2010, 02:47 AM

The only problem I've had lately that seems like a hijack on the computer, is when I go to an ADW site for example and click on the 'CONTACT US' button, the computer is redirected to a Russian website. I'm guessing it's the Google equivalent of a Russian search engine, because the page that is displayed on screen has a lot of words in Russian with the odd slot for putting in information. The website address has a .ru suffix.

The funny thing is, when clicking links on a business page, only the 'CONTACT US' link is redirected to a Russian webpage. So it's a real mystery. This hijack is not causing any major problem with my computer, but still I'd like to find a way to remove it without doing a restore.

I've tried several malware removers, commercial and free ones to no avail to get rid of this hijack (virus, trojan?). If my recollection is correct, I think so far I've tried NOADWARE, SPYBOT and the PA-recommended MALWARE BYTES softwares. All three of them found some interesting pieces of malware (but not the one I was hoping they'd find).

Can anyone suggest any other free spyware removers that you found helpful?

Thanks,

trying2win
-------------------------------------------------------------------------
~"Never think if you can solve a problem. Think how you can solve it."

--Norman Vincent Peale
-------------------------------------------------------------------------

Rwahi1 · 06-04-2010, 06:51 AM

Sorry to read about your problem. I hope you downloaded Malwarebytes from a ligit site. There are fake or rough softwares pretending to be real one.
The right address is.....www.malwarebytes.org
You should also try SUPERAntiSpyware from.......www.superantispyware.com
They have a free version. Let us know how it works out. If this does not help
then there are other methods to try.

trying2win · 06-04-2010, 07:49 AM

RWAHI:

Thanks for the advice. I just got some good results though.....FINALLY! Shortly after I made that post, I downloaded the latest updates for NOADWARE software, ran a scan, and in the scan results a trojan was listed. Naturally, I gave the software permission to delete it. That solved the redirect problem.

T2W

Rwahi1 · 06-04-2010, 09:28 AM

I am glad for you. Now you got to figure out how did you get infected in the first place. Do you have a basic protection i.e, a firewall, Anti-virus software.
You should also install WOT( Web of Trust ) for your browser. The WOT add-on warns you about risky sites before you click ( www.mywot.com ).

I wanted to learn more about NOADWARE software, so I googled "noadware" and I am sorry to inform you that my security software won't even let me go to their site and then WOT shows that they are not good! What can I say...
they helped you out. How much did you pay for NOadware software?
What is your operating system?

Robert Goren · 06-04-2010, 09:53 AM

Quote:

Originally Posted by Rwahi1

I am glad for you. Now you got to figure out how did you get infected in the first place. Do you have a basic protection i.e, a firewall, Anti-virus software.
You should also install WOT( Web of Trust ) for your browser. The WOT add-on warns you about risky sites before you click ( www.mywot.com ).

I wanted to learn more about NOADWARE software, so I googled "noadware" and I am sorry to inform you that my security software won't even let me go to their site and then WOT shows that they are not good! What can I say...
they helped you out. How much did you pay for NOadware software?
What is your operating system?

I ran NOADWARE free scan and it found a couple of files. I deleted them myself without the aid of the software which they want $48 for. It has solved several problems I have had over the last week or so. We will see if the fix holds. Just for it is worth.

Rwahi1 · 06-04-2010, 11:54 AM

Quote:

Originally Posted by Robert Goren

I ran NOADWARE free scan and it found a couple of files. I deleted them myself without the aid of the software which they want $48 for. It has solved several problems I have had over the last week or so. We will see if the fix holds. Just for it is worth.

Any software that ask for money before they fix the problems you should be afraid of. 99% of the time these fake software install malware when you install them.

Mr. Goren....its getting close to handicapping the Belmont card, I won't bore you with my rant about security. When you have some time why don't you come by Wilderssecurity forum and just browse and feel the place.

How would you like if you never get malware and can surf the web without being afraid of getting infected for no cost. It wouldn't cost you a dime! I can show you how to do that.

Right now I am looking at the Belmont card. I got to see if I can make some money. I will catch up with you later

headhawg · 06-04-2010, 12:55 PM

Quote:

Originally Posted by Rwahi1

I wanted to learn more about NOADWARE software, so I googled "noadware" and I am sorry to inform you that my security software won't even let me go to their site and then WOT shows that they are not good! What can I say...

Me too. I am not sure why people don't stick with the known good anti-malware programs but to each his own, I guess. The scary thing is that these lesser known programs may fix certain problems but I get this uneasy feeling that they have added their own malware.

Greyfox · 06-06-2010, 10:22 AM

From what I can determine this morning the major web host server

Lunar Pages has been hijacked.

That means that hundreds of websites hosted by that company have been smacked out and redirected to some black internet page.

Even Lunar Pages main website has been taken over by this hacker.

Robert Goren · 06-06-2010, 10:55 AM

Quote:

Originally Posted by headhawg

Me too. I am not sure why people don't stick with the known good anti-malware programs but to each his own, I guess. The scary thing is that these lesser known programs may fix certain problems but I get this uneasy feeling that they have added their own malware.

People like me get desperate. I have had Norton for years and have had very few problems. Then along comes two problems. The first one is that 0x6beb7776 thing. The second is every time I try to use a search engine, I get hijacked. I even called Norton , no help. I tried all the the well know programs, no help. I post here and on 2+2, no help. Then I try the NOADWARE thing and it finds 3 files and I get rid of them and the 0x6beb7776 goes away and has stayed gone for several days now. The hijacking is still there. I hear all about all these better firewalls, etc, but when ever I put one up, It is like it is 1996 all over again. Slower than molasses. I am not paying $50 a month for 1996 speed. I am not going to use Linux since I had a really bad experience with that. I might try google chrome, but I have been a little reluctant because every time use a google program, I spend a half an hour getting rid of things like the toolbar.

Track Collector · 06-19-2010, 11:36 PM

Well, things are better than when I originally encountered this problem, but from time to time while browsing in one window (such as the Racing Channel), a new tab opens up with a re-direct.

I have tried full scans with the following:
Cyberdefender
Norton
Malwarebytes (free version)
SuperantiSpyware (free version)
Spybot (free version)

If possible, I do not want to re-format, as I do not know how to do it, AND, I may not have all the disks to re-install the programs.

I really appreciate all the well-meaning advice I have received to date.

Rwahi1 · 06-20-2010, 08:02 AM

Go to www.prevx.com and download their free program first. Scan your computer. This is a new technology ( Cloud Tech ). I use to use this software. It is a very good software. I don't use it now because I have set up my computer differently than most users. They have a forum at Wilders Security. http://www.wilderssecurity.com/forumdisplay.php?f=105

I hope your computer is fully patched up with Windows updates.
I am curious to know what this software will find ?

TrifectaMike · 06-20-2010, 12:02 PM

Quote:

Originally Posted by Track Collector

Well, things are better than when I originally encountered this problem, but from time to time while browsing in one window (such as the Racing Channel), a new tab opens up with a re-direct.

I have tried full scans with the following:
Cyberdefender
Norton
Malwarebytes (free version)
SuperantiSpyware (free version)
Spybot (free version)

If possible, I do not want to re-format, as I do not know how to do it, AND, I may not have all the disks to re-install the programs.

I really appreciate all the well-meaning advice I have received to date

Go to www.iobit.com and download their free Advanced System Care and their free Security 360.

Mike