« previous next »
Pages: [1] 2   Go Down

Author Topic: [Inactive] Google redirecting user to newsfudge website and others  (Read 3038 times)

0 Members and 1 Guest are viewing this topic.

Offline angelatarantula

  • Bronze Member
  • Posts: 13
[Inactive] Google redirecting user to newsfudge website and others
« on: June 12, 2012, 05:26:57 AM »
User on Windows 7 x64 business desktop, using google and getting redirected all the time no matter what searching for, does not seem to happen for administrator log on.  The attached HJT log is run as administrator, but on reading your stickys I am going to run another as the user and repost.  Let me know if you need more information.
« Last Edit: June 12, 2012, 07:20:07 AM by 1972vet »
Logged


Offline angelatarantula

  • Bronze Member
  • Posts: 13
Re: [Inactive] Google redirecting user to newsfudge website and others
« Reply #1 on: June 12, 2012, 05:57:34 AM »
pls find attached log for user profile and not admin. :D1
Logged

Offline 1972vet

  • Microsoft® MVP
  • Malware Removal Staff
  • Diamond Member
  • Posts: 8290
  • Patience is bitter indeed, but its fruit is sweet.
Re: [Inactive] Google redirecting user to newsfudge website and others
« Reply #2 on: June 12, 2012, 07:24:07 AM »
Greetings angelatarantula and Welcome to our Forums,

Disable the active protection component of your antivirus and antispyware programs by following the directions that apply Here. Next, please download the free utility DDS from any of these locations...Here, Here...or Here.
Note - Some infections may prevent certain executable files from running on your computer. If one of these download locations results in a failed run of the utility, please try the next location until you find one that will work on your machine
Double click dds.scr to run the tool
  • When it completes, DDS will open two (2) logs:
    • DDS.txt
    • Attach.txt
  • Save both reports to your desktop.

Next, please install WinPatrol Free version Here...and install it using default settings (change nothing during the installation). When the installation completes, double-click the WinPatrol icon in your system tray to open the user interface. Click on the "Options" tab. Click on the Hijack Log button. Wait for a notepad file to open containing the logged system analysis information and save it to your destktop. You can name the log "WinPatrol Hijack" log.

Please remember to include the following logs in your next reply.
  • DDS.txt
  • Attach.txt
  • WinPatrol Hijack Log
Logged
Disabled Veteran
U.S.C.G. 1972 - 1978
Membership: U.N.I.T.E., A.S.A.P.

2009-12

Performance and Maintenance for Windows XP, Windows Vista and Windows Seven

Offline angelatarantula

  • Bronze Member
  • Posts: 13
Re: [Inactive] Google redirecting user to newsfudge website and others
« Reply #3 on: June 12, 2012, 08:03:23 AM »
I have McAfee Version 8.8i and there is no option to exit to temporarily disable.  I've tried to search for answers but too many results to trawl through, our antivirus is controlled by group policy if this helps.  It has a virus console - we have limited access, If i change anything as an admin - it will revert back after a certain amount of time.

I may not be able to revisit this until Thursday.

Thanks for your help. :)1

Angela.
Logged

Offline 1972vet

  • Microsoft® MVP
  • Malware Removal Staff
  • Diamond Member
  • Posts: 8290
  • Patience is bitter indeed, but its fruit is sweet.
Re: [Inactive] Google redirecting user to newsfudge website and others
« Reply #4 on: June 12, 2012, 09:40:39 AM »
Can you confirm for me that you have permission from the business to make changes to that computer? I assume there is no IT department?
Logged
Disabled Veteran
U.S.C.G. 1972 - 1978
Membership: U.N.I.T.E., A.S.A.P.

2009-12

Performance and Maintenance for Windows XP, Windows Vista and Windows Seven

Offline angelatarantula

  • Bronze Member
  • Posts: 13
Re: [Inactive] Google redirecting user to newsfudge website and others
« Reply #5 on: June 12, 2012, 10:08:29 AM »
Yes, I am the It admin on site.
Logged

Offline 1972vet

  • Microsoft® MVP
  • Malware Removal Staff
  • Diamond Member
  • Posts: 8290
  • Patience is bitter indeed, but its fruit is sweet.
Re: [Inactive] Google redirecting user to newsfudge website and others
« Reply #6 on: June 12, 2012, 12:34:31 PM »
Alright, thanks. Despite your inability to disable McAfee, were you able to run the tools I requested that you download?
Logged
Disabled Veteran
U.S.C.G. 1972 - 1978
Membership: U.N.I.T.E., A.S.A.P.

2009-12

Performance and Maintenance for Windows XP, Windows Vista and Windows Seven

Offline 1972vet

  • Microsoft® MVP
  • Malware Removal Staff
  • Diamond Member
  • Posts: 8290
  • Patience is bitter indeed, but its fruit is sweet.
Re: [Inactive] Google redirecting user to newsfudge website and others
« Reply #7 on: June 13, 2012, 05:39:37 PM »
Are you still with us angelatarantula? Still needing assistance?
Logged
Disabled Veteran
U.S.C.G. 1972 - 1978
Membership: U.N.I.T.E., A.S.A.P.

2009-12

Performance and Maintenance for Windows XP, Windows Vista and Windows Seven

Offline angelatarantula

  • Bronze Member
  • Posts: 13
Re: [Inactive] Google redirecting user to newsfudge website and others
« Reply #8 on: June 14, 2012, 02:29:26 AM »
Sorry out of the office yesterday, I am running everything today.
Logged

Offline angelatarantula

  • Bronze Member
  • Posts: 13
Re: [Inactive] Google redirecting user to newsfudge website and others
« Reply #9 on: June 14, 2012, 03:18:51 AM »
Unable to disable McAfee.

Ran DDS and only got one log file DDS (not Attach).

Logged

Offline 1972vet

  • Microsoft® MVP
  • Malware Removal Staff
  • Diamond Member
  • Posts: 8290
  • Patience is bitter indeed, but its fruit is sweet.
Re: [Inactive] Google redirecting user to newsfudge website and others
« Reply #10 on: June 14, 2012, 04:13:39 AM »
Thanks. In order for us to continue helping you with this issue, there are a couple things I need to point out...the troubled computer needs to be taken offline, and the troubled computer needs to have McAfee disabled. Since I already know about the problem you had with McAfee, I need to ask you to uninstall it.

Would you be able to do this?
Logged
Disabled Veteran
U.S.C.G. 1972 - 1978
Membership: U.N.I.T.E., A.S.A.P.

2009-12

Performance and Maintenance for Windows XP, Windows Vista and Windows Seven

Offline 1972vet

  • Microsoft® MVP
  • Malware Removal Staff
  • Diamond Member
  • Posts: 8290
  • Patience is bitter indeed, but its fruit is sweet.
Re: [Inactive] Google redirecting user to newsfudge website and others
« Reply #11 on: June 14, 2012, 06:57:04 AM »
From the WinPatrol log you posted, I am able to ascertain that the system has some connection with a domain registered from Romania. This is evidently due to a proxy in use. Is this what you wanted and did you set this up?

This behavior seems related to the program WatchGuard. Did you install this and do you use it for this purpose? I suspect that this is actually by design and such behavior is intended for avoiding, or confusing a "sidejack". Sidejacking is a relatively new technique wherein a remote hacker, using web sniffing tools, can find the IP address of any user connected via a shared wireless connection, and view a listing of every place that user has browsed on that network (for that session).

If this isn't something that YOU set up, then it's entirely possible that someone (remotely) has already sidejacked that system.

Other than this particular item I've noted, I see no other questionable event or item from anything you've posted so far. That said, if your issue persists, then we do need to take that system offline, uninstall McAfee (making certain first, that you've "un-encrypted" the hard drive)...in order to take a deeper look inside the box so we can decide which way to proceed. Let me know if this is something you'd like to do. Thanks!
Logged
Disabled Veteran
U.S.C.G. 1972 - 1978
Membership: U.N.I.T.E., A.S.A.P.

2009-12

Performance and Maintenance for Windows XP, Windows Vista and Windows Seven

Offline 1972vet

  • Microsoft® MVP
  • Malware Removal Staff
  • Diamond Member
  • Posts: 8290
  • Patience is bitter indeed, but its fruit is sweet.
Re: [Inactive] Google redirecting user to newsfudge website and others
« Reply #12 on: June 14, 2012, 02:28:11 PM »
Still with us angelatarantula?
Logged
Disabled Veteran
U.S.C.G. 1972 - 1978
Membership: U.N.I.T.E., A.S.A.P.

2009-12

Performance and Maintenance for Windows XP, Windows Vista and Windows Seven

Offline angelatarantula

  • Bronze Member
  • Posts: 13
Re: [Inactive] Google redirecting user to newsfudge website and others
« Reply #13 on: June 15, 2012, 03:25:32 AM »
Hi,

Thanks for your help, we do indeed have watchguard but this is by design.

I am taking the PC off the network as you advise and working on the matter in house.

I'll close this thread, thanks for your help. :t
Logged

Offline 1972vet

  • Microsoft® MVP
  • Malware Removal Staff
  • Diamond Member
  • Posts: 8290
  • Patience is bitter indeed, but its fruit is sweet.
Re: [Inactive] Google redirecting user to newsfudge website and others
« Reply #14 on: June 15, 2012, 04:31:28 AM »
I understand you've fixed this issue yourself? Please tell us what you have done that eliminated your redirecting issues. Thanks!

PS---not just because I'm curious, but because this thread would be the second thread you created where you haven't followed through with the instructions posted for you. It would be much better for all of us if you would share your findings so that other forum readers can benefit as well from your issue as it is resolved.

As is, this thread, and This one will have had no final outcome.
Logged
Disabled Veteran
U.S.C.G. 1972 - 1978
Membership: U.N.I.T.E., A.S.A.P.

2009-12

Performance and Maintenance for Windows XP, Windows Vista and Windows Seven
Pages: [1] 2   Go Up
« previous next »