YesNoOk
avatar

New trojan going around: search engine hijacker (Read 1434 times)

Started by Kung_Fu_Man, February 28, 2009, 02:08:51 am
Email this topic
View printable version
Share this topic:
« previous next »
Page 1 of 11   Go Down

Kung_Fu_Man

New trojan going around: search engine hijacker
#1  February 28, 2009, 02:08:51 am
  • ****
  • Master of the palm and foot.
    • randomselect.piiym-net.com/
Got this little pain in the butt two days ago and took some work to get rid of it. In the end it took a sweep first by the latest free AdAware, and then another by Malwarebyte's Anti-Malware to nix it. However judging from the threads about it and the dates, it's pretty recent and on top of that many discussions are far from helpful to remove it, so if what I did doesn't work for you you might be out of luck.

Anyway, in a nutshell, here's what the trojan does:
*Infects IE and Firefox at least.
*Search engine results will occasionally go to an advertisement page instead. This seems to be random depending on the links.
*Interestingly, replaces banner ads on pages with a cycled group for penis enlargement. Go figure.
*Blocks software updates. This is especially annoying for many spyware scanners however as many don't offer the most up to date version to download, instead relying on updates post installation. Mind you taking this a step further this will kill windows update as well. Joy oh joy.

Anyway like I said: if you find yourself hit with this puppy, try those two programs in tandem. You shouldn't have to update them from their current available online versions at least, though I would suggest updating anyway after you get the virus nixed, and checking windows update too just to be safe.

Dr. Mask The 3rd

Re: New trojan going around: search engine hijacker
#2  February 28, 2009, 02:15:14 am
  • avatar
  • ****
Oh great, and this had to happen when my AVG isn't working.

1nonly

Re: New trojan going around: search engine hijacker
#3  February 28, 2009, 02:17:58 am
  • **
How do we get it?

walt

Re: New trojan going around: search engine hijacker
#4  February 28, 2009, 02:50:30 am
  • ******
  • SNK is life
by having unprotected sex

ExShadow

Re: New trojan going around: search engine hijacker
#5  February 28, 2009, 03:13:38 am
  • ******
  • JoJo is boring
    • USA
Last Edit: February 28, 2009, 12:15:53 pm by Cyanide

XGargoyle

Re: New trojan going around: search engine hijacker
#6  February 28, 2009, 05:06:38 pm
  • ******
  • Hedgehog Whisperer
  • Red Bull addict
    • Spain
    • xgargoyle.mgbr.net
Yep, we got this trojan at work by mid November, and boy, it was so hard to remove it.

1nonly said, February 28, 2009, 02:17:58 am
How do we get it?

The little bastard infects your computer when you see a specific banner on a compromised site. Once infected, a windows security center warning will pop up on the systray.

As KFM said, the bastard blocks execution and installation to many well-known antivirus and antispyware programs. They won't execute at all, but you can simply rename the .exe file and then the program will work (the virus simply blocks access to a specific filename)

In addition to this, access to security and antivirus websites is blocked as well (they give a "Unable to connect" error), but you can still access them through the cached versions of these sites.

Malwarebyte's Anti-Malware will fix your computer. I also recommend to install HostsMan, this application will add the most up to date list of bad sites to your hosts file, meaning your computer will not display any banner that may compromise it.
XGargoyle: Battle posing since 1979
http://xgargoyle.mgbr.net
http://www.pandorabots.com/pandora/talk?botid=e71c0d43fe35093a  <-- Please click that link
http://paypal.me/XGargoyle  <-- Donations welcome!

03268851

Re: New trojan going around: search engine hijacker
#7  February 28, 2009, 09:33:13 pm
  • ***
    • USA
    • https://www.facebook.com/Djk6DraggedNChopped
Sadly these are mostly caused by very cheap low quality porn and a warez site with more trojans the warez.

Jesuszilla

Re: New trojan going around: search engine hijacker
#8  February 28, 2009, 10:34:21 pm
  • ******
  • Loyal to the Game
    • USA
    • http://jesuszilla.trinitymugen.net/
Figured that'd be the case. Now that I have a little bit of evidence: stop going to so many porn sites, KFM. And XG, tell you and your coworkers to quit jacking off on the job.

1nfrnus

Re: New trojan going around: search engine hijacker
#9  March 05, 2009, 01:21:51 pm
  • ***
^that and install NOD 32(sweet anti virus) and Web of trust(Firefox add-on)...
There virus problems solved...

♠Treasure Sniper

Re: New trojan going around: search engine hijacker
#10  March 06, 2009, 01:13:01 pm
  • ****
  • I'm just a passing-by Kamen Rider, remember that.
TSUKASA013 said, April 05, 2009, 06:35:53 pm

oh tobi stop playing with robots and penises.

Saohc

Re: New trojan going around: search engine hijacker
#11  March 06, 2009, 10:00:21 pm
  • ****
  • Has a backlog of games to 100%
    • USA
it hasn't infected aerisdies(look it up yourself.not posting a link, because i may get a tempban or something)

Nucka

Re: New trojan going around: search engine hijacker
#12  March 11, 2009, 02:40:39 am
  • ****
Holy mother of SHIT!!!! I have this virus and I thought there was something wrong with my computer cause my AVG couldn't update.
On the search engines...it redirects me to an IP address starting with 67. But if I double click fast it goes to the site.
I must fix this. Thank you Kung Fu Man. You are an honorary nWo friend.

Nucka

Re: New trojan going around: search engine hijacker
#13  March 18, 2009, 01:06:54 am
  • ****
Thank you Kung Fu Man, who ever you are.
MalwareBytes did the trick.
Now my AVG can update, no more re-directs, no more ads on my favorite webpages telling me that my penis might be too small.
I am free....free to be infected with a new, more powerful virus.

I love you.

Ask My Manager

Re: New trojan going around: search engine hijacker
#14  March 18, 2009, 04:00:10 am
  • avatar
  • ***
  • What stop sign, officer?


This happened to my computer this afternoon when it started up, would this be that nasty virus in effect?

Valodim

Re: New trojan going around: search engine hijacker
#15  March 18, 2009, 04:04:06 am
  • ******
    • Germany
statistically unlikely, a bluescreen can have various reason. most common are boot file errors due to hdd failure.

put in your windows cd, and run the recovery stuff (file check) and scandisk

Dr.Chapatín

Re: New trojan going around: search engine hijacker
#16  March 18, 2009, 04:09:44 am
  • avatar
  • ****
  • Ya me dio cosa...
    • Mexico
^he is right
No panic, you ill see this screen more and more times  --;

Ask My Manager

Re: New trojan going around: search engine hijacker
#17  March 18, 2009, 04:12:06 am
  • avatar
  • ***
  • What stop sign, officer?
If only my dad didn't jump the gun like that...

Cloudius

Re: New trojan going around: search engine hijacker
#18  March 18, 2009, 05:19:20 am
  • ****
  • PSN: Cloudius12
    • www.twitter.com/Cloudius12
Yep just put in the xp cd and go to the recovery console, and use "chkdsk"
Page 1 of 11   Go Up
« previous next »