Home News Forum Articles
  Welcome back Join CF
You are here You are here: Home | Forum | Browser Hijacking


You are currently viewing our boards as a guest which gives you limited access to view most of the discussions, articles and other free features. By joining our Virgin Media community you will have full access to all discussions, be able to view and post threads, communicate privately with other members (PM), respond to polls, upload your own images/photos, and access many other special features. Registration is fast, simple and absolutely free so please join our community today.


Welcome to Cable Forum
Go Back   Cable Forum > Computers & IT > Security & Virus Discussion

Browser Hijacking
Reply
 
Thread Tools
Old 16-07-2009, 00:03   #1
cpomd
cf.member
 
Join Date: Apr 2007
Posts: 16
cpomd is an unknown quantity at this point
Browser Hijacking

After an outage in the Ashton Area which lasted most of the day and was confirmed by Customer Support. The Broadband Connection finally came on I found both Browsers IE7 and Firefox had been Hijacked and had been set to the following Address http://damasgate.com/vb/ which is some sort of Arabic Site.
I do not know whether it came from Virginmedia or elsewhere and am running Comodo Security Spybot and Adaware to clean PC. Any suggestions as to what else I could run?
cpomd is offline   Reply With Quote
Advertisement
Old 16-07-2009, 00:28   #2
danielf
cf.mega poser
 
danielf's Avatar
 
Join Date: Jun 2003
Posts: 14,721
danielf has a lot of silver blingdanielf has a lot of silver blingdanielf has a lot of silver blingdanielf has a lot of silver blingdanielf has a lot of silver blingdanielf has a lot of silver blingdanielf has a lot of silver blingdanielf has a lot of silver bling
danielf has a lot of silver blingdanielf has a lot of silver blingdanielf has a lot of silver blingdanielf has a lot of silver blingdanielf has a lot of silver blingdanielf has a lot of silver blingdanielf has a lot of silver blingdanielf has a lot of silver blingdanielf has a lot of silver blingdanielf has a lot of silver blingdanielf has a lot of silver blingdanielf has a lot of silver blingdanielf has a lot of silver blingdanielf has a lot of silver blingdanielf has a lot of silver blingdanielf has a lot of silver blingdanielf has a lot of silver bling
Re: Browser Hijacking

Quote:
Originally Posted by cpomd View Post
After an outage in the Ashton Area which lasted most of the day and was confirmed by Customer Support. The Broadband Connection finally came on I found both Browsers IE7 and Firefox had been Hijacked and had been set to the following Address http://damasgate.com/vb/ which is some sort of Arabic Site.
I do not know whether it came from Virginmedia or elsewhere and am running Comodo Security Spybot and Adaware to clean PC. Any suggestions as to what else I could run?
Antivirus. Many suppliers provide a free online scan. This will be slow, but you can be pretty sure that the machine that runs the AV is not infected. Running Hijackthis is a good idea as well. The output from this can be rather cryptic, but if you post the output here, there will be people willing to check it and advise you regarding dodgy entries.
__________________
Gimme back my dog
danielf is offline   Reply With Quote
Old 16-07-2009, 09:47   #3
xpod
pops
 
xpod's Avatar
 
Join Date: Jan 2007
Location: Scotlands biggest region
Services: TV,Phone & BB
Posts: 2,086
xpod has a bronzed appealxpod has a bronzed appeal
xpod has a bronzed appealxpod has a bronzed appealxpod has a bronzed appealxpod has a bronzed appealxpod has a bronzed appealxpod has a bronzed appealxpod has a bronzed appealxpod has a bronzed appealxpod has a bronzed appeal
Re: Browser Hijacking

Quote:
Re: Browser Hijacking
The NoScript extension will tighten up your security in Firefox for you.

https://addons.mozilla.org/en-US/firefox/addon/722
__________________
..............brb.
xpod is offline   Reply With Quote
Old 16-07-2009, 09:58   #4
Aragorn
cf.mega poster
 
Aragorn's Avatar
 
Join Date: Apr 2004
Location: Minas Tirith, Gondor
Age: 46
Posts: 3,458
Aragorn has a nice shiny star
Aragorn has a nice shiny starAragorn has a nice shiny starAragorn has a nice shiny starAragorn has a nice shiny starAragorn has a nice shiny starAragorn has a nice shiny starAragorn has a nice shiny starAragorn has a nice shiny starAragorn has a nice shiny starAragorn has a nice shiny starAragorn has a nice shiny starAragorn has a nice shiny star
Re: Browser Hijacking

How much data (docs/photos) do you have and do you have a recovery disk.
In a lot of cases, the safest/quickest option is to recover the OS to original state and reinst program / data.
That is the only 100% guarantee that you haven't kept some nasty lurker.
And as XPod says, use NoScript to browse any sites you don't know.
Aragorn is offline   Reply With Quote
Old 16-07-2009, 18:29   #5
cpomd
cf.member
 
Join Date: Apr 2007
Posts: 16
cpomd is an unknown quantity at this point
Re: Browser Hijacking

Thanks for your suggestions I have taken all your advice and Hijack seemed to show an unwelcome program which I removed. I added the noscript to Firefox and will monitor the situation. If I have to I will reinstall but am reluctant to do so as I have to reinstall games Appz etc. Once again thanks for your help.
cpomd is offline   Reply With Quote
Old 17-07-2009, 17:30   #6
Matty_
cf.geek
 
Matty_'s Avatar
 
Join Date: May 2008
Location: Wherever i lay my hat!
Age: 41
Posts: 735
Matty_ has reached the bronze age
Matty_ has reached the bronze ageMatty_ has reached the bronze ageMatty_ has reached the bronze ageMatty_ has reached the bronze ageMatty_ has reached the bronze ageMatty_ has reached the bronze ageMatty_ has reached the bronze age
Re: Browser Hijacking

Try running http://www.malwarebytes.org/mbam.php and http://www.superantispyware.com/
Maybe even a-squared Free 4.5 http://www.emsisoft.com/en/software/free/ beware of possible false positives from the Ikarus engine though.

These will hopefully pick up any unwanted code, allthough you can never be 100%
Matty_ is offline   Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off


Google Search




All times are GMT +1. The time now is 08:32.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2012, vBulletin Solutions, Inc.
Copyright © 2003 - 2012, Cable Forum.
(server1.cableforum.co.uk)

SEO by vBSEO 3.3.2