strange problem

Baz · May 06, 2011, 21:19:01

while online I am getting a random site opening at odd times,whenever it wants.seems to be just advert sites.

normal checks finds nothing except tracking cookies.All ive done lately is update adobe flash player.can this be undone if its the cause or does it have some way of changing the settings which may be checking for updates or similar. where is it on my comp.

I tried to system restore and it failed got some message saying it couldnt restore to that point I chose

mrapoc · May 06, 2011, 21:22:54

What have u scanned with?

Baz · May 06, 2011, 21:26:39

Malwarebytes and Superantispyware

zappaDPJ · May 06, 2011, 21:55:37

Does this happen when you are just browsing or at other times as well?

Baz · May 06, 2011, 21:56:04

just when browsing

zappaDPJ · May 06, 2011, 22:00:31

What you need to do is take note if it's a particular site(s) that does this. Some sites are designed to do it and it's usually an online casino that's being advertised. If however it's happening when you browse here for example then you have something you probably don't want hooked into your browser that needs to be removed.

Steve · May 06, 2011, 22:04:14

For example http://bt2700hgv.tripod.com/ir1002700HGV.htm unless I block pop up windows on Safari opens up a Quick Credit Score

Baz · May 06, 2011, 22:05:38

ok will do. havent noticed any particular so far as I have just closed the newly opened one straight away

thanks

armadillo · May 06, 2011, 23:45:17

Quote from: Baz on May 06, 2011, 22:05:38
ok will do. havent noticed any particular so far as I have just closed the newly opened one straight away

thanks

I think Zappa's question was asking you if the random site pops up only when browsing a particular site or site. Or to put it another way, we know you get a random "child" but does it happen only with a particular "parent"? If it can happen regardless of parent, you have a problem.

Baz · May 07, 2011, 12:06:57

just got a site open.

I was looking at damnyouautocorrect and 'google' page opened

Gary · May 07, 2011, 12:18:04

Have you used any Registry cleaners? They can be trouble. Do you use adblockers? I always found Ad-Muncher great on Windows as it blocks ads and popups system wide, not just in one browser but all at once and before they download so it saves bandwidth. It sounds like you are getting redirected, what AV are you using, also are your definitions all up to date? Maybe try a scan in safe mode?

Baz · May 07, 2011, 12:42:27

Ive used ccleaner.

Adblock plus

NOD32 anti virus with up to date definitions.also upto date on Malwarebytes and superantispyware.

Have just noticed that while using Google for info about T mobile I was taken to an Ebay page

while othe links did go to where they should have

Glenn · May 07, 2011, 12:46:00

Change browser and see if it makes a difference.

DorsetBoy · May 07, 2011, 12:48:37

What browser are you using

?

Gary · May 07, 2011, 13:57:25

What DNS severs are you using, IDNets? If you are using Firefox try a new profile, must admit it's pretty odd, I would do as the others have said and try a different browser. It does sound like you are being redirected though, have you flushed your DNS cache?

Baz · May 07, 2011, 15:23:39

I am using Firefox 4.0.1.will try IE and see if it happens.

I use IDNet servers unless some things changed that I dont know of.

How do I try a new profile? everything gets cleared when closing except cookies.

Baz · May 08, 2011, 12:06:13

ok.turned on system this morning and had now desktop icons,taskbar,clock etc.

ran in safe mode and did AV and spyware checks and seemed ok,re boot and its up and running.

get online and I am getting a warning from NOD blocking an address every time I click 'Next' or the number link for a next page in Google.

in fact Im even getting the warning when just opening google home page

Lona · May 08, 2011, 12:24:29

I would suggest you do a system restore back to before these things happened and don't go near those sites again.

Baz · May 08, 2011, 12:29:23

which sites might that be Lona??

its google giving me the warnings now

DorsetBoy · May 08, 2011, 12:54:32

Try this online scan http://www.eset.co.uk/Antivirus-Utilities/Online-Scanner .

If it finds nothing then just back up your Bookmarks and fully uninstall Firefox. Go through all the Windows Application and Program folders looking for Mozilla and Firefox and delete everything found.

Install a fresh clean copy of Firefox.

FritzBox · May 08, 2011, 19:31:25

Sounds like a rootkit to me, had a problem on a pc recently with IE doing the same thing. Google search and get redirected elsewhere

Try tdsskiller from

http://support.kaspersky.com/viruses/solutions?qid=208280684 Kaspersky

Baz · May 08, 2011, 19:56:40

Quote from: FritzBox on May 08, 2011, 19:31:25
Sounds like a rootkit to me, had a problem on a pc recently with IE doing the same thing. Google search and get redirected elsewhere

Try tdsskiller from

http://support.kaspersky.com/viruses/solutions?qid=208280684 Kaspersky

Fritz......that may well have solved it for me.will keep an eye on it

Thanks

spent about an hour getting a talk through from support at NOD after an email I dropped them saying about the warning I was getting.Turns out he couldnt fix it and I ended up doing a windows repair from the cd but still had the problem.

That remote control they used is a bit un settling watching some one else take control of you mouse etc.

one thing he did find which I saw him change was the DNS server address in the router settings was set to use these instead of get auto from ISP.
I cant remember changing them or think of any reason why they should be,but he said it wasnt that anyway.

Now I cant find the details of the address range from IDNet that they should be set at, does any one know them just to check.

Thanks again Fritz

FritzBox · May 08, 2011, 20:15:17

I don't just whinge about the Fritzbox, I also come in handy sometimes. Hopefully it will have solved it for you

You could try google DNS, 8.8.8.8 8.8.4.4

Baz · May 08, 2011, 20:18:41

sorry dont know what that means.

My router is set to auto get the address but Im sure I have the details from IDNet some where but just cant find them at the minute.

some one who knows will be in soon

FritzBox · May 08, 2011, 20:23:50

You can set them manually on your pc which will override the settings in router

http://www.whatsmydns.net/dns/uk/idnet.html

Baz · May 08, 2011, 20:28:28

handy site

Simon · May 08, 2011, 20:33:03

Can't help from my phone, Baz, but check the IDNet website. I'm sure they're there somewhere.

Baz · May 08, 2011, 20:37:21

thanks Simon will do.

theres a handy site from Fritz earlier which lists a lot of ISPs addresses.

mine slightly differ from what it says on this site but seems ok

Steve · May 08, 2011, 22:22:39

Baz. Primary DNS 212.69.36.3 Secondary 212.69.40.3 You can find them under 'settings' after login to your Idnet account.

Baz · May 09, 2011, 11:44:48

Steve.router set to pick up auto and it has them the opposite way round as to what you say

Rik · May 09, 2011, 12:05:46

IDNet may have switched them over, Baz.

Glenn · May 09, 2011, 12:18:37

Using the link on the previous page, I was seeing a 3rd dns address too.

Rik · May 09, 2011, 12:20:17

Likewise, I've never seen a tertiary before.

pctech · May 09, 2011, 14:52:34

Putting in a new one to cope with a predicted traffic increase?

Steve · May 09, 2011, 15:13:16

I thought it was either old info or erroneous info, either way it's wrong!