Webmaster Forum

Go Back   Webmaster Forum > The Webmaster Forums > Tech Talk

Tech Talk Discuss computer issues, tech gadgets and hardware, operating systems, browsers, broadband and wireless, virus, trojan, and spyware help.


Reply
 
Thread Tools Display Modes
Share |
  #1  
Old 07-06-2007, 08:31 AM
viswablr's Avatar
viswablr viswablr is offline
Contributing Member
 
Join Date: 05-28-07
Location: Bangalore
Posts: 194
iTrader: 0 / 0%
Unhappy Adsense ads hijacked! Please Help!

Hello Web Comrades,

For the past one week, all the adsense ads are getting replaced with adult/gambling related banner ads on my PC. (Not only the adsense ads of my site, but those of any site I visit from my PC).

Here are the clues:
1) Only if I use Internet Explorer.
Firebox, Netscape browsers: No issues.(Adsense are displayed without getting hijacked.)

2) Browser hits googlesyndication.com, but immediately changes to a site called "ad.directanetworks.com", which in turn loads banner ads.

3) If I press "reload/ refresh" button, adsense ads are correctly displayed.

4) I have already verified "hosts" file. It is Ok only.

5) I have already run latest version of Mcafee antivirus, latest version of ad-aware etc. I have already wasted two full days trying to fix the issue. But the problem still persists.

Someone please help me. Otherwise I will throw away my
PC :-(, then I will not be able to talk to you again :-(
 
Reply With Quote

Advertisement

Advertisement

  #2  
Old 07-07-2007, 03:57 AM
Ferre's Avatar
Ferre Ferre is offline
No Longer Active
 
Join Date: 10-15-03
Location: Amsterdam, Netherlands
Posts: 6,897
iTrader: 0 / 0%
*Moved to computerforums.

Me thinks you need to do a couple of trojan and virus scans. You seem to have a virus/trojan.
 
Reply With Quote
  #3  
Old 07-07-2007, 07:26 AM
viswablr's Avatar
viswablr viswablr is offline
Contributing Member
 
Join Date: 05-28-07
Location: Bangalore
Posts: 194
iTrader: 0 / 0%
Even the latest antivirus software or spyware detector is not able to detect it ...
 
Reply With Quote
  #4  
Old 07-07-2007, 07:43 AM
astrovineet's Avatar
astrovineet astrovineet is offline
Contributing Member
 
Join Date: 10-19-06
Location: delhi
Posts: 911
iTrader: 0 / 0%
may be u need to get latest updated AVG or go for online scan by trend micro

I wish you get your pc clean and free from any trojans or spyware or virus of any kind

viineet jain
 
Reply With Quote
  #5  
Old 07-07-2007, 07:57 AM
blackeden blackeden is offline
Junior Member
 
Join Date: 07-01-07
Posts: 3
iTrader: 0 / 0%
hum,the worst plan,U should re-install your system,that's a good idea,it can solve all the troubles
 
Reply With Quote
  #6  
Old 07-09-2007, 07:15 AM
Musica's Avatar
Musica Musica is offline
Contributing Member
 
Join Date: 07-05-07
Posts: 130
iTrader: 0 / 0%
Well if you do go the format way, just don't forget to backup the important stuff, and b4 u download it back to ur clean system just remember to scan the files first.

I suggest you download hijackthis and search online for each item listed in its log. In my opinion tis is way better than formatting ur pc
 
Reply With Quote
  #7  
Old 07-09-2007, 07:59 AM
GiorgosK's Avatar
GiorgosK GiorgosK is offline
Senior Member
 
Join Date: 01-17-07
Location: Geoland.org
Posts: 250
iTrader: 1 / 100%
Try running any or all of the following
in safe mode (PRESS F8 when computer starts)
not all programs can run in safe mode though.

- Spybot search and destroy (can definetelly run in safe mode)
- HijackThis (can also run in safe mode) erase anything suspicious, don't be afraid, everything is backed up by the program and can be restored ....

If first 2 don't do it
- AVG or BitDefender or PC tools Antivirus
(all free, some will detect some viruses some will detect other, no Antivirus is perfect even the paid ones, McAfee and Norton probably the worse out there)

- Last but not least AND definetelly NOT for the faint hearted,
Start > RUN > services.msc > right click on any service that looks suspicious
stop and put to manual or disable "startup type"
 
Reply With Quote
  #8  
Old 07-09-2007, 08:59 AM
viswablr's Avatar
viswablr viswablr is offline
Contributing Member
 
Join Date: 05-28-07
Location: Bangalore
Posts: 194
iTrader: 0 / 0%
HijackThis did the magic!

Hey GiorgosK and Musica,

HijackThis tool finally did the magic. It identified suspicious objects (Some BHO based Trojan), and I removed them. Now the hijacking story is over! Thanks a lot folks!

And thanks a lot to everyone else who came up with a suggestion. Every suggestion had some valuable information.

I agree with GiorgosK. I ran Mcafee at least 10 times, and each time it took 3 hours to complete the scanning, but it was never able to identify the trojan.

HijackThis on the other hand took 10 seconds, and identified the trojan.
 
Reply With Quote
  #9  
Old 07-09-2007, 09:29 AM
oddjob's Avatar
oddjob oddjob is offline
Contributing Member
 
Join Date: 10-25-06
Location: London, U.K.
Posts: 127
iTrader: 0 / 0%
Quote:
Originally Posted by viswablr View Post
I removed them.
Can I ask ... what did you do? Fix the entry with HijackThis? Did you also remove the file/folder itself where the malware was located?

Just fixing things with HJT doesn't mean the malware is gone ... just that it's not running.


OJ
 
Reply With Quote
  #10  
Old 07-09-2007, 10:05 PM
viswablr's Avatar
viswablr viswablr is offline
Contributing Member
 
Join Date: 05-28-07
Location: Bangalore
Posts: 194
iTrader: 0 / 0%
Removed the associated DLLs also ...
 
Reply With Quote
  #11  
Old 07-10-2007, 11:04 PM
GiorgosK's Avatar
GiorgosK GiorgosK is offline
Senior Member
 
Join Date: 01-17-07
Location: Geoland.org
Posts: 250
iTrader: 1 / 100%
@oddjob inactive is better than having it run!! right ?

@visualblr hijackthis is not an antivirus it is a spyware remover, and IE spyware remover (of sorts), so keep both in your computer and run when needed but I would suggest the PC Tools antivirus for an antivirus (free, I was satisfied)

Some rep is always welcome, from anyone that thinks the post was helpful
 
Reply With Quote
  #12  
Old 07-11-2007, 12:54 AM
oddjob's Avatar
oddjob oddjob is offline
Contributing Member
 
Join Date: 10-25-06
Location: London, U.K.
Posts: 127
iTrader: 0 / 0%
Quote:
Originally Posted by GiorgosK View Post
inactive is better than having it run!! right ?
Yes but would you like an unexploded bomb in your house?

Surely you would want it removed, wouldn't you?

HJT does NOT remove things. It just stops them running.

You must go and find the offending files etc. and remove them manually. An unwanted bit of code may reactive them.


OJ
 
Reply With Quote
  #13  
Old 07-11-2007, 03:06 AM
GiorgosK's Avatar
GiorgosK GiorgosK is offline
Senior Member
 
Join Date: 01-17-07
Location: Geoland.org
Posts: 250
iTrader: 1 / 100%
I don't worry that much about it, if you don't detonate that bomb noone will and it wont be done automatically either ....

So, I agree it would be nice to erase it, but its no big deal for me, it will be cleaned up the next time I format my hard drive ....
 
Reply With Quote
Go Back   Webmaster Forum > The Webmaster Forums > Tech Talk

Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
My email is being hijacked woosterbert Tech Talk 6 08-12-2007 07:02 AM
Google Adsense Hijacked dvduval Contextual Networks 2 05-27-2005 10:21 AM
Planes weren't hijacked on 9/11 younghistorians Controversial Social Issues 128 11-02-2004 11:07 AM


V7N Network
Get exposure! V7N I Love Photography V7N SEO Blog V7N Directory


All times are GMT -7. The time now is 03:47 PM.
Powered by vBulletin
Copyright 2000-2014 Jelsoft Enterprises Limited.
Copyright © 2003 - 2018 VIX-WomensForum LLC