hijacking

Ask for help about NoScript, no registration needed to post
ldjfojaefj

hijacking

Post by ldjfojaefj » Mon Apr 06, 2009 6:50 pm

I'm using ff 3.0.8, tb 2.0.0.21, SP3 on this xp home with 2gig, VZ um175 modem

Something is going on in address bar for google or yahoo searches in FF3.0.8

I am directed after clicking on a link and a *.com I can see prior to hitting link but after in address bar for only a second and then I am taken to or Hijacked to some other site and then I hopefully can click back arrow once and then pray I don't have to reload and start over again..

Someone at Avast says.
"If you haven't already got the NoScript add-on for firefox I suggest you do."

I did and that is why I am here.

I did some surfing from FF search bar and problem still is there being hijacked to other sites.

Any suggestions?
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.8) Gecko/2009032609 Firefox/3.0.8

User avatar
therube
Ambassador
Posts: 7422
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: hijacking

Post by therube » Mon Apr 06, 2009 8:40 pm

Does the same happen if you use IE?

In any case, I would think you have been infected by malware.

Download Malwarebytes Anti-Malware.
Install it. Update it. Run a Quick Scan & see what it turns up.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.21) Gecko/20090403 SeaMonkey/1.1.16

User avatar
GµårÐïåñ
Lieutenant Colonel
Posts: 3339
Joined: Fri Mar 20, 2009 5:19 am
Location: PST - USA
Contact:

Re: hijacking

Post by GµårÐïåñ » Mon Apr 06, 2009 9:09 pm

Agreed that you should run some kind of a scan to see if its being hijacked by a malware or what. The behavior you describe is very common for that kind of reason, although not saying there isn't other reasons it can happen. You might also want to consider in addition to what therube suggested, getting Spybot S&D, its very effective and you can also see all the system level hompages/address/url hooks and see if anything got inserted in one of those.
~.:[ Lï£ê ï§ å Lêmðñ åñÐ Ì Wåñ† M¥ Mðñê¥ ßå¢k ]:.~
________________ .: [ Major Mike's ] :. ________________
Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.0.8) Gecko/2009032609 Firefox/3.0.8 FirePHP/0.2.4

Aerik
Junior Member
Posts: 40
Joined: Fri Mar 20, 2009 5:24 pm

Re: hijacking

Post by Aerik » Tue Apr 07, 2009 2:45 am

It sounds like your malware has altered your hosts file. in c/windows/system32/drivers/etc
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1b4pre) Gecko/20090402 Shiretoko/3.5b4pre

Post Reply