Advertisement
If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)
Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie
Hi there,
There is an issue with role permissions that is being worked on at the moment.
If you are having trouble with access or permissions on regional forums please post here to get access: https://www.boards.ie/discussion/2058365403/you-do-not-have-permission-for-that#latest

IE/Firefox redirecting

  • 18-11-2011 11:41am
    #1
    Registered Users, Registered Users 2 Posts: 13,746 ✭✭✭✭


    Recently in work when using the interent I noticed that when I click a link its tried to bring me to another site eg www.jacquie.com... even though I clicked on an excel link or something. this was with IE. I was also getting windows opening asking me to sign into FB/twitter.

    I moved onto Firefox and now the same redirecting is occurring.

    I raised it with IT, they ran scans etc but to no avail. It's still happening and is quite annoying.

    How can I fix this?


Comments

  • Registered Users, Registered Users 2 Posts: 7,020 ✭✭✭uch


    Have you tried running Malwarebytes or Spybot search and destroy?
    Could be malware

    21/25



  • Registered Users, Registered Users 2 Posts: 13,746 ✭✭✭✭Misticles


    uch wrote: »
    Have you tried running Malwarebytes or Spybot search and destroy?
    Could be malware


    Yup the IT guy ran Malware bytes when its started happening, it deleted something but the problem still occurs :confused:


  • Moderators, Arts Moderators, Regional Abroad Moderators Posts: 11,107 Mod ✭✭✭✭Fysh


    Misticles wrote: »
    Yup the IT guy ran Malware bytes when its started happening, it deleted something but the problem still occurs :confused:

    Make a note of the address and check for registry entries containing the address: Start > Regedit, then highlight "Computer" in the left pane and do File > Export to take a copy of your entire current registry state. Use Ctrl + F to bring up the search window and look for keys containing the address. If you find anything, check with your IT guy before deleting it. Use F3 to carry on the search after each hit.

    It's also worth running msconfig and checking what's running at startup.


  • Registered Users, Registered Users 2 Posts: 13,746 ✭✭✭✭Misticles


    Fysh wrote: »
    Make a note of the address and check for registry entries containing the address: Start > Regedit, then highlight "Computer" in the left pane and do File > Export to take a copy of your entire current registry state. Use Ctrl + F to bring up the search window and look for keys containing the address. If you find anything, check with your IT guy before deleting it. Use F3 to carry on the search after each hit.

    It's also worth running msconfig and checking what's running at startup.


    tried that, I highlighted my computer, exported and searched. Nothing with any of the redirected site names were in there.

    I'm running another malwarebytes scan now.

    On startup tab: NvCpl, smax4pnp, Reader_sl, ccApp, jusched, cftmon.


  • Moderators, Arts Moderators, Regional Abroad Moderators Posts: 11,107 Mod ✭✭✭✭Fysh


    Misticles wrote: »
    tried that, I highlighted my computer, exported and searched. Nothing with any of the redirected site names were in there.

    I'm running another malwarebytes scan now.

    On startup tab: NvCpl, smax4pnp, Reader_sl, ccApp, jusched, cftmon.

    There's nothing obvious there.

    In the registry, go to HKey_Local_Machine\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\ and check firefox.exe & iexplore.exe - there may be additional keys specified which are triggering the modified behaviour.

    Have you tried launching either browser in Safe Mode to see if the behaviour persists?


  • Advertisement
  • Registered Users, Registered Users 2 Posts: 13,746 ✭✭✭✭Misticles


    Fysh wrote: »
    There's nothing obvious there.

    In the registry, go to HKey_Local_Machine\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\ and check firefox.exe & iexplore.exe - there may be additional keys specified which are triggering the modified behaviour.

    Have you tried launching either browser in Safe Mode to see if the behaviour persists?


    I have checked the paths and there are just two entries on both... default and path.

    I wouldnt be too sure how to do that Fysh :o


  • Moderators, Arts Moderators, Regional Abroad Moderators Posts: 11,107 Mod ✭✭✭✭Fysh


    Misticles wrote: »
    I have checked the paths and there are just two entries on both... default and path.

    I wouldnt be too sure how to do that Fysh :o

    In your Start Menu, go to Mozilla Firefox and you should have an entry called Mozilla Firefox (Safe Mode). For IE it's normally listed as Internet Explorer (No Add-ons) under Start > Accessories > System Tools.


    (Edited to add: I realised last night that you don't get that option with Firefox on WinXp, but you can still get at safe mode by going to the Help menu and selecting Restart With Add-ons Disabled)

    Speaking of Safe Mode, have you tried booting into Safe Mode and running IE/Firefox there? Might help pin down the cause of the problem.


  • Registered Users, Registered Users 2 Posts: 1,974 ✭✭✭whizbang


    HijackThis.exe
    will show all redirects


  • Registered Users, Registered Users 2 Posts: 1,771 ✭✭✭Dude111


    Has the IT dept tried to do a system restore to BEFORE THIS STARTED happening?


    Good luck :)


  • Registered Users, Registered Users 2 Posts: 13,746 ✭✭✭✭Misticles


    Malwarebytes showed a threat alled back door agent, I deleted that and restarted so I'll check Monday.

    Nope it didn't try restoring to before it happened... Instead implied I was on sites that I shouldn't have been on.

    Boards, google, gmail.... Toxic ha


  • Advertisement
Advertisement