Malware Bytes Blocks This....

[deerejon]

browser tries to access 62.219.81.122 outgoing

 

this is a website in isreal i am not trying to get to....malware bytes is blocking it but how do i get rid of whatever is trying to get there....

[KaptCrunch]

check your tool bar or  any odd programs loaded  like price checker sounds if cookie infected browser

 

or set computer to earlier date before infection

[deerejon]

Nope no toolbars dont like or use em....I cleared cookies and browsing history and did a full scan with malwarebytes pro vversion but it didnt find anythign....yet it does the blocking when whatever tries to talk to isreal...

[7Toes]

WHAT KINDA OF VIRUS PROTECTION YOU IF IT HAS A BOOT SCAN USE THAT IT SCANS WHEN YOU REBOOT YOU COMPUTER SO IT SCANS BEFORE EVERYTHING LOADS UP IT WILL CATCH ANY SNEAKY MALWARE

[7Toes]

ALSO TRY SUPERSNTISPYWARE ITS FREE AND CATCHES MORE THAN MALWAREBITES DOSE

[deerejon]

Thanks man gonna try that...

[Labob]

What are you using for a browser ? Does this happen when you launch the browser. If thats the case you do have a browser hijacker. IN IE go tools internet options the general tab. The first box is your home page make sure its the one want to use. Anything else in there delete it.

[djMot]

You might want to check your hosts file to see if it's been compromised.  The hosts file can be found in c:\windows\system32\drivers\etc\
 

The stock version of the file reads as follows.  Change your to match this if there's something else in there.  Note that you may have a security program that has rewritten this file, although that's not always such a good move.  There are better ways of dealing with blocking and redirecting web access. 

 

# Copyright (c) 1993-2009 Microsoft Corp.

#

# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.

#

# This file contains the mappings of IP addresses to host names. Each

# entry should be kept on an individual line. The IP address should

# be placed in the first column followed by the corresponding host name.

# The IP address and the host name should be separated by at least one

# space.

#

# Additionally, comments (such as these) may be inserted on individual

# lines or following the machine name denoted by a '#' symbol.

#

# For example:

#

#      102.54.94.97     rhino.acme.com          # source server

#       38.25.63.10     x.acme.com              # x client host



# localhost name resolution is handled within DNS itself.

#	127.0.0.1       localhost

#	::1             localhost

127.0.0.1       localhost

[simplemod]

ALSO TRY SUPERSNTISPYWARE ITS FREE AND CATCHES MORE THAN MALWAREBITES DOSE

yes, try that, I use it once in a while on machines that malware has found lots of stuff on, then I'll run this to get more stuff.

it's actually called superantispyware

[deerejon]

Thanks guys I am going to work on this this morning.....I am using IE 8 and it randomnly trys that site throughout the day......my Homepage is correct not hijacked there.....

[J3st3r]

Have you tried running Hijackthis? It's pretty good at eliminating most Browser hijacks and it can also give you a complete list of everything that's running via printable log file. 

 

http://www.majorgeeks.com/Trend_Micro_HijackThis_d5554.html

 

I also have MalwareBytes installed and it works pretty good.If you run both Hijackthis and Malewarebytes in Safe mode you should be able to get rid of your bug.

 

 

On a side note,I don't have Java installed anymore and I no longer get pesty buggs,even if I DL p0rn0 from torrent sites.I run Firefox with AdBlock Plus.http://adblockplus.org/en/firefox Never get popups or even browser redirects for that matter.  

 

 

SUPERSNTISPYWARE is a POS.Remember a couple years ago when that Bundle BS was going around?It came packaged with SUPERAntiSpyWare and it completely wiped out any machine with Java installed in it.It had a Trojan/maleware Downloader built into it that would Download Dozens of damn browser add-ons,tool bars,shop at home aps and a bunch of other crap until your PC was so full of crap that it would literally take hours to boot up.Wow I HATE that one.I must of reinstalled 200-300 PCs because of that one.It was so horrible that even IF you manage to get the damn thing out of your computer your Registry was so Screwed that nothing would run correctly any more.Your registry literately looked like Swiss cheese with all the missing and corrupt registry keys.     

Edited February 16, 2013 by Pvt.Death