Author Topic: getting rid of "newstogram" or "http://pagesinxt.com"  (Read 5609 times)

Offline danielnk

  • Newbie
  • *
  • Posts: 2
    • Personal Message (Offline)
getting rid of "newstogram" or "http://pagesinxt.com"
« on: December 19, 2011, 01:22:42 PM »
Greetings

Today one of my favorite websites constantly redirects to items in subject line.  Avast! did not find/stop this and I am wondering how to:

1) report this to Avast! as suspect malware etc...?
2) how to get rid of it?

So far I have done a full scan, scanned with malwarebytes, used ccleaner to remove cookies etc....

Thanks for your help!

dnk

Online DavidR

  • avast! √úberevangelist
  • Certainly Bot
  • *****
  • Posts: 69205
  • Gender: Male
  • No support PMs thanks
    • Personal Message (Online)
Re: getting rid of "newstogram" or "http://pagesinxt.com"
« Reply #1 on: December 19, 2011, 02:22:42 PM »
I have visited the home page of the newstogram.com site using firefox 8.0 and can find no reference to the pagesinxt.com in the page source and it didn't redirect me. So is there a specific URL that you were on that redirects ?

Change the http to hXXp to break links and avoid accidental exposure to suspect URLs.

What browser were you using ?
Core2Duo E8300/ 4GB Ram/ WinXP ProSP3/ avast! free 2014 9.0.2018/ Outpost Firewall Pro9.1/ Firefox 28.0, NoScript, RequestPolicy/ MailWasher Pro/ DropMyRights/ MalwareBytes AntiMalware Premium 2.0.1/ WinPatrol+/ Drive Image 7.1/ SnagIt 10.0/ avast! mobile security

Offline megapancake

  • Jr. Member
  • **
  • Posts: 32
    • Personal Message (Offline)
Re: getting rid of "newstogram" or "http://pagesinxt.com"
« Reply #2 on: December 19, 2011, 03:02:13 PM »
Check your proxy settings.

Offline danielnk

  • Newbie
  • *
  • Posts: 2
    • Personal Message (Offline)
Re: getting rid of "newstogram" or "http://pagesinxt.com"
« Reply #3 on: December 19, 2011, 07:04:44 PM »
I am using Firefox 8.0.
The specific site that I was on when this was happening was bloomberg.com, although it did not send me to http://pagesinxt.com (title "Newstogram") until I clicked on a recent new article (various ones). 

If you can be more specific about the change in proxy settings using Firefox, I would appreciate it.  I am currently setup to "use system proxy settings".

Thanks

dnk

Online DavidR

  • avast! √úberevangelist
  • Certainly Bot
  • *****
  • Posts: 69205
  • Gender: Male
  • No support PMs thanks
    • Personal Message (Online)
Re: getting rid of "newstogram" or "http://pagesinxt.com"
« Reply #4 on: December 19, 2011, 07:29:49 PM »
I think that the proxy suggestion is a red herring.

Now that you have given the URL, I have checked out the bloomberg.com home page and again no redirect, but there is one reference to newstogram.com in a script tag (see image), but that doesn't appear to be any redirection.

So I'm unable to find anything obvious on that page that might attempt a redirect, avast is quite good on malicious redirect attempts (usually inserted script tags, but not like this). Unless you are able to give a more specific page URL at blomberg.com, I can't see where the problem is.
Core2Duo E8300/ 4GB Ram/ WinXP ProSP3/ avast! free 2014 9.0.2018/ Outpost Firewall Pro9.1/ Firefox 28.0, NoScript, RequestPolicy/ MailWasher Pro/ DropMyRights/ MalwareBytes AntiMalware Premium 2.0.1/ WinPatrol+/ Drive Image 7.1/ SnagIt 10.0/ avast! mobile security

 

Google Chrome

AVAST recommends using the FREE Google Chrome™ browser.

Download Google Chrome Now