Author Topic: www redirections  (Read 31532 times)

0 Members and 1 Guest are viewing this topic.

klogier

  • Guest
www redirections
« on: February 26, 2013, 08:49:25 PM »
Hi,
When I am surffing the internet by chrome/ie my browser sometimes redirects me to:
hxxp://c.mclarenz.net/click
hxxp://notfound.lflink.com

Enclosed me logs.

Sorry for my poor english.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: www redirections
« Reply #1 on: February 26, 2013, 08:51:15 PM »
Could you attach the main OTL log please

klogier

  • Guest
Re: www redirections
« Reply #2 on: February 26, 2013, 08:52:14 PM »
another logs

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: www redirections
« Reply #3 on: February 26, 2013, 09:03:25 PM »
Combofix and Hitmanpro were a bit of an overkill

Please download to your desktop Short cut cleaner
Then run.

When the Shortcut Cleaner has finished scanning your hard drive it will create a log file on your desktop called sc-cleaner.txt and then display it.
Please post that log

klogier

  • Guest
Re: www redirections
« Reply #4 on: February 27, 2013, 09:21:31 AM »
you got it

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37527
  • Not a avast user
Re: www redirections
« Reply #5 on: February 27, 2013, 10:18:28 AM »
you got it
essexboy will be back later today...he is usually here late UK time   ;)

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: www redirections
« Reply #6 on: February 27, 2013, 02:53:41 PM »
Are you still getting redirects and are they confined to Chrome and IE

klogier

  • Guest
Re: www redirections
« Reply #7 on: February 28, 2013, 06:12:39 PM »
Sorry for late answer. I have a lot of other work.
For now there isn't any redirections. What was it ?

I am not sure but something strange is when I search by google (only in Chrome, IE works good) word target service or targetservice. Please look at attached printscreen. Only on that computer google gives me marked result.

hxxp://targetservice.pl is my own site and I think it contains worm/virus, etc. code. I think this site is begining of my problems. Could you tell me is there any way to check files of my site?


Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: www redirections
« Reply #8 on: February 28, 2013, 07:28:11 PM »

klogier

  • Guest
Re: www redirections
« Reply #9 on: February 28, 2013, 08:11:38 PM »
essexboy I am totaly green in this. I have access to all files of this site, how can I check these files ?

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: www redirections
« Reply #10 on: February 28, 2013, 08:21:42 PM »
I have asked iDonovan to have a look as he knows more than I

klogier

  • Guest
Re: www redirections
« Reply #11 on: February 28, 2013, 08:26:19 PM »
Ok, thanks. :)

Offline !Donovan

  • Web Analyst
  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 2219
    • The WAR Against Malware
Re: www redirections
« Reply #12 on: February 28, 2013, 08:38:29 PM »
Hi klogier,

Your site leads to a fpert.qpoe.com?

With the Firefox browser and a Google referrer, I got:
HTTP/1.1 302 Moved Temporarily
Date: Thu, 28 Feb 2013 19:29:17 GMT
Server: Apache
Location: hXtp://fpert.qpoe.com/
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 20
Connection: close
Content-Type: text/html

See: http://urlquery.net/report.php?id=1187697
And: http://labs.sucuri.net/?details=fpert.qpoe.com

If you would, please upgrade your version of WordPress from 3.4.1 to 3.5.1.

Thanks,
~!Donovan
Familiarize Yourself! | Educate Yourself! | Beautify Yourself! | Scan Yourself!
"People who say it cannot be done should not interrupt those who are doing it."

klogier

  • Guest
Re: www redirections
« Reply #13 on: February 28, 2013, 08:58:07 PM »
Thanks !Donovan,
Unfortunately, I have no knowledge to do this. Site was made by a hired company, they bought domain for me to, when the problems started they say, we can't do anything and left me with a problem. I bought new adress by myself and want to transfer this site to it, but I don't know is it safe. I have all site files downloaded from old adress. Sorry I am totaly green on this. :-[

Offline !Donovan

  • Web Analyst
  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 2219
    • The WAR Against Malware
Re: www redirections
« Reply #14 on: February 28, 2013, 09:10:26 PM »
Can you access your WordPress dashboard? Default location is yoursite.com/wp-admin/.

The "Updates" link will be located in the sidebar.
Familiarize Yourself! | Educate Yourself! | Beautify Yourself! | Scan Yourself!
"People who say it cannot be done should not interrupt those who are doing it."