Author Topic: Websites redirecting to spammy websites  (Read 2949 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
Websites redirecting to spammy websites
« on: November 24, 2015, 08:17:13 PM »
I have the following problem: When I visit 2 of my websites I'm being redirected to different URLs (I don't want to post these URLs here, but they are websites with ads or a Facebook-looking website with a competition). I have already contacted the support of my hosting provider and we found out that the problem is on my end, as they have checked these 2 websites from several different locations (I also asked my friends to check them) and they loaded fine all times. My web host's support asked me to open a command prompt on my PC a do an nslookup for those domains and this way we found out that one of these IP's on my PC is not correct.

This happens in both my Firefox and Chrome browsers that I'm using.

What is strange is that it also happens on my iPad on Safari (I'm using the same WiFi network). Also, it is strange to me that is happens only to these 2 particular websites and everything else is working fine on my end.

I did a full-scan of my PC with Avast and Malwarebytes, but no malware was found (Avast said that some files could not be tested).

My cousin suggested me to try to do a scan with HiJackThis, so I've tried that. When I clicked the "Do a system scan" button, I got a warning (please see the attachment). So I've checked my hosts file, but I've not found anything unusual in it (no my sites' URL and not the wrong IP).

I've also found out the following in my hijackthis log file:
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL

^ Could this be the problem?

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37533
  • Not a avast user
Re: Websites redirecting to spammy websites
« Reply #1 on: November 24, 2015, 08:26:33 PM »
follow instructions her https://forum.avast.com/index.php?topic=53253.0
scroll down to second picture ... Farbar Recovery Scan Tool ... run as instrcucted and attach the two diagnostic logs


Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37533
  • Not a avast user
Re: Websites redirecting to spammy websites
« Reply #2 on: November 24, 2015, 08:28:12 PM »
Quote
(Avast said that some files could not be tested)
How do I handle files that avast! can’t scan? https://blog.avast.com/2014/02/28/how-do-i-handle-files-that-avast-cant-scan/


REDACTED

  • Guest
Re: Websites redirecting to spammy websites
« Reply #3 on: November 24, 2015, 09:43:30 PM »
OK, here are the log files.

Also, I forgot to say that Avast was blocking one of the websites to which I was being redirected. And it doesn't always load the same website, there are more.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37533
  • Not a avast user
Re: Websites redirecting to spammy websites
« Reply #4 on: November 24, 2015, 09:48:36 PM »
Now you wait for a malware expert to arrive   


Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Websites redirecting to spammy websites
« Reply #5 on: November 24, 2015, 11:04:47 PM »
Nothing evident, HJT cannot handle 64 bit systems hence the problems it has

The problem may reside on the website

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Websites redirecting to spammy websites
« Reply #6 on: November 24, 2015, 11:35:05 PM »
There is the : alternatedatastreams: c:\programdata\temp:d1b5b4f1

REDACTED

  • Guest
Re: Websites redirecting to spammy websites
« Reply #7 on: November 30, 2015, 10:28:46 AM »
No one can help me? Please carefully read my whole first post in this thread. The websites are OK, with no any malware. The problem is on my end.

There is the : alternatedatastreams: c:\programdata\temp:d1b5b4f1

So what should I do with this?

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Websites redirecting to spammy websites
« Reply #8 on: November 30, 2015, 11:03:09 AM »
Give this fixlist a try and see if things have improved.

REDACTED

  • Guest
Re: Websites redirecting to spammy websites
« Reply #9 on: December 01, 2015, 04:24:26 PM »
Give this fixlist a try and see if things have improved.

What should I do with the fixlist.txt file? (I'm sorry, I'm new to this)