Author Topic: Browser redirect?  (Read 5291 times)

0 Members and 3 Guests are viewing this topic.

REDACTED

  • Guest
Browser redirect?
« on: June 23, 2018, 09:45:26 PM »
Random redirect in Firebox. Hoping this is simple.
Thx in advance.

REDACTED

  • Guest
Re: Browser redirect?
« Reply #1 on: June 28, 2018, 01:47:31 AM »
If anyone were kind enough to take a look I'd be most appreciative.
Thank you.

Offline Sass Drake

  • MyCity AMF R2
  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 820
Re: Browser redirect?
« Reply #2 on: June 28, 2018, 10:10:22 AM »
This looks clean. Does it happen on every webistes or only on specific ones?

REDACTED

  • Guest
Re: Browser redirect?
« Reply #3 on: June 28, 2018, 07:21:05 PM »
No rhyme or reason to the redirect, just random in Firefox. [I have no plug ins, extension, add on's etc.]
Did a boot scan, nothing.  Where does an annoying bugger like this hide? Grrr

Had a similar issue in 2015, dbrisendine had me run a fixlist script that basically reset things. Would just run that again but 1) wanted an expert opinion there was nothing else amiss and 2) a quick look to perhaps see if that file and fix process is appropriate.
https://forum.avast.com/index.php?topic=173507.msg1234044#msg1234044

Thank you for the reply Sass Drake . . .

Offline Sass Drake

  • MyCity AMF R2
  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 820
Re: Browser redirect?
« Reply #4 on: June 29, 2018, 07:07:14 PM »
Do you get redirects in Firefox if only YouTube is opened?

REDACTED

  • Guest
Re: Browser redirect?
« Reply #5 on: June 29, 2018, 09:02:59 PM »
Nothing to do with what website I'm on. Usually just browsing the news; NPR, Yahoo, etc.
But for the third time I noticed it happens *exactly* at the top of the hour.

Offline Sass Drake

  • MyCity AMF R2
  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 820
Re: Browser redirect?
« Reply #6 on: June 30, 2018, 05:11:20 PM »
Are you getting them in Chrome? Can you copy address of webpage where you  get rediretcted and paste it here.

REDACTED

  • Guest
Re: Browser redirect?
« Reply #7 on: July 01, 2018, 05:54:10 PM »
I don't have Chrome installed.
Here's the most recent address when redirect occured:
https://www.yahoo.com/news/m/08ad8d60-6443-33c5-802a-bc312030f7df/ss_shark-drags-woman-into.html
(because sharks and crocodiles!!)

This would seem an infection, likely not related to the active web address.

Offline Sass Drake

  • MyCity AMF R2
  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 820
Re: Browser redirect?
« Reply #8 on: July 01, 2018, 09:08:33 PM »
FRST logs show that you have Google Chrome installed but they doesn't show traces of infection. Do you have other PCs or phones in your home? If you do, do they have same problem?

REDACTED

  • Guest
Re: Browser redirect?
« Reply #9 on: July 02, 2018, 06:58:15 AM »
LOL, yes I found Chrome. The bookmarks were so dusty.
One other computer in the house without similar issue.

Do security folks recommend Chrome, another specific browser? If so, why? OP was about FF so just curious why we're focused on Chrome - learning opportunity perhaps?

REDACTED

  • Guest
Re: Browser redirect?
« Reply #10 on: July 02, 2018, 08:05:08 PM »
Here's the redirect page. Didn't realize I missed the beginning of the URL before deleting, will try to nab that next occurrence.

Offline Sass Drake

  • MyCity AMF R2
  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 820
Re: Browser redirect?
« Reply #11 on: July 02, 2018, 09:17:18 PM »
In Firefox, visit this URL:

Code: [Select]
about:serviceworkers
And delete/unregister everything listed but before make a screenshot and post it here if possible.

REDACTED

  • Guest
Re: Browser redirect?
« Reply #12 on: July 03, 2018, 06:47:30 AM »
No Service Workers registered.

Offline Sass Drake

  • MyCity AMF R2
  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 820
Re: Browser redirect?
« Reply #13 on: July 03, 2018, 10:00:03 PM »
Please post new FRST.txt and Addition.txt.

REDACTED

  • Guest
Re: Browser redirect?
« Reply #14 on: July 05, 2018, 07:38:40 AM »
Attached