• RSS
  • Twitter
  • FaceBook

Security Forums

Log in

FAQ | Search | Usergroups | Profile | Register | RSS | Posting Guidelines | Recent Posts

New Threat!! Browser Hijack from YouTube download programs

Users browsing this topic:0 Security Fans, 0 Stealth Security Fans
Registered Security Fans: None
Post new topic   Reply to topic   Printer-friendly version    Networking/Security Forums Index -> Spyware // Adware // Trojans Discussion

View previous topic :: View next topic  
Author Message
metemi
Just Arrived
Just Arrived


Joined: 16 May 2010
Posts: 0


Offline

PostPosted: Mon May 17, 2010 11:18 am    Post subject: New Threat!! Browser Hijack from YouTube download programs Reply with quote

Redirects to fake Google home page. url is websearchadvice.com, or sometimes slightly different wording. such as hxxp://www.seacher.net/

In Internet Explorer, a message about the home page hijack comes up, saying that hxxp://www.google-feed.net/?CID=2&PID=STV is trying to set itself as my homepage. So websearchadvice and google-feed.net are 2 key terms here. A search for google-feed.net pretty much only points to the site of ParetoLogic which offers software specifically to get rid of this malware, only I tried it and it doesn't work at all, and ParetoLogic sounds like a pretty shady company if you search around about it.

I need to install SP3 for Windows XP before I can post my Hijack This logfile, but just wanted to give a heads up for this thing. It's nasty, I can't get rid of it. Here is what the redirect page looks like -




Moderator note: edited to invalidate dangerous URLs - capi
Back to top
View user's profile Send private message
metemi
Just Arrived
Just Arrived


Joined: 16 May 2010
Posts: 0


Offline

PostPosted: Mon May 17, 2010 11:23 am    Post subject: Reply with quote

Oh and btw it is hxxp://www.savetubevideo.com/ where I contracted this. Don't d/l this program!, don't even go to the site.

Also I should mention that Chrome is not affected by this. In Firefox I get redirected to this fake homepage every now and then. In IE it's rampant, can't even load IE without it pointing to this thing.

When I'm redirected, I can see a few url's in the status bar, -

searcher.net
counter.yadro.ru
veerbo.com

Any knowledge about this yet? It seems like a very new threat, as I cannot find much info about it.

<edited to break URL. AdamV>
Back to top
View user's profile Send private message
Display posts from previous:   

Post new topic   Reply to topic   Printer-friendly version    Networking/Security Forums Index -> Spyware // Adware // Trojans Discussion All times are GMT + 2 Hours
Page 1 of 1


 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

Community Area

Log in | Register