Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 792
  • Last Modified:

Possible virus with google javascript

In all of my browsers, IE10, Firefox21, Chrome, when I click to go to a new page (e.g. an Experts Exchange search), I often get sent to a different page (e.g. the Meatworks).

I can fix this in Firefox by disabling every advertising script with google in the name. I can't use IE or Chrome because they do not allow users to disable Ads.

However, I am perplexed that no-one else seems to have this problem, so I suspect I have a virus or some other kind of malicious software.

I have Microsoft Security Essentials which seems to keep me safe, apart from this problem.

Any suggestions.
0
GrahamDLovell
Asked:
GrahamDLovell
  • 4
  • 3
2 Solutions
 
Dave BaldwinFixer of ProblemsCommented:
Run a full scan.  You have something called a 'Google Redirect Virus'.  If MSE doesn't find and remove it, we can suggest other things that will.
0
 
David Johnson, CD, MVPOwnerCommented:
try malwarebytes (http://www.malwarebytes.org) and scan your computer.
0
 
GrahamDLovellAuthor Commented:
Here is progress so far:

MSE didn't find anything. Malwarebytes' rapid scan also didn't find anything that MSE hadn't disabled, but a full scan found one item in an old recovery section of the disk, and I have removed it. Here is the log entry:

..\Program Files\Microsoft.NET\SDK\v1.1\QuickStart\howto\samples\xml\xmlnamespace\cp\XmlNameSpace.exe (Adware.StatBlaster) -> Quarantined and deleted successfully.

I don't get the redirects now, although I still get the annoying ads, except in Firefox, where AdBlock Plus seems to be effective.
0
Worried about phishing attacks?

90% of attacks start with a phish. It’s critical that IT admins and MSSPs have the right security in place to protect their end users from these phishing attacks. Check out our latest feature brief for tips and tricks to keep your employees off a hackers line!

 
Dave BaldwinFixer of ProblemsCommented:
You should examine all your addons.  I suggest you remove anything you are not using.  And almost all 'toolbars' are spyware and some are used to deliver ads and popups to you.  I don't allow ANY toolbars on my computers, not Google or Bing or Yahoo or any others.
0
 
GrahamDLovellAuthor Commented:
I agree. Everyone seems to want to add a toolbar to my browsers.
0
 
Dave BaldwinFixer of ProblemsCommented:
When you go to a new page, every toolbar you have 'phones home' to tell it's master where you are so they can add to your 'advertising portfolio'.  Toolbars are better than tracking cookies for the advertisers.
0
 
GrahamDLovellAuthor Commented:
The problem with the "Google redirect" virus has re-emerged, and the program I thought that I had removed is still there. It is XmlNameSpace.exe. Now removed again, and the problem dropped back a step: it doesn't redirect.

However, IE still came up with bogus adverts.

I then tried removing all of the IE Add-Ins for which I didn't recognize the company name (using the menu option in Tools). I also disabled PlusIEEventHelper Class (purporting to be from Zeon Corporation).

This seems to help. I am not sure why. Any comments anyone
0
 
Dave BaldwinFixer of ProblemsCommented:
Then I suggest using ComboFix from Bleepingcomputer http://www.bleepingcomputer.com/download/combofix/ (Not from anywhere else!).  Run it then run MalwareBytes again.  This will take a while but I have found it to be the most effective combination of scans.  Of course, you have to be careful where you are going on the internet and what you are clicking on to avoid getting it again.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Building an Effective Phishing Protection Program

Join Director of Product Management Todd OBoyle on April 26th as he covers the key elements of a phishing protection program. Whether you’re an old hat at phishing education or considering starting a program -- we'll discuss critical components that should be in any program.

  • 4
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now