Results 1 to 4 of 4
  1. #1
    New Lounger
    Join Date
    Feb 2010
    Location
    Orem, Utah, USA
    Posts
    6
    Thanks
    2
    Thanked 0 Times in 0 Posts

    Virus? Extra characters added to homepage

    Recently I've noticed extra characters sometimes being added to my homepage.
    Using Windows XP SP3, I open IE8 or Firefox 4 and sometimes (not everytime) see /KkNfZ/ added to the back end of the address. Often it redirects to the correct page so quickly I only notice a flash of something in the address bar, but today I got a 404 error and was able to capture the address for sure.

    I've scanned the machine with Microsoft Security Essentials, Anti-Malware Bytes, and the bootable version of AVG - none of which found anything.

    My searches of the Internet for that string have found nothing.

    Any ideas?

  2. #2
    Plutonium Lounger Medico's Avatar
    Join Date
    Dec 2009
    Location
    USA
    Posts
    12,631
    Thanks
    161
    Thanked 936 Times in 856 Posts
    Silly, Good morning and welcome to the Lounge.

    I would try to clear all History / Cookies, then flush the DNS cache.
    BACKUP...BACKUP...BACKUP
    Have a Great Day! Ted


    Sony Vaio Laptop, 2.53 GHz Duo Core Intel CPU, 8 GB RAM, 320 GB HD
    Win 8 Pro (64 Bit), IE 10 (64 Bit)


    Complete PC Specs: By Speccy

  3. The Following User Says Thank You to Medico For This Useful Post:

    silly.ol.ryan (2011-06-20)

  4. #3
    New Lounger
    Join Date
    Feb 2010
    Location
    Orem, Utah, USA
    Posts
    6
    Thanks
    2
    Thanked 0 Times in 0 Posts
    Good ideas, Ted! Thanks!

    Other thing I forgot to mention, if it makes a difference: I didn't mention that I've seen this happen now on two administrator accounts and one limited user account - all on the same computer.

    I've just ran:
    ATF Cleaner (Just recently discovered this freeware gem and love it!)
    CCleaner
    Internet Explorer's 'Delete Browsing History'
    and Firefox's Clear Recent History

    Rebooted my router
    ran ipconfig /FlushDNS

    Closed and opened Explorer and Firefox a few times, and saw no problem yet.

    I'll keep watching and see what happens next...

  5. #4
    Super Moderator satrow's Avatar
    Join Date
    Dec 2009
    Location
    Cardiff, UK
    Posts
    4,490
    Thanks
    284
    Thanked 577 Times in 480 Posts
    I've seen several references to this type of redirect but I still can't work out what's triggering it, could you give some details of the machine, make/model etc?

    What happens after a reboot?

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •