Results 1 to 4 of 4
  1. #1
    New Lounger
    Join Date
    Feb 2010
    Location
    Orem, Utah, USA
    Posts
    6
    Thanks
    2
    Thanked 0 Times in 0 Posts

    Virus? Extra characters added to homepage

    Recently I've noticed extra characters sometimes being added to my homepage.
    Using Windows XP SP3, I open IE8 or Firefox 4 and sometimes (not everytime) see /KkNfZ/ added to the back end of the address. Often it redirects to the correct page so quickly I only notice a flash of something in the address bar, but today I got a 404 error and was able to capture the address for sure.

    I've scanned the machine with Microsoft Security Essentials, Anti-Malware Bytes, and the bootable version of AVG - none of which found anything.

    My searches of the Internet for that string have found nothing.

    Any ideas?

  2. #2
    Plutonium Lounger Medico's Avatar
    Join Date
    Dec 2009
    Location
    USA
    Posts
    12,631
    Thanks
    161
    Thanked 937 Times in 856 Posts
    Silly, Good morning and welcome to the Lounge.

    I would try to clear all History / Cookies, then flush the DNS cache.
    BACKUP...BACKUP...BACKUP
    Have a Great Day! Ted


    Sony Vaio Laptop, 2.53 GHz Duo Core Intel CPU, 8 GB RAM, 320 GB HD
    Win 8 Pro (64 Bit), IE 10 (64 Bit)


    Complete PC Specs: By Speccy

  3. The Following User Says Thank You to Medico For This Useful Post:

    silly.ol.ryan (2011-06-20)

  4. #3
    New Lounger
    Join Date
    Feb 2010
    Location
    Orem, Utah, USA
    Posts
    6
    Thanks
    2
    Thanked 0 Times in 0 Posts
    Good ideas, Ted! Thanks!

    Other thing I forgot to mention, if it makes a difference: I didn't mention that I've seen this happen now on two administrator accounts and one limited user account - all on the same computer.

    I've just ran:
    ATF Cleaner (Just recently discovered this freeware gem and love it!)
    CCleaner
    Internet Explorer's 'Delete Browsing History'
    and Firefox's Clear Recent History

    Rebooted my router
    ran ipconfig /FlushDNS

    Closed and opened Explorer and Firefox a few times, and saw no problem yet.

    I'll keep watching and see what happens next...

  5. #4
    Administrator satrow's Avatar
    Join Date
    Dec 2009
    Location
    Cardiff, UK
    Posts
    5,034
    Thanks
    407
    Thanked 662 Times in 557 Posts
    I've seen several references to this type of redirect but I still can't work out what's triggering it, could you give some details of the machine, make/model etc?

    What happens after a reboot?

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •