Automaticaly redirecting page in Opera

Viruses and worms
1

I have problem with automatic redirecting webbrowser Opera to page: http://9securityscan.com/scan1/?pid=180s4&engine=%3DHGx9DTuNTAyLjExMS4xMiZ0aW1lPTEyNTEyOUUONAkO . Sometime when I write some url like example www.avast.cz, I get this. Avast cannot find any virus, what I can do?

2

Try scanning your computer with an arsenal of Malware removers like these

Malwarebytes Anti-Malware 1.41 http://filehippo.com/download_malwarebytes_anti_malware/

SuperAntiSpyware 4.29.1002 http://filehippo.com/download_superantispyware/

a-squared Free 4.5.0.11 http://filehippo.com/download_asquared/

come back and post scan logs here

3

First log:

Malwarebytes’ Anti-Malware 1.41
Verze databáze: 2945
Windows 5.1.2600 Service Pack 2

12.10.2009 21:40:20
mbam-log-2009-10-12 (21-40-20).txt

Typ kontroly: Kompletní kontrola (C:|E:|)
Zkontrolované objekty: 586407
Uplynulý čas: 9 hour(s), 3 minute(s), 59 second(s)

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 0
Infikované hodnoty registru: 0
Infikované datové položky registru: 0
Infikované adresáře: 0
Infikované soubory: 4

Infikované procesy v paměti:
(Nebyly nalezeny žádné škodlivé položky)

Infikované moduly v paměti:
(Nebyly nalezeny žádné škodlivé položky)

Infikované klíče registru:
(Nebyly nalezeny žádné škodlivé položky)

Infikované hodnoty registru:
(Nebyly nalezeny žádné škodlivé položky)

Infikované datové položky registru:
(Nebyly nalezeny žádné škodlivé položky)

Infikované adresáře:
(Nebyly nalezeny žádné škodlivé položky)

Infikované soubory:
E:\Install\Software\CloneDVD\a\CloneDVD2.exe (Trojan.Downloader) → Quarantined and deleted successfully.
E:\Install\Software\CloneDVD\a\c.exe (Trojan.Downloader) → Quarantined and deleted successfully.
E:\Zalohy\DY\Local Settings\Data aplikací\Opera\Opera\profile\cache4\temporary_download\gamingharbor_installer.exe (Adware.DoubleD) → Quarantined and deleted successfully.
E:\Zalohy\DY\Local Settings\Data aplikací\Xenocode\Sandbox\Microsoft Internet Explorer 6\6.00.2800.1106\2009.03.19T01.00\Virtual\STUBEXE@PROGRAMFILES@\Internet Explorer\IEXPLORE.EXE (Backdoor.PoisonIvy) → Quarantined and deleted successfully.

=== TRANSLATE: ===

Malwarebytes’ Anti-Malware 1.41
Database version: 2945
Windows 5.1.2600 Service Pack 2

12.10.2009 21:40:20
mbam-log-2009-10-12 (21-40-20). txt

Type of control: Full control (C: \ | E: \ |)
Inspected objects: 586,407
Elapsed time: 9 hour (s), 3 minute (s), 59 second (s),

Infected processes in memory: 0
Infected memory modules: 0
Infected registry keys: 0
Registry Values Infected: 0
Infected registry data items: 0
Infected directory: 0
Infected files: 4

Infected processes in memory:
(Sorry, no harmful items)

Infected modules in memory:
(Sorry, no harmful items)

Infected registry keys:
(Sorry, no harmful items)

Infected Registry Values:
(Sorry, no harmful items)

Infected data registry entry:
(Sorry, no harmful items)

Infected directory:
(Sorry, no harmful items)

Infected files:
E: \ Install \ Software \ CloneDVD \ a \ CloneDVD2.exe (Trojan.Downloader) → Quarantined and deleted successfully.
E: \ Install \ Software \ CloneDVD \ a \ c.exe (Trojan.Downloader) → Quarantined and deleted successfully.
E: \ Backups \ DY \ Local Settings \ Application Data \ Opera \ Opera \ profile \ cache4 \ temporary_download \ gamingharbor_installer.exe (Adware.DoubleD) → Quarantined and deleted successfully.
E: \ Backups \ DY \ Local Settings \ Application Data \ Xenocode \ Sandbox \ Microsoft Internet Explorer 6 \ 6.00.2800.1106 \ 2009.03.19T01.00 \ Virtual \ STUBEXE \ @ @ PROGRAMFILES \ Internet Explorer \ IEXPLORE.EXE (Backdoor.PoisonIvy ) → Quarantined and deleted successfully.

4

Hi Dosty,

Also look here: http://www.bleepingcomputer.com/uninstall/2383/CloneDVD.html

polonus

5

Hi polonus,

this solve my problem? Uninstall CloneDVD?

6

Hi Dosty,

Assume this will,

pol

7

Ok, I try… thx

8

I see Windows 5.1.2600 Service Pack 2 and WinXP SP3 has been available for over a year so you should go to Tools then Windows Update in Internet Explorer and install all updates as it provides performance enhancements and several Critical updates.

Go to Control panel then Automatic updates then at least enable Notify me but do not download updates.

Tomorrow there will be 13 updates for Windows with most of them being Critical Updates.

Run Secunia Online Software Inspector to see what applications are vulnerable:
http://secunia.com/vulnerability_scanning/online