Web Page Redirecting: Malwarebytes Log

Viruses and worms
1

Every so often my web page is being redirected to various sites. I ran malwarebytes, but it came up with no infected files. Here is the log:

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

Any suggestions?

2

Cropping the log contents removes valuable information, not least if the MBAM version and signatures are the latest but your OS info also.

I would have thought this redirection wouldn’t have been intermittent.

So under what circumstances are they redirected, searches, visits to specific sites, etc. etc. ?

Try SUPERantispyware On-Demand only in free version.
Don’t worry about reported tracking cookies they are a minor issue and not one of security, allow SAS to deal with them though. - See http://en.wikipedia.org/wiki/HTTP_cookie.
Also available a portable version of SAS, http://www.superantispyware.com/portablescanner.html, no installation required.

3

It just started happening yesterday. When I went to facebook, I was redirected to a survey site (twice), and then I when I went to a blog I frequent I was redirected to some muscle building product site. Here is the log file from that program you recommended:

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 04/06/2010 at 11:26 AM

Application Version : 4.35.1002

Core Rules Database Version : 4775
Trace Rules Database Version: 2587

Scan type : Quick Scan
Total Scan Time : 00:33:01

Memory items scanned : 672
Memory threats detected : 0
Registry items scanned : 528
Registry threats detected : 0
File items scanned : 9624
File threats detected : 12

Adware.Tracking Cookie
C:\Documents and Settings\Pali\Cookies\pali@ads.whaleads[1].txt
C:\Documents and Settings\Pali\Cookies\pali@media6degrees[2].txt
C:\Documents and Settings\Pali\Cookies\pali@media.formatdynamics[1].txt
C:\Documents and Settings\Pali\Cookies\pali@ads.crakmedia[1].txt
C:\Documents and Settings\Pali\Cookies\pali@azjmp[2].txt
C:\Documents and Settings\Pali\Cookies\pali@collective-media[1].txt
C:\Documents and Settings\Pali\Cookies\pali@ads.sun[2].txt
C:\Documents and Settings\Pali\Cookies\pali@naiadsystems[1].txt
C:\Documents and Settings\Pali\Cookies\pali@ad.wsod[2].txt
C:\Documents and Settings\Pali\Cookies\pali@208.122.40[2].txt
C:\Documents and Settings\Pali\Cookies\pali@revsci[2].txt
C:\Documents and Settings\Pali\Cookies\pali@insightexpressai[2].txt

Should I use that program to manage these files? I don’t know what you meant by SAS?

4

Whilst these cookies are nothing to get overly concerned about, yes let SAS deal with them.

Yes, SAS (as you may now be aware) is just an abbreviation for the program you have just run.

Any answer to my previous question:
So under what circumstances are they redirected, searches, visits to specific sites, etc. etc. ?

5

Like I said, it just started happening yesterday. When typed in facebook.com and hit enter, I was redirected to a survey site (twice), and then I when typed in a blog I frequent, hit enter, and I was redirected to some muscle building product site. It happended one other time, I don’t remember which site, but when I hit enter to go there I was redirect somewhere else (can’t remember where).

6

Well redirections like that could well be a result of a hacked site sending you elsewhere, have you any examples of the redirected sites (try visiting facebook again), change the URL from http to hXXp or www to wXw, to break the link, thanks.

Or in the case of facebook.com is it possible that they are running a survey, I don’t use facebook.com, being on dial-up and haven’t got an account.

7
Should I use that program to manage these files? I don't know what you meant by SAS?

Super-anti-spyware