Computing.Net > Forums > Security and Virus > Google's result hijacked

Google's result hijacked

Reply to Message Icon

Original Message
Name: mie2com
Date: January 25, 2008 at 11:09:56 Pacific
Subject: Google's result hijacked
OS: XP
CPU/Ram: 2gb
Model/Manufacturer: Dell
Comment:

At random number of times, when I click on a link from google's search page, it will be redirected to other sites. I caught some information using "Live HTTP headers" (Firefox)

Here is the info (**In this case, I've search "gfxworld", click on the first result, and it is redirect to other sites):

h**p://64.111.198.178/click.php?c=2deeb88f01618a6f1bb29ddd8800&d=084a9fcb0000195b005369bb

GET /click.php?c=2deeb88f01618a6f1bb29ddd8800&d=084a9fcb0000195b005369bb HTTP/1.1
Host: 64.111.198.178
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.11) Gecko/20071127 ImageShackToolbar/4.3.5 Firefox/2.0.0.4;MEGAUPLOAD 1.0
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Cookie: firstselect=1201209830
Referer: h**p://101sites.info/rns/b-search/c-gfxworld/

HTTP/1.x 302 Found
Date: Fri, 25 Jan 2008 18:44:13 GMT
Server: Apache
Location: h**p://10-top.com/gfxworld.cfm?pt=2&rpt=1&kt=1
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1


Please help.


Report Offensive Message For Removal


Response Number 1
Name: plrpro
Date: January 27, 2008 at 14:57:13 Pacific
Reply: (edit)

The sites them selves might just be re-directs. I would test this theory by doing the same search and clicking the same link over and over. It sounds like it is happening a lot so you should notice if you really have a virus or not.

Regardless I would make sure your anti-virus and spyware program are up to date. Make sure your firewall is up as well. The free ones do not vut it so just go out and purchase a program if you do not have one


Report Offensive Follow Up For Removal

Response Number 2
Name: btech
Date: February 2, 2008 at 18:34:27 Pacific
Reply: (edit)

Read this article

http://www.networkworld.com/communi...

Dont give up


Report Offensive Follow Up For Removal







Use following form to reply to current message:

   Name: From My Computing.Net Settings
 E-Mail: From My Computing.Net Settings

Subject: Google's result hijacked

Comments:

 


  Homepage URL (*): 
Homepage Title (*): 
         Image URL: 
 
Data Recovery Software




Have you ever used OpenOffice?

Yes, as my main suite.
Yes, occationally.
Yes, but only once.
No, never.


View Results

Poll Finishes In 3 Days.
Discuss in The Lounge