Feral Heart

Off topic => Discussion Board => Topic started by: IcyFrost on May 25, 2014, 02:27:59 am

Title: Security issue again :3
Post by: IcyFrost on May 25, 2014, 02:27:59 am
When I'm on the web on my computer, if the mouse isn't moved for around 30-60 seconds, the page turns to xqixqi.com. It says something like "Skipping Ad, Please Wait...". A few seconds after the page is opened, the browser freezes and crashes. This isn't a separate tab opened, it's still the same tab that this happens on. I checked on another computer as well, and the same thing happened, every page I visited. Every time I go onto any page and don't move the mouse for 30-60 seconds, the search is redirected to xqixqi.com. I seriously cant do anything on the web anymore, it's just too annoying when I try to read something. Windows Defender is being annoying too, as it detects nothing. :3

Can someone tell me how to fix this? Mhen tis hard to type on a phone
Title: Re: Security issue again :3
Post by: Vespian on May 25, 2014, 02:53:32 am
I've never had somethin' like this happen to me personally nor have I heard anythin' like it..

Although, after lookin' around, it would seem that this is a malware problem. Yer computer software is infected. I advise downloadin' an anti-malware program (like Malwarebytes Anti-Malware- I used this program before and I assure it's 100% safe and easy to handle) or updatin' any anti-virus program(s) ye' may have. If yer program(s) are already updated and still detect nothin' in particular, then again I will state- yer computer may be infected with malware and needs to be scanned/cleaned thoroughly with an anti-malware program or get checked out by someone with experience when it comes to viruses and computers.

Feel free to correct me if I'm mistaken with anythin' in my statement.
Title: Re: Security issue again :3
Post by: IcyFrost on May 25, 2014, 03:51:38 am
Eh... Nevermind xD
I've been able to sort out the problem with the process explorer from Sysinternals (from Microsoft). Quite a few odd processes drifting around. Killed them and it allowed me to dig deeper into the problem. There was some sort of bad registry key, as well as a browser redirect from who knows where :3

But now that that's all clean and sorted, the only thing left is to find what really caused the problem. The only programs I have downloaded on my computer are FH, Minecraft (from minecraft.net), GIMP (from gimp.org), CCleaner, and Process explorer from Sysinternals. The only sites I visit are the FH forums, and sometimes Youtube, and when doing school reports, Wikipedia. But again, this happened on both of the computers I tested. But anyway, thanks for helping :)

Edit: Still happening on the other computer. I'll do the same thing I did with my computer on the other one.
Title: Re: Security issue again :3
Post by: AlphaEclipse on May 25, 2014, 04:49:28 am
Arr, it seems you have some adware you have downloaded and rooted into your computer that redirects browsers to the website you have displayed if you do not move your mouse. A bad registry key, like you said. Since you said it was infecting two computers, it leads me to believe that that specific virus spreads via wifi, but there can be other ways it can spread. It's possible it was contacted through an ad you left open to long, a popup you clicked on, etc. Anyways, I'd recommend running a system restore and then rescanning your computer. Here's a link that you'd probably find helpful with this adware: (Third post) https://community.mcafee.com/message/332390?tstart=0 Good luck. :3

-to lazy to use fonts-
Title: Re: Security issue again :3
Post by: IcyFrost on May 25, 2014, 02:41:13 pm
Wait, the double underlined words are a problem as well? I've seen those since I went on the forum for the first time, which was on the other computer. I see them on my current one too. But I thought that those double underlined words were just the forum, because I see them on my phone as well. Weird :3. I'll download Malwarebytes because we all know that MSE sucks. xD

But I never downloaded anything...
Title: Re: Security issue again :3
Post by: AlphaEclipse on May 25, 2014, 02:48:01 pm
Wait, the double underlined words are a problem as well? I've seen those since I went on the forum for the first time, which was on the other computer. I see them on my current one too. But I thought that those double underlined words were just the forum, because I see them on my phone as well. Weird :3. I'll download Malwarebytes because we all know that MSE sucks. xD

But I never downloaded anything...
The FH forums sometimes display underlined words, but that's normal. If it's anywhere else, it's possible that website it redirects to and highlighted words are related. MalwareBytes is a very good anti-malware program. xD Just make sure you download it from their official site: http://www.malwarebytes.org/ (http://www.malwarebytes.org/)
Title: Re: Security issue again :3
Post by: raggedpelt98 on May 25, 2014, 03:29:12 pm
Hmmm. I have something familiar, but the site only pops up when I first open a window. As for my Firefox and Internet Brwser, I dont know how to save them because theres ads, tons of tool bars, ect so its difficult to even use. Would Malwarebytes find the problems?
Title: Re: Security issue again :3
Post by: AlphaEclipse on May 25, 2014, 03:48:04 pm
Hmmm. I have something familiar, but the site only pops up when I first open a window. As for my Firefox and Internet Brwser, I dont know how to save them because theres ads, tons of tool bars, ect so its difficult to even use. Would Malwarebytes find the problems?
Yep! MalwareBytes should find that adware, and toolbars. Toolbars can be viruses downloaded from anything. Some times while downloading something, it'll ask: "Would you like ___'s toolbar installed?," always say no. I had a problem with a toolbar a while ago, Conduit was it's name. That was difficult to get rid of. Some toolbars tell your browser to open their website the homepage and steal information.
You can uninstall some toolbars via uninstall in control panel, but some bad ones need to be removed with an antivirus or antimalware program like MalwareBytes. Once you get rid of the tool bar, you can go into your browser's option/settings and make your homepage google, bing, etc. :3 (After that you should probably scan again just in-case.)



Title: Re: Security issue again :3
Post by: raggedpelt98 on May 25, 2014, 05:59:19 pm
Hmmm. I have something familiar, but the site only pops up when I first open a window. As for my Firefox and Internet Brwser, I dont know how to save them because theres ads, tons of tool bars, ect so its difficult to even use. Would Malwarebytes find the problems?
Yep! MalwareBytes should find that adware, and toolbars. Toolbars can be viruses downloaded from anything. Some times while downloading something, it'll ask: "Would you like ___'s toolbar installed?," always say no. I had a problem with a toolbar a while ago, Conduit was it's name. That was difficult to get rid of. Some toolbars tell your browser to open their website the homepage and steal information.
You can uninstall some toolbars via uninstall in control panel, but some bad ones need to be removed with an antivirus or antimalware program like MalwareBytes. Once you get rid of the tool bar, you can go into your browser's option/settings and make your homepage google, bing, etc. :3 (After that you should probably scan again just in-case.)




O-o I have conduit. NOoooo
Title: Re: Security issue again :3
Post by: IcyFrost on May 25, 2014, 08:31:30 pm
O-o I have conduit. NOoooo

....
Don't... tell me that.... ......
Conduit was the default homepage on my computer when I first bought it. I couldn't reset it to About:tabs, nor find it in Uninstall a Program... Does that mean that my computer came preinstalled with adware..?
This computer isn't used. I bought it new....
wat
Title: Re: Security issue again :3
Post by: AlphaEclipse on May 25, 2014, 08:45:28 pm
@Faolanbutt -- Yikes, I would tell you what I did to rid of it, but that was so long ago I forget. ;-; This link may be helpful. Note do not download the "automatic fixit program." You never know if that could be a virus its self. Don't risk it! Do what the manual steps tell you:
http://www.techsupportall.com/how-to-remove-conduit-search (http://www.techsupportall.com/how-to-remove-conduit-search) After all of that jazz, search your PC with MalwareBytes, "full scan!"
Here's another link on a tutorial of removing it. https://productforums.google.com/forum/m/#topic/chrome/xJURG2e8h8U (https://productforums.google.com/forum/m/#topic/chrome/xJURG2e8h8U) There's plenty of tutorials on the internet, but make sure you're removing it, not just changing your homepage.

@Icy -- o-o Really? Could you screenshot that? I'd really look into that if I were you. What's the website it used to redirect to's name? Was it search.conduit.com with a toolbar? It wouldn't come with your computer. Conduit toolbars are PUP, but can do malicious tasks like hijacking. http://malwaretips.com/blogs/remove-conduit-apps-search-and-toolbar/ (http://malwaretips.com/blogs/remove-conduit-apps-search-and-toolbar/)

Edit: I can't find much else about search.conduit.com's malicious toolbar, but if anyone else knows anything, I'd also like to hear.
Title: Re: Security issue again :3
Post by: TheApplePie on May 26, 2014, 09:14:58 am
@Alpha
Conduit ohmygod no...just no.
*Runs off crying*
I had it too when downloading one of the IT servers last time from the wrong site.
Oh my god. Hell no.
Title: Re: Security issue again :3
Post by: IcyFrost on May 26, 2014, 03:37:01 pm
@Alpha,
No, it's not a toolbar. The homepage and any redirects were set to search.conduit.com. It wouldn't allow me to change the homepage to default. I'm sorry if that made no sense, I know a bit but not much about computers. At this point though, it's been hunted down and uninstalled :3. The only reason I started searching that conduit was a virus is because it displayed a fairly inappropriate ad. Also, for the screenshot, here is my internet settings from when I got the computer. A friend was begging me to show her how to take a screenshot but I was trying to change the homepage... Idk. I never deleted it, so I just cut the Internet settings from the rest of the picture here.
*Posting picture in a second, don't want to get on Tinypic on my computer*
--
(http://i62BannedImageSite/jhv3t5.jpg)
Title: Re: Security issue again :3
Post by: shell_prisoner on May 26, 2014, 04:20:27 pm
Quote
The homepage and any redirects were set to search.conduit.com
That's exactly what "Search Protect by conduit" does. Read Alpha's links carefully, its removal methods are described there.
Title: Re: Security issue again :3
Post by: raggedpelt98 on May 27, 2014, 07:31:21 am
Oh.My.Goodness.
I got Malwarebytes like suggested and I have TONS of viruses D': I cleaned up all of them today, but I probably have 4 or 2 left to deleted x.x
Title: Re: Security issue again :3
Post by: AlphaEclipse on May 27, 2014, 07:47:57 pm
@Kiquaii -- Oh lol. I think everyone gets this at some point. It's quite annoying.

@Icy -- Look at my links again, like Shell Prisoner said; try running a antivirus and/or antimalware scan, preferably MalwareBytes and then changing the homepage. What antivirus do you use, MSE right? I don't think that would find it. You could just have the toolbar hidden in browser settings, but not deleted.
You should be able to change right now even with that, mine did, but when you close the browser it would change back to conduit without permission. That's what signaled that it was not something I wanted on my PC. xD

@Faolan -- Yikes that's a lot. o-o Glad they're gone. MalwareBytes always finds a lot, especially the full scan. It takes a while to do a full scan, especially on a large computer. At least they're gone. Did it delete the search.conduit.com by any chance? It might have been listed as a PUP, not a virus. Not everything MalwareBytes finds is immediately a virus, sometimes they're trojans (similar to a virus, but open "backdoors" for hackers sometimes), PUPs (potentially unwanted programs), and worms (viruses that basically duplicate.)