The Notebook Review forums were hosted by TechTarget, who shut down them down on January 31, 2022. This static read-only archive was pulled by NBR forum users between January 20 and January 31, 2022, in an effort to make sure that the valuable technical information that had been posted on the forums is preserved. For current discussions, many NBR forum users moved over to NotebookTalk.net after the shutdown.
Problems? See this thread at archive.org.

    dodgy website auto opens during start up

    Discussion in 'Security and Anti-Virus Software' started by Zero7jin, Nov 1, 2009.

  1. Zero7jin

    Zero7jin Notebook Enthusiast

    Reputations:
    0
    Messages:
    19
    Likes Received:
    0
    Trophy Points:
    5
    Hi guys, I am running Windows 7 Ultimate. Few days ago, something strange happened. Everytime when windows starts up, Firefox opens up automatically to this website called http://hosting32.com/imagehosr/. I thought this was some malware so I used both Bitdefender and STOPzilla to scan and eliminate it. However, both programs did not manage to find anything. I downloaded the free AdAware and still no dice. I changed my default browser to IE and restarted my pc, only this time the website pops up again in IE. This proves that it is not a browser specific problem. So, what i did next was use Acronis Image to revert back to the time i havent got this problem.

    Reverting back seemed to fix the problem. I went ahead and update my Windows Update and Bitdefender to latest. OK this is the weirdest part. After updating both, all of a sudden, my web browser pops up the same website again. I am starting to suspect that one of these updates is causing this. Anyone else having this problem and know how to solve it? Its bugging me like hell.
     
    Zero7jin, Nov 1, 2009
    #1
  2. DarkSilver

    DarkSilver MSI Afterburner

    Reputations:
    378
    Messages:
    2,249
    Likes Received:
    0
    Trophy Points:
    55
    Download Avira Antivir Personal 9.
    Download MalwareBytes' Anti-Malware.
    Download SUPERAntiSpyware.
    Download SpywareBlaster.

    Install them and scan. I think you problem will be solved after that.
     
    DarkSilver, Nov 1, 2009
    #2
  3. zfactor

    zfactor Mastershake

    Reputations:
    2,894
    Messages:
    11,134
    Likes Received:
    3
    Trophy Points:
    455
    i recc smitfraudfix.

    otherwise look at your starup items by typing msconfig. see what is starting causing the issue. you may be able to kill it there by using a tool like jv16
     
    zfactor, Nov 1, 2009
    #3
  4. Zero7jin

    Zero7jin Notebook Enthusiast

    Reputations:
    0
    Messages:
    19
    Likes Received:
    0
    Trophy Points:
    5
    Are they all free? If they are, i might try them all.

    I tried manually disabling startup items. I even painstakingly disable each startup one by one and restarting windows with each disable. Problem still occurs
     
    Zero7jin, Nov 1, 2009
    #4
  5. DarkSilver

    DarkSilver MSI Afterburner

    Reputations:
    378
    Messages:
    2,249
    Likes Received:
    0
    Trophy Points:
    55
    You're in luck. They are all FREE.
    SmitFraudFix can fix the problem too I think. But it is not recommended for newbie I guess?
     
    DarkSilver, Nov 1, 2009
    #5
  6. Zero7jin

    Zero7jin Notebook Enthusiast

    Reputations:
    0
    Messages:
    19
    Likes Received:
    0
    Trophy Points:
    5
    SmitFraudFix is not free. Scanning is free but to clean my computer it asked for a registration. I tried registering and it asked me to pay for some stuff to complete the registration.
     
    Zero7jin, Nov 1, 2009
    #6
  7. DarkSilver

    DarkSilver MSI Afterburner

    Reputations:
    378
    Messages:
    2,249
    Likes Received:
    0
    Trophy Points:
    55
    I guess. You only try SmitFraudFix as last resort. It is free I used it before. So strange for you. Forget it.
    Now, test this 1st.

    If this fail, then, only SmitFraudFix.
     
    DarkSilver, Nov 1, 2009
    #7
  8. arjunned

    arjunned Notebook Deity

    Reputations:
    288
    Messages:
    766
    Likes Received:
    0
    Trophy Points:
    30
    Try booting into safe mode and scan with MalwareBytes Anti-Malware. Also Just run a scan with Dr. Web CureIt. One of these 2 should find ur virus and remove it.
     
    arjunned, Nov 1, 2009
    #8
  9. guest123

    guest123 Newbie

    Reputations:
    0
    Messages:
    1
    Likes Received:
    0
    Trophy Points:
    5
    i also faced this problem...

    n i opted for a simpler solution.
    i use Avast antivirus, and i just make an exception in it to block connections from "http://hosting32.com/imagehosr/".

    finished!
    as simple as that!
     
    guest123, Nov 1, 2009
    #9
  10. arjunned

    arjunned Notebook Deity

    Reputations:
    288
    Messages:
    766
    Likes Received:
    0
    Trophy Points:
    30
    As simple as that may be, the virus is still in ur system. It would be better to remove it. :)
    BTW didn't avast! detect the virus?
     
    arjunned, Nov 1, 2009
    #10
  11. DetlevCM

    DetlevCM Notebook Nobel Laureate

    Reputations:
    4,843
    Messages:
    8,389
    Likes Received:
    1
    Trophy Points:
    205
    You could try runnin a Kaspersky Internet Security Trial Version - I believe its fully functional for 30 days and do a full system scan.
     
    DetlevCM, Nov 1, 2009
    #11
  12. arjunned

    arjunned Notebook Deity

    Reputations:
    288
    Messages:
    766
    Likes Received:
    0
    Trophy Points:
    30
    If scanning with MBAM, Dr. Web CureIt, SuperAntispyware, or any software doesn't fix the issue, then i guess ur best bet is to back up all ur data and reinstall ur OS.
     
    arjunned, Nov 1, 2009
    #12
  13. DarkSilver

    DarkSilver MSI Afterburner

    Reputations:
    378
    Messages:
    2,249
    Likes Received:
    0
    Trophy Points:
    55
    Well, this is the last resort of course.
    I would suggest this too. Because the fastest way is indeed re-installation of OS. In addition, there're a lot of benefits too.
     
    DarkSilver, Nov 1, 2009
    #13
  14. Zero7jin

    Zero7jin Notebook Enthusiast

    Reputations:
    0
    Messages:
    19
    Likes Received:
    0
    Trophy Points:
    5
    Guys I finally solved it. It was my STOPzilla anti spyware program that was causing it. Dr. Web Cure It is the only program that detected it as malicious. I thought it was weird but i deleted it anyways. Since it deleted the program's msi file, i couldn't uninstall it the normal way, so I tried to manually delete the installation folder. Turns out I couldn't delete the folder because the folder is in use. And the only way to explain why the folder is in use...... cause the virus is using it. Now, the website doesn't pop up anymore. Thanks guys for the help :)
     
    Zero7jin, Nov 1, 2009
    #14
  15. arjunned

    arjunned Notebook Deity

    Reputations:
    288
    Messages:
    766
    Likes Received:
    0
    Trophy Points:
    30
    Just as precaution, run a scan with MBAM one last time to see if the virus left behind any traces on ur system.
    Only glad to help.
    Cheers.
     
    arjunned, Nov 1, 2009
    #15
  16. samanathon

    samanathon Newbie

    Reputations:
    0
    Messages:
    1
    Likes Received:
    0
    Trophy Points:
    5
    I got something that starts a slide show and opens my browser to the same URL. I noticed that the slide show is titled AliceAlbum.exe. I searched my machine and found references in my application data folder (Windows Key+R -> %APPDATA%) and in the prefetch (Windows Key+R -> %windir%/prefetch).

    If you find the same, I suggest you disable System Restore and delete these files. Restart and enable System Restore.
     
    samanathon, Nov 2, 2009
    #16