HELP!! access to some websites (1 Viewer)

MJG2001

Free Member
Feb 19, 2013
16
3
Saltburn
Funster No
24,752
MH
None yet
Exp
Newbie
Anyone help with this please?

young grandson called me to my laptop and this was on screen

http://www.google.co.uk/

http://www.youtube.com/?feature=ytca

now cant get any search engines, youtube etc.

is this real or a virus / scam?

anyone experienced this before

Cheers Phill

all I get when I click on those links are genuine Google and YouTube pages.

Google change their home page occasionally to reflect special days or birthdays of famous/significant people -

that particular one is to mark the birthday of Søren Kierkegaard who apparently was a philosopher.
 
OP
OP
Phill D
Dec 6, 2011
11,467
25,057
South Wales
Funster No
19,136
MH
Coach built Adria
Exp
Since 2007
all I get when I click on those links are genuine Google and YouTube pages.

Google change their home page occasionally to reflect special days or birthdays of famous/significant people -

that particular one is to mark the birthday of Søren Kierkegaard who apparently was a philosopher.

thanks Martin i suspect then that there is something redirecting my search pages.

Phill

Subscribers  do not see these advertisements

 
OP
OP
Phill D
Dec 6, 2011
11,467
25,057
South Wales
Funster No
19,136
MH
Coach built Adria
Exp
Since 2007
heres a screen shot of what comes up

this is what i get when i put in any search engine or youtube.

it asks me to click the green button to confirm i am " human" ( no puns please"! )

not seen this before but cant get rid of it when trying to search the web:Eeek:
 

Attachments

  • IMAG0372.jpg
    IMAG0372.jpg
    86.5 KB · Views: 44

ukbill

LIFE MEMBER
Nov 3, 2011
5,501
5,274
Pinoso
Funster No
18,740
MH
4 berth low profile
Exp
starting on saturday 10/3/2012
try to reboot the pc i wouldnt recommend you put the catcha in for the human test just yet reboot 1st see if it disappears what operating system do you have and have you done a scan including a spyware scan ?
 
OP
OP
Phill D
Dec 6, 2011
11,467
25,057
South Wales
Funster No
19,136
MH
Coach built Adria
Exp
Since 2007
try to reboot the pc i wouldnt recommend you put the catcha in for the human test just yet reboot 1st see if it disappears what operating system do you have and have you done a scan including a spyware scan ?

hi bill, have done all the normal stuff, like reboot, simple virus scan etc. i am on windows 7, and using google chrome.

might switch to firefox and see what happens, unless one of you wise men can come up with a solution. thanks.

Subscribers  do not see these advertisements

 
Feb 27, 2011
14,669
74,862
UK
Funster No
15,452
MH
Self Build
Exp
Since 2005
Something smells iffy about that....

Can you get to any other website? Have you tried a different web browser?

If it happens across multiple browsers then it is either your ISP or your computer may be infected.

If it happens in just one browser but all the others are ok then it is likely to be an infection also.

I need to pop out for a bit but when I get back if you haven't sorted it I will look into it for you.
 
OP
OP
Phill D
Dec 6, 2011
11,467
25,057
South Wales
Funster No
19,136
MH
Coach built Adria
Exp
Since 2007
Something smells iffy about that....

Can you get to any other website? Have you tried a different web browser?

If it happens across multiple browsers then it is either your ISP or your computer may be infected.

If it happens in just one browser but all the others are ok then it is likely to be an infection also.

I need to pop out for a bit but when I get back if you haven't sorted it I will look into it for you.

thanks GROMETT I WILL KEEP TRYING. at moment its google, yahoo, ask, yotube. i can get ebay and many others.
 
OP
OP
Phill D
Dec 6, 2011
11,467
25,057
South Wales
Funster No
19,136
MH
Coach built Adria
Exp
Since 2007
Something smells iffy about that....

Can you get to any other website? Have you tried a different web browser?
can get many other websites direct. just tried through Firefox and same result screen " click here to show your human"
If it happens across multiple browsers then it is either your ISP or your computer may be infected.
oh nooo :Doh: he was messing about with " minecraft and youtube "
If it happens in just one browser but all the others are ok then it is likely to be an infection also.

I need to pop out for a bit but when I get back if you haven't sorted it I will look into it for you.

any help you can give would be super :thumb::thumb:

Subscribers  do not see these advertisements

 
OP
OP
Phill D
Dec 6, 2011
11,467
25,057
South Wales
Funster No
19,136
MH
Coach built Adria
Exp
Since 2007
running a full system scan now as only run a short scan earlier. lets see what that brings up.:Doh:
 

MJG2001

Free Member
Feb 19, 2013
16
3
Saltburn
Funster No
24,752
MH
None yet
Exp
Newbie
running a full system scan now as only run a short scan earlier. lets see what that brings up.:Doh:

if I am understanding your posts correctly this sounds like a classic hi-jacking of your default search engine by malware or adware OR some download has altered your search engine using an extension or add on for Chrome and/or Firefox.

If you look in extensions or add ons to your browsers you may discover something you were not expecting, als look in control panel for any unusual programs that have installed.

If it's not in your extensions or add ons install and have a scan with

Malwarebites as something may have slipped passed your anti virus.

http://www.malwarebytes.org/
 
OP
OP
Phill D
Dec 6, 2011
11,467
25,057
South Wales
Funster No
19,136
MH
Coach built Adria
Exp
Since 2007
thanks again Martin, it certainly is confined to this pc as i have no probs with acces with my other pc through the same router and isp.

nothing unusual in control panel that i can see. i wiull look in chrome extension 9 i think i know how ):Doh:
just waiting the final full scan to complete

Subscribers  do not see these advertisements

 
OP
OP
Phill D
Dec 6, 2011
11,467
25,057
South Wales
Funster No
19,136
MH
Coach built Adria
Exp
Since 2007
thanks again Martin, it certainly is confined to this pc as i have no probs with acces with my other pc through the same router and isp.

nothing unusual in control panel that i can see. i wiull look in chrome extension 9 i think i know how ):Doh:
just waiting the final full scan to complete

nothing in Chrome extensions either:cry:
 
OP
OP
Phill D
Dec 6, 2011
11,467
25,057
South Wales
Funster No
19,136
MH
Coach built Adria
Exp
Since 2007
if I am understanding your posts correctly this sounds like a classic hi-jacking of your default search engine by malware or adware OR some download has altered your search engine using an extension or add on for Chrome and/or Firefox.

If you look in extensions or add ons to your browsers you may discover something you were not expecting, als look in control panel for any unusual programs that have installed.

If it's not in your extensions or add ons install and have a scan with

Malwarebites as something may have slipped passed your anti virus.

http://www.malwarebytes.org/

hi Martin i was very rude and did not welcome you to fun, it shows your already in the groove:thumb:
 

MJG2001

Free Member
Feb 19, 2013
16
3
Saltburn
Funster No
24,752
MH
None yet
Exp
Newbie
nothing in Chrome extensions either:cry:

What are your search engines set as?

Settings > Search

Also have a look at which search engines are default and available.

settings > Search > manage search engines

MORE - also look at what start-up page is set.

settings > On start up > Open a specific page or set of pages. Set pages
 
Last edited:
OP
OP
Phill D
Dec 6, 2011
11,467
25,057
South Wales
Funster No
19,136
MH
Coach built Adria
Exp
Since 2007
well ive run all the scans including the download and run from

http://www.malwarebytes.org/

it detected 1 item backdoor,agent.dc in a minecraft file he downloaded. thats been removed but i still cant get to google search and other search sites:Doh::Doh:

he's all of 10yrs old and now banned from my laptop:Blush:

still working on a fix:Eeek:
 
Feb 27, 2011
14,669
74,862
UK
Funster No
15,452
MH
Self Build
Exp
Since 2005
Have you tried a different browser?

This would be the first thing I would check to ensure you don't have a single browser infection...

Subscribers  do not see these advertisements

 
OP
OP
Phill D
Dec 6, 2011
11,467
25,057
South Wales
Funster No
19,136
MH
Coach built Adria
Exp
Since 2007
Have you tried a different browser?

This would be the first thing I would check to ensure you don't have a single browser infection...

hi gromett tried Firefox and have the same issue i have googled for solutions from my tablet but not getting very far at the moment.

some guy has suggested going into

c:windows\system32\drivers\etc and checking for alterations.... mine is a 64 bit system and i am affriad i will delete something important and kill it all together :Eeek:
 
OP
OP
Phill D
Dec 6, 2011
11,467
25,057
South Wales
Funster No
19,136
MH
Coach built Adria
Exp
Since 2007
i ahve gone and looked in divers\etc and there is a filke that was added yesterday called hosts about 11kb . all other files in there are 2009 dates.
could that be it?
 

MJG2001

Free Member
Feb 19, 2013
16
3
Saltburn
Funster No
24,752
MH
None yet
Exp
Newbie
i ahve gone and looked in divers\etc and there is a filke that was added yesterday called hosts about 11kb . all other files in there are 2009 dates.
could that be it?

Unlikely I would have thought, I certainly wouldn't delete it just yet.

Have you checked the start up pages and search engines as per my earlier post.

You may have removed the malware that caused it but your settings may still be set to what it set them at (if that makes sense)

Subscribers  do not see these advertisements

 
OP
OP
Phill D
Dec 6, 2011
11,467
25,057
South Wales
Funster No
19,136
MH
Coach built Adria
Exp
Since 2007
Unlikely I would have thought, I certainly wouldn't delete it just yet.

Have you checked the start up pages and search engines as per my earlier post.

You may have removed the malware that caused it but your settings may still be set to what it set them at (if that makes sense)

just rebooted pc no change and tried again both on Firefox and Chrome still same.

have found 2 more files that were added at the time this happened;
setupact a text file
bootstart a DAT file ( whatever that is )

not deleted anything just yet

this is mad:cry:
 
OP
OP
Phill D
Dec 6, 2011
11,467
25,057
South Wales
Funster No
19,136
MH
Coach built Adria
Exp
Since 2007
after yet another reboot and i try to access google serch i get this :-

Not Found

The requested URL /webhp was not found on this server.

Apache/2.2.14 (Ubuntu) Server at www.google.co.uk Port 80

any ideas
 
Feb 27, 2011
14,669
74,862
UK
Funster No
15,452
MH
Self Build
Exp
Since 2005
i ahve gone and looked in divers\etc and there is a filke that was added yesterday called hosts about 11kb . all other files in there are 2009 dates.
could that be it?

That sounds like a likely culprit.

the hosts file does the same thing as the DNS system but is looked at first.

When you type in google.co.uk a look up is done to return the IP address of the server. The computer then goes to that IP address for the required data.
If the hosts file has an entry like this

217.160.204.222 google.co.uk

Ignore the numbers... If it has a line like the above. Someone is redirecting you from accessing google and other sites and pointing you to their server.

You can temporarily rename the hosts file to hosts.bak
close down all programs such as browsers then load your browser again.

Try going to google again. If this works you have an infection.

It is likely that you also have a batch file or program somewhere that will reload the hosts file upon a reboot.

I can help you through further if the above is the case....

Subscribers  do not see these advertisements

 
OP
OP
Phill D
Dec 6, 2011
11,467
25,057
South Wales
Funster No
19,136
MH
Coach built Adria
Exp
Since 2007
will give it a go and let you know the outcome thanks again:thumb:
 
OP
OP
Phill D
Dec 6, 2011
11,467
25,057
South Wales
Funster No
19,136
MH
Coach built Adria
Exp
Since 2007
Gromett, your a genius...:notworthy::notworthy:

renamed file hosts,bak rebooted browser all is well.

how do i get rid of this?:Eeek:
 
OP
OP
Phill D
Dec 6, 2011
11,467
25,057
South Wales
Funster No
19,136
MH
Coach built Adria
Exp
Since 2007
update getting google search now but still same on youtube and yahoo .com

Subscribers  do not see these advertisements

 
OP
OP
Phill D
Dec 6, 2011
11,467
25,057
South Wales
Funster No
19,136
MH
Coach built Adria
Exp
Since 2007
update getting google search now but still same on youtube and yahoo .com

on firefox all seems to be well on you tube but not yahoo and chrome still ahs some issues with youtube access and yahoo
 
Feb 27, 2011
14,669
74,862
UK
Funster No
15,452
MH
Self Build
Exp
Since 2005
Has a new hosts file been created? It may be re-created when you reload one of your browsers.
 
Feb 27, 2011
14,669
74,862
UK
Funster No
15,452
MH
Self Build
Exp
Since 2005
This could take a while... Would it be better to chat on skype? If so PM me your skype name. I may have to go into house to feed mother in the near future so it may be interrupted as she takes priority at the moment.

Subscribers  do not see these advertisements

 

Join us or log in to post a reply.

To join in you must be a member of MotorhomeFun

Join MotorhomeFun

Join us, it quick and easy!

Log in

Already a member? Log in here.

Latest journal entries

Funsters who are viewing this thread

Back
Top