Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top


I am noticing that half of the websites I go to randomly redirect to (this is not a link for your own safety). However, I have scanned my computer several times and have found no adware, spyware, registry links, etc. So, what gives?


For antivirus, I have used Microsoft Security Essentialsm Katpersky's TDSSKiller, and Malwarebyte's Anti-Malware. I have also tried a System Restore and I have NOT visited any strange sites lately. My router's and my computer's DNS are both set to auto, and to use Google's DNS as a backup.


List of Startup items I find suspicious:

  • Intel (R) Common User Interface by Intel Corporation (this item is listed three times)
  • HpqSRmon Application by Hewlett-Packard
  • Apple Push by Apple Inc.

List of Services I find suspicious:

  • IconMan_R by Realsil Microelectronics Inc.
  • PMBDeviceInfoProvider by Sony Corporation
  • VCService by Sony Corporation
  • VSNService by Sony Corporation
  • VUAgent by Sony Corporation
  • Wireless PAN DCHP Server (unknown publisher)


I have port 25565 and port 25567 forwarded because I play Minecraft.

share|improve this question
Did you also check your DNS settings? – Hennes Oct 20 '12 at 20:02
I would bet lunch that you do have spyware, The symptoms you describe are classic. What scanning software did you use? – Isaac Rabinovitch Oct 20 '12 at 20:38
Did you also check the DNS settings in your home router? – Michael Hampton Oct 20 '12 at 20:45
See my post here if you suspect an… – Moab Oct 20 '12 at 21:26
Can you run nsolookup command and tell what is the default DNS server set right on your PC? – laika Oct 21 '12 at 12:20
up vote 1 down vote accepted

Check out this link for information on this redirect

Basicly websites run ads on their pages, the ad agency chooses what ads to run, and this is a particularly bad one.

I imagine once people complain enough to the webmasters they will complain to the ad agency and they will stop running this ad.

share|improve this answer
That doesn't seem like the problem.. I'm experiencing this mostly, but not specific to, the Minecraft Wiki ( and Yahoo Answers. – Jeffrey Lin Oct 21 '12 at 12:12
Yep, it turns out that it was some of the websites hosting the advertisements. I have alerted the admin and they have handled it. – Jeffrey Lin Nov 6 '12 at 14:20

It sounds like you might have had some form of malware at some point (and possibly still do). You can try the steps described here. The steps under "What to do after restoring" should help if you are sure there is no more malware.

Specifically you can:

  • Check your hosts file (\%systemroot%\system32\drivers\etc\hosts)
  • check your DNS settings (should usually be auto but can try google DNS if you like)
  • Your proxy settings in control panel/IE should be disabled.
share|improve this answer
In my HOSTs file, every line has a # sign preceeding it. My DNS settings are set to default and Google's as a backup. I do not use IE, and I don't have any proxy settings on either. – Jeffrey Lin Oct 21 '12 at 12:08
@Jeffrey is this problem consistent across all web browsers that you try (IE/Firefox/Chrome...) or is there just one browser that has this problem? – James T Oct 22 '12 at 3:05
I don't really use IE, and I don't have Chrome, I mostly use Firefox. – Jeffrey Lin Oct 22 '12 at 20:48

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .