Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

PROBLEM

I am noticing that half of the websites I go to randomly redirect to bestprizedraw.com (this is not a link for your own safety). However, I have scanned my computer several times and have found no adware, spyware, registry links, etc. So, what gives?


CURRENT SOLUTIONS

For antivirus, I have used Microsoft Security Essentialsm Katpersky's TDSSKiller, and Malwarebyte's Anti-Malware. I have also tried a System Restore and I have NOT visited any strange sites lately. My router's and my computer's DNS are both set to auto, and to use Google's DNS as a backup.


MSCONFIG

List of Startup items I find suspicious:

  • Intel (R) Common User Interface by Intel Corporation (this item is listed three times)
  • HpqSRmon Application by Hewlett-Packard
  • Apple Push by Apple Inc.

List of Services I find suspicious:

  • *IconMan_R* by Realsil Microelectronics Inc.
  • PMBDeviceInfoProvider by Sony Corporation
  • VCService by Sony Corporation
  • VSNService by Sony Corporation
  • VUAgent by Sony Corporation
  • Wireless PAN DCHP Server (unknown publisher)

ADDITIONAL DETAILS

I have port 25565 and port 25567 forwarded because I play Minecraft.

Additional IP configuration can be found here because it is too big.

share|improve this question
    
Did you also check your DNS settings? –  Hennes Oct 20 '12 at 20:02
1  
I would bet lunch that you do have spyware, The symptoms you describe are classic. What scanning software did you use? –  Isaac Rabinovitch Oct 20 '12 at 20:38
1  
Did you also check the DNS settings in your home router? –  Michael Hampton Oct 20 '12 at 20:45
1  
See my post here if you suspect an infection....superuser.com/questions/100360/… –  Moab Oct 20 '12 at 21:26
    
Can you run nsolookup command and tell what is the default DNS server set right on your PC? –  laika Oct 21 '12 at 12:20

2 Answers 2

up vote 1 down vote accepted

Check out this link for information on this redirect

http://www.guforums.com/showthread.php?p=312800

Basicly websites run ads on their pages, the ad agency chooses what ads to run, and this is a particularly bad one.

I imagine once people complain enough to the webmasters they will complain to the ad agency and they will stop running this ad.

share|improve this answer
1  
That doesn't seem like the problem.. I'm experiencing this mostly, but not specific to, the Minecraft Wiki (www.minecraftwiki.net) and Yahoo Answers. –  Jeffrey Lin Oct 21 '12 at 12:12
    
Yep, it turns out that it was some of the websites hosting the advertisements. I have alerted the admin and they have handled it. –  Jeffrey Lin Nov 6 '12 at 14:20

It sounds like you might have had some form of malware at some point (and possibly still do). You can try the steps described here. The steps under "What to do after restoring" should help if you are sure there is no more malware.

Specifically you can:

  • Check your hosts file (\%systemroot%\system32\drivers\etc\hosts)
  • check your DNS settings (should usually be auto but can try google DNS if you like)
  • Your proxy settings in control panel/IE should be disabled.
share|improve this answer
    
In my HOSTs file, every line has a # sign preceeding it. My DNS settings are set to default and Google's as a backup. I do not use IE, and I don't have any proxy settings on either. –  Jeffrey Lin Oct 21 '12 at 12:08
    
@Jeffrey is this problem consistent across all web browsers that you try (IE/Firefox/Chrome...) or is there just one browser that has this problem? –  James T Oct 22 '12 at 3:05
    
I don't really use IE, and I don't have Chrome, I mostly use Firefox. –  Jeffrey Lin Oct 22 '12 at 20:48

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.