cj.dotomi Redirect Issues

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by SabreGirl, Sep 16, 2014.

  1. SabreGirl

    SabreGirl Private E-2

    Keep getting periodically redirected to a cj.dotomi 1x1 GIF. There doesn't seem to be any apttern but when I click on links it sometimes brings me to a cj.dotomi blank page. The latest redirect was to http://cj.dotomi.com/3l104r098R/07C...<s440://777.tlx4sl4wlo9.nzx/?3=wl3p2+02ty4p2< which appears to be blank. I tried flushing the caches as directed in the hijacking/redirect protocol thread but that didn't help. I reset my router, ran the 'Read and Run Me First' but this is still happening. It's quite irritating... here are my logs, please help!
     

    Attached Files:

    SabreGirl, Sep 16, 2014
    #1
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Did you knowingly setup the below Proxy Server seen in your RogueKiller log?


    Also you said you reset your router and did ipconfig flush, but why does the below setting show?

    Code:
     
    DNS Suffix Search List. . . . . . : domain_not_set.invalid
     
    chaslang, Sep 16, 2014
    #2
  3. SabreGirl

    SabreGirl Private E-2

    I don't know what that means, I can't read these logs. I do have a proxy - Total Net Guard - that has been set up for over 6 months. This cj.dotomi problem hasn't been going on that long... maybe a month - 2 at most.
     
    SabreGirl, Sep 17, 2014
    #3
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Is your problem only occurring when you run Firefox? Shutdown Firefox and try Internet Explorer to see if it also has the same problem.
     
    chaslang, Sep 17, 2014
    #4
  5. SabreGirl

    SabreGirl Private E-2

    It happens on both.
     
    SabreGirl, Sep 23, 2014
    #5
  6. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Okay then run the below for Firefox:

    Reset Firefox to Defaults

    Does it still happen with Firefox? If yes, do you start Firefox from a shortcut or quicklaunch?


    Run the below for Internet Explorer

    Reset Internet Explorer 9, 10, and 11 to Defaults


    Does it still happen with IE? If yes, do you start IE from a shortcut or quicklaunch?


    Also please download AdwCleaner by Xplode and save to your Desktop.
    • Double click on AdwCleaner.exe to run the tool.
      Vista/Windows 7/8 users right-click and select Run As Administrator
    • Click on the Scan button.
    • AdwCleaner will begin...be patient as the scan may take some time to complete.
    • After the scan has finished, click on the Report button...a logfile (AdwCleaner[R#].txt) will open in Notepad for review (where the largest value of # represents the most recent report).
    • The contents of the log file may be confusing. Unless you see a program name that you know should not be removed, don't worry about it. If you see an entry you want to keep, let me know about it.
    • Attach the logfile to your next next reply.
    • A copy of all logfiles are saved in the C:\AdwCleaner folder which was created when running the tool.
     
    chaslang, Sep 23, 2014
    #6
  7. SabreGirl

    SabreGirl Private E-2

    The browser resets didn't seem to do anything. I start Firefox from my desktop shortcut and I have IE pinned to my start menu. I ran the AdwCleaner, the only thing I can readily recognize that I want to keep is the coupon printer. I don't know where the AVG toolbar came from, I hate toolbars - even the coupon bar (I didn't install that) - they can just go away.
     

    Attached Files:

    SabreGirl, Sep 26, 2014
    #7
  8. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Your shortcuts could be the problem. Try running them without using these shortcuts. Also look at the properties of the shortcuts to see what is in them.


    Yes you did. You installed the Coupon Printer and that is where you got the tool bar. You installed the below at the same time:
    Coupon Printer for Windows
    CouponBar

    Uninstall the Couponbar.

    You can remove all the junk with AdwCleaner.
     
    chaslang, Sep 26, 2014
    #8

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds