Google/MSN Ad Injection

Discussion in 'Malware Help (A Specialist Will Reply)' started by RegisMark5, Dec 6, 2008.

  1. RegisMark5

    RegisMark5 Private E-2

    When I load Firefox or IE my google and msn results are being injected with ads.

    http://i33.tinypic.com/28s0yae.jpg

    The link titles/descriptions look ok but actual hyperlinks are leading to ad sites. I looked in my hosts file and I found a bunch of ad sites that are mapped to localhost. Next to each ad site entry there was "# added by CiD" or something like that. I googled for CiD but my symptoms aren't the same as other peoples. All it does is inject ads into my results, no popups or changing titles of applications (ex. "CiD: <title here>"). I found out that it is running a type of adserver on localhost http://1.2.3.0 using Apache/CentOS. I tried AVG/Adaware/CWShredder but it didn't help. Anyone know the name of this virus or what I should download to remove it?
     
  2. DavidGP

    DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

    Hi

    If your running Spybot S&D or MVP HOSTS file then your likely to see many urls in Hosts linking to unsavoury sites as they are all looped back to localhost, in this instance its normal, BUT run the below guide so that our malware experts can see if any malware has indeed infected you


    Please follow the instructions in the below link and attach the requested logs when you finish these instructions.


    • If something does not run, write down the info to explain to us later but keep on going.
    • Do not assume that because one step does not work that they all will not.
    Notes:

    1. If you run into problems trying to run the READ & RUN ME or any of the scans in normal boot mode. You can running steps in safe boot mode but make sure you tell us what you did

      later when you post logs. See the below if you do not know how to boot in safe mode:
    2. If you have problems downloading on the problem PC, download the tools on another PC and burn to a CD. Then copy them to the problem PC. You will have to skip getting updates if

      (and only if) your internet connection does not work. Yes you could use a flash drive too but flash drives are writeable and infections can spread to them.


    plus a guide on how to attach the logs HOW TO: Attach Items To Your Post
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds