Regal Downy Woodpecker
Monday, 26. January 2009, 21:51:02
Checking out the area
=====================
News: Hijacked Browser Search Pages
Oh boy, I spent a good part of the day trying to fix hijacked browser search pages in all my browsers.
No matter what I put for a search term, the description was accurate but the links were masked and took me to some junk sites like "coupon something" or "anti-virus scan sites".
For instance, search term "My Opera", this is what I received.
My Opera
Get your own blog and share your photos. You can also download skins and setups for the Opera browser.
freescan.antivirus.com/opera.html - 15k - Cached - Similar pages
The My Opera is correct, the description is correct but the link is masked and directs you to the "free scan" site. Notice the "freescan.antivirus.com/opera.html". If I clicked on My Opera I would go to freescan.antivirus.com.
I do not know how I got it because I am careful on where I go, what I click or install, etc, etc, but somehow I got it. The amazing part, my anti-virus missed it, spybot missed it, Malwarebytes Anti-Malware missed it and f-secure root kit missed it. Heck I even used another anti-virus vendor to no avail. They all missed it! As a last ditch effort before the dreaded "Format C", I tried ComboFix which seems to have accomplished the job.
It's a jungle out there!











