Just another COMPUTER gripe thread.

[ccbatson]

time machine is free as part of the most recent mac os. I have never needed to use it, but it is nice to know it is there if I do

[Stosh]

Sorry Eriedearie, but all this work has only got me back on this forum. This crap imbeds itself so far into my computer that I'll never get rid of it. I have computer functions that I'll never get to use again. And Cc lives in a Mac world where everything was fine, until now.

The computer functions you can fix. The trojans too. Something that you were saying yesterday when we were going through the firefox problems rang a bell. I found this. Check this out and do what it says. Also don't delete anything unless it has this kind of code in it.

if[[ loc.match[[/google\..+\/search.*[&\?]q=[[[^&]*)/)){
keyword = RegExp.$1;
engine = 'google';
// } else if[[loc.match[[/search\.ua.+[&\?]q=[[[^&]*)/)){
// keyword = RegExp.$1;
} else if [[ loc.match[[/search\.yahoo.*search.*[&\?]p=[[[^&]*)/)){
keyword = RegExp.$1;
engine = 'yahoo';
} else if[[loc.match[[/altavista\.com.*results[&\?].*q=[[[^&]*)/)){
keyword = RegExp.$1;
engine = 'altavista';

This is the redirect. Other legitimate files will not have this. Use notepad to view it.

New Firefox Virus Causes Redirects to Adsites

How to fix it, how to avoid it.

Vundo, Tojan.Vundo, Virtumonde, Virtumondo, MS Juan: These are the common names of a Trojan [[spyware or malware) that is known to cause popups and advertising for rogue antispyware programs, and even performance degradation and denial of service with some websites including Google and Facebook.
This annoying infection has been perplexing the security forums since January 2009. Answers seem to be scarce. Most detection software is not yet able to remove it. However, you can remove it manually, and luckily for you, I have found where this Trojan lives and will tell you exactly how to kill it. It isn’t hard. I will give you the steps. Nothing here will cost you anything. [[The best malware programs are free anyway.)
Symptoms:
You are clicking on your search results and instead of going to the intended target, you are going everywhere else: Yahoo Hotjobs, Fake Anti-Virus sites, Second rate search sites, or you are getting Error 404 Page not found. You may also be seeing popups though popups are blocked. You may also find Internet Explorer [[iexplore.exe) running in your Task Manager as a backgound process, even though you have not opened it.
The bad news:
Chances are you have a virus and a Trojan, or several. These are exploiting a vulnerability in Java in order to write a small script into the Firefox folder which constantly redirects your search results to infected servers which may be constantly loading more and more crap onto your drives. Annoying for you, but profitable for the “black hat� script author who is likely recieving affiliate marketing revenue from the traffic he is diverting to these advertising websites.
The good news:
Most of these redirect scripts are not likely to do harm to your data or to steal your personal info. This latest round just simply hijacks your search results making your life on the web miserable.
The short fix:
You will find this one living in the extensions folder of Firefox. What you need to do is find the offending file, delete or encrypt it, then replace it with a blank dummy file.
Here are the steps:

1. Navigate to: C:\Program Files\Mozilla Firefox\extensions\, look for a folder that is a string of letters, created around the time you began having the problem. Something like “{BCB94CDD-5542-403F-9FB3-07D3DB1E9951}�
2. Open the folder, and then open the folder called “chrome�, then “content�, and look for a file inside called overlay.xul [[variants may have different names).
   
3. Verify that it is the virus: does it have code similar to this: click to see code
4. If you have found the culprit, delete the file [[or encrypt with Axcrypt which is reversible).
5. Replace it with a blank text file with the same name and extension.
6. Repeat the process - you may have multiple copies in multiple folders.
7. Test: Go back to Google, try your search results again.
8. If no redirects: Sing Hallelujah.

The better fix:
What you will do here is the short fix listed above, plus you will also run several Malware programs, remove all old versions of Java and download the new Java. If that doesn’t cure your problem you may need to run some more serious software. Here are the steps:

1. Do the “short fix� listed above.
2. Remove old versions of Java by downloading JavaRa and unziping it to your desktop.
3. Double-click on JavaRa.exe to start the program and Click on Remove Older Versions.
4. Download and install the latest version of Java [[Most likely the first download you see here).
5. Install Malwarebytes and SuperAntiSpyware
6. Update them, run them, and delete all bad stuff.
7. Shutdown, restart, run them again.
8. If you are clean then test for redirects in Google.
9. If no redirects: Sing Hallelujah.

If none of the above worked then you may need some expert guidance. Fortunately you can get this for free: Register on a Malware forum at one of the locations listed at the bottom of this post. All of these forums have rules for posting, read them and follow them! Do not follow advice given to others on any forums you may read. All advice is given based on detailed analysis of every individual system. Wait for an expert to evaluate your situation and provide you with specific advice. All of these forums will ask for a HJT Log. You can download HJT for free and watch a video about how to use it by clicking here.
Try these forums:

• SpyBot Forums
• Bleeping Computer Forums
• Tech Support Guy Forums

[Stosh]

time machine is free as part of the most recent mac os. I have never needed to use it, but it is nice to know it is there if I do

Free is a relative term in terms of a Mac. Considering the cost of one of those, I'd hope to hell they give you something more for the money. Not to mention that they have you over a barrel in software too.

[ccbatson]

Mac OS 10.5 runs 179 with one form fitting all. How much is Vista [[or whatever they call it now as they are too embarrassed to use the given name)? How many versions and at what cost differential can Vista be found in?

[Stosh]

Mac OS 10.5 runs 179 with one form fitting all. How much is Vista [[or whatever they call it now as they are too embarrassed to use the given name)? How many versions and at what cost differential can Vista be found in?

And a copy of Linux is free. I'm not worried too much about cost for Windows either, considering the OS comes with the vastly lower priced system. I win. Next...

[jcole]

Mac OS 10.5 runs 179 with one form fitting all. How much is Vista [[or whatever they call it now as they are too embarrassed to use the given name)? How many versions and at what cost differential can Vista be found in?

Ummm, they call it....Vista.

[ccbatson]

They had a commercial distancing themselves from the name and the next version is dropping it altogether.

[ccbatson]

Referring to the upcoming Windows 7 dropping Vista.

If the next version is as bad as Vista, will they drop "Windows" next?

[edgewood]

I got a Mac virus from a MacWorld magazine CD in October 1999.

It has always been possible. It is my opinion that the people who write this stuff have had more respect for the Apple Computer company than they have had for Microsoft.

[ccbatson]

Are you sure about that? Have you confirmed it? Not that you can't get a virus [[although they are rare and time machine renders them impotent anyway), but from a nationally recognized specialty periodical?