• Log InLog In
  • Register
Liquid`
Team Liquid Liquipedia
EDT 09:54
CET 14:54
KST 22:54
  • Home
  • Forum
  • Calendar
  • Streams
  • Liquipedia
  • Features
  • Store
  • EPT
  • TL+
  • StarCraft 2
  • Brood War
  • Smash
  • Heroes
  • Counter-Strike
  • Overwatch
  • Liquibet
  • Fantasy StarCraft
  • TLPD
  • StarCraft 2
  • Brood War
  • Blogs
Forum Sidebar
Events/Features
News
Featured News
[ASL21] Ro24 Preview Pt1: New Chaos0Team Liquid Map Contest #22 - Presented by Monster Energy7ByuL: The Forgotten Master of ZvT30Behind the Blue - Team Liquid History Book20Clem wins HomeStory Cup 289
Community News
Weekly Cups (March 16-22): herO doubles, Cure surprises3Blizzard Classic Cup @ BlizzCon 2026 - $100k prize pool48Weekly Cups (March 9-15): herO, Clem, ByuN win42026 KungFu Cup Announcement6BGE Stara Zagora 2026 cancelled12
StarCraft 2
General
https://www.facebook.com/Silen.Sense.Calm.Ears.Ire What mix of new & old maps do you want in the next ladder pool? (SC2) Potential Updates Coming to the SC2 CN Server Behind the Blue - Team Liquid History Book herO wins SC2 All-Star Invitational
Tourneys
Sparkling Tuna Cup - Weekly Open Tournament RSL Season 4 announced for March-April StarCraft Evolution League (SC Evo Biweekly) WardiTV Mondays World University TeamLeague (500$+) | Signups Open
Strategy
Custom Maps
[M] (2) Frigid Storage Publishing has been re-enabled! [Feb 24th 2026]
External Content
The PondCast: SC2 News & Results Mutation # 518 Radiation Zone Mutation # 517 Distant Threat Mutation # 516 Specter of Death
Brood War
General
ASL21 General Discussion KK Platform will provide 1 million CNY Recent recommended BW games Gypsy to Korea RepMastered™: replay sharing and analyzer site
Tourneys
[ASL21] Ro24 Group A [Megathread] Daily Proleagues [ASL21] Ro24 Group B 2026 Changsha Offline Cup
Strategy
What's the deal with APM & what's its true value Fighting Spirit mining rates Simple Questions, Simple Answers
Other Games
General Games
General RTS Discussion Thread Nintendo Switch Thread Stormgate/Frost Giant Megathread Darkest Dungeon Path of Exile
Dota 2
The Story of Wings Gaming Official 'what is Dota anymore' discussion
League of Legends
G2 just beat GenG in First stand
Heroes of the Storm
Simple Questions, Simple Answers Heroes of the Storm 2.0
Hearthstone
Deck construction bug Heroes of StarCraft mini-set
TL Mafia
TL Mafia Community Thread Five o'clock TL Mafia Mafia Game Mode Feedback/Ideas Vanilla Mini Mafia
Community
General
US Politics Mega-thread The Games Industry And ATVI European Politico-economics QA Mega-thread Canadian Politics Mega-thread Russo-Ukrainian War Thread
Fan Clubs
The IdrA Fan Club
Media & Entertainment
[Manga] One Piece [Req][Books] Good Fantasy/SciFi books Movie Discussion!
Sports
2024 - 2026 Football Thread Cricket [SPORT] Formula 1 Discussion Tokyo Olympics 2021 Thread General nutrition recommendations
World Cup 2022
Tech Support
[G] How to Block Livestream Ads
TL Community
The Automated Ban List
Blogs
Funny Nicknames
LUCKY_NOOB
Money Laundering In Video Ga…
TrAiDoS
Iranian anarchists: organize…
XenOsky
FS++
Kraekkling
Shocked by a laser…
Spydermine0240
ASL S21 English Commentary…
namkraft
Customize Sidebar...

Website Feedback

Closed Threads



Active: 1187 users

Virus/Trojan Redirects Internet

Blogs > micronesia
Post a Reply
micronesia
Profile Blog Joined July 2006
United States24761 Posts
February 17 2009 04:54 GMT
#1
So I've been pretty lucky about not letting bad stuff happen to my computer... but one day after running all that defensive software recommended in the thread http://www.teamliquid.net/forum/viewmessage.php?topic_id=87753 I noticed this happening:

1)
  • Type ravenholm into google
  • Click on the first hit (wikipedia article)
  • Get redirected to http://www.manga.com/?ref=AW2396753 or some other dumb site


2)
  • Type fios into google
  • Click on the first hit (verizon website)
  • Get redirected to http://www.mamma.com/Mamma?query=fios or some porn website and end up at the correct website another time...


For a goof I tried another search (smith) and ended up at the smith college website as you might expect...

I brought up my McAfee console for the first time ever (free antivirus crap I got from my university) and manually updated the definitions or whatever the deal is, and am running a scan on my system. It said:

autorun.inf
location: c:\
detected as: Generic!atr
Type: Trojan
Status: No Action Taken (Delete Failed)

So I'm trying to decide how I can aid the software in cleaning it... I tried looking for the file manually, but even after I showed hidden files, there was no autorun.inf there

The timing of this is truly ironic. Maybe adaware is malware!

*****
ModeratorThere are animal crackers for people and there are people crackers for animals.
SpiritoftheTunA
Profile Blog Joined August 2006
United States20903 Posts
February 17 2009 04:58 GMT
#2
try combofix, itslike fucking magic
posting on liquid sites in current year
ssj114
Profile Blog Joined September 2008
Afghanistan461 Posts
February 17 2009 04:59 GMT
#3
http://remove-malware.com/videos/how-to-remove-malware-for-free-video/
Sandboxie + SUA + DEP, Windows Firewall + NAT Router
Binky1842
Profile Blog Joined July 2004
United States2599 Posts
February 17 2009 05:12 GMT
#4
google the name of the detected file, in your case Generic!atr, and follow the help the search hits provide you.
keep your definition up to date >.<

i hope that's what youre asking for anyways. GL
"The zoo could not confirm that Binky was the attacker, but only Binky had blood on his face following the incident"
SpiritoftheTunA
Profile Blog Joined August 2006
United States20903 Posts
February 17 2009 05:15 GMT
#5
On February 17 2009 14:12 Binky1842 wrote:
google the name of the detected file, in your case Generic!atr, and follow the help the search hits provide you.
keep your definition up to date >.<

i hope that's what youre asking for anyways. GL

generic trojans can come in many forms

i suggest http://www.bleepingcomputer.com/combofix/how-to-use-combofix
posting on liquid sites in current year
ulszz
Profile Blog Joined June 2007
Jamaica1787 Posts
Last Edited: 2009-02-17 05:22:45
February 17 2009 05:22 GMT
#6
try hijack this, it works wonders. just google what looks suspicious when hjt shows you the log. i'm sure u can figure it out.

http://www.download.com/Trend-Micro-HijackThis/3000-8022_4-10227353.html
everliving, everfaithful, eversure
ShoCkeyy
Profile Blog Joined July 2008
7815 Posts
February 17 2009 06:37 GMT
#7
I've always used trend micro. They're amazing. PC Cillen o.o
Life?
micronesia
Profile Blog Joined July 2006
United States24761 Posts
February 17 2009 07:03 GMT
#8
As I said in the OP, I updated my virus definitions. It took care of the source of the problem when I ran a 2 hour scan lol... I physically removed the autorun.inf since the virus scanner couldn't do it. Hopefully this takes care of it (I tested google out and everything seems to be working now)

I'll keep this blog 'bookmarked' so to speak, for the next time I need help cleaning my computer so ty everyone.
ModeratorThere are animal crackers for people and there are people crackers for animals.
Racenilatr
Profile Blog Joined August 2008
United States2756 Posts
February 17 2009 13:59 GMT
#9
worked for me every time lol. That happens alot to me on internet explorer or something. I would say cut back on the porn though because too much porn=adware+malware
KOFgokuon
Profile Blog Joined August 2004
United States14908 Posts
February 17 2009 14:08 GMT
#10
gl hope it doesn't act up more
dm47
Profile Blog Joined March 2008
82 Posts
February 17 2009 16:31 GMT
#11
sounds like Trojan.vundo. I had this a while ago and it would redirect the first 5-6 pages that show up on google search to other websites. I used Malwarebytes' Anti-malware to fix it and I would definitely recommend that if you have any other problems. Because from what I'm read... Malwarebytes' is one of the few apps/AV's that can actually remove it. I have Nod32 and it didn't do jack squat.
I hate optimists.
SCC-Faust
Profile Blog Joined November 2007
United States3736 Posts
February 17 2009 16:44 GMT
#12
On February 17 2009 14:22 ulszz wrote:
try hijack this, it works wonders. just google what looks suspicious when hjt shows you the log. i'm sure u can figure it out.

http://www.download.com/Trend-Micro-HijackThis/3000-8022_4-10227353.html


I'd be super careful with this though.

One time I tried this and it totally bombed my computer, had to system restore.
I want to fuck Soulkey with a Zelderan.
gg_hertzz
Profile Blog Joined January 2004
2152 Posts
February 17 2009 21:21 GMT
#13
this happened to me not too long ago had to reinstall everything.
ulszz
Profile Blog Joined June 2007
Jamaica1787 Posts
February 17 2009 21:48 GMT
#14
On February 18 2009 01:44 SCC-Faust wrote:
Show nested quote +
On February 17 2009 14:22 ulszz wrote:
try hijack this, it works wonders. just google what looks suspicious when hjt shows you the log. i'm sure u can figure it out.

http://www.download.com/Trend-Micro-HijackThis/3000-8022_4-10227353.html


I'd be super careful with this though.

One time I tried this and it totally bombed my computer, had to system restore.

ya, just make sure you google the processes before you delete them. sorry bout that though, prolly was a huge pain in the ass.
everliving, everfaithful, eversure
micronesia
Profile Blog Joined July 2006
United States24761 Posts
February 18 2009 04:06 GMT
#15
On February 18 2009 01:31 dm47 wrote:
sounds like Trojan.vundo. I had this a while ago and it would redirect the first 5-6 pages that show up on google search to other websites. I used Malwarebytes' Anti-malware to fix it and I would definitely recommend that if you have any other problems. Because from what I'm read... Malwarebytes' is one of the few apps/AV's that can actually remove it. I have Nod32 and it didn't do jack squat.

Thanks I did this today and it seemed to help (had to transfer the updated definitions from another computer since the trojan was blocking it haha...
ModeratorThere are animal crackers for people and there are people crackers for animals.
Please log in or register to reply.
Live Events Refresh
Next event in 1h 6m
[ Submit Event ]
Live Streams
Refresh
StarCraft 2
MindelVK 30
StarCraft: Brood War
Britney 55162
Jaedong 2051
Mini 772
Stork 502
firebathero 421
Soma 405
Shuttle 298
actioN 288
Killer 252
EffOrt 246
[ Show more ]
Hyun 177
hero 121
Last 110
Soulkey 100
Sharp 72
sSak 60
[sc1f]eonzerg 56
sorry 43
ToSsGirL 28
Movie 28
Hm[arnc] 25
Sacsri 23
Rock 20
GoRush 19
scan(afreeca) 14
IntoTheRainbow 14
yabsab 13
Noble 12
SilentControl 10
ivOry 6
Terrorterran 3
Dota 2
Gorgc7083
Counter-Strike
byalli699
fl0m664
zeus473
shoxiejesuss415
edward89
Heroes of the Storm
Khaldor212
Other Games
FrodaN4396
singsing2244
ArmadaUGS2107
B2W.Neo1198
Lowko405
DeMusliM201
crisheroes175
Fuzer 155
Sick149
XaKoH 131
KnowMe122
Organizations
StarCraft 2
Blizzard YouTube
StarCraft: Brood War
BSLTrovo
sctven
[ Show 13 non-featured ]
StarCraft 2
• AfreecaTV YouTube
• intothetv
• Kozan
• IndyKCrew
• LaughNgamezSOOP
• Migwel
• sooper7s
StarCraft: Brood War
• Michael_bg 4
• BSLYoutube
• STPLYoutube
• ZZZeroYoutube
Dota 2
• C_a_k_e 1406
League of Legends
• Jankos2125
Upcoming Events
Platinum Heroes Events
1h 6m
BSL
6h 6m
RSL Revival
20h 6m
ByuN vs Maru
MaxPax vs TriGGeR
WardiTV Team League
22h 6m
BSL
1d 5h
Replay Cast
1d 10h
Replay Cast
1d 19h
Afreeca Starleague
1d 20h
Light vs Calm
Royal vs Mind
Wardi Open
1d 21h
Monday Night Weeklies
2 days
[ Show More ]
OSC
2 days
Sparkling Tuna Cup
2 days
Afreeca Starleague
2 days
Rush vs PianO
Flash vs Speed
Replay Cast
3 days
Afreeca Starleague
3 days
BeSt vs Leta
Queen vs Jaedong
Replay Cast
4 days
The PondCast
4 days
Replay Cast
5 days
RSL Revival
5 days
Replay Cast
6 days
RSL Revival
6 days
Liquipedia Results

Completed

Proleague 2026-03-27
WardiTV Winter 2026
Underdog Cup #3

Ongoing

BSL Season 22
CSL Elite League 2026
CSL Season 20: Qualifier 1
ASL Season 21
Acropolis #4 - TS6
2026 Changsha Offline CUP
StarCraft2 Community Team League 2026 Spring
RSL Revival: Season 4
Nations Cup 2026
NationLESS Cup
BLAST Open Spring 2026
ESL Pro League S23 Finals
ESL Pro League S23 Stage 1&2
PGL Cluj-Napoca 2026
IEM Kraków 2026
BLAST Bounty Winter 2026
BLAST Bounty Winter Qual

Upcoming

CSL Season 20: Qualifier 2
CSL 2026 SPRING (S20)
Acropolis #4
IPSL Spring 2026
BSL 22 Non-Korean Championship
CSLAN 4
Kung Fu Cup 2026 Grand Finals
HSC XXIX
uThermal 2v2 2026 Main Event
IEM Cologne Major 2026
Stake Ranked Episode 2
CS Asia Championships 2026
IEM Atlanta 2026
Asian Champions League 2026
PGL Astana 2026
BLAST Rivals Spring 2026
CCT Season 3 Global Finals
IEM Rio 2026
PGL Bucharest 2026
Stake Ranked Episode 1
TLPD

1. ByuN
2. TY
3. Dark
4. Solar
5. Stats
6. Nerchio
7. sOs
8. soO
9. INnoVation
10. Elazer
1. Rain
2. Flash
3. EffOrt
4. Last
5. Bisu
6. Soulkey
7. Mini
8. Sharp
Sidebar Settings...

Advertising | Privacy Policy | Terms Of Use | Contact Us

Original banner artwork: Jim Warren
The contents of this webpage are copyright © 2026 TLnet. All Rights Reserved.