• Log InLog In
  • Register
Liquid`
Team Liquid Liquipedia
EDT 08:07
CEST 14:07
KST 21:07
  • Home
  • Forum
  • Calendar
  • Streams
  • Liquipedia
  • Features
  • Store
  • EPT
  • TL+
  • StarCraft 2
  • Brood War
  • Smash
  • Heroes
  • Counter-Strike
  • Overwatch
  • Liquibet
  • Fantasy StarCraft
  • TLPD
  • StarCraft 2
  • Brood War
  • Blogs
Forum Sidebar
Events/Features
News
Featured News
TL.net Map Contest #22 - Voting & Ladder Map Selection2Code S Season 2 (2026) - RO8 Preview5[ASL21] Finals Preview: Two Legacies21Code S Season 2 (2026) - RO12 Preview2herO wins GSL Code S Season 1 (2026)7
Community News
[BSL22] Non-Korean Championship from 13 to 28 June0Weekly Cups (May 25-31): Clem doubles, 2v2 circuit heads toward finale0StarCraft II 5.0.16 PTR Patch Notes may 26th139Weekly Cups (May 18-24): MaxPax wins doubles0Crank Gathers Season 4: BW vs SC2 Team League5
StarCraft 2
General
StarCraft II 5.0.16 PTR Patch Notes may 26th My starcraft 2 changes The Death of Cheese: From a Professional Cheeser Oliveira Would Have Returned If EWC Continued SC2 Parody - "Somebody That I Used to Troll"
Tourneys
Maestros of The Game 2 announcement and schedule ! Sparkling Tuna Cup - Weekly Open Tournament RSL Revival: Season 5 - Qualifiers and Main Event Crank Gathers Season 4: BW vs SC2 Team League GSL Code S Season 2 (2026)
Strategy
[G] Having the right mentality to improve
Custom Maps
[D]RTS in all its shapes and glory <3 [A] Nemrods 1/4 players
External Content
The PondCast: SC2 News & Results Mutation # 528 Infection Detected Welcome to the External Content forum Mutation # 527 Hell Train
Brood War
General
FlaShFTW vs A.Alm Grudge Match Event [BSL22] Non-Korean Championship from 13 to 28 June vespene.gg — BW replays in browser Quality of life changes in BW that you will like ? Data analysis on 70 million replays
Tourneys
[ASL21] Grand Finals [Megathread] Daily Proleagues Escore Tournament StarCraft Season 2 [BSL22] WB Final & LB Semis - Saturday 21:00 CEST
Strategy
Any training maps people recommend? Muta micro map competition [G] Hydra ZvZ: An Introduction Fighting Spirit mining rates
Other Games
General Games
ZeroSpace Megathread Stormgate/Frost Giant Megathread Path of Exile Nintendo Switch Thread Warcraft III: The Frozen Throne
Dota 2
Official 'what is Dota anymore' discussion
League of Legends
Heroes of the Storm
Simple Questions, Simple Answers Heroes of the Storm 2.0
Hearthstone
Deck construction bug Heroes of StarCraft mini-set
TL Mafia
Vanilla Mini Mafia Mafia Game Mode Feedback/Ideas TL Mafia Community Thread Five o'clock TL Mafia
Community
General
US Politics Mega-thread How cold is too cold to be outdoors? Dating: How's your luck? Russo-Ukrainian War Thread Trading/Investing Thread
Fan Clubs
The herO Fan Club!
Media & Entertainment
[Manga] One Piece Anime Discussion Thread [Req][Books] Good Fantasy/SciFi books
Sports
2024 - 2026 Football Thread McBoner: A hockey love story TeamLiquid Health and Fitness Initiative For 2023 Formula 1 Discussion
World Cup 2022
Tech Support
Computer Build, Upgrade & Buying Resource Thread Facing Challenges in Mobile App Development
TL Community
The Automated Ban List
Blogs
Esportsmanship: How to NOT B…
TrAiDoS
Why RTS gamers make better f…
gosubay
ramps on octagon
StaticNine
ASL S21 English Commentary…
namkraft
Customize Sidebar...

Website Feedback

Closed Threads



Active: 4850 users

Virus/Trojan Redirects Internet

Blogs > micronesia
Post a Reply
micronesia
Profile Blog Joined July 2006
United States24776 Posts
February 17 2009 04:54 GMT
#1
So I've been pretty lucky about not letting bad stuff happen to my computer... but one day after running all that defensive software recommended in the thread http://www.teamliquid.net/forum/viewmessage.php?topic_id=87753 I noticed this happening:

1)
  • Type ravenholm into google
  • Click on the first hit (wikipedia article)
  • Get redirected to http://www.manga.com/?ref=AW2396753 or some other dumb site


2)
  • Type fios into google
  • Click on the first hit (verizon website)
  • Get redirected to http://www.mamma.com/Mamma?query=fios or some porn website and end up at the correct website another time...


For a goof I tried another search (smith) and ended up at the smith college website as you might expect...

I brought up my McAfee console for the first time ever (free antivirus crap I got from my university) and manually updated the definitions or whatever the deal is, and am running a scan on my system. It said:

autorun.inf
location: c:\
detected as: Generic!atr
Type: Trojan
Status: No Action Taken (Delete Failed)

So I'm trying to decide how I can aid the software in cleaning it... I tried looking for the file manually, but even after I showed hidden files, there was no autorun.inf there

The timing of this is truly ironic. Maybe adaware is malware!

*****
ModeratorThere are animal crackers for people and there are people crackers for animals.
SpiritoftheTunA
Profile Blog Joined August 2006
United States20903 Posts
February 17 2009 04:58 GMT
#2
try combofix, itslike fucking magic
posting on liquid sites in current year
ssj114
Profile Blog Joined September 2008
Afghanistan461 Posts
February 17 2009 04:59 GMT
#3
http://remove-malware.com/videos/how-to-remove-malware-for-free-video/
Sandboxie + SUA + DEP, Windows Firewall + NAT Router
Binky1842
Profile Blog Joined July 2004
United States2599 Posts
February 17 2009 05:12 GMT
#4
google the name of the detected file, in your case Generic!atr, and follow the help the search hits provide you.
keep your definition up to date >.<

i hope that's what youre asking for anyways. GL
"The zoo could not confirm that Binky was the attacker, but only Binky had blood on his face following the incident"
SpiritoftheTunA
Profile Blog Joined August 2006
United States20903 Posts
February 17 2009 05:15 GMT
#5
On February 17 2009 14:12 Binky1842 wrote:
google the name of the detected file, in your case Generic!atr, and follow the help the search hits provide you.
keep your definition up to date >.<

i hope that's what youre asking for anyways. GL

generic trojans can come in many forms

i suggest http://www.bleepingcomputer.com/combofix/how-to-use-combofix
posting on liquid sites in current year
ulszz
Profile Blog Joined June 2007
Jamaica1787 Posts
Last Edited: 2009-02-17 05:22:45
February 17 2009 05:22 GMT
#6
try hijack this, it works wonders. just google what looks suspicious when hjt shows you the log. i'm sure u can figure it out.

http://www.download.com/Trend-Micro-HijackThis/3000-8022_4-10227353.html
everliving, everfaithful, eversure
ShoCkeyy
Profile Blog Joined July 2008
7815 Posts
February 17 2009 06:37 GMT
#7
I've always used trend micro. They're amazing. PC Cillen o.o
Life?
micronesia
Profile Blog Joined July 2006
United States24776 Posts
February 17 2009 07:03 GMT
#8
As I said in the OP, I updated my virus definitions. It took care of the source of the problem when I ran a 2 hour scan lol... I physically removed the autorun.inf since the virus scanner couldn't do it. Hopefully this takes care of it (I tested google out and everything seems to be working now)

I'll keep this blog 'bookmarked' so to speak, for the next time I need help cleaning my computer so ty everyone.
ModeratorThere are animal crackers for people and there are people crackers for animals.
Racenilatr
Profile Blog Joined August 2008
United States2756 Posts
February 17 2009 13:59 GMT
#9
worked for me every time lol. That happens alot to me on internet explorer or something. I would say cut back on the porn though because too much porn=adware+malware
KOFgokuon
Profile Blog Joined August 2004
United States14911 Posts
February 17 2009 14:08 GMT
#10
gl hope it doesn't act up more
dm47
Profile Blog Joined March 2008
82 Posts
February 17 2009 16:31 GMT
#11
sounds like Trojan.vundo. I had this a while ago and it would redirect the first 5-6 pages that show up on google search to other websites. I used Malwarebytes' Anti-malware to fix it and I would definitely recommend that if you have any other problems. Because from what I'm read... Malwarebytes' is one of the few apps/AV's that can actually remove it. I have Nod32 and it didn't do jack squat.
I hate optimists.
SCC-Faust
Profile Blog Joined November 2007
United States3736 Posts
February 17 2009 16:44 GMT
#12
On February 17 2009 14:22 ulszz wrote:
try hijack this, it works wonders. just google what looks suspicious when hjt shows you the log. i'm sure u can figure it out.

http://www.download.com/Trend-Micro-HijackThis/3000-8022_4-10227353.html


I'd be super careful with this though.

One time I tried this and it totally bombed my computer, had to system restore.
I want to fuck Soulkey with a Zelderan.
gg_hertzz
Profile Blog Joined January 2004
2152 Posts
February 17 2009 21:21 GMT
#13
this happened to me not too long ago had to reinstall everything.
ulszz
Profile Blog Joined June 2007
Jamaica1787 Posts
February 17 2009 21:48 GMT
#14
On February 18 2009 01:44 SCC-Faust wrote:
Show nested quote +
On February 17 2009 14:22 ulszz wrote:
try hijack this, it works wonders. just google what looks suspicious when hjt shows you the log. i'm sure u can figure it out.

http://www.download.com/Trend-Micro-HijackThis/3000-8022_4-10227353.html


I'd be super careful with this though.

One time I tried this and it totally bombed my computer, had to system restore.

ya, just make sure you google the processes before you delete them. sorry bout that though, prolly was a huge pain in the ass.
everliving, everfaithful, eversure
micronesia
Profile Blog Joined July 2006
United States24776 Posts
February 18 2009 04:06 GMT
#15
On February 18 2009 01:31 dm47 wrote:
sounds like Trojan.vundo. I had this a while ago and it would redirect the first 5-6 pages that show up on google search to other websites. I used Malwarebytes' Anti-malware to fix it and I would definitely recommend that if you have any other problems. Because from what I'm read... Malwarebytes' is one of the few apps/AV's that can actually remove it. I have Nod32 and it didn't do jack squat.

Thanks I did this today and it seemed to help (had to transfer the updated definitions from another computer since the trojan was blocking it haha...
ModeratorThere are animal crackers for people and there are people crackers for animals.
Please log in or register to reply.
Live Events Refresh
Kung Fu Cup
11:00
#10
IntoTheiNu 711
WardiTV625
SteadfastSC114
Rex102
Liquipedia
The PondCast
10:00
Episode 95
CranKy Ducklings SOOP36
CranKy Ducklings27
LiquipediaDiscussion
[ Submit Event ]
Live Streams
Refresh
StarCraft 2
Ryung 455
SteadfastSC 114
Rex 102
ProTech85
gerald23 26
StarCraft: Brood War
Britney 38915
Rain 18609
Calm 11251
Shuttle 1548
Horang2 735
actioN 670
Mini 507
BeSt 283
EffOrt 173
Last 165
[ Show more ]
Pusan 154
ggaemo 147
Hyuk 127
Sharp 119
Rush 119
Zeus 97
hero 97
ToSsGirL 62
Shine 60
PianO 54
Shinee 42
JYJ 35
[sc1f]eonzerg 31
sorry 28
sSak 23
Sacsri 19
IntoTheRainbow 16
Movie 15
zelot 14
Hm[arnc] 13
ajuk12(nOOB) 8
Noble 8
Icarus 4
Terrorterran 1
Dota 2
Dendi766
XcaliburYe51
League of Legends
Reynor75
Counter-Strike
olofmeister2449
zeus875
allub249
kRYSTAL_0
Other Games
singsing1325
B2W.Neo627
Lowko414
DeMusliM194
Livibee71
Hui .11
Organizations
StarCraft 2
Blizzard YouTube
StarCraft: Brood War
BSLTrovo
[ Show 14 non-featured ]
StarCraft 2
• AfreecaTV YouTube
• intothetv
• Kozan
• IndyKCrew
• LaughNgamezSOOP
• Migwel
• sooper7s
StarCraft: Brood War
• iopq 31
• BSLYoutube
• STPLYoutube
• ZZZeroYoutube
League of Legends
• Nemesis6554
• Jankos2819
• TFBlade327
Upcoming Events
uThermal 2v2 Circuit
2h 53m
Maestros of the Game
3h 23m
ByuN vs herO
Rogue vs Bunny
Replay Cast
11h 53m
Replay Cast
20h 53m
WardiTV Spring Champion…
22h 53m
OSC
1d
Maestros of the Game
1d 3h
Serral vs Percival
SHIN vs ShoWTimE
Replay Cast
1d 20h
uThermal 2v2 Circuit
2 days
Maestros of the Game
2 days
Clem vs Lambo
Zoun vs SKillous
[ Show More ]
Replay Cast
2 days
Solar vs Classic
uThermal 2v2 Circuit
3 days
Grudge Match
3 days
FlaShFTW vs A.Alm
GSL
3 days
herO vs Rogue
Maru vs Cure
Patches Events
4 days
uThermal 2v2 Circuit
4 days
BSL
4 days
Replay Cast
4 days
Monday Night Weeklies
5 days
Sparkling Tuna Cup
5 days
Replay Cast
6 days
Kung Fu Cup
6 days
Liquipedia Results

Completed

KK 2v2 League Season 1
RSL Revival: Season 5
Heroes Pulsing #1

Ongoing

BSL Season 22
IPSL Spring 2026
KCM Race Survival 2026 Season 2
Acropolis #4
CSCL: Masked Kings S4
YSL S3
SCTL 2026 Spring
WardiTV Spring 2026
Maestros of the Game 2
2026 GSL S2
Murky Cup 2026
IEM Cologne Major 2026
Stake Ranked Episode 2
CS Asia Championships 2026
Asian Champions League 2026
IEM Atlanta 2026
PGL Astana 2026
BLAST Rivals Spring 2026
IEM Rio 2026
PGL Bucharest 2026
Stake Ranked Episode 1
BLAST Open Spring 2026

Upcoming

BSL 22 Non-Korean Championship
CSLAN 4
Blizzard Classic Cup 2026
Kung Fu Cup 2026 Grand Finals
CranK Gathers Season 4: BW vs SC2 Team League
HSC XXIX
uThermal 2v2 2026 Main Event
Heroes Pulsing #3
Heroes Pulsing #2
Esports World Cup 2026
BLAST Bounty Summer 2026
BLAST Bounty Summer Qual
Stake Ranked Episode 3
XSE Pro League 2026
TLPD

1. ByuN
2. TY
3. Dark
4. Solar
5. Stats
6. Nerchio
7. sOs
8. soO
9. INnoVation
10. Elazer
1. Rain
2. Flash
3. EffOrt
4. Last
5. Bisu
6. Soulkey
7. Mini
8. Sharp
Sidebar Settings...

Advertising | Privacy Policy | Terms Of Use | Contact Us

Original banner artwork: Jim Warren
The contents of this webpage are copyright © 2026 TLnet. All Rights Reserved.