HiJackThis / Support Requests / #43 Redirect to this: http://www.ebay.de/?clk_rvr

#43 Redirect to this: http://www.ebay.de/?clk_rvr_id=494879288696

Milestone: v1.0_(example)

Status: closed

Owner: Loucif Kharouni

Labels: None

Priority: 1

Updated: 2013-07-22

Created: 2013-06-27

Creator: Jeaspher

Private: No

Hello,

Just wondering why every time I type ebay.com -- the url in my browser will change to this : http://www.ebay.de/?clk_rvr_id=494879288696, instead of going straight to Ebay in the U.S.

Can you please help me check for security issues. Please guide as to what to delete/remove.

1 Attachments

hijackthis.log

Discussion

Loucif Kharouni - 2013-06-27

please delete the following:
C:\Program Files\WindowsApps\eBayInc.eBay_1.2.5.5_neutral__1618n3s9xq8tw\eBay.CoreApp.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://searchou.com/?id=b0bdd38900000000000000ffeae12cae
O2 - BHO: MagniPiocc - {38556865-4865-0EB1-38EF-BD6D46C36736} - C:\ProgramData\MagniPiocc\51c7c5104ad43.dll
O4 - HKLM..\Run: [UpdReg] C:\Windows\UpdReg.EXE

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Loucif Kharouni - 2013-06-27

status: open --> pending

assigned_to: Loucif Kharouni
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
- Jeaspher - 2013-06-28
  
  Hello,
  
  I already deleted the entries you have specified. After running HJT again,I don't see those entries any longer. However, when I used chrome.... searchou.com url suddenly appeared. Also, I am still being redirected to ebay.de. Any more suggestions? Thanks.
  
  If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Loucif Kharouni - 2013-07-05

Maybe you should check if that url is not your chrome start-up page

Screen Shot 2013-07-05 at 12.30.06 PM.png

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Loucif Kharouni - 2013-07-22

status: pending --> closed
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Loucif Kharouni - 2013-07-22

no updates. case closed, can be re-open if needed.

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Redirect to this: http://www.ebay.de/?clk_rvr_id=494879288696

A free utility that finds malware and other threats

Group

Searches

Help

#43 Redirect to this: http://www.ebay.de/?clk_rvr_id=494879288696

Discussion