Reply to thread

Message

<blockquote data-quote="Blackmorebard" data-source="post: 441805" data-attributes="member: 43736"><p>Hello, I was hoping You could help me, because I might have stumbled upon some malicious software. It started about two days ago. The starting pages on Chrome, Firefox and IE are all set to google.at, google.com redirected straight to google.at (im not from Austria, my default was Google.pl) and changing the settings was half-successful, upon restarting it still showed as Google.at sometimes, and in the lower right corner it suggested Google.at as the original Google page. Initially, the address bar after redirecting from google.com looked like this &quot;<a href="http://www.google.at/?gfe_rd=cr&amp;ei=8NkeVusB6uPBA8C3udgM&amp;gws_rd=ssl" target="_blank">www.google.at/?gfe_rd=cr&amp;ei=8NkeVusB6uPBA8C3udgM&amp;gws_rd=ssl</a>&quot;. Also it keeps asking about confirming google privacy policy, which wouldn&#039;t strike me as that suspicious if it weren&#039;t for the unusual browser behaviour (but now I don&#039;t want to confirm anything unless I&#039;m perfectly sure it&#039;s fine). After taking some steps to remove the infection&nbsp; Chrome still takes me to google.at on startup (IE doesn&#039;t do it anymore), although It&#039;s possible to switch to google.com properly now. It&#039;s still unusual, because there&#039;s no reason to affiliate me with google.at. I&#039;d like to ask If You could check out my FRST logs, and tell me if there&#039;s any danger.</p></blockquote><p></p>

[QUOTE="Blackmorebard, post: 441805, member: 43736"] Hello, I was hoping You could help me, because I might have stumbled upon some malicious software. It started about two days ago. The starting pages on Chrome, Firefox and IE are all set to google.at, google.com redirected straight to google.at (im not from Austria, my default was Google.pl) and changing the settings was half-successful, upon restarting it still showed as Google.at sometimes, and in the lower right corner it suggested Google.at as the original Google page. Initially, the address bar after redirecting from google.com looked like this "[URL="http://www.google.at/?gfe_rd=cr&ei=8NkeVusB6uPBA8C3udgM&gws_rd=ssl"]www.google.at/?gfe_rd=cr&ei=8NkeVusB6uPBA8C3udgM&gws_rd=ssl[/URL]". Also it keeps asking about confirming google privacy policy, which wouldn't strike me as that suspicious if it weren't for the unusual browser behaviour (but now I don't want to confirm anything unless I'm perfectly sure it's fine). After taking some steps to remove the infection Chrome still takes me to google.at on startup (IE doesn't do it anymore), although It's possible to switch to google.com properly now. It's still unusual, because there's no reason to affiliate me with google.at. I'd like to ask If You could check out my FRST logs, and tell me if there's any danger. [/QUOTE]

Verification