I saw a youtube video that I wanted my wife to see. So, I downloaded savetubevideo. Now my browser redirects to landing.savetubevideo.com. Malwarebytes, Spybot, nor AVG detects it. Has anyone seen this before?
SHK Certified (School of Hard Knocks)
NCSS, ATSP/IP
actually, this is easy to fix, it is a spyware/redirector application:
1. Uninstall the App... SaveTubeVideo... DO NOT REBOOT at this STAGE...
2. Uninstall WinPCap (actually a legit app, but this is used to spy on you), which gets installed along side of SaveTube... NOW REBOOT...
3. for ease of fixing the left overs, Download HiJackThis, run a scan with log, post the log here, I, or someone else will discern the log and tell you what to fix...
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:53:26 AM, on 9/7/2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal
ComboFix 10-09-06.04 - Dwayne 09/07/2010 12:31:14.1.2 - x86
Microsoft Windows 7 Professional 6.1.7600.0.1252.1.1033.18.2937.1628 [GMT -4:00]
Running from: c:\users\Dwayne\Desktop\ComboFix.exe
SP: Spybot - Search and Destroy *disabled* (Updated) {ED588FAF-1B8F-43B4-ACA8-8E3C85DADBE9}
SP: SUPERAntiSpyware *disabled* (Updated) {222A897C-5018-402e-943F-7E7AC8560DA7}
* Created a new restore point
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
Did you try goombawaho's suggestion on checking your hosts file?
Also, have you checked your LAN/connection settings? Here's what I'm talking about....
Open Internet Explorer, go to Tools -> Internet Options..
On the Connections tab, click the LAN Settings button.. Do you have anything in the Proxy server box? If so, and you didn't put it there, take it out, and uncheck that box..
Also, try running a couple general clean-up tools after the other tools:
Advanced System care
Glary Utilities
CCleaner(mentioned by BadBigBen) - also use the registry cleaner option..
And I THINK that from your last post, you mean that nothing listed in this forum thread is working so far... but please specify what exactly it is you've tried. I see you posted logs from HJT and Combofix, but what have you actually DONE on your computer to try and fix the problem?
I did check the Hosts file this morning after I read your replies. I can't find the proxy settings. I am running Windows 7. I haven't had the redirection happen so far after I replaced the Hosts file.
SHK Certified (School of Hard Knocks)
NCSS, ATSP/IP
and good find there on the Support Site, I guess when I installed it on the VM, it had not gotten nested in FF yet, although it was redirecting in IE and FF, and the cleanup on the VM went smooth...
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.