Computer Support Forum

Has anyone found Windows 10 or Edge in their website's Google Analytics?

Question: Has anyone found Windows 10 or Edge in their website's Google Analytics?

I can't see any listing of Edge or Windows 10 in the Browser/Operating System reports in Google Analytics-- for my personal website or my job's website.
Is this a MS issue or Google issue? Maybe both?
Thanks!

Relevance 100%
Preferred Solution: Has anyone found Windows 10 or Edge in their website's Google Analytics?

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

Answer: Has anyone found Windows 10 or Edge in their website's Google Analytics?

Analytics lists it as a Chrome browser so in a few days 90% of the world will have switched to Chrome and IE will have 0 market share.

2 more replies
Relevance 79.54%

Why? I mean, it seems just plain stupid to me that this is not possible with the Edge browser.
Is there anyone that has a fix for it? Or is it just the way Edge handles Javascripts?

GA message: Your browser does not support charts.

More replies
Relevance 79.13%

Hi,

I have a problem with website redirects on my computer. It also appears as if a couple other computers on my work network have this issue as well.

My computer is a laptop - I use on my home network and a "new" work network (where other computers have had issues which I think affected me - I'll blame them for now, anyway, cuz it makes me feel better).

It is Windows 7 Home Premium with a 64-bit OS - Toshiba Satellite A505.

It started with the fake "Antivirus Scan" appearing on my computer - I knew it was fake and attempted to close it, but could not - could not run Malwarebytes or AVG. I followed directions I found on another post to start in Safe mode, run rkill, then Malwarebytes (still in Safe mode). I did this. It did not appear as if rkill was stopping anything from running, as no names showed up in the logfile and nothing was being detected in Malwarebytes, so I stopped MB, ran rkill again and ran Malwarebytes for a full scan. It did find an infected file - a Trojan Dropper - which was removed. I repeated the Safe Mode rkill and MB a few more times since then and also in regular mode.

The things is has found include (with spaces between to indicate new scans):

Safe Mode:
Trojan.FakeAlert value ogmacrla - registry value
Trojan.FakeAlert file - gqsobxdlajb.ext

Reg. Startup Mode:
Malware.Trace - registry key
Trojan.DNSChanger (2 of these) - registry data items

Reg. Startup Mode:
No malicious items

Safe Mode:
Trojan.DNSChanger (6 of ... Read more

Answer:Google-analytics website redirect issue

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not, then since you cannot run our scans, please just confirm that you still need help.Casey

13 more replies
Relevance 79.13%

I am running Windows 7 on a Toshiba laptop, and using Internet Explorer. I believe it is version 8.

I was infected by "Antivirus Scan" - where fake warnings appeared, the fake program acted like it was scanning my computer, and nothing was able to open. I removed it using rkill and Malwarebytes in safe mode, as explained in another post.

This seemed to work; however, I am still experiencing issues where webpages are redirected when clicking on links - or I get additional pop-ups when clicking on links. Often these pop ups go to a google-analytics.com site. I try to close the window before it finishes loading.

There also seems to be similar issues with computers on the same network. Could the virus/trojan/?? be lurking on the network and spreading?

I appreciate your help and guidance with this issue.

Andrea

Answer:Website redirecting problem - google-analytics

Hello,If you haven't already, you need to isolate the affected computer from the others to keep the infection from spreading.Please follow the instructions in ==>This Guide<==. If you cannot complete a step, skip it and continue.Once the proper logs are created, then make a NEW TOPIC and post it ==>HERE<== Please include a description of your computer issues and what you have done to resolve them.If you can produce at least some of the logs, then please create the new topic and explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the topic and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.Orange Blossom

2 more replies
Relevance 78.31%

So, getting on the internet has become a pain. Every time I try to go to a web page I am redirected, pop-ups come up and it's altogether disastrous. I've tried searching for information and I'm pretty sure it's that whole Google-Analytics dealio. I'm trying to work on my Master's thesis and this isn't helping.I hope you can help.Here is my hijackthis info:Logfile of Trend Micro HijackThis v2.0.4Scan saved at 2:04:24 PM, on 10/10/2010Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.17080)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\CA\SharedComponents\HIPSEngine\UmxCfg.exeC:\Program Files\CA\SharedComponents\HIPSEngine\UmxFwHlp.exeC:\Program Files\CA\SharedComponents\HIPSEngine\UmxPol.exeC:\Program Files\CA\SharedComponents\HIPSEngine\UmxAgent.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\ISafe.exeC:\Program Files\CA\CA Int... Read more

Answer:Website redirection, trojans... Google-Analytics virus?

Hello , And to the Bleeping Computer Malware Removal Forum. My name is Elise and I'll be glad to help you with your computer problems.I will be working on your malware issues, this may or may not solve other issues you may have with your machine.Please note that whatever repairs we make, are for fixing your computer problems only and by no means should be used on another computer.The cleaning process is not instant. Logs can take some time to research, so please be patient with me. I know that you need your computer working as quickly as possible, and I will work hard to help see that happen. Please reply using the Add/Reply button in the lower right hand corner of your screen. Do not start a new topic. The logs that you post should be pasted directly into the reply. Only attach them if requested or if they do not fit into the post.Unfortunately, if I do not hear back from you within 5 days, I will be forced to close your topic. If you still need help after I have closed your topic, send me or a moderator a personal message with the address of the thread or feel free to create a new one.You may want to keep the link to this topic in your favorites. Alternatively, you can click the button at the top bar of this topic and Track this Topic, where you can choose email notifications. The topics you are tracking are shown here.-----------------------------------------------------------If you have since resolved the original problem you were having, we would appreciate you... Read more

2 more replies
Relevance 63.55%

When I GOOGLE my website, I get many hits, most of which I understand.

However, one hit is titled <u>LATEST NEWS</u>. When I click on the link, it opens my homepage. That is NOT the title of my homepage, nor is it any keyword in the meta tag. LATEST NEWS does not appear anywhere on my homepage. It is, however, a file listed elsewhere on the website. When I open the FILE/LATEST NEWS, I am directed to the correct LN page.

So, my question is, what criteria does Google use to seek/find? How is it connecting the title LATEST NEWS with my homepage?

I'm using IE, haven't tried on NN.

Thank you
 

Answer:Google Found My Website Using An Incorrect Link?

You say you do have a page on your site called "local news"? if so Google will still cache index regardless of just seeking words you have in your meta tags if i am thinking straight..

Meta tags are there just to give your site a better chance of google indexing your pages, although the more meta tags you place the better, at the same time google will still index regardless of tags just much slower.
 

2 more replies
Relevance 62.73%

Hallo

I have problem with internet. Most of sites says mi "website found. waiting for reply" and nothing... except Google, CNN and few other which works well.
As i saw on forums, lot of people have the some probem but nobody can solve.

Before you ask, Yes, DNS is ok. I can ping everything even if pinging large packets. I can use remote desktop on this machine and other services.
I tried Win Vista and Win 7 and the result is same.
No matter if IE7 or Firefox or Google Chrome.
Connected through ADSL modem.

Anyone helps?

Answer:[SOLVED] Website found, waiting for reply... except google

Check the firewall on router & in your system

Run IE 8 at an elevated admin level - right-click on IE 8 icon, select 'run as admin'

4 more replies
Relevance 61.09%

When I click on links from a Google search, it redirects or sometimes opens a new browser window with a blank page from http://results.google-analytics.com/
Super Anti-Spyware does not detect anything. Enclosing my hijackthis.log.
Any help would be appreciated.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:29:50 PM, on 6/21/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\Program Files\AVG\avgchsvx.exe
C:\Program Files\AVG\avgrsx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\AVG\avgcsrvx.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\AVG\avgwdsvc.exe
C:\Program Files\BlueSoleil\BlueSoleilCS.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\dlcxcoms.exe
C:\Program Files\Nero Burning ROM\Nero 8\Nero 8\InCD\InCDsrv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\AVG\avgnsx.exe
C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\Nero Burning ROM\Nero 8\Nero 8\Nero BackItUp\NBService.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\svchost.exe
C:\WIND... Read more

More replies
Relevance 60.68%

The google/yahoo redirect thing is the one where you click a search result and get sent off to some unrelated page. This only happens with google and yahoo, of course.
The one that has really got me is the one that keeps the page from loading. the browser says "waiting for www.google-analytics.com..." and never loads. It isn't all sites just some. Example: can go to any Youtube video but not to many of the channels. If I were to type "threadbanger.com" in the address bar, it would navigate there for a split second and then get hijacked to a blank page with the google-analytics.com message. Computing is no fun anymore.
When the search redirect virus showed up, I reformatted the harddrive and started over. It was still present the very first time I logged on to the web. I don't know what to do. It happens in both Firefox and explorer. Help.

Just a note: Analytics problem seems not to occur in Explorer 6.

Answer:Google/Yahoo redirect and google-analytics.com blank page

The virus may have changed the DNS settings on your router.

1 more replies
Relevance 60.27%

Hi. pls pardon my ignorance. My firewall is asking me if i want to permit the following:

Can you kindly help me by explaining if this is safe to do, and why is this happening in the first place?

thank you very much.

ADDENDUM:

I just closed that window, and i got a msg ( i think from my avast firewall) saying 'application hijacking has been detected' and then another msg saying this prog has been blocked. < sorry but i don't know what all this means. is something wrong here?
 

More replies
Relevance 59.04%

Hi, one of the great volunteers here helped to clean my wife's laptop when she was getting her Google search results redirected some time ago, and the forum comes highly recommended from her so thank you for the previous help we've had!

I have similar problems on my desktop PC now where periodically my Google search results are going astray (mostly to a .302 Found page or other generic "search results" page). I am also getting popup windows in Firefox (which Adblock Plus doesn't seem to notice) which either go to Google.com by the time I navigate to them, or have the status bar saying they're waiting for response from Google Analytics. I haven't had the time to do all the prep work before today but previously I tried running Spybot Search and Destroy but it wouldn't open at all. I followed internet advice on that one to find a randomly named duplicate .exe and was able to run Spybot eventually but it didn't pull up anything much.

I don't know if it's important or related, but I also ran a HijackThis scan before coming here and loaded the logfile through their website to scout for problems. There were 4 entries they listed as "Nasty" which all had an unknown IP address as part of the entry. Unfortunately, I did not get a chance to save this log file before my computer crashed, and these lines have been removed so I am unable to advise what the IP address was.

I have DDS and GMer logs here, again I don't know if... Read more

Answer:Google redirects and google analytics popups

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. Please include a clear description of the problems you're having, along with any steps you may have performed so far.Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.Even if you have already provided information about your PC, we need a new log to see what has changed since you originally posted your problem.We need to create an OTL ReportPlease download OTL from one of the following mirrors:This is THE MirrorSave it to your desktop.Double click on the icon on your desktop.Click the "Scan All Users" checkbox.In the custom scan box paste the following:

msconfig
safebootminimal
activex
drivers32
netsvcs
%SYSTEMDRIVE%\*.exe
/m... Read more

24 more replies
Relevance 57.81%

Scenario: Someone I trust sends me a url "clicky" in an email.

I click and it's on a site I trust (NPR.org most recently), the window I click to pops up for a second, then goes away. I get a "waiting for www.google-analytics.com" at the left end of a gray bar at the bottom of my screen, and at the right end a green bar showing progress......but the green bar never get past about 3/4 of the way and nothing happens......and I've waited a long time. Can I dump this google-analytics??? What's happening.

Answer:google analytics ?????

Google analytics uses JavaScript to track the visitors. I use it on my own site as well and its great but the thing is that JavaScript hangs loading whatever that comes after in until it has stopped executing. Example, if on my site I've a piece of js thats right at the top, whatever that comes after it would have to wait till it finishes.

This is the reason why google advises people to put the analytics code right at the bottom, after your </body> tag. In this way everything on your site would still load, just that the firefox bar may remain at "Waiting for...". You can stop js from executing by using noscript (noscript.net). It is my favourite addon for firefox.

Cheers

2 more replies
Relevance 57.81%
Question: Google Analytics

Ok so we have 9 computers in this house, but I only use three of them, and they all have this google-analytics issue.

Whenever we click on a link from google, it sometimes goes to the page then right after the page goes blank and the bottom right says something like "results.google-analytics" and it says that it is redirecting the page somewhere else, but the page never loads and the screen just stays blank. Also this can happen when just clicking a link on any web page, and google analytics just redirects it to some random popup-like page instead of the page we wanted to go to...

I run a Windows XP, a Windows 7, and a Vista computer... and I really don't know what else to post, thank you for any help you can give me!

More replies
Relevance 57.81%
Question: Google analytics

This is the 2nd or 3rd time I have had problems. My websites keep getting hijacked. I have restored my computer to the "out of the box" state and have been trying to get all my spyware and antivirus programs back on but to no avail. I am back where I started. When I go to a website, the website gets hijacked by "google analytics". This is how the problems started before when I ended up with Antivirus active on my computer and could not remove it. This is the 3rd computer on my network that has been attacked. I am trying to get one cleaned so I can download copies of the software from an external source. Also when I ran the gmer.exe, I did not all those boxes checked as in the example and it would not allow me to check them. The ones that weren't supposed to be checked weren't. I did not get a rootkit report back.

Help, please.
DDS (Ver_10-10-21.02) - NTFS_AMD64
Run by Kelly at 21:55:39.06 on Sat 10/23/2010
Internet Explorer: 8.0.7600.16385
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.3895.1951 [GMT -4:00]
============== Running Processes ===============

C:\windows\system32\wininit.exe
C:\windows\system32\lsm.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:&#... Read more

Answer:Google analytics

Hi,Welcome to Bleeping Computer. My name is m0le and I will be helping you with your log.Please subscribe to this topic, if you haven't already. You can subscribe by clicking the Options box to the right of your topic title and selecting Track This Topic.

Please avoid installing/uninstalling or updating any programs and attempting any unsupervised fixes or scans. This can make helping you impossible.

Please reply to this post so I know you are there.The forum is busy and we need to have replies as soon as possible. If I haven't had a reply after 3 days I will bump the topic and if you do not reply by the following day after that then I will close the topic.Once I receive a reply then I will return with your first instructions.Thanks

2 more replies
Relevance 57.81%

Hi,

I appear to have caught the Google Analytics thing.

Attached are the DDS and GMER logs. I'd really appreciate someone looking at them and helping me fix this.

Thanks in advance

Mark

Answer:Google Analytics - Need help!

Hi,

Please ignore this post/mark closed. It looks like I fixed the problem.

Thanks

2 more replies
Relevance 57.81%
Question: Google Analytics

Hi I have just opened a Google Analytics account and have put the 'tracking code" at the end of every page just before </body> but it isn't registering.

Thier help pages aren't very good can anyone help?

cheers

Wayne
 

More replies
Relevance 57.81%

Okay so the last probably 2 weeks I've been getting weird Google things where when I'm browsing websites in Firefox (And I believe all my browsers but I'm not certain) Then it pops up a new Window with either http://search.googleanalytics.com and http://results.googlesyndication.com and says Server not found (Or whatever it says when you try to go on the internet when your offline) And recently this has been happening multiple times a day (roughly 6 times) And it's getting really annoying and I don't trust Google very much so how do I make this stop?

Answer:How do I get rid of Google Analytics pop-ups?

Hi,

Does this happen when browsing any website at all, or only with certain website? I would say update your anti-spyware/anti-malware software (if you have any) and try running a scan to see if anything comes up.

Hope this helps.


Regards,

Jon.

19 more replies
Relevance 57.81%

While searching the forums here or playing in the Arcade, I often notice the www.google-analytics.com address appearing at the bottom left hand corner of my screen.
Are Major Geeks signed up to this service and monitoring user activity?

G
 

Answer:google-analytics.com

google analytics doesn't spy on users, but helps web designers track which pages are getting viewed, how much traffic and excedra to make a more enjoyable site. Nothing to worry about grumbles.
 

2 more replies
Relevance 57.81%
Question: Google Analytics

I am getting the Google Analytics redirect virus on 3 computers in my house. I have used multiple free tools like malwarebytes and kaspersky internet security 2010. I can't figure out which computer is passing the virus to the others. Could someone please guide me step by step on fixing this scenario?

Answer:Google Analytics

Now all im getting is a pop up of google analytics.
Its not redirecting my searches anymore

4 more replies
Relevance 57.81%
Question: Google Analytics

I use the Firefox browser and IE8. i have noticed that when I type a URL into Firefox, its gives the message at the bottom of the browser "waiting for google analytics" this can take time, once it has found this it then starts looking for the site I have requested. Is this part of Firefox, or is it something I can turn off. If the latter can anybody tell me how please

Answer:Google Analytics

This is normal behaviour for Firefox. It's just it's way of letting you know it's doing something. As far as I know you can neither remove or turn off this action. I have always found Firefox to be slow. If you want to use Firefox I'm afraid you'll just have to go with the flow.There are a few small tweaks to speed up Firefox although I can't remember them off hand. I tend to install and forget. If I can think of them I'll post them.

4 more replies
Relevance 57.81%
Question: Google Analytics

i keep getting redirected via Google Analytics and been driving me nuts for a while now. i run windows 7 64bit and dont have ark atached sence it said 32 bit only and i do have a win 7 disk i also use ubuntu time to time and gets same redirect and here is my dds.

.
DDS (Ver_11-03-05.01) - NTFS_AMD64
Run by RODDragon at 10:46:12.71 on Thu 03/24/2011
Internet Explorer: 8.0.7600.16385
Microsoft Windows 7 Professional 6.1.7600.0.1252.1.1033.18.3966.2471 [GMT -7:00]
.
AV: AVG Anti-Virus Free *Enabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
SP: AVG Anti-Virus Free *Enabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Program Files (x86)\AVG\AVG9\avgchsva.exe
C:\Program Files (x86)\AVG\AVG9\avgrsa.exe
C:\Windows\system32\lsm.exe
C:\Program Files (x86)\AVG\AVG9\avgcsrva.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\AVG\AVG9\avgwdsvc.exe
C:\Windows\system32\svchost.exe -k LocalServiceA... Read more

Answer:Google Analytics

Hi,

Please download Malwarebytes' Anti-Malware to your desktop.
Double-click mbam-setup.exe and follow the prompts to install the program.
At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
If an update is found, it will download and install the latest version.
Once the program has loaded, select Perform full scan, then click Scan.
When the scan is complete, click OK, then Show Results to view the results.
Be sure that everything is checked, and click Remove Selected.
When completed, a log will open in Notepad. Please save it to a convenient location.
Please post contents of that file in your next reply.

Do you have a router in use?

4 more replies
Relevance 57.81%
Question: Google-Analytics

For the past week and a half, Google-Analytics pop-ups occur as I browse with Firefox. I don't seem to have any trouble, according to my own anti-virus (Microsoft Security Essentials) and anti-malware programs (Malware Bytes). I want to make sure my computer is healthy. Nothing else seems to be wrong, yet.

I just close those windows without clicking on anything. Also, Some links redirect to a new tab that says redirecting to google-analytics, but nothing ever comes through.

Thanks for any help you can offer!

-Elina

Answer:Google-Analytics

Hello and welcome to the forums!My secret agent name on the forums is SweetTech (you can call me ST for short), it's a pleasure to meet you. I am very sorry for the delay in responding, but as you can see we are at the moment being flooded with logs which, when paired with the never-ending shortage of helpers, resulted in the delayed responding to your thread.I would be glad to take a look at your log and help you with solving any malware problems.If you have since resolved the issues you were originally experiencing, or have received help elsewhere, please inform me so that this topic can be closed. If you have not, please adhere to the guidelines below and then follow instructions as outlined further below:Logs from malware removal programs (OTL is one of them) can take some time to analyze. I need you to be patient while I analyze any logs you post. Please remember, I am a volunteer, and I do have a life outside of these forums.
Please make sure to carefully read any instruction that I give you. Attention to detail is important! Since I cannot see or directly interact with your computer I am dependent on you to "be my eyes" and provide as much information as you can regarding the current state of your computer.
If you're not sure, or if something unexpected happens, do NOT continue! Stop and ask!
In Windows Vista and Windows 7, all tools need to be started by right clicking and selecting Run as Administrator&#... Read more

2 more replies
Relevance 57.81%

Sirmany times while visiting certain sites with or without clicking links google results, google analytics or some other variation pops up. mostly hxxp://www.google-analytics.com/ or or hxxp://search.google-analytics.com/ or hxxp://results.google-analytics.com/also certain pages like the home page of spybot gets redirected to a google search result. the text is " Oops! Firefox could not find www.safer-networking.orgTry reloading: www.­safer-­networking.­orgAdditional suggestions: * Access a cached copy of www.­safer-­networking.­org * Search on Google:"Also note that explorer or opera cant access the site either. I have the DDS.scr results, however when i do the GMER scan a blue screen shows up and says that "windows has stopped to prevent damage to your computer" and then my pc reboots.im posting the results of DDS below.Attach.txt.UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.IF REQUESTED, ZIP IT UP & ATTACH IT.DDS (Ver_11-05-19.01).Microsoft® Windows Vista Black Edition™ 2009 Boot Device: \Device\HarddiskVolume2Install Date: 11/4/2009 9:27:11 AMSystem Uptime: 5/20/2011 10:50:37 AM (1 hours ago).Motherboard: ASUSTeK Computer INC. | | M3A78-EMProcessor: AMD Phenom™ II X3 720 Processor | AM2 | 2800/200mhz.==== Disk Partitions =========================.A: is RemovableC: is FIXED (NTFS) - 173 GiB total, 7.817 GiB free.D: is FIXED (NTFS) - 195 GiB total, 148.485 GiB free.E: is... Read more

Answer:Google analytics pop up

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

3 more replies
Relevance 57.81%

hi

i don't know why each time i log on to any google related site i keep getting this error

"ssl.google-analytics.com has send an incorrect or unexpected message. error code: -12263"

this happened right after i went to the analytics website. i just logged in using my gmail account. i didn't install anything.

i'm using a firefox browser ver. 2.14.

also, the pages take so long to load now... also I?ve also noticed pages around the web occasionally hanging with the browser?s status bar reading connecting to ssl.google-analytics.com?.

Please help me get rid of it. I don't really need it.

Thanks!

Answer:How To Get Rid Of Google Analytics

I use Google Analytics. I haven't had any problems with it. Did you accidently sign up for their new data sharing feature?

11 more replies
Relevance 57.81%

and why am I waiting for it?When I am on some websites I have to wait on Google-Analytics for the page to load.Does anyone know what it is.Thanks

Answer:What Is Google-Analytics

Not sure but I don't trust it.I have Firefox with the NoScript addon set to block Goggle Analytics. Pages load fine without it being allowed.

7 more replies
Relevance 57.81%

Something strange happened all of a sudden.
All the time advertisement pop ups are popping up, many of them marked as google analytics. I am pretty sure it has nothing to do with google analytics, what is that and any ideas how to get rid of it? And why did my Norton not pick it up?

Answer:google analytics pop ups everywhere! Help!

Cause Norton is the worst antivirus out there, along with McAfee.

5 more replies
Relevance 57.81%

I have been getting the google analytics pop up for a couple days now, didn't think anything of it until it's been popping up more and more. For example when I came to post this I have another pop up!

I am using Fire Fox I NEVER use Internet Explore, and I have Google Chrome installed but haven't used it for a while. I'm running Windows 7 home, a lap top. I just bought the lap top not too long ago and have had no problems up until this. I have not installed any new programs or downloaded anything when this problem has come up. I do not use P2P software and I tend to stick to my normal regular trusted sites. I do not know how this can happen.

So what other info do you need to know? I did the DDS software program and I have that info there was no ARK log though, I'm not sure why? I tried turning off AVG but I am not finding a way to do it, even through task manager it says I can't do that. I scanned using AVG, nothing pulled (except a game that was stock with the computer) I also scanned using MBAM and nothing pulled.

I wasn't sure if I could use the rootkit program since it said 32 bit and I'm not exactly sure if that applies to me since I've seen my computer says 84 or 86 something like that.

So here is the DDS:

.
DDS (Ver_11-03-05.01) - NTFS_AMD64
Run by Danielle at 15:15:13.07 on Sat 04/09/2011
Internet Explorer: 8.0.7600.16385 BrowserJavaVersion: 1.6.0_24
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.4094.2397 [GMT -7:00]
.
AV: AVG... Read more

Answer:Google Analytics Pop Up

Google analytics is not an infection, but it can be quite annoying.

Use the AdBlock Plus extension with the Easy Privacy and Easy List filter subscriptions and use Optimizegoogle setting it to "Block ads on all google services" and to "Block click Tracking".

15 more replies
Relevance 57.81%
Question: Google Analytics

help me, google chrome acting really weirdmy log file from GMER :GMER 1.0.15.15530 - http://www.gmer.netRootkit scan 2010-11-17 08:41:01Windows 6.1.7600 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP3T0L0-4 ST3250310AS rev.4.AAARunning: negyode9.exe; Driver: C:\Users\Roberto\AppData\Local\Temp\pwddqfow.sys---- Kernel code sections - GMER 1.0.15 ----.text ntkrnlpa.exe!ZwSaveKeyEx + 13AD 82E53579 1 Byte [06].text ntkrnlpa.exe!KiDispatchInterrupt + 5A2 82E77F52 19 Bytes [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3}? C:\Windows\system32\Drivers\mchInjDrv.sys The system cannot find the file specified. !---- User IAT/EAT - GMER 1.0.15 ----IAT C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe[1800] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress] [75945D3D] C:\Windows\system32\apphelp.dll (Application Compatibility Client Library/Microsoft Corporation)IAT C:\Program Files\Yahoo!\SoftwareUpdate... Read more

Answer:Google Analytics

Hi Rob Mann,Welcome to BleepingComputer Virus, Trojan, Spyware, and Malware Removal Logs Forum. My name is sundavis, I will be helping you to deal with your Malware problems today.Please advise me what kind of brand or model of the router you're using now in your next reply. Thanks.Step1Please start OTL on your desktop.Under the Custom Scans/Fixes box at the bottom, copy/paste the following contents of code box.

:Otl
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 213.109.64.54 213.109.72.138 1.1.1.1
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.

:Files
C:\Users\Roberto\AppData\Roaming\avdrn.dat
C:\Users\Roberto\AppData\Roaming\apiqfw.dat

:Reg
[-HKEY_CURRENT_USER\Software\Microsoft\adver_id]

:Commands
[purity]
[emptytemp]
[EMPTYFLASH]
[resethosts]
[start explorer]
[Reboot]
Click Run Fix button on the top.Click OK and let it run unhindered.OTL will ask to reboot the machine. Please OK the prompt.A report will open. Copy and Paste that report in your next reply.Step2Please unplug your internet access (unplug it from your router or modem) and do the following:A.1.Click on Start button.2.Type Cmd in the Start Search text box.3.Press Ctrl-Shift-Enter keyboard shortcut to run Command Prompt as Administrator. Allow elevation request.4.Type netsh int ip reset in the Com... Read more

8 more replies
Relevance 57.81%

Okay so the last probably 2 weeks I've been getting weird Google things where when I'm browsing websites in Firefox (And I believe all my browsers but I'm not certain) Then it pops up a new Window with either search.googleanalytics.com and results.googlesyndication.com and says Server not found (Or whatever it says when you try to go on the internet when your offline) And recently this has been happening multiple times a day (roughly 6 times) And it's getting really annoying and I don't trust Google very much so how do I make this stop?
Thanks

Answer:How do I get rid of Google Analytics pop-ups?

a nice add-on for Firefox: NoScript....

2 more replies
Relevance 56.99%

Over the past couple of weeks I've been having trouble with google. I go to search for something, click the link I want to get to and I am redirected to a completely irrelevant page, often an ad. The address usually has something like 'google analytics' in it. I have Norton AntiVirus and it has failed to find the problem, as well as MalwareBytes' Anti-Malware and HitmanPro35. I'm assuming there's some sort of virus and I am about to try ComboFix or HiJackThis. Any advice?

Thanks

Answer:Google Redirect to ads, google analytics

Hello,Please follow the instructions in ==>This Guide<==. If you cannot complete a step, skip it and continue.Once the proper logs are created, then make a NEW TOPIC and post it ==>HERE<== Please include a description of your computer issues and what you have done to resolve them.If you can produce at least some of the logs, then please create the new topic and explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the topic and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.Orange Blossom

1 more replies
Relevance 56.99%

It seems like I cannot get rid of this thing. I was wondering what the chances are that the wireless network im connecting to has malware/virus in the router. I heard that sometimes that happens and might cause the pop ups on my machine. Ran Spybot (scan/immunize) Malware Bytes (Thorough) Rkill, TDSKiller, Eset Scanner, Im even micromanaging cookies through firefox (which btw sucks) haha. Still getting the redirects on google searchs, and even on other sites. Help please.

Answer:Google redirects, Google Analytics

Hello.I was wondering what the chances are that the wireless network im connecting to has malware/virus in the router.Are other computers on your network also experiencing issues?~Blade

2 more replies
Relevance 56.99%

I've found popups on many web pages and after some investigation I've found the javascript returned by google analytics to be the culprit.
It seems as if requests to http://www.google-analytics.com/ga.js are being appended with additional code - see below.
 
This is affecting all my browsers: Firefox, Chrome and Opera (current versions) and also if I fetch the script with Curl.
 
Does anyone know what might be causing this and/or how to get rid of it?
 
Full response of http://www.google-analytics.com/ga.js

(function(){var aa=encodeURIComponent,ba=Infinity,ca=setTimeout,da=isNaN,m=Math,ea=decodeURIComponent;function Ie(a,b){return a.onload=b}function Je(a,b){return a.onerror=b}function ha(a,b){return a.name=b}
var p="replace",la="floor",ma="charAt",oa="match",pa="port",qa="createElement",g="getTime",u="host",v="toString",y="split",ta="stopPropagation",z="location",va="search",A="protocol",xa="href",ya="apply",n="push",ia="test",ja="slice",ka="load",na="value",q="indexOf",ra="path",r="name",w="length",x="prototype",sa="clientWidth",ua="scope",wa="clientHeight",B="substring",za="navigator",C="join",D="toLowerCase",E;function Aa(a,b){switch(b){case 0:return""+a;case 1:return 1*a;case 2:return!!a;case 3:return 1E3*a}return a}function Ba(a){return"function"==typeof a}function Ca(a){return void 0!=a&&-1<(a.constructor+"")[q]("String")}function F(a,b){return void 0==a||"-"==a&&!b||""==a}function Da(a){if(!a||""==a)return"";for(;a&&-1<... Read more

Answer:Google Analytics Hijack??

Not sure I understand the question. By pop-ups, you're referring to ads?
 
Ever tried THIS?

4 more replies
Relevance 56.99%

Dear friends,
Any help regarding disabling or removing Google Analytics from tracking me on FF3 are most welcome! Thanks in advance.
 

Answer:Solved: Google analytics

7 more replies
Relevance 56.99%

so when I look at my router log this site comes up, I scaned for viruses using eset and everything and still no signs. this isnt even a pop up, it just shows in my log. any help? I feel like this is screwing up my dns too. 

Answer:www.google-analytics.com virus

fixed it with a complete wipe on router. sorry I didnt think twice. Can close thread. 

2 more replies
Relevance 56.99%

Hi there, everyone! First off, I'm a total noob, so I apologize in advance for my total lack of knowledge. I'm comfortable with a lot of jargon but in terms of security applications and such, I'm completely inexperienced, so please, do not be afraid to treat me like your grandma who just got on the internet, even though I'd consider myself savvier than that. I'll let you know if I've tried what you've suggested, but please do not assume so. Thanks!Okay, so here's the deal... for a couple of months now, randomly, and often, links will redirect to places other than their target. I'm not frequenting strange sites or "bad" sites like porno or warez or something, so that shouldn't be an issue. However, places like hulu.com or something equally typically harmless, even clicking on the "home page" logo (their name, top-left) will freeze that site, and pop up a new tab with a new, undesired page. Other times, I'll click a link, say trying to open a Wired.com article or something equally harmless, and that page, instead of going forward to the article, will pause for a second at google-analytics.com, or say, results5.google.com and then redirect to another page entirely. Usually the resulting page is pretty harmless itself (seemingly). It seems like a simple hijack to boost page rank or something to me, but who knows?Also, sites like Vimeo, for example, will load only briefly and then blink out, constantl... Read more

Answer:google-analytics.com redirects Help!

http://voices.washingtonpost.com/securityfix/2008/06/malware_silently_alters_wirele_1.html

Are you familiar with this article and securing your router?

89 more replies
Relevance 56.99%

DDS Logs:
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 9.0.8112.16464
Run by Stuart at 15:18:20 on 2013-03-02
Microsoft Windows 7 Professional 6.1.7601.1.1252.44.1033.18.8190.6200 [GMT 0:00]
.
AV: AVG Anti-Virus Free Edition 2013 *Enabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: AVG Anti-Virus Free Edition 2013 *Enabled/Updated* {B5F5C120-2089-702E-0001-553BB0D5A664}
.
============== Running Processes ===============
.
C:\PROGRA~2\AVG201~1\avgrsa.exe
C:\Program Files (x86)\AVG 2013\avgcsrva.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\Ati2evxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k LocalService
C:\Program Files\Sandboxie\SbieSvc.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files (... Read more

Answer:Google Analytics Infection

Hello soreilly Welcome to The Forums!!Around here they call me Gringo and I'll be glad to help you with your malware problems.Very Important --> Please read this post completely, I have spent my time to put together somethings for you to keep in mind while I am helping you to make things go easier, faster and smoother for both of us!Please do not run any tools unless instructed to do so.We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at y... Read more

27 more replies
Relevance 56.99%

Hi, Thanks for looking.

I had problems before with a ramnit virus and after talking to a few people dicided to reinstall. As i wanted a larger drive anyway i bought a brand new drive.
I installed my windows 7 on the new drive and thought everything would be ok. When going onto web sites i now still get the google-analytics web browser popping up nearly everytime i click on a link or more annoyingly when i am playing a game online. The pop up opens a new web browser and takes me to "junk" sites.
I did have 2 drives before and one of my my old ones is still attached but was only ever used to store data. When i reinstalled it does only show 128gb on the old drive although it is 500gb but the disk management page shows the whole drive at 465gb and as a primary pactive partition. Pasted below is the DDS.txt and i will attach the attach.txt but GMR came back saying "GMR hasn't found any system modification" and when i ran GMR the only boxes ticked were, services, registry, files, "c", ads and not all the ones shown in the guide.

Any help on how to get rid of this google problem would be greatly apreciated.

Thanks again
DDS (Ver_10-11-03.01) - NTFS_AMD64
Run by Hacman at 14:35:03.67 on 05/11/2010
Internet Explorer: 8.0.7600.16385
Microsoft Windows 7 Ultimate 6.1.7600.0.1252.44.1033.18.3326.2285 [GMT 0:00]
============== Running Processes ===============

C:\PROGRA~2\AVG\AVG10\avgchsva.exe
C:\Windows\system32&... Read more

Answer:google analytics problems

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process. Please also continue to work with me until I give you the all clear. Even if your computer appears to act better, you may still be infected.Even if you have already provided information about your PC, we need a new log to see what has changed since you originally posted your problem.Once we start working together, please reply back within 3 days or this thread may be closed so we can help others who are waiting.We need to create an OTL report,Please downloa... Read more

15 more replies
Relevance 56.99%

This site is awesome it teaches you while helping you. First let me say thank you to the individual that will help me. Greatly apperciated.My web browser is infected with Google-Analytics web hijacker virus. Computing is nightmare. I'm unable to uninstall several programs (mozialla firefox, speedbit video accelerator, qwest live toolbar, etc). To make matters worse I think the sofware programs that were provided with my modem have opened up portals (backdoors) for trojans, worms, and the like to walk through.Qwest windows live came with MSN, which (MSN) attempted to set up its own network, had a backdoor portal, and became a hub for undesireable programs.Thank you for your time.DDS (Ver_10-03-17.01) - NTFSx86 Run by User at 23:16:03.67 on Mon 06/28/2010Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_20Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.511.153 [GMT -7:00]============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcssvchost.exesvchost.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exesvchost.exeC:\Program Files\Java\jre6\bin\jqs.exeC:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exeC:\Program Files\Common Files\supportsoft\bin\sprtlisten.exeC:\PROGRA~1\SPEEDB~2\VideoAcceleratorService.exe... Read more

Answer:Google - Analytics Virus

Hi Kboykins,Welcome to Bleeping Computer!My name is mpascal, and I will be helping you fix your problem.Before we begin, I would like to make a few things clear so that we can fix your problem as efficiently as possible:Be sure to follow all my instructions carefully! If there is anything you don't understand, don't hesitate to ask.Please do not do anything or perform other steps unless I have asked you to do so.Please make sure you post all logs I ask you to, and make sure that the entire log gets posted.Don't attach any logs unless asked. Posting them in the forums will make them easier to analyze.If you are unsure of how to reply, or need help with anything regarding the website, please look here.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below I will review and take the steps necessa... Read more

2 more replies
Relevance 56.99%

I keep getting pop-ups on my web browser (no matter which browser I use) and sometimes I get re-routed to random websites. I was told it was a google analytics infection and to run some programs. The results are attached. Thanks!

Answer:Google analytics virus - please help!

Greetings and Welcome to The Forums!!My name is Gringo and I'll be glad to help you with your computer problems.I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of usPlease do not run any tools unless instructed to do so.
We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.
Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.
Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.
A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE: At the ... Read more

9 more replies
Relevance 56.99%

I battled either the same or similar virus about a year ago. the virus was in my router. I believe what I did was a hard reset of router, updated firmware and changed administrative passwords. I'm guessing some of these very smartbleeping experts will have more specific help.

More replies
Relevance 56.99%

Im very new to this site, just started a couple days ago, and was wondering if anyone could help me get rid of this virus. It redirects my google searches everytime, until the 3rd time i press the link, and opens random windows when i click on links. I searched the Google-Analytics virus on google and have gotten results from this website, but the topics were closed and the fix involved the person with the problem to send their information to fix it. That information was personalized though and is different for different people, so its not the same fix. So if you know how to fix this please help me. thanks.Edit: Moved topic from Vista to the more appropriate forum. ~ AnimalEdit: Thank you.-GEwrestler00

Answer:Google-Analytics Virus

Hello, you seem to have a DNS hijack/Please download Malwarebytes Anti-Malware and save it to your desktop.Download Link 1Download Link 2MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.Now disconnect your system from the internet, and your router.

Now run MBAM.
Double-click on mbam-setup.exe to install the application.
For instructions with screenshots, please refer to the How to use Malwarebytes' Anti-Malware Guide.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:[list]Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan.If an update is found, the program will automatically update itself. Press the OK button to close that box and continue.If you encounter any problems while downloading the definition updates, manually download them from here and just double-click on mbam-rules.exe to install.On the Scanner tab:Make sure the "Perform Quick Scan" option is selected.Then click on the Scan button.If asked to select the drives to scan, leave all the drives selected and click on the... Read more

1 more replies
Relevance 56.99%

I'm trying to find a decent gadget to keep track of my website statistics. I am currently tracking the site with Google Analytics. Our company is moving from outlook to google apps soon and i am trying to put together a decent homepage for the company and would like to display traffic for those who want to see.

Thanks!
 

Answer:Google Analytics Gadget

Subed, i would like a good Google Analytics tool also
 

2 more replies
Relevance 56.99%

I originally posted in the MS7 forum and was asked to repost here. I have an ad that pops up in the bottom right hand corner of every browser page regardless if I am using Firefox or IE. I also get randomly redirected when clicking links or typing in web pages. I was recently notified by facebook that an attempt to access my account was made from Brazil and I had an email account broken in to. Please help. I will post all the information I have gathered so far which is going to be TDSSKiller, aswMBR, and DDS in that order. My Original post is http://www.bleepingcomputer.com/forums/topic460531.html Thanks in advance for your help.

12:04:25.0536 3804 TDSS rootkit removing tool 2.7.45.0 Jul 9 2012 12:46:35
12:04:26.0069 3804 ============================================================
12:04:26.0070 3804 Current date / time: 2012/07/13 12:04:26.0069
12:04:26.0070 3804 SystemInfo:
12:04:26.0070 3804
12:04:26.0070 3804 OS Version: 6.1.7601 ServicePack: 1.0
12:04:26.0070 3804 Product type: Workstation
12:04:26.0070 3804 ComputerName: OFFICE
12:04:26.0070 3804 UserName: Tim
12:04:26.0070 3804 Windows directory: C:\Windows
12:04:26.0070 3804 System windows directory: C:\Windows
12:04:26.0071 3804 Running under WOW64
12:04:26.0071 3804 Processor architecture: Intel x64
12:04:26.0071 3804 Number of processors: 1
12:04:26.0071 3804 Page size: 0x1000
12:04:26.0071 3804 Boot type: Normal boot
12:04:26.0071 3804 ===========================================================... Read more

Answer:Help with Google Analytics Virus

Greetings and Welcome to The Forums!!My name is Gringo and I'll be glad to help you with your computer problems.I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of usPlease do not run any tools unless instructed to do so.
We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.
Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.
Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.
A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE: At the ... Read more

11 more replies
Relevance 56.99%

Hello,

I've been struggling with this problem for the last few days now, and I don't know what to do to rid myself of the problem. As of the present time, I keep getting random pop-ups everywhere I go that show "google.analytics," "gugle.com," "Client5.google.analytics," and things of that general nature.
I don't know why this is happening, and I've a feeling from my research that it's a trojan. Malwarebytes and Spybot S&D show only tracking cookies, and not the trojan itself. I performed a bootscan with my antivirus, and it showed that a file infected by "Java:Agent-AO [TRJ]" had been deleted.

So I'm currently at a loss of what to do.

Answer:Problem with google.analytics

Hello and welcome to TSF.

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

1 more replies
Relevance 56.99%

While i browse the web, i get a google-analytics.com and other windows that pops open.

Can someone help me with the logs? I am going through the Preparation Guide and the DDS file takes a long time (more than 10 mins) and then freezes my computer. Shall I skip that step and proceed with the gmer program?

Answer:google-analytics redirection

Lets see if this fixes the issue:Note: You have not specified the Operating System you are running, so I provided instructions for Windows 7. If you're using a different version, please be sure to let me know, and I'll kindly provide you with those instructions.Router ResetPlease read this: Malware Silently Alters Wireless Router Settings

Consult this link to find out what is the default username and password of your router and note down them: Route Passwords

Then rest your router to it's factory default settings:

"If your machine has been infected by one of these Zlob/DNSchanger Trojans, and your router settings have been altered, I would strongly recommend that you reset the router to its default configuration. Usually, this can be done by inserting something tiny like a paper clip end or pencil tip into a small hole labeled "reset" located on the back of the router. Press and hold down the small button inside until the lights on the front of the router blink off and then on again (usually about 30 seconds)"

This is the difficult part.
First get to the routers server. To do that type http:\\192.168.1.1 in the address bar and click Enter. You get the log in window.
Fill in the password you have already found and you will get the configuration page.
Configure the router to allow you to connect to your ISP server. In some routers it is done by a setup wizard. But you have to fill in the log in password your ISP has initially given ... Read more

6 more replies
Relevance 56.99%

I started getting redirects and pop ups a couple of weeks ago when I look at the URL before the page redirects it says google analytics. I tried to run a Mcaffee scan but it told me it needed to update and wouldn't scan without it and then when I tried to update it, it just kept saying it failed.

.
DDS (Ver_11-03-05.01) - NTFSx86
Run by Owner at 16:59:17.87 on Mon 04/25/2011
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_24
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1246.705 [GMT -5:00]
.
AV: McAfee VirusScan Enterprise *Enabled/Updated* {918A2B0B-2C60-4016-A4AB-E868DEABF7F0}
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\mfevtps.exe
C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTBCM\Binn\sqlservr.exe
C:\WINDOWS\system32\ZuneBusEnum.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Zune\ZuneLauncher.exe
C:\Program Files\dcmsvc\dcmsvc.exe
C:\Progra... Read more

Answer:keep getting pop upsI believe from google analytics

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

3 more replies
Relevance 56.99%

basically My web browser is infected with Google-Analytics web hijacker virus. Computing is nightmare. I'm unable to uninstall and/or update several programs. i've tried several things to get rid of it, with no success.

.
DDS (Ver_11-03-05.01) - NTFSx86
Run by Josh at 17:25:07.24 on Wed 04/27/2011
Internet Explorer: 7.0.6001.18000 BrowserJavaVersion: 1.6.0_24
Microsoft? Windows Vista? Home Premium 6.0.6001.1.1252.1.1033.18.2038.919 [GMT -4:00]
.
AV: Kaspersky Internet Security *Enabled/Updated* {56547CC9-C9B2-849D-8FEF-A496150D6A06}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Kaspersky Internet Security *Enabled/Updated* {ED359D2D-EF88-8B13-B55F-9FE46E8A20BB}
FW: Kaspersky Internet Security *Enabled* {6E6FFDEC-83DD-85C5-A4B0-0DA3EBDE2D7D}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k Networ... Read more

Answer:Google - Analytics Virus

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

9 more replies
Relevance 56.99%

Hey guysI have had these problem for a while now... may be 8 months but it has been getting worse...random pop-up windows from various site that first go to google-analytics.com and then pop up something "relevant" to what i am doing...The virus has disabled hijack this and i cannot run it or update it.i cannot download windows updates either or windows defender updates.i have the 3 files required (report, dds, attach zipped)should i post themGeorgeOaklandthanks Orange Blossomi thought that my turn would never come There are so many people needing help... the people who make these viruses and malware should get jail time...Merged 2 posts and removed my reply. ~ OB

Answer:google analytics and stuff

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

35 more replies
Relevance 56.99%

I believe my computer has the "Google Analytics" virus. I have been redirected a couple times to google-analytics.com, epoclick.com and I am getting random pop-up windows as well. I've ran combofix, GMER, malwarebytes, and TDSS, but it seems to not be finding anything. I am almost certain I have some sort of malware/trojan/virus.Here is my log from combofix:ComboFix 11-01-15.01 - Jeffy 01/16/2011 1:21.1.2 - x64Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.4061.2801 [GMT -8:00]Running from: c:\users\Jeffy\Desktop\ComboFix.exeAV: ESET Smart Security 4.2 *Disabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}FW: ESET Personal firewall *Enabled* {4FE52EC8-CB26-1113-0EFE-8842E2773BAA}SP: ESET Smart Security 4.2 *Disabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}.((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))).C:\Install.exe.((((((((((((((((((((((((( Files Created from 2010-12-16 to 2011-01-16 ))))))))))))))))))))))))))))))).2011-01-16 09:25 . 2011-01-16 09:25 -------- d-----w- c:\users\Default\AppData\Local\temp2011-01-16 09:20 . 2011-01-16 09:20 -------- d-----w- C:\32788R22FWJFW2011-01-16 08:37 . 2011-01-16 08:38 -------- d-----w- C:\TDSSKiller_Quarantine2011-01-16 08:15 . 2010-12-21 02:09 38224 ----a-w- c:\windows\SysWow64\dr... Read more

Answer:Google-analytics Virus, PLEASE HELP!

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

3 more replies
Relevance 56.99%

I recently was given a laptop with Windows 7 reinstalled and with no other exsisting data saved on the computer. Since the first online usage, I was redirected to Google redirect websites and epoclick. When viewing the Control Panel restore, I saw that it was just the Windows 7 install pack, so I am not sure if this virus is new or was never properly cleared before the reinstall. The computer itself seems to be running properly but does have the IE occasionally freeze up. I have run rkill and MalwareBytes with no listed problems. Please help!
DDS (Ver_10-12-12.02) - NTFSx86
Run by Lisa at 13:16:46.23 on Thu 03/03/2011
Internet Explorer: 8.0.7601.17514
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.2038.951 [GMT -5:00]

AV: Microsoft Security Essentials *Enabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}
AV: AntiVir Desktop *Enabled/Updated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}
SP: Microsoft Security Essentials *Enabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: AntiVir Desktop *Enabled/Updated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
c:\Program Files\Microsoft Security Client\Antimalware\... Read more

Answer:Google analytics and Epoclick pop-ups!

You have another topic here: http://www.bleepingcomputer.com/forums/topic382792.html

As such I will close this one.

1 more replies
Relevance 56.99%

I've recently been having some problems with my desktop computer. It's an older, custom machine that runs XP. At first I thought it was just running slow, but eventually I was unable to browse without being taken to unwanted sites (google-analytics.com), later the page would just load indefinitely. Finally, my symantec anti-virus said that a backdoor.tideservI!.inf was detected and a file known as a0083034.sys was trying to be quarantined. The quarantine said 'partial' success, and when I tried to use the 'clean' tool it also only partially succeeded. Despite the partial success, the problem persists.

When I googled the issue, I stumbled across a page on these forums where someone had the same issue I have. They did not post the necessary info, thus here I am. - Also, I do NOT have access to a Windows install disc or boot cd.
DDS (Ver_10-10-10.03) - NTFSx86
Run by Benjamin at 15:21:49.32 on Mon 10/11/2010
Internet Explorer: 6.0.2900.5512 BrowserJavaVersion: 1.6.0_21
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.3071.2517 [GMT -5:00]

AV: Symantec AntiVirus Corporate Edition *On-access scanning enabled* (Updated) {FB06448E-52B8-493A-90F3-E43226D3305C}

============== Running Processes ===============

D:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
D:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
D:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
D:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
D:\WINDOWS\s... Read more

Answer:google-analytics virus, need help

Hello and welcome to TSF.

I would like to see the reports from a couple more scans.
Please Download Rootkit Unhooker Save it to your desktop.
Now double-click on RKUnhookerLE.exe to run it.
Click the Report tab, then click Scan.
Check (Tick) Drivers, Stealth. Uncheck the rest. then Click OK.
Wait till the scanner has finished and then click File, Save Report.
Save the report somewhere where you can find it. Click Close.
Copy the entire contents of the report and paste it in a reply here.

Note** you may get this warning it is ok, just ignore

"Rootkit Unhooker has detected a parasite inside itself!
It is recommended to remove parasite, okay?"

=====================


Please download MBRCheck.exe to your desktop.Be sure to disable your security programs
Double click on the file to run it (Vista and Windows 7 users will have to confirm the UAC prompt)
A window will open on your desktop
if an unknown bootcode is found you will have further options available to you, at this time press N then press Enter twice.
If nothing unusual is found just press Enter
A .txt file named MBRCheck_mm.dd.yy_hh.mm.ss should appear on your desktop.
Please post the contents of that file.

19 more replies
Relevance 56.99%

HI - I am getting a little sliding window pop up on the bottom left of my browser (firefox). I am running Windows 7 Pro. I looked at the source code of the banner - it is:The script that appears to be generating the banner:<script src="http://www.google-analytics.com/gs.js?1&amp;code=4f8856e670224&amp;title=&amp;keywords=&amp;keywords_text=string%2Cpiano%2Csolo%2Corchestra%2Cquartet%2Cla&amp;ref=http%3A%2F%2Fwww.dominikmaican.com%2Fworks.php&amp;u=0&amp;pref=http%3A%2F%2Fwww.dominikmaican.com%2F&amp;utmcc=__utma%3D%2B__utmz%3D" async=""></script><div><div id="0.8031048317639154" style="cursor: pointer; position: fixed; right: 0pt; width: 200px; border: 2px solid black; background-color: white; text-align: center; padding: 5px; bottom: 4px;"><div onclick="kdfjunfldi_minimizeBanner();" style="background: url(&quot;http://www.google-analytics.com/img/close-btn.png&quot;) no-repeat scroll 1px 1px transparent; position: absolute; top: -17px; right: 0pt; height: 13px; width: 13px; margin: 0pt; padding: 0pt;"></div><div onclick="kdfjunfldi_goByBanner();" style="margin: 0pt; padding: 0pt;"><h5 style="font-size: 10px; font-weight: normal; margin: -5px 0pt; padding-bottom: 5px; text-align: right;">Sponsored ads</h5><h1 style="font-size: 24px; border-bottom: 2px dotted blue;"><a style=&... Read more

Answer:Google Analytics banner pop up?

DownloadTDSSkillerLaunch it.Click on change parameters-Select TDLFS file systemClick on "Scan".Please post the LOG report(log file should be in your C drive) Please download GMER from here(doesnot work on 64 bit OS)http://www2.gmer.net/download.phpTemporarily disable any real-time active protection so your security programs will not conflict with gmer's driver.GMER will open to the Rootkit/Malware tab and perform an automatic Full Scan when first run. (do not use the computer while the scan is in progress)If you receive a WARNING!!! about rootkit activity and are asked to fully scan your system...click NO.Now click the Scan button. If you see a rootkit warning window, click OK.When the scan is finished, click the Save... button to save the scan results to your Desktop. Save the file as gmer.log.Click the Copy button and paste the results into your next reply. DownloadaswMBRLaunch it, allow it to download latest Avast! virus definitionsClick the "Scan" button to start scan.After scan finishes,click on Save logPost the log results here

17 more replies
Relevance 56.99%

I have seen a similar thread here: [url="http://www.bleepingcomputer.com/forums/topic449943.html"[/url], but I have a 64 bit OS running windows 7 - not the 32 bit version outlined in the thread. It is basically a pop-up that randomly shows itself in the bottom right hand corner of my Firefox and Chrome browsers.None of my anti-virus softs have been able to detect it, let alone remove it. Eset and SuperAnti spyware and Emisoft.I have seen the user "narenxp" help another member here and hope he can assist me.I also have found these in my hosts file sitting at the bottom of the file:188.119.151.111 www.google-analytics.com.188.119.151.111 ad-emea.doubleclick.net.188.119.151.111 www.statcounter.com.108.163.215.51 www.google-analytics.com.108.163.215.51 ad-emea.doubleclick.net.108.163.215.51 www.statcounter.com.I would like to think the process of removal to be the same as the thread specified above, but want to make certain before I proceed.Anyone with knowledge on how to remove this annoyance would be very appreciated.Thank you.

Answer:Google analytics pop-up. Is it spyware?

DownloadTDSSkillerLaunch it.Click on change parameters-Select TDLFS file systemClick on "Scan".Please post the LOG report(log file should be in your C drive) Please download GMER from here(doesnot work on 64 bit OS)http://www2.gmer.net/download.phpTemporarily disable any real-time active protection so your security programs will not conflict with gmer's driver.GMER will open to the Rootkit/Malware tab and perform an automatic Full Scan when first run. (do not use the computer while the scan is in progress)If you receive a WARNING!!! about rootkit activity and are asked to fully scan your system...click NO.Now click the Scan button. If you see a rootkit warning window, click OK.When the scan is finished, click the Save... button to save the scan results to your Desktop. Save the file as gmer.log.Click the Copy button and paste the results into your next reply. DownloadaswMBRLaunch it, allow it to download latest Avast! virus definitionsClick the "Scan" button to start scan.After scan finishes,click on Save logPost the log results here

11 more replies
Relevance 56.99%

I have no idea how I got this malware. I have fixed other problems using ComboFix and HiJackthis and consider myself reasonably technical, but I am at a loss here. I have searched and read threads related to this but the solutions seem tailored to the individual. Please advise...

Answer:Google-Analytics Redirect

I note that you have a topic in the MR forum here: http://www.bleepingcomputer.com/forums/topic375934.html

To avoid confusion, I am closing this topic.

1 more replies
Relevance 56.99%

I have been getting more and more redircts from google searches. Most of them never fully open and just sit there with a blank page and the browser waiting for some data from google-analytics.com. Also, sometimes I actually get the page I want first and then after a second or two it redirects to another site. This may be a different problem but its just as annoying. A third but related issue is occasional pop-unders that may or may not open. Not sure but I don't think this happens in OE, since I use Firefox 99% of the time.I appreciate your help in getting these issues cleaned up._____________________________________________________DDS (Ver_10-10-10.03) - NTFSx86 Run by Jim at 1:10:10.89 on Sat 10/16/2010Internet Explorer: 8.0.6001.18975 BrowserJavaVersion: 1.6.0_17Microsoft? Windows Vista? Home Premium 6.0.6002.2.1252.1.1033.18.3454.1890 [GMT -5:00]============== Running Processes ===============C:\PROGRA~1\AVG\AVG10\avgchsvx.exeC:\Windows\system32\wininit.exeC:\Windows\system32\lsm.exeC:\Windows\system32\svchost.exe -k DcomLaunchC:\Program Files\Emsisoft Anti-Malware\a2service.exeC:\Windows\system32\nvvsvc.exeC:\Windows\system32\svchost.exe -k rpcssC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestrictedC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestrictedC:\Windows\system32\svchost.exe -k ne... Read more

Answer:google-analytics redirects

Hello , And to the Bleeping Computer Malware Removal Forum. My name is Elise and I'll be glad to help you with your computer problems.I will be working on your malware issues, this may or may not solve other issues you may have with your machine.Please note that whatever repairs we make, are for fixing your computer problems only and by no means should be used on another computer.The cleaning process is not instant. Logs can take some time to research, so please be patient with me. I know that you need your computer working as quickly as possible, and I will work hard to help see that happen. Please reply using the Add/Reply button in the lower right hand corner of your screen. Do not start a new topic. The logs that you post should be pasted directly into the reply. Only attach them if requested or if they do not fit into the post.Unfortunately, if I do not hear back from you within 5 days, I will be forced to close your topic. If you still need help after I have closed your topic, send me or a moderator a personal message with the address of the thread or feel free to create a new one.You may want to keep the link to this topic in your favorites. Alternatively, you can click the button at the top bar of this topic and Track this Topic, where you can choose email notifications. The topics you are tracking are shown here.-----------------------------------------------------------If you have since resolved the original problem you were having, we would appreciate you... Read more

16 more replies
Relevance 56.99%

I ran a system restore back to factory install. Installed COMODO firewall and Avira Antivir before I connected to my wireless network.. Then I connected and have been installing windows updates. I have been getting random popups in FireFox with blank pages with www.google-analytics.com, search.googleanalytics.com, results.google-analytics.com in the address bar.. Even on my iphone when i browse i get these popups.. I also have Spybot SD and SpywareBlaster installed. Is this malware, or just a network thing? I can't see how it can be malware I have only been on three websites since the system restore? Thank you for your help.

Answer:Google Analytics Popups

If you have a router then reset it and reset your cable modem if you have one or DSL box. See if that helps, does it happen on your iphone only when connected to wifi or does it happen on the cell network as well?

7 more replies
Relevance 56.99%

Hello,

I constantly monitor my web traffic using google analytics, and within the past month I have gotten people coming from my site after they have visited google images. I have google images pop up under referring site... maybe around 50 unique times a day. This is like 70% of my total traffic.

With Google Analytics, it shows that I have all these people coming from google images, but it doesn't tell me what they searched to find me. I am extremely curious as to what people are searching on google images which makes some image from my site appear - and then these people must click this image to get onto my site.

So how can I find out what people are searching? Is it possible?
 

Answer:Google Analytics question

11 more replies
Relevance 56.99%

For about a week now, a handful of sites I visit will redirect to google-analystics.com I assume it is a common problem these days, and I would like to get rid of it; its affecting me on a daily basis and interfering with my work. So whats easiest and most effective solution to this DNS poisoning?I've followed the instructions from the Preparation Guide to the best of my ability. If any more info is needed, please let me know. Thanks everyone! DDS (Ver_10-10-10.03) - NTFSx86 Run by Krbngrl at 6:39:25.17 on Mon 10/11/2010Internet Explorer: 8.0.7600.16385 BrowserJavaVersion: 1.6.0_15Microsoft Windows 7 Professional 6.1.7600.0.1252.1.1033.18.1535.412 [GMT -4:00]============== Running Processes ===============C:\Windows\system32\wininit.exeC:\Windows\system32\lsm.exeC:\Windows\system32\svchost.exe -k DcomLaunchC:\Windows\system32\svchost.exe -k RPCSSC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestrictedC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestrictedC:\Windows\system32\svchost.exe -k netsvcsC:\Windows\system32\svchost.exe -k LocalServiceC:\Windows\system32\svchost.exe -k NetworkServiceC:\Windows\System32\spoolsv.exeC:\Windows\system32\svchost.exe -k LocalServiceNoNetworkC:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exeC:\Windows\system32\svcho... Read more

Answer:Redirecting to google-analytics.com

Hi,Welcome to Bleeping Computer. My name is m0le and I will be helping you with your log.Please subscribe to this topic, if you haven't already. You can subscribe by clicking the Options box to the right of your topic title and selecting Track This Topic.Please avoid installing/uninstalling or updating any programs and attempting any unsupervised fixes or scans. This can make helping you impossible.Please reply to this post so I know you are there.The forum is busy and we need to have replies as soon as possible. If I haven't had a reply after 3 days I will bump the topic and if you do not reply by the following day after that then I will close the topic.Once I receive a reply then I will return with your first instructions.Thanks

2 more replies
Relevance 56.99%

When I try to go to certain sites (it's always the same ones), it always redirects me to google-analytics.com but leaves the window blank. Does anyone know what I should do?

Answer:google-analytics redirect

Hello, I guess ewe need a scan to get some system info and maybe find somme malware.Next run MBAM (MalwareBytes):Please download Malwarebytes Anti-Malware and save it to your desktop.Download Link 1Download Link 2MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.
For instructions with screenshots, please refer to the How to use Malwarebytes' Anti-Malware Guide.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan.If an update is found, the program will automatically update itself. Press the OK button to close that box and continue.If you encounter any problems while downloading the definition updates, manually download them from here and just double-click on mbam-rules.exe to install.On the Scanner tab:Make sure the "Perform Quick Scan" option is selected.Then click on the Scan button.If asked to select the drives to scan, leave all ... Read more

7 more replies
Relevance 56.99%

I am not sure I have everything you need but I did what was referred to in the "First steps" link above. These pop ups started yesterday after having my laptop worked on by a "tech" who installed a VPN connection on my machine for a work process. The issue is the google pop ups or some derivation thereof. It happens maybe 25% of the time I bring up an IE window. They are annoying and about half of the time I get this perpetual cycle of virus pop ups telling me I have to scan my machine and it does not matter if i click ok or cancel.
I have attached the two files I am quite honeslty not sure i zipped them correctly.

DDS file below:
DDS (Ver_10-11-10.01) - NTFSx86
Run by Jeff at 17:08:09.23 on Thu 11/11/2010
Internet Explorer: 8.0.6001.18975
Microsoft? Windows Vista? Home Premium 6.0.6002.2.1252.1.1033.18.2045.411 [GMT -5:00]
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
============== Running Processes ===============
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k... Read more

Answer:Google Analytics Pop up Frustration

Hello, and Welcome to TSF.

Please subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.

Before beginning the fix, read this post completely. If there's anything that you do not understand, kindly ask your questions before proceeding. Ensure that there aren't any opened browsers when you are carrying out the procedures below. Save the following instructions in Notepad as this webpage would not be available when you're carrying out the fix.

It is IMPORTANT that you don't miss a step & perform everything in the correct order/sequence.

---------------------------------------------------------------------------------------------

Please note that these fixes are not instantaneous. Most infections require more than one round to properly eradicate.

Stay with me until given the 'all clear' even if symptoms diminish. Lack of symptoms does not always mean the job is complete.

Kindly follow my instructions and please do no fixing on your own or running of scanners unless requested by me or another helper at this forum.

---------------------------------------------------------------------------------------------

Download ComboFix from one of these locations:

Link 1
Link 2

* IMPORTANT !!! Place ComboFix.exe on your Desktop
Disable your AntiVirus and AntiSpyware applications,... Read more

2 more replies
Relevance 56.99%

Hello

I have followed the instructions as instructed by Orange Blossom following my posting (with the same topic title as this one) on 23 October. I managed to follow all of the instructions listed on the link below without any problems:
http://www.bleepingcomputer.com/forums/topic34773.html

The problem on my PC relates to unwanted pages loading whilst I surf the net. I am often having problems trying to actually view websites as they get over-ridden by google-analytics.com and several other websites.

Please see the DDS.txt below, I have also attached attach.txt + ark.txt files:


DDS (Ver_10-10-21.02) - NTFSx86
Run by j at 12:13:59.18 on 24/10/2010
Internet Explorer: 7.0.5730.11
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.2038.1358 [GMT 1:00]

AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}

============== Running Processes ===============

C:\WINDOWS\system32\ibmpmsvc.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\Program Files\ThinkPad\Bluetooth Software\bin\btwdins.exe
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\Program Files\Lenovo\TrackPoint\TP4SERVINST.EXE
C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Fi... Read more

Answer:Google analytics Virus

Hello there,You have a rootkit, so let's shake that sucker loose, shall we? Download TDSSKiller.zipExtract it to your desktopDouble click TDSSKiller.exePress Start Scan
If Malicious objects are found then ensure Cure is selectedThen click Continue > Reboot nowCopy and paste the log in your next reply
A copy of the log will be saved automatically to the root of the drive (typically C:\)Thanks,tea

14 more replies
Relevance 56.99%

I have a small problem here. Not sure what its about, or why its happening, I have a feeling it could be a virus. I am not completely sure so I came here. So here is what happened. I was browsing a forum, and Java 6 window popped up, it said loading, periodically, it stopped, then closed, now I see a warning window. What is included in this window is what scared me. It said "Unable to open jarfile: //google.analytics..."

In place of the ... there were combinations of letters and numbers, symbols whatnot. So I really want to know why its doing this, where its coming from, and if it is a threat.
 

More replies
Relevance 56.99%

Hello Everyone;

I just recently began getting "Google Analytics" popups on both my laptop and pc at home. Reading online briefly brought me here and I have completed initial steps. Desktop is a Sony Vaio on Windows XP and my laptop is a Sony on Windows 7 - 64bit. (I'm not positive, but I have a strong feeling this is going to be a file or issue that is directly tied to my router as opposed to my computer)

Attached are my files. Thanks for any help in advanced.
 

Answer:Google Analytics Popups

Yes, it is most likely an issue with your router. The infection you have is known to infect router hardware. If you have a router hooked up then you need to follow the instructions for your hardware and reset it to factory default settings. Normally there is a recessed push button type switch that needs to be held down for some number of seconds to do this. After resetting to factory defaults on your router, you will need to reconfigure the router for your network if you have made any changes to the default network setup. After doing this, continue with on with the below.
Download HostsXpert and then follow the below steps.

* Unzip HostsXpert.zip
* It will create a folder named HostsXpert in whatever folder you extract it to.
* Run HostsXpert.exe by double clicking on it.
* Click the Make Writeable? button. (if you only see a Make Read-Only selection, it is already writeable so skip this button).
* Click Restore Microsoft's Hosts File and then click OK.
* Click the X to exit the program

Now copy just the bold text below to notepad (Do not include any space above the word REGEDIT). Save it as fixME.reg to your desktop. Be sure the "Save as" type is set to "all files" Once you have saved it double click it and allow it to merge with the registry.




REGEDIT4

[HKEY_LOCAL_MACHINE\system\controlset002\services\tcpip\parameters]
"DhcpNameServer"=""

Click to expand...

Make sure that you tell me if y... Read more

3 more replies
Relevance 56.99%

Hi there

I have decided to re-post this topic because the previous posting on this exact problem ended in "Due to lack of feedback, this topic has been closed." so I would like to revisit this please.

I have tried running Malwarebytes anti-malware but I still have this issue of pages getting loaded when I am surfing the net and most of the time the websites I am trying to log on to get diverted to google-anaytics.com

Please help!!

Answer:Google analytics Virus

Hello,Please follow the instructions in ==>This Guide<==. If you cannot complete a step, skip it and continue.Once the proper logs are created, then make a NEW TOPIC and post it ==>HERE<== Please include a description of your computer issues and what you have done to resolve them.If you can produce at least some of the logs, then please create the new topic and explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the topic and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.Orange Blossom

1 more replies
Relevance 56.99%

Hi,I'm having lots of issues with unwanted google analytic pop ups. No program i've run is able to find an issue/program. I just haven't been able to remove them - very frustrating I followed the steps requested when doing a post here - information as follows.(I was unable to complete the step with the GMER.exe file, it kept crashing, and i received a bios message at one point and had to restart the computer.)DDS (Ver_10-03-17.01) - NTFSx86 Run by Sophie at 20:22:51.01 on Sun 01/08/2010Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_19Microsoft Windows XP Professional 5.1.2600.3.1252.61.1033.18.2558.1756 [GMT 10:00]AV: Lavasoft Ad-Watch Live! Anti-Virus *On-access scanning enabled* (Updated) {A1C4F2E0-7FDE-4917-AFAE-013EFC3EDE33}AV: McAfee Anti-Virus and Anti-Spyware *On-access scanning enabled* (Updated) {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}FW: McAfee Firewall *enabled* {94894B63-8C7F-4050-BDA4-813CA00DA3E8}============== Running Processes ===============C:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcssvchost.exeC:\Program Files\Juniper\NetScreen-Remote\IPSecMon.exeC:\Program Files\Juniper\NetScreen-Remote\IreIKE.exesvchost.exeC:\WINDOWS\system32\Ati2evxx.exeC:\Program Files\Lavasoft\Ad-Aware\AAWService.exeC:\WINDOWS\system32\spo... Read more

Answer:Google analytics pop up issue

Hello , And to the Bleeping Computer Malware Removal Forum. My name is Elise and I'll be glad to help you with your computer problems.I will be working on your malware issues, this may or may not solve other issues you may have with your machine.Please note that whatever repairs we make, are for fixing your computer problems only and by no means should be used on another computer.The cleaning process is not instant. Logs can take some time to research, so please be patient with me. I know that you need your computer working as quickly as possible, and I will work hard to help see that happen. Please reply using the Add/Reply button in the lower right hand corner of your screen. Do not start a new topic. The logs that you post should be pasted directly into the reply. Only attach them if requested or if they do not fit into the post.Unfortunately, if I do not hear back from you within 5 days, I will be forced to close your topic. If you still need help after I have closed your topic, send me or a moderator a personal message with the address of the thread or feel free to create a new one.You may want to keep the link to this topic in your favorites. Alternatively, you can click the button at the top bar of this topic and Track this Topic, where you can choose email notifications. The topics you are tracking are shown here.-----------------------------------------------------------If you have since resolved the original problem you were having, we would appreciate you let... Read more

23 more replies
Relevance 56.99%

My computer has the google-analytics virus. Everytime I go try to use Firefox, I get redirected and the bottom left shows google-analytics.com. It redirects me to different type of ads. Can someone please assist me in removal?

Answer:Google-analytics virus

Hello,Please download Malwarebytes Anti-Malware (v1.46) and save it to your desktop.Download Link 1Download Link 2MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.
For instructions with screenshots, please refer to the How to use Malwarebytes' Anti-Malware Guide.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan.If an update is found, the program will automatically update itself. Press the OK button to close that box and continue.If you encounter any problems while downloading the definition updates, manually download them from here and just double-click on mbam-rules.exe to install.On the Scanner tab:Make sure the "Perform Quick Scan" option is selected.Then click on the Scan button.If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button. The scan will begin and "Scan in progr... Read more

1 more replies
Relevance 56.99%

Every time I go to a site on Firefox my Avast blocks this url. It says it is malware. I have run scans with all my virus and spyware programs and can't find any infection. How do I fix this so it doesn't keep popping up?
 

Answer:google-analytics.com malware

Avast pop up says Infections: URL:Mal
I am using XP home version and I do download all my updates.
 

2 more replies
Relevance 56.99%

Sadly, I can't go to any site without getting some kind of redirect from Google Analytics. I've reformatted my HDD thrice, but to no avail. This gets even more frustarting my the minute. Please help.

Thanks.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 3:42:06 PM, on 8/21/2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Unable to get Internet Explorer version!
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
C:\Program Files\uTorrent\uTorrent.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Windows\system32\taskhost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} ... Read more

Answer:Google Analytics Redirects

7 more replies
Relevance 56.99%

I've been struggling with this virus for a couple days now, and nothing I've done has seemed to work. I am having an issue where websites load slowly and redirect, sometimes creating tabs that lead to fake pages or stalling me out when I click links. Sometimes it says google.analytics in the URL when its loading me onto some bogus page. If you need me to answer any other questions I'll be checking back periodically throughout the workday.

Oh yeah, also, I'm running Windows 7.

Answer:Google Analytics virus

Please follow these instructions: How to remove Google Redirects or the TDSS, TDL3, Alureon rootkit using TDSSKillerDouble-click on TDSSKiller.exe to run the tool for known TDSS variants.
Vista/Windows 7 users right-click and select Run As Administrator.When the program opens, click the Start Scan button.If malicious objects are found, they will show in the Scan results - Select action for found objects and offer three options.Ensure Cure is selected, then click Continue > Reboot now to finish the cleaning process. <- Important!!
Note: If 'Suspicious' objects are detected, you will be given the option to Skip or Quarantine. Skip will be the default selection.A log file named TDSSKiller_version_date_time_log.txt will be created and saved to the root directory (usually Local Disk C:).Copy and paste the contents of that file in your next reply.-- For any files detected as 'Suspicious' (except those identified as Forged to be cured after reboot) get a second opinion by submitting to Jotti's virusscan or VirusTotal. In the "File to upload & scan" box, browse to the location of the suspicious file and submit (upload) it for scanning/analysis.Step 7 instructs you to scan your computer using Malwarebytes Anti-Malware and remove any traces that may still be present. If Malwarebytes encounters a file that is difficult to remove, you will be asked to reboot your computer so it can proceed with the disinfection process. If asked to restart ... Read more

10 more replies
Relevance 56.99%

DDS (Ver_10-03-17.01) - NTFSx86 Run by Landon at 14:33:45.23 on Sun 08/01/2010Internet Explorer: 8.0.7600.16385Microsoft Windows 7 Ultimate 6.1.7600.0.1252.1.1033.18.1022.422 [GMT -5:00]SP: Spybot - Search and Destroy *disabled* (Outdated) {ED588FAF-1B8F-43B4-ACA8-8E3C85DADBE9}============== Running Processes ===============C:\Windows\system32\wininit.exeC:\Windows\system32\lsm.exeC:\Windows\system32\svchost.exe -k DcomLaunchC:\Windows\system32\nvvsvc.exeC:\Windows\system32\svchost.exe -k RPCSSC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestrictedC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestrictedC:\Windows\system32\svchost.exe -k netsvcsC:\Windows\system32\svchost.exe -k LocalServiceC:\Windows\system32\rundll32.exeC:\Windows\system32\svchost.exe -k NetworkServiceC:\Windows\System32\spoolsv.exeC:\Windows\system32\svchost.exe -k LocalServiceNoNetworkC:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonationC:\Windows\system32\srvany.exeC:\Program Files\Motorola\Moto Helper Service\MotoHelper.exeC:\Windows\KMService.exeC:\Windows\system32\conhost.exeC:\Windows\system32\svchost.exe -k imgsvcC:\Program Files\TomTom HOME 2\TomTomHOMEService.exeC:\Pro... Read more

Answer:Probably Google-analytics redirector

Welcome to the BleepingComputer Forums. Since it has been a few days since you scanned your computer with HijackThis, we will need a new HijackThis log. If you have not already downloaded Random's System Information Tool (RSIT), please download Random's System Information Tool (RSIT) by random/random which includes a HijackThis log and save it to your desktop. If you have RSIT already on your computer, please run it again. Double click on RSIT.exe to run RSIT. Click Continue at the disclaimer screen. Please post the contents of log.txt. Thank you for your patience.Please see Preparation Guide for use before posting about your potential Malware problem. If you have already posted this log at another forum or if you decide to seek help at another forum, please let us know. There is a shortage of helpers and taking the time of two volunteer helpers means that someone else may not be helped. Please post your HijackThis log as a reply to this thread and not as an attachment. I am always leery of opening attachments so I always request that HijackThis logs are to be posted as a reply to the thread. I do not think that you are attaching anything scary but others may do so. While we are working on your HijackThis log, please: Reply to this thread; do not start another! Do not make any changes on your computer during the cleaning process or download/add programs on your computer unless instructed to do so. Do not run any other tool until ... Read more

6 more replies
Relevance 56.99%

Hi,

I'm trying to add Google Analytics code to my Dreamweaver template at the /body point according to instructions but it won't let me change the template. I'm wondering if it's even possible to do this? I've tried to find help at adobe forums and google anayltics forums but I can't find the answer. Hope someone can help?

Thanks,
 

More replies
Relevance 56.99%

I use the version 3.6.10 of Firefox, on Windows XP, and when I click on some Google search results, it redirects me to an advertising page. Sometimes I can use the back button on my browser, try again, and arrive at the page I wanted originally. Some websites appear to load at first but quickly redirect to a blank browser page where "www.google-analytics.com" tries to load and never does. I reformatted my hard drives and reinstalled Windows but the problem soon reappeared.DDS (Ver_10-03-17.01) - NTFSx86 Run by SHIP at 20:28:57.21 on Sun 09/19/2010Internet Explorer: 8.0.6001.18702Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1022.625 [GMT -4:00]AV: avast! Antivirus *On-access scanning enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}============== Running Processes ===============C:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcssvchost.exesvchost.exeC:\Program Files\Alwil Software\Avast5\AvastSvc.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\PROGRA~1\ALWILS~1\Avast5\avastUI.exeC:\Program Files\iTunes\iTunesHelper.exeC:\WINDOWS\system32\ctfmon.exesvchost.exeC:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exeC:\Program Files\Bonjour\mDN... Read more

Answer:Google Analytics Redirect

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.In the upper right hand corner of the topic you will see a button called Options. If you click on this in the drop-down menu you can choose Track this topic. By doing this and then choosing Immediate E-Mail notification and then clicking on Proceed you will be advised when we respond to your topic and facilitate the cleaning of your machine.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.Double click DeFogger to run the tool. The ap... Read more

14 more replies
Relevance 56.99%

I'm running Firefox on Windows7 so when I try to run combofix it "is not compatible w/ this OS. I am redirected from webpages with the screen going blank and the bar at the bottom reading "Waiting for google-analytics.com" Any help is appreciated!

More replies
Relevance 56.17%

After some searching(when i can) it seems i have the google analytics redirect virus. I tried to follow some of the other posts on this virus, but the pages wont load so i cant download the malware stuff. Can anyone help, thanks.

Answer:Google analytics redirect virus

I had a google redirector virus, and was able to still use google to find information.
If you right-click a link, and select "Copy Link Location" then click in the URL bar, and paste, it takes you to the link.
Not sure if this will work with your variant of the redirector, but it's worth a shot.

2 more replies
Relevance 56.17%

Greetings,

I'm getting these google-analytics pop-ups constantly. Our home network was unsecured until this last week and my roommates have both encountered vicious virii on their laptops. One roommate updated flash and that seems to have unleashed it. The other doesn't know the origin, but the virus was Microsoft Anti-Malware, which I see comes up in my log. Both their laptops wouldn't even boot up and when they finally would, every explorer window would be hijacked with the virus, even after running Microsoft Security Essentials, Malwarebytes and mkill. Pop-ups are mostly my only problem, though my Facebook messages won't load and I've had weird java issues with buttons, as well.

Our network has been secured in the meantime with login and pass that isn't default.

Thank ya thankya tahnkya!

.
DDS (Ver_11-03-05.01) - NTFS_AMD64
Run by SpaceNY at 16:34:43.10 on Sun 05/08/2011
Internet Explorer: 8.0.7600.16385 BrowserJavaVersion: 1.6.0_25
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.3835.2402 [GMT -5:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}
SP: Microsoft Security Essentials *Enabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\windows\system32\wininit.exe
C:\windows\system32\lsm.exe
C:\windows\s... Read more

Answer:Google-analytics pop-ups and Java weirdness

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

27 more replies
Relevance 56.17%

Hello everyone

I have been having some trouble with my laptop recently and I'm unsure of what to do. Whenever I search on Google and click on a link, I'm redirected to other sites (the links usually say results5 or google analytics). My anti-virus doesn't catch anything and I tried resetting my computer with the disc that came with it and nothing seems to work. Any help or advice will be greatly appreciated!

Answer:results5 and google analytics redirect

Hello and welcome.The problem is actually based in your router and that in turn is infecting all the other computers on your network.Here is the entire fix(from the beginning) that you will need to run on each PC.Please download Malwarebytes' Anti-Malware from Here or HereNext disconnect your system from the internet, and your router, then?Double Click mbam-setup.exe to install the application. Launch Malwarebytes' Anti-Malware, then click Finish.Once the program has loaded, select "Perform Quick Scan", then click Scan.The scan may take some time to finish,so please be patient.When the scan is complete, click OK, then Show Results to view the results.Make sure that everything is checked, and click Remove Selected.When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.Copy&Paste the entire report in your next reply.Extra Note:If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediatly.Next you must reset the router to its default configuration. This can be done by inserting something tiny like a paper clip end or pencil tip into a small hole labeled "reset" located on the back of the router. Press and hold down the small button inside until th... Read more

3 more replies
Relevance 56.17%

Hello!Whenever I do a Google search and click on one of the search results, websites such as <http://wordslife.com/index.php> and <http://results.google-analytics.com/> pop up and I am unable to access my destination unless I repeatedly click and close the incoming tabs until I can somehow access it.I already scanned it once with Malwarebytes' Anti-Malware, and nothing came up. I want to note that this happens to my computer only when I am connected to my home network. I have a laptop and a desktop, and when both computers are connected to my home network the two sites come and pop up whenever I use Google Chrome.However, I took my laptop and connected to a different network and no pop-ups ever came up.What can I do to fix this problem?EDIT #1Just to add on more information:My computer is Windows 7.I just ran TDSSKiller and followed the instructions from http://www.bleepingcomputer.com/forums/topic399443.htmlThe log from TDSSKiller is attached.EDIT #2I just ran Malwarebytes' Anti-Malware once again.The log from Malwarebyte's is attached.Here are a list of other sites that I came to encounter:hxxp://yellowpages.superpages.com/listings.jsp?STYPE=S&search=Find+It&SRC=yellowcom&channelId=&sessionId=&MCBP=true&CS=L&&C=Calculus+Help&L=san+jose+cahxxp://clicks.search312.com/xtr_new?q=calculus+help&enk=5skHmaaZZomPqY+Jj6kGuUaBj4lmgcbBBpHmkSbjJg==hxxp://7937.r.google.com/click?q=calculus%20help&lnk=http%3A%2F%2Fww... Read more

Answer:Wordslife.com & Google Analytics Redirect Help

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

39 more replies
Relevance 56.17%

I know there are several threads addressing this issue already, however none of them seem to be helping me.

I have the virus where when I go to certain websites, I'm force-redirected to another site that never loads (beginning with google-analytics.com), or an ad pops up in a separate window. I tried running SpyBot, which found nothing. I tried running TDSSkiller, which also found nothing. I tried running Malwarebytes (which I had to manually update because the virus was blocking the program from connecting to update automatically), which again found nothing. I've since uninstalled all three.

It's on my work computer, which is connected to a network with the other computers in the office. (I know nothing about networks.) I run Windows XP Pro.

Any help would be greatly appreciated!

Answer:Google-analytics.com Redirect Virus

Welcome! We need a deeper look. Please go here....Preparation Guide ,do steps 6 - 9.Create a DDS log and post it in the new topic explained in step 9,which is here Virus, Trojan, Spyware, and Malware Removal Logs and not in this topic,thanks.If Gmer won't run,skip it and move on.Let me know if that went well.

3 more replies
Relevance 56.17%

Hey Guys,I am running Windows XP. I just updated my java today. I think it is version 6 Update 24. Java did it's little test and said everything is working. I go to open Google Analytics and it will not enable Java for some reason. I went through a lot of the help information to make sure I have it enabled on Internet Explorer. I then tested it out using Firefox and it worked fine in Google Analytics. What do I need to tweak to get this new update to work in IE because it was working fine before I updated.

Answer:Java - Not reading Google Analytics

I just updated to same version...went to Google Analytics site...no problem.

You did install the latest version (6/24) from your desktop, correct?

Louis

4 more replies
Relevance 56.17%

Hello,

I'm currently running Vista 32-bit and seem to have contracted the dreaded google.analytics.com redirect virus which randomly opens other pages when I click on links to other pages and occasionally reloads the pages I was viewing and makes it appear completely blank, This has also appeared on other computers on the network and whilst I can normally get rid of most infections myself I've had a lot of trouble with this one and can't seem to get rid of it.

I've tried the Ipconfig /flushDNS command but to no avail and even reset the router completely and loaded up the settings for it also seeing as other computers on the network had it and I thought it may have been something on the router. I've also ran pretty much every virus and malware and adware program I have (avast, malwarebytes, ad-aware) aswell as running registry scans/repairs but still can't seem to find the culprit file to get rid of it.

Any help would be appreciated.
Thanks,
Rob.

More replies
Relevance 56.17%

Like some of the other posts here I am having what seems to be a malware problem where a new window or tab (depending on the browser) opens with a random or slightly related site while I am browsing the web. I am not having a redirect problem as in some of the other posts. I have been able to access all sites, but I am concerned that this may be a symptom of a greater problem.

I ran TDSSKiller and it did not find anything.

Please let me know which logs to post or if there is a thread that can address this problem.
Thank you

Answer:Google Analytics Pop-up browser window

Hello and welcome, I think we need a couple logs to get some further info.Next run MBAM (MalwareBytes):Please download Malwarebytes Anti-Malware and save it to your desktop.Download Link 1Download Link 2MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.
For instructions with screenshots, please refer to the How to use Malwarebytes' Anti-Malware Guide.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan.If an update is found, the program will automatically update itself. Press the OK button to close that box and continue.If you encounter any problems while downloading the definition updates, manually download them from here and just double-click on mbam-rules.exe to install.On the Scanner tab:Make sure the "Perform Quick Scan" option is selected.Then click on the Scan button.If asked to select the drives to scan, leave all the drives... Read more

9 more replies
Relevance 56.17%

https://medium.com/@codebreach/mtnl-performing-google-analytics-man-in-the-middle-attacks-456d6bf06b9c
 
I found this article very interesting, as Adware Plus has been blocking ads from "adultubeus.info" on Chrome, on my computer, for the last 2 or 3 weeks. I have cookies in Chrome for "adultubeus.info", and "yadro.ru". 
 
Multiple scans with Malwarebytes, AVG, EMSISOFT emergency kit, Junkware Removal Tool and ADWCleaner have shown nothing untoward. I even changed my (DSL) modem for a spare.
I am relieved to see this appears to be something from outside. Is anyone else seeing this?

Answer:"Man in the Middle" attack on Google Analytics

There was one thing I hadn't done when I posted the above - reset my modem. I have just done that, and for the moment, I'm not seeing these sites being blocked, and their cookies aren't in Chrome.
 
Perhaps the story I linked to is inaccurate?

1 more replies
Relevance 56.17%

Please I am running win7 professional and have all the symptoms of the Google analytic redirect virus. I have done everything from gmer to TSS to hijack this and about 8 other malware and antivirus programs. Does anyone have the real answer to permanently remove this virus. I am about to format my hardrive since I also do not have recovery available to me and I do not have the original recovery disc. I am running Asus N50V series 32 bit.

Thanks

Answer:google analytics redirect virus

Recovery disk can be downloaded from here:
<link removed>

4 more replies
Relevance 56.17%

waiting for google-analytics + Firefox

I use Firefox for a browser 'because MSN IE is full of things that make browsing a chore especially if you need more than one tab'

Recently I have been noting a kinda freeze happen to my machine while waiting for google-analytics which is displayed at the bottom of my browser page. It may take up to 2-3 minutes before this malady finally finishes and frees up my machine.

I have seen multiple notations on the net concerning this peculiarity but have not 'really' found a viable solution to make it 'go away completely' while using Firefox.

Any 'helpful' advice would be appreciated.

I use an old Sony machine for which I play mostly internet games on and am not at a financial situation where a robust mega PC could possibly solve my problem.

I use spybot to clean my machine of malware etc. Run Norton Security Suite. Have a firewall on my machine and Netgear is my router.

Thank you kindly M8s.

B~
 

Answer:waiting for www.google-analytics.com + Firefox

Thanks LauraR..

B~
 

4 more replies
Relevance 56.17%

Hi,

I am using Webroot Internet Security Complete as my antivirus/firewall software, but it has not picked up the google-analytics virus that keeps redirecting my Firefox browser. Any help dispoing of this will be appreciated.

Thanks

Answer:problems getting rid of google-analytics virus

Hello and welcome.Your router is hijacked by trojan DNS-hijacker.First if there are other machines on this router they need to install and update MBAM,DO NOT run yet. You now need to disconnect from the internet. Then scan each PC then reset the router.Next you must reset the router to its default configuration. This can be done by inserting something tiny like a paper clip end or pencil tip into a small hole labeled "reset" located on the back of the router. Press and hold down the small button inside until the lights on the front of the router blink off and then on again (usually about 10 seconds). If you don?t know the router's default password, you can look it up HERE.Note: After resetting your router, it is important to set a non-default password, and if possible, username, on the router. This will assist in eliminating the possibility of the router being hijacked again.As there are other infected machines using the same router, they will need to be cleared with the above steps before resetting the router. Otherwise, the malware will simply go back and change the router's DNS settings. You also need to reconfigure any security settings you had in place prior to the reset. Check out this site HERE for video tutorials on how to properly configure your router's encryption and security settings. You may also need to consult with your Internet service provider to find out which DNS servers your network should be using.Once you have ran Malwarebytes' ... Read more

1 more replies
Relevance 56.17%

Everytime I go to look at a page it gets redirected to a different page. I ran malawarebytes in safe mode and it didn't find anything. What else can I do?

Answer:google redirect and analytics popups

What operating system is this for? Are there any other computers in the household that are experiencing redirects as well? Do you connect to the internet using a wireless router?

15 more replies
Relevance 56.17%

Everytime I try to click on a link from a google search, I get directed to google-analytics and it hangs up. I also have random pages pop up at other sites, many of them start with gugle.com or something similiar. I've had this problem for a little bit. Tried running TDDskiller, and it found a rootkit problem, cured it, but the issue is still there. On another note, for some reason Chrome is failing to initialize as of yesterday. I don't know if this is related or not. Possibly related, but the avast! I just downloaded keeps giving me a warning about Infection: URL:MalAction: BlockedProcess: c:\windows\system32\svchost.exeAnyway, I tried running DDS. It runs, then apparently seems to hang up and doesn't produce a log file. I turned off avast! shields during this time, so I'm not sure what the problem is. Tried a Gmer log and I get a windows error that it stops working.:Got a GMER log finally
 ark.txt   4.88KB
  1 downloadsEDIT: Posts merged ~BP

Answer:Redirected to google-analytics/gugle.com

Hi,Download OTL to your desktop.Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.When the window appears, underneath Output at the top change it to Minimal Output.Copy-paste following contents into custom scan -area:
netsvcs
drivers32
%SYSTEMDRIVE%\*.*
%systemroot%\*. /mp /s
CREATERESTOREPOINT
%systemroot%\System32\config\*.sav
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rsClick the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post it with your next reply. You may need two posts to fit them all in.

2 more replies
Relevance 56.17%

My google searches are always redirected to somewhere unwanted. I have tried using Antivirus, Spyware and Malwarebytes but none of them could fix the issue. Also there is some google.analytics window that keeps popping up. I am posting the Hijackthis log...if someone can guide me in removing these virus? Anyhelp is highly appreciated.
-------------------------------------------
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:06:49 AM, on 10/9/2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16839)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE
C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\USB Camera2\VM332_STI.EXE
C:\Program Files (x86)\EgisTec BioExcess\EgisTSR.exe
C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe
C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe
C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\P... Read more

Answer:Google redirect & analytics virus

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

25 more replies
Relevance 56.17%

I've recently been infected with the Google Analytics redirecter. Of course it's affecting both IE and Firefox. I'm running Vista SP1 and, frankly, I have no idea where to go from here.

Please help!
 

Answer:Infected: Google Analytics Redirect

Welcome to Major Geeks!

Please read ALL of this message including the notes before doing anything.

Please follow the instructions in the below link:

READ & RUN ME FIRST. Malware Removal Guide
and attach the requested logs when you finish these instructions.

**** If something does not run, write down the info to explain to us later but keep on going. ****
Do not assume that because one step does not work that they all will not. MGtools will frequently run even when all other tools will not.
After completing the READ & RUN ME and attaching your logs, make sure that you tell us what problems still remain ( if any still do )!
Helpful Notes:

If you run into problems trying to run the READ & RUN ME or any of the scans in normal boot mode, you can run the steps in safe boot mode but make sure you tell us what you did later when you post logs. See the below if you do not know how to boot in safe mode:

Starting your computer in Safe mode

If you have problems downloading on the problem PC, download the tools and the manual updates for SUPERAntiSpyware and Malwarebytes ( links are given in the READ & RUN ME) onto another PC and then burn to a CD. Then copy them to the problem PC. You will have to skip getting updates if (and only if) your internet connection does not work. Yes you could use a flash drive too but flash drives are writeable and infections can spread to them.
If you cannot seem to login to an infected user account, try using a different user... Read more

1 more replies
Relevance 56.17%

I have been having the same problems everyone else seems to be having. You enter a search topic in google, it opens, I click the link and get an auto redirect courtesy of google analytics. I sometimes have to spamclick the link to get to a site (I had to do that to find this forum actually). My level of experience with computers is technician level. I graduated in 2008 from Anthem Institute (formerly chubb institute) for Computer Networking and Security, and I seek a career at this type of work, but mainly keeping hackers out of systems. The reason I'm here and not able to do it myself is that I am unfamiliar with some of these new methods of "hijack this" and "combofix", and am uncomfortable with using them unless I learn them myself, so, I've swallowed my pride as a man and am here asking for directions. I'm more used to the tied and true method of going into msconfig and killing startup items.

specs:
Tech Support Guy System Info Utility version 1.0.0.1
OS Version: Microsoft Windows XP Home Edition, Service Pack 2, 32 bit
Processor: Intel(R) Celeron(R) CPU 2.93GHz, x86 Family 15 Model 4 Stepping 1
Processor Count: 1
RAM: 2039 Mb
Graphics Card: Intel(R) 82845G/GL/GE/PE/GV Graphics Controller, 256 Mb
Hard Drives: C: Total - 145478 MB, Free - 7051 MB; D: Total - 7125 MB, Free - 1866 MB;
Motherboard: MICRO-STAR INTERNATIONAL CO., LTD, Gamila/Giovani/Neon series, 030,
Antivirus: Norton 360, Updated: Yes, On-Demand Scanner: Enabled
 

Answer:Google Analytics browser redirect

16 more replies
Relevance 56.17%

Hey there,
I've got a little bit of a problem with some hijackers, google analytics and clicksor. Sometimes a pop-up will appear, but most of the time its just slowing my browser, as I can see the address in the bottom left hand corner of the screen. I've run some scans with my only virus checker NOD32, with no great success.
Any help would be truly great
-----------------------------------------DDS LOG--------------------------------------------------------
DDS (Ver_10-10-21.02) - NTFSx86
Run by Julius at 14:04:18.40 on Mon 25/10/2010
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_17
Microsoft Windows XP Professional 5.1.2600.3.1252.61.1033.18.3327.2668 [GMT 11:00]

AV: ESET NOD32 antivirus system 2.70 *On-access scanning enabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\ASUS\EPU-4 Engine\FourEngine.exe
C:\Program Files\Eset\nod32kui.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\... Read more

Answer:google analytics + clicksor hijacker

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. Please include a clear description of the problems you're having, along with any steps you may have performed so far.Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.Even if you have already provided information about your PC, we need a new log to see what has changed since you originally posted your problem.We need to create an OTL ReportPlease download OTL from one of the following mirrors:This is THE MirrorSave it to your desktop.Double click on the icon on your desktop.Click the "Scan All Users" checkbox.In the custom scan box paste the following:

msconfig
safebootminimal
activex
drivers32
netsvcs
%SYSTEMDRIVE%\*.exe
/m... Read more

2 more replies