TechSpot

Firefox random redirects and 404s

By seanfury
Mar 11, 2009
  1. I've been randomly getting redirects to "quanthost", 404 ERRORs, and "web page could not be loaded" messages ALL day. This is the first time it's happened, and I haven't done anything weird/gone to any strange sites lately, so I have NO idea what it could be. I ran SDFix, Spybot, Anti-Malware, AVG, and CCCleaner, but they found nothing!

    Here's a Hijackthis log, so maybe that will expose the problem...

    edit: I want to also add that I ran Spyware Doctor and that found nothing, and I've been experiencing random internet outages. IE: internet works, says it's connected, but laptop doesn't recognize it. D:
     

    Attached Files:

  2. Bobbye

    Bobbye Helper on the Fringe Posts: 16,392   +36

    The 404 or Not Found error message is a HTTP standard response code indicating that the client was able to communicate with the server but either the server could not find what was requested, or it was configured not to fulfill the request and did not reveal the reason why.

    Update Java:
    REGISTRY WHOIS FOR QUANTHOST.COM
    Suggest you run the Virus and Malware Removal HERE
    When through, attach both Malwarebytes and Supersntispyware, run new HijackThis and include new log.
    BEFORE you run the scans:
    Reopen HijackThis> check System Scan Only> put checked on each of these processes if found:
    Closea ll program except HijckThis> click on Fix Checked and boot into Safe Mode.

    Start> Run> msconfig> enter> Selective Startup> Startup menu< UNCHECK the following processes:
    When through> Apply> OK

    Stasrt> Run> services msc> right click on each of the following Services> then Properties> Change the
    Reboot into Normal Mode: NOTE: you will get a nag message that you can ignore and close after checking 'don't how this message again.' Stay in Selective Startup.

    When done, UPDATE and run Malwarebyttes again, followed by updating an scanning with Superntispyware. End wit new HijackThis log.

    SDFix doesn't work on Vista, so you can uninstall it in Add/Remove Programs in the Control Panel.

    When you change the Services above and take off of Startup it will prevent them from automatically starting on boot.
     
  3. seanfury

    seanfury TS Rookie Topic Starter

    Followed your directions and here you go.
     
  4. Bobbye

    Bobbye Helper on the Fringe Posts: 16,392   +36

    Okay, but you only did part of it:

    The Virus and Malware Removal link tells you to run Malwarebytes, Superantispyware, then follow with HijackThis. You have only given the HijackThis log. You need to attach the logs from all three of the programs.

    Please revisit: http://www.techspot.com/vb/topic58138.html

    You were also asked to stop these from Starting up:
    Do the scans then take off of Startup. I don't want them running in the background. Be sure you UPDATE both programs before scanning.

    You also have two new entries:
    NetName: OPENDNS-NET-1

    Where did this come from?
     
  5. jobeard

    jobeard TS Ambassador Posts: 13,516   +336

    NameServer = 208.67.222.222,208.67.220.220​
    Those are the DNS addresses of the OpenDNS project and very safe.
    In fact, I've replaced the use of my ISP DNS addresses in my router to use these
    which then get inherited by all LAN systems :)
     
  6. seanfury

    seanfury TS Rookie Topic Starter

    I fail at reading instructions, sorry! Here you go.
     
  7. Bobbye

    Bobbye Helper on the Fringe Posts: 16,392   +36

    Thanks seanfury-
    This would explain the 404 message. But you're going to have to be a bit more specific on these outages.

    You mentioned that these problem basically came out of nowhere on one day. Are they still occurring today? Are you being redirected to the Godaddy site?

    Regarding the Quancom/Go Daddy site, it also contains a Rapid Blog. Posting may be anonymous, that is, using a 'mask'. Do you participate in this at all?
    http://www.who.is/whois/rapidwire.net/

    Please tell me if you are still experiencing the problems you had yesterday? Describe them. There is very little malware and SAS removed it.

    There is one entry in the HijackThis log which should be checked for removal:
    • Run HijackThis
    • Click on the System Scan Only button
    • Put a check beside the entry listed below:
    Close all open windows and browsers/email, etc...
    • Click on the "Fix Checked" button
    • When completed, close the application.

    If the problem persisted today, I'll have you run ComboFix.
     
  8. seanfury

    seanfury TS Rookie Topic Starter

    Hm. I don't know how to explain the outages better. I browse the internet, and a page stops loading. I refresh, but nothing happens. I try other sites, all of them refuse to load. Oddly enough, today? Firefox/Internet Explorer stopped working, but AIM 6.0 was still up and allowing me to send messages! How bizarre?

    No, I do not participate in that site and aside from the errors, it was the first time I've ever been there (though to be fair, there's always a chance I used StumbleUpon and ended up on a site related to them). Those redirects seem to have stopped today, after I followed all the instructions you've given me.

    And I removed the HijackThis entry you said to as well.
     
  9. Bobbye

    Bobbye Helper on the Fringe Posts: 16,392   +36

    Question: do you have just AIM or do you have AOL piggy backed on a broadband ISP? Could there have been a problem with the ISP when you were having dropped connections? Are you able to connect and stay connected with Firefox and IE today? Since it involved both browsers and we have handled the malware, it sounds more like a problem with the ISP.

    Please run one more HijackThis scan for me and attach the log. And go through a day to see if you remain connected. IF you lose intermittently, please call your ISP and ask if they have been having problems and give them the time line. Once these things have been determined and IF the system is running without the original problems, we'll remove the cleaning tools and old restore points.

    If there is any doubt at all, I'll have you run ComboFix.
     
  10. seanfury

    seanfury TS Rookie Topic Starter

    Okay. No, I just use AIM, no AOL. And I'm pretty sure it's not Comcast, because when the internet acts up, it makes the TV act up too and I've had no problems with it.

    EDIT: I just got this error when I tried to go to Google.

    And it's remained like that.
     
  11. Bobbye

    Bobbye Helper on the Fringe Posts: 16,392   +36

    Can you explain 'act up', please? And is the TV provided by Comcast also?

    Regarding the Google URL: http://www.google.com/ig
    Create your own homepage in under 30 seconds

    I clicked on the link you left and got the page on Firefox v3.0.7 without problem.

    Did you try to access the site from a shortcut or Bookmark? If so, it may have been corrupt. Try clicking on the link here and see what happens. Also, type the link into the address bar. If the page comes up, then you will know either the shortcut or bookmark is corrupt. Just delete it and create a new shortcut.

    Will be back in a bit to check the log. NOTE: I will Edit this post after checking the log. That won't sent a new feed back so check the thread a little later.
     
     
  12. seanfury

    seanfury TS Rookie Topic Starter

    When I say "act up", I mean stop working. Like, if the internet is out, the TV usually has glitches (like On-Demand won't work) and yes, Comcast provides the cable television as well.

    And Google came back up after I reset my router/restarted my computer, so I don't know what that was. And no, iGoogle is my homepage, I was using the home button to go to it.
     
  13. Bobbye

    Bobbye Helper on the Fringe Posts: 16,392   +36

    You need to contact Comcast about why there is interference on the TV when you use the internet. I'm guessing their installer used a splitter on the cable so the signal is weakened.

    I don't understand this:
    When you click on the Home icon, it's suppose to take you to your homepage, so I guess you'll have to clarify this for me.
     
  14. seanfury

    seanfury TS Rookie Topic Starter

    Yeah, my homepage is iGoogle. And when I posted that up there, Google was 404ing when I tried to go to it, and the quote I posted was the error it gave me.

    Everything was working correctly yesterday, save for a few "page loading" errors, but now today I just (literally three minutes ago) tried to go to YouTube (through a bookmark) and it redirected me to "Quantcast" and to make sure it wasn't the bookmark, I went to Google and searched for "Youtube" and tried to go to the site through there, but it ALSO redirected me to "Quantcast".
     
  15. Bobbye

    Bobbye Helper on the Fringe Posts: 16,392   +36

    Okay, let's try blocking the Domain:

    Add the following add-ons to Firefox:
    1. AdBlock Plus: https://addons.mozilla.org/en-US/firefox/addon/1865
    2. Easy List: http://easylist.adblockplus.org/

    Close Firefox, the relaunch to install the add-ons.

    Tools> AdBlock Plus Preferences> Click on Add Filter on lower left. Type the following in the dialog box at the top> click on Apply after each:
    quantcast.com.
    StatCounter.com

    Let me know how that works.
     
  16. seanfury

    seanfury TS Rookie Topic Starter

    I already had ABP, so I did what you said (a little after you posted that yesterday) and have yet to get redirected by those sites. However, I have still gotten the webpage not loading error now and then, and my internet did randomly stop working like I mentioned earlier last night as well.

    Spoke too soon, I'm getting redirected to Quantcast again =/
     
  17. Bobbye

    Bobbye Helper on the Fringe Posts: 16,392   +36

    Did you get the Add-on Easy List or ABP? You should.

    It is not unusual to get the 404 is the server is too busy or if a site is having a problem- even down for maintenance. That does not mean the problem is with your computer.

    Let's restrict quantcast further:

    Control Panel> Internet Options> Security tab> Restricted Zone> Sites> type in:
    quantcast.com> Add
    StatCounter.com> Add
    Apply> OK
    Reboot> Empty your temporary internet files and Cookies.

    See if that works.
     
  18. seanfury

    seanfury TS Rookie Topic Starter

    No luck so far, still getting all the same problems =/
     
  19. Bobbye

    Bobbye Helper on the Fringe Posts: 16,392   +36

    Please download ComboFix HERE
    With ComboFix, at the download window, please rename it to Combo-Fix(.exe) before downloading it.
    Please disable all security programs, such as antiviruses, antispywares, and firewalls.
    Also disable your internet connection.


     
  20. seanfury

    seanfury TS Rookie Topic Starter

    Sorry for the delay.

    EDIT: Here's a new one, when I clicked my Twitter bookmark, I got Google's University Search :|
     
  21. Bobbye

    Bobbye Helper on the Fringe Posts: 16,392   +36

    Sean, it's not acceptable to have the long intervals between running the programs and posting your logs. Due to the fact that your original logs were ported over a week ago, it is best for you to begin-again- with the cleaning programs as set up HERE.

    This is what you did over a week ago. I still see Bit Torrent.
     
  22. God Of Mana

    God Of Mana TechSpot Paladin Posts: 502

    Try in Firefox: Go to:
    Tools> Options >Privacy > Cookies > Remove All cookies
    Tools> Options > Network >[Offline Storage] > Clear Now
    Ctrl+Shift+Del: select all and clear.
    (simple bugs w/cookies can sometimes be mistaken as viruses)

    Good luck.
     
  23. cdman37

    cdman37 TS Rookie

  24. Bobbye

    Bobbye Helper on the Fringe Posts: 16,392   +36

    This is an old thread. Please start your own thread in the Virus and Malware Removal Forum.

    Follow the steps here: http://www.techspot.com/vb/topic58138.html

    When you have finished, attach ALL 3 of the logs.

    And it would help to know what problems you're having! New thread, okay?
    (This was also a Firefox thread originally- I see Chrome installed, no Firefox.)
     
Topic Status:
Not open for further replies.


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.