What on earth is this?

  • cancer10
  • Proficient
  • Proficient
  • cancer10
  • Posts: 268

Post 3+ Months Ago

Hi,

Whenever I try to open any website (gmail, hotmail, and anyother) with my FF, I see the following two URLS in my FF status bar:

Code: [ Select ]
dt.tongji.cn.yahoo.com

and

ad.5iyy.info
  1. dt.tongji.cn.yahoo.com
  2. and
  3. ad.5iyy.info



I even upgraded to FF 3 but still getting those links in my FF status bar.

What do you think it can be?

Screenshots
Image
Image




Thanx
  • righteous_trespasser
  • Scuffle
  • Genius
  • User avatar
  • Posts: 6229
  • Loc: South-Africa

Post 3+ Months Ago

It could be spyware or something like that ... maybe?
  • musik
  • Legend
  • Super Moderator
  • User avatar
  • Posts: 6893
  • Loc: up a tree

Post 3+ Months Ago

sounds like you already got plenty of advice here
http://forums.digitalpoint.com/showthread.php?t=920988
  • Bogey
  • Genius
  • Genius
  • Bogey
  • Posts: 8416
  • Loc: USA

Post 3+ Months Ago

lol I went to those pages...

In dt.tongji.cn.yahoo.com all there is is the word "ok" and thats it...

In ad.5iyy.info some chineese letters... maybe a chineese 404 page?

Like they said in that forum, it might be a plug-in from one of those sites, an encrypted link looking for an "ok", or some malware/spyware...
  • didi van bel
  • Born
  • Born
  • didi van bel
  • Posts: 2

Post 3+ Months Ago

Solution for this trojan
Try this one :
(From Indonesian Blog)
http://jailangkung.wordpress.com/2008/0 ... ari-china/

For translate comment take this : http://www.toggletext.com/
  • righteous_trespasser
  • Scuffle
  • Genius
  • User avatar
  • Posts: 6229
  • Loc: South-Africa

Post 3+ Months Ago

@didi ... what language is that? toggletext doesn't work for me and I want to use google translate to translate the page ...
  • ATNO/TW
  • Super Moderator
  • Super Moderator
  • User avatar
  • Posts: 23460
  • Loc: Woodbridge VA

Post 3+ Months Ago

They are chinese ad servers. Nothing to worry about. Nothing different than adclick, which you'll see in your status bar on a lot of sites.
  • didi van bel
  • Born
  • Born
  • didi van bel
  • Posts: 2

Post 3+ Months Ago

Please to open the site now ( http://www.toggletext.com/ )
Because yesterday this site was in the maintenance.

http://jailangkung.wordpress.com/2008/0 ... ari-china/
This site is Indonesian.

@ ATNO/TW
Like the normal advertisement, like adclick ???
But for long time, your connection can be slowdown.
  • ATNO/TW
  • Super Moderator
  • Super Moderator
  • User avatar
  • Posts: 23460
  • Loc: Woodbridge VA

Post 3+ Months Ago

hmmmmm.

I just found this
http://topfueber.de/?p=8#english

Read that, and the next time you see that, check the source code for the page and see if you can find that javascript (or similar) that they refer to.

Also post a Hijackthis log
  • kikwete
  • Novice
  • Novice
  • kikwete
  • Posts: 17

Post 3+ Months Ago

Its meet like ebaystatic computer solutions. Having 2 billions people accessing all content from ebay servers would be prohibitively expensive, so they use other visitant, Anuki (i anticipate?), among others to control with simulacrum requests, etc etc.

I dont use gmail but i undergo on the msn hotmail place, several images and adverts are hosted externally .....

I real wouldnt unhinge too untold, especially if you've scanned for malware ....

Post Information

  • Total Posts in this topic: 10 posts
  • Users browsing this forum: No registered users and 38 guests
  • You cannot post new topics in this forum
  • You cannot reply to topics in this forum
  • You cannot edit your posts in this forum
  • You cannot delete your posts in this forum
  • You cannot post attachments in this forum
 
cron
 

© 1998-2014. Ozzu® is a registered trademark of Unmelted, LLC.