I had a virus on my machine the other day. Looks like it's gone now, but when I hit the dropdown on the address bar in my browser, all of the recently visited sites (urls) begin with the following:
http://turboinet.com/r.cgi?
Does anyone know what this is and how to get rid of it? I ran a virus scan and a spyware scan and they're not detecting it.
Originally posted by reader1107I sure as heck would not go to the URL! like opening a snake den.
If you google it, you get lots of Russian sites, and a few English ones. The blurbs for at least one of the English ones mentioned spyware.
You might try submitting it to Symantec or Spy Sweeper (webroot)
and see what they say.
Originally posted by rbmorrisIf you have posted a link to a web site that has spy ware or a virus attached I suggest it to be removed by the moderators.😳
I had a virus on my machine the other day. Looks like it's gone now, but when I hit the dropdown on the address bar in my browser, all of the recently visited sites (urls) begin with the following:
http://turboinet.com/r.cgi?
Does anyone know what this is and how to get rid of it? I ran a virus scan and a spyware scan and they're not detecting it.
arrrrrrrg.
Originally posted by rbmorrisTry, clear history and clear search history.
I had a virus on my machine the other day. Looks like it's gone now, but when I hit the dropdown on the address bar in my browser, all of the recently visited sites (urls) begin with the following:
http://turboinet.com/r.cgi?
Does anyone know what this is and how to get rid of it? I ran a virus scan and a spyware scan and they're not detecting it.
Also have a look to see if your home page has been altered, ie. hijacked.
Have you done a full scan for viruses and spyware?
You could try a free online scan here...
http://uk.trendmicro-europe.com/consumer/housecall/housecall_pre.php
Originally posted by Dr StrangeloveYeah, I tried clearing all that stuff (history, cache..etc.), but it didn't seem to have any effect. I'll definitely try submitting it to Symantec.
Try, clear history and clear search history.
Also have a look to see if your home page has been altered, ie. hijacked.
Have you done a full scan for viruses and spyware?
You could try a free online scan here...
http://uk.trendmicro-europe.com/consumer/housecall/housecall_pre.php
I played around with the computer again this morning to see if I could get rid of it. While I was on there, I clicked the dropdown and tried to go to redhotpawn. I guess the turbo thing redirects you to a porn site.
I went into windows explorer and manually deleted all cookies--one of which was that turbo thing. Unfortunately, it came right back. Then I thought, maybe it just wants the turbo thing to be in there, but if I can alter the cookie in some way, maybe I'll disable it. So, I opened the cookie in notepad and changed one of the O's to a zero. Then I opened up the browser again. This time it didn't take me to a porn site, but I must have really pissed it off because it kept opening up pop-up ads. They weren't pornographic or anything, but they were extremely annoying.
The good news is that it doesn't seem to have any effect on Firefox. I tried that and it works just fine. I guess I'll just have to use that until I get it figured out.
2 edits
What you could do is;
download HijackThis [see link below] and do a scan, if the turboinet entry is there have the program fix it. Unless you are SURE about other entries in there, don't do anything to them or you could make things worse.
http://www.tomcoyote.org/hjt/
Also, there are many online log analyser forums where you could post the whole log if you wanted.
Good luck.
Originally posted by rbmorrisCould be that the virus has messed with your registry entries...have a Google on which one to change...
Yeah, I tried clearing all that stuff (history, cache..etc.), but it didn't seem to have any effect. I'll definitely try submitting it to Symantec.
I played around with the computer again this morning to see if I could get rid of it. While I was on there, I clicked the dropdown and tried to go to redhotpawn. I guess the turbo thing redirects you to a ...[text shortened]... and it works just fine. I guess I'll just have to use that until I get it figured out.