Paypal virus, getting the best of me..

BeauJ · 03-24-2006, 05:16 AM

I bought something off ebay, and the auction I got it off of asked that I pay through their site, dealtree.com. Well, ever since I did, everytime I try to go to www.paypal.com, it takes me to: http://altfarm.mediaplex.com/ad/ck/3...FQM-UAod_y3Q0Q. I've looked it up, and didn't find much info on it. I've used Norton AV 06, Adaware, Spyware Nuker, Hijack this, etc. Nothing is getting rid of it and I'm about to say F it and restore the whole computer.

It sucks because I can't even get to my f'n paypal account to pay people. Anyone heard anything about it, please post up. Any help is appreciated

*celly* · 03-24-2006, 07:11 AM

Mediaplex has some sort of tie in to eBay (owners of Paypal). I don't think you have spyware or a virus.

BeauJ · 03-24-2006, 10:20 AM

I know this, but altfarm and adfarm ARE spyware. Thy are keeping me from getting to paypal.

*Ritsui* · 03-24-2006, 10:51 AM

Are you using IE? Try another browser like Firefox. If that works, then you'll want to go into IE configuration: Programs Tab -> "Manage Add ons" and find if you have a BHO (browser helper object) from them. Disable it and seriously consider switching to Firefox.

If other browsers don't work either, then you've probably still got some kind of system level virus/malware. Are all your virus and spyware definitions up to date?

BeauJ · 03-24-2006, 12:38 PM

I've been using Mozilla from the start of it. Everything is up to date. I ran Norton AV 2006 again, and it didn't find anything. When I tried to go to paypal, it let me go straight to it. I don't get it. But oh well, it's working now.

*Ritsui* · 03-24-2006, 12:43 PM

That's a bit bizarre. Sounds like it was Paypal itself redirecting you. If so, there would be no way around that.

Next time (if) it happens, try a ping to Paypal and check the IP against whois records (www.dnsstuff.com) to see if this is happening at the browser or IP level.

*Nate1* · 03-27-2006, 12:25 PM

check the files C:\Windows\system32\drivers\etc\hosts and lmhosts to see if they contain the redirect.

zhanx · 03-27-2006, 05:44 PM

you try spy search and destory? if not aim me and i'll try walking you through fixing it.

BeauJ · 03-27-2006, 11:10 PM

Quote:

Originally Posted by Nate1

check the files C:\Windows\system32\drivers\etc\hosts and lmhosts to see if they contain the redirect.

I looked in C: and D: and there were a few under host I deleted, and now it's gone.

03-24-2006, 05:16 AM	#1
BeauJ Moderator Emeritus Join Date: Jan 2002 Posts: 4,810 Vehicle Specs (Original Poster)	Paypal virus, getting the best of me.. I bought something off ebay, and the auction I got it off of asked that I pay through their site, dealtree.com. Well, ever since I did, everytime I try to go to www.paypal.com, it takes me to: http://altfarm.mediaplex.com/ad/ck/3...FQM-UAod_y3Q0Q. I've looked it up, and didn't find much info on it. I've used Norton AV 06, Adaware, Spyware Nuker, Hijack this, etc. Nothing is getting rid of it and I'm about to say F it and restore the whole computer. It sucks because I can't even get to my f'n paypal account to pay people. Anyone heard anything about it, please post up. Any help is appreciated

03-24-2006, 10:51 AM	#4
Ritsui Pilot of dogcraft Lake Arrowhead, CA 98 Sport 4x4 Join Date: May 2002 Posts: 796 Vehicle Specs	Are you using IE? Try another browser like Firefox. If that works, then you'll want to go into IE configuration: Programs Tab -> "Manage Add ons" and find if you have a BHO (browser helper object) from them. Disable it and seriously consider switching to Firefox. If other browsers don't work either, then you've probably still got some kind of system level virus/malware. Are all your virus and spyware definitions up to date? __________________ Ritsui 1998 Explorer Sport 4x4 SOHC V6, 4.10 (aussie locked ) 2" TT, 3" lift springs, K&N w/cheeze, 32" BFG clones, 120v/12v outlets

03-24-2006, 12:43 PM	#6
Ritsui Pilot of dogcraft Lake Arrowhead, CA 98 Sport 4x4 Join Date: May 2002 Posts: 796 Vehicle Specs	That's a bit bizarre. Sounds like it was Paypal itself redirecting you. If so, there would be no way around that. Next time (if) it happens, try a ping to Paypal and check the IP against whois records (www.dnsstuff.com) to see if this is happening at the browser or IP level. __________________ Ritsui 1998 Explorer Sport 4x4 SOHC V6, 4.10 (aussie locked ) 2" TT, 3" lift springs, K&N w/cheeze, 32" BFG clones, 120v/12v outlets

03-27-2006, 12:25 PM	#7
Nate1 All 4 wheels locked Gainesville/Tampa, FL '96 FZJ-80 Join Date: Dec 2002 Posts: 4,156 Vehicle Specs	check the files C:\Windows\system32\drivers\etc\hosts and lmhosts to see if they contain the redirect. __________________ 1996 Lexyota FZJ-80, locked center/rear/front, 33" Revos, 3" OME Suspension lift, etc. [photos...] the lexus

03-27-2006, 05:44 PM	#8
zhanx Wannabe Elite Explorer Fort Drum NY 2000 xls Join Date: Apr 2004 Posts: 1,424 Vehicle Specs	you try spy search and destory? if not aim me and i'll try walking you through fixing it. __________________ Oh no i am at it again

03-24-2006, 10:20 AM	#3
BeauJ Moderator Emeritus Join Date: Jan 2002 Posts: 4,810 Vehicle Specs (Original Poster)	I know this, but altfarm and adfarm ARE spyware. Thy are keeping me from getting to paypal.

03-24-2006, 12:38 PM	#5
BeauJ Moderator Emeritus Join Date: Jan 2002 Posts: 4,810 Vehicle Specs (Original Poster)	I've been using Mozilla from the start of it. Everything is up to date. I ran Norton AV 2006 again, and it didn't find anything. When I tried to go to paypal, it let me go straight to it. I don't get it. But oh well, it's working now.