X
Tap here to go to the mobile version of the site.

Support Forum

My browser has been hijacked (rover redirect), how can I solve this problem?

Posted

If I put a word in the Google Search box and click on the Magnifying Glass the drop down list includes the following

“Ebay” search - Youtube rover.ebay……….

“Yahoo” search – rover 26 redirect yahoo

“You Tube” search – you tube rover.ebay browser hijack

“Firefox” search – firefox hijack browser rover

“BBC Sport” – Is ok – no problem

If I continue the search for “Yahoo” a new tab presents itself with the following URL

https://rover.ebay.com/ar/1/126133 (I have quoted only the first part of the URL as it actually goes on for pages.

This is the start of the content of the new tab:-

document.write(" " ); var rvr_id=802493214346; var mpserv; var mpi="img-cdn.mediaplex.com/0/"; var mpcrgif="710/208824/94928_DAP_15Q1_UK_SnA_Q1_300x600_42.jpg"; var mpck="rover.ebay.com/rover/1/710-208824-51244-1/4?mpt=24019&Perf_Tracker_1=&Perf_Tracker_2=394274&Perf_Tracker_3=yho&Perf_Tracker_4=&Perf_Tracker_5=&Perf_Tracker_6=&Perf_Tracker_7=&Perf_Tracker_8=&Perf_Tracker_10=&ff5=133163&ff6=4090848215481724480&

I have tried refreshing Firefox and have scanned with Malawarebytes and Ad Aware without success. I am also running Kaspersky.

Any help would be appreciated. Thanks

If I put a word in the Google Search box and click on the Magnifying Glass the drop down list includes the following “Ebay” search - Youtube rover.ebay………. “Yahoo” search – rover 26 redirect yahoo “You Tube” search – you tube rover.ebay browser hijack “Firefox” search – firefox hijack browser rover “BBC Sport” – Is ok – no problem If I continue the search for “Yahoo” a new tab presents itself with the following URL https://rover.ebay.com/ar/1/126133 (I have quoted only the first part of the URL as it actually goes on for pages. This is the start of the content of the new tab:- document.write(" " ); var rvr_id=802493214346; var mpserv; var mpi="img-cdn.mediaplex.com/0/"; var mpcrgif="710/208824/94928_DAP_15Q1_UK_SnA_Q1_300x600_42.jpg"; var mpck="rover.ebay.com/rover/1/710-208824-51244-1/4?mpt=24019&Perf_Tracker_1=&Perf_Tracker_2=394274&Perf_Tracker_3=yho&Perf_Tracker_4=&Perf_Tracker_5=&Perf_Tracker_6=&Perf_Tracker_7=&Perf_Tracker_8=&Perf_Tracker_10=&ff5=133163&ff6=4090848215481724480& I have tried refreshing Firefox and have scanned with Malawarebytes and Ad Aware without success. I am also running Kaspersky. Any help would be appreciated. Thanks

Chosen solution

Please register a account & make a thread at these forums: http://www.bleepingcomputer.com/forums/f/22/virus-trojan-spyware-and-malware-removal-logs/

And follow the instructions closely which can be found in the Preparation Guide For Use Before Using Malware Removal Tools and Requesting Help: http://www.bleepingcomputer.com/forums/topic34773.html

You have a deeper than usual infection since Kaspersky, Malwarebytes & Ad-Aware can't even remove or detect it. And I can't find a removal guide for "rover" when I google. The people at those forums do good work. Post your thread link here when you've done it and I'll follow along.

You could also try scanning with Windows Defender but I'm not very confident it will find the virus. But it's worth a shot. Also update Windows Defender's virus definitions first before scanning. They're most likely very old.

Read this answer in context 1

Additional System Details

Installed Plug-ins

  • Adobe PDF Plug-In For Firefox and Netscape 11.0.10
  • Content Blocker Extension
  • Foxit PhantomPDF Plug-In For Firefox and Netscape
  • Intel web components for Intel® Identity Protection Technology
  • Intel web components updater - Installs and updates the Intel web components
  • Online Banking Extension
  • The QuickTime Plugin allows you to view a wide variety of multimedia content in Web pages. For more information, visit the QuickTime Web site.
  • Shockwave Flash 16.0 r0
  • 5.1.30514.0
  • Virtual Keyboard
  • iTunes Detector Plug-in

Application

  • User Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:36.0) Gecko/20100101 Firefox/36.0

More Information

Noah_SUMO
  • Moderator
97 solutions 581 answers

Chosen Solution

Please register a account & make a thread at these forums: http://www.bleepingcomputer.com/forums/f/22/virus-trojan-spyware-and-malware-removal-logs/

And follow the instructions closely which can be found in the Preparation Guide For Use Before Using Malware Removal Tools and Requesting Help: http://www.bleepingcomputer.com/forums/topic34773.html

You have a deeper than usual infection since Kaspersky, Malwarebytes & Ad-Aware can't even remove or detect it. And I can't find a removal guide for "rover" when I google. The people at those forums do good work. Post your thread link here when you've done it and I'll follow along.

You could also try scanning with Windows Defender but I'm not very confident it will find the virus. But it's worth a shot. Also update Windows Defender's virus definitions first before scanning. They're most likely very old.

Please register a account & make a thread at these forums: http://www.bleepingcomputer.com/forums/f/22/virus-trojan-spyware-and-malware-removal-logs/ And follow the instructions closely which can be found in the '''Preparation Guide For Use Before Using Malware Removal Tools and Requesting Help''': http://www.bleepingcomputer.com/forums/topic34773.html You have a deeper than usual infection since Kaspersky, Malwarebytes & Ad-Aware can't even remove or detect it. And I can't find a removal guide for "rover" when I google. The people at those forums do good work. Post your thread link here when you've done it and I'll follow along. You could also try scanning with Windows Defender but I'm not very confident it will find the virus. But it's worth a shot. Also update Windows Defender's virus definitions first before scanning. They're most likely very old.

Modified by Noah_SUMO

Question owner

Many thanks for the speedy response and the subsequent advice.

I have registered at Bleeping Computer and posted my Question as suggested the link is :-

http://www.bleepingcomputer.com/forums/t/571166/hijacked-browser-rover-redirect/

Thanks again

Many thanks for the speedy response and the subsequent advice. I have registered at Bleeping Computer and posted my Question as suggested the link is :- http://www.bleepingcomputer.com/forums/t/571166/hijacked-browser-rover-redirect/ Thanks again
Noah_SUMO
  • Moderator
97 solutions 581 answers

Helpful Reply

No problem Stuart!

Also make sure you read steps 6 & 7 here: http://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/

It's very important you attach those logs from the Farbar Recovery Scan Tool to your thread over there. It will help them troubleshoot your problem much more quickly. If you're already doing that then sorry! Just making sure. :D

No problem Stuart! Also make sure you read steps 6 & 7 here: http://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/ It's '''very important''' you attach those logs from the Farbar Recovery Scan Tool to your thread over there. It will help them troubleshoot your problem much more quickly. If you're already doing that then sorry! Just making sure. :D
cor-el
  • Top 10 Contributor
  • Moderator
16721 solutions 151175 answers

Create a new profile as a test to check if your current profile is causing the problem.

See "Creating a profile":

If the new profile works then you can transfer files from a previously used profile to the new profile, but be cautious not to copy corrupted files to avoid carrying over problems.

Create a new profile as a test to check if your current profile is causing the problem. See "Creating a profile": *https://support.mozilla.org/kb/profile-manager-create-and-remove-firefox-profiles *http://kb.mozillazine.org/Standard_diagnostic_-_Firefox#Profile_issues If the new profile works then you can transfer files from a previously used profile to the new profile, but be cautious not to copy corrupted files to avoid carrying over problems. *http://kb.mozillazine.org/Transferring_data_to_a_new_profile_-_Firefox

Helpful Reply

Noah_SUMO said

No problem Stuart! Also make sure you read steps 6 & 7 here: http://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/ It's very important you attach those logs from the Farbar Recovery Scan Tool to your thread over there. It will help them troubleshoot your problem much more quickly. If you're already doing that then sorry! Just making sure. :D

Thanks for the reminder - I looked at the step by step instructions and decided to delay doing it until I had a little more time. I have now done it (I think) and edited my opening message. Thanks again.

''Noah_SUMO [[#answer-708485|said]]'' <blockquote> No problem Stuart! Also make sure you read steps 6 & 7 here: http://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/ It's '''very important''' you attach those logs from the Farbar Recovery Scan Tool to your thread over there. It will help them troubleshoot your problem much more quickly. If you're already doing that then sorry! Just making sure. :D </blockquote> Thanks for the reminder - I looked at the step by step instructions and decided to delay doing it until I had a little more time. I have now done it (I think) and edited my opening message. Thanks again.

Question owner

''cor-el said

Create a new profile as a test to check if your current profile is causing the problem. See "Creating a profile": If the new profile works then you can transfer files from a previously used profile to the new profile, but be cautious not to copy corrupted files to avoid carrying over problems.

Thanks for the response. I haven't yet had the chance to try this out but it does sound promising. I wil read the info. from your links and give it a go. Thanks

''''cor-el [[#answer-708519|said]]'' <blockquote> Create a new profile as a test to check if your current profile is causing the problem. See "Creating a profile": *https://support.mozilla.org/kb/profile-manager-create-and-remove-firefox-profiles *http://kb.mozillazine.org/Standard_diagnostic_-_Firefox#Profile_issues If the new profile works then you can transfer files from a previously used profile to the new profile, but be cautious not to copy corrupted files to avoid carrying over problems. *http://kb.mozillazine.org/Transferring_data_to_a_new_profile_-_Firefox </blockquote> Thanks for the response. I haven't yet had the chance to try this out but it does sound promising. I wil read the info. from your links and give it a go. Thanks
FredMcD
  • Top 10 Contributor
3820 solutions 53017 answers

Sometimes a problem with Firefox may be a result of malware installed on your computer, that you may not be aware of.

You can try these free programs to scan for malware, which work with your existing antivirus software:

Microsoft Security Essentials is a good permanent antivirus for Windows 7/Vista/XP if you don't already have one. Windows 8 has antivirus built-in already.

Further information can be found in the Troubleshoot Firefox issues caused by malware article.

Did this fix your problems? Please report back to us!

Sometimes a problem with Firefox may be a result of malware installed on your computer, that you may not be aware of. You can try these free programs to scan for malware, which work with your existing antivirus software: * [http://www.microsoft.com/security/scanner/default.aspx Microsoft Safety Scanner] * [http://www.malwarebytes.org/products/malwarebytes_free/ MalwareBytes' Anti-Malware] * [http://support.kaspersky.com/viruses/disinfection/5350 Anti-Rootkit Utility - TDSSKiller] * [http://general-changelog-team.fr/en/downloads/viewdownload/20-outils-de-xplode/2-adwcleaner AdwCleaner] (for more info, see this [http://www.bleepingcomputer.com/download/adwcleaner/ alternate AdwCleaner download page]) * [http://www.surfright.nl/en/hitmanpro/ Hitman Pro] * [http://www.eset.com/us/online-scanner/ ESET Online Scanner] [http://windows.microsoft.com/MSE Microsoft Security Essentials] is a good permanent antivirus for Windows 7/Vista/XP if you don't already have one. Windows 8 has antivirus [http://www.microsoft.com/security/pc-security/windows8.aspx#antivirus built-in] already. Further information can be found in the [[Troubleshoot Firefox issues caused by malware]] article. Did this fix your problems? Please report back to us!

Question owner

Thanks for your suggestions. I followed the advice given by Noah_SUMO and registered on bleepingcomputer and followed the steps suggested on there. At the moment all is well and I have reported that on their thread. Thanks again for the speedy and helpful advice.

Thanks for your suggestions. I followed the advice given by Noah_SUMO and registered on bleepingcomputer and followed the steps suggested on there. At the moment all is well and I have reported that on their thread. Thanks again for the speedy and helpful advice.
FredMcD
  • Top 10 Contributor
3820 solutions 53017 answers

Hello,

I am glad to hear that your problem has been resolved. If you haven't already, please select the answer that solves the problem. This will help other users with similar problems find the solution more easily.

Thank you for contacting Mozilla Support.

Hello, I am glad to hear that your problem has been resolved. If you haven't already, please select the answer that solves the problem. This will help other users with similar problems find the solution more easily. Thank you for contacting Mozilla Support.