64.28.189.210 stealing my info???

SmoothFloyd13 · 05-02-2008, 09:40 AM

Hi Everyone,

I'm not sure if this is a big problem or not, but I want to make sure...

Occasionally, but not always, when I click a link to a site on the web, i get transferred to this page:

http://64.28.189.210/c.php?c=b0f4165...cc12aef3a&mk=M
C4zMjEx&id=1&zp={09D6726C-871D-4DAA-8F55-16D1102E8D89}&alg=0

It's blank, and if I click back on my browser twice it goes away.
(so click go here, click back, click go here, click back, click go to the page I want)

What is the deal with this? I think it started happening shortly after I erased LimeWire from my comp. I have no other problems, I use Trend Micro which seems to work great, and my comp stills runs very fast. Is someone viewing my pages? because it seems to be rerouting to this 64.28.189.210 IP address

Thanks to anyone who can help!

bobbydiaz · 05-02-2008, 09:45 AM

Hmm sounds like a redirect that fails. Try installing SpyBot and see what it finds.

http://www.safer-networking.org/en/download/index.html

SLAiNTRAX · 05-03-2008, 01:38 PM

found a thread similar to this: please. Help my friends

Slapshot · 05-04-2008, 08:11 AM

Sounds like malware
When was the last time you scanned

SmoothFloyd13 · 05-05-2008, 01:11 AM

I scan every night while I'm sleeping with Trend Micro & Spybot, and it still does it. Seems to be usually when I use Wikipedia

Slapshot · 05-05-2008, 01:50 PM

Botnet maybe?

Cernel.net is the site your browser redirects to.

royalhonor · 05-08-2008, 07:20 PM

Try using hijackthis, and post your log in the appropriate forum.

05-02-2008, 09:40 AM	#1 (permalink)
SmoothFloyd13 Registered User Join Date: May 2008 Location: New York Posts: 2 OS: Windows XP Pro	64.28.189.210 stealing my info??? Hi Everyone, I'm not sure if this is a big problem or not, but I want to make sure... Occasionally, but not always, when I click a link to a site on the web, i get transferred to this page: http://64.28.189.210/c.php?c=b0f4165...cc12aef3a&mk=M C4zMjEx&id=1&zp={09D6726C-871D-4DAA-8F55-16D1102E8D89}&alg=0 It's blank, and if I click back on my browser twice it goes away. (so click go here, click back, click go here, click back, click go to the page I want) What is the deal with this? I think it started happening shortly after I erased LimeWire from my comp. I have no other problems, I use Trend Micro which seems to work great, and my comp stills runs very fast. Is someone viewing my pages? because it seems to be rerouting to this 64.28.189.210 IP address Thanks to anyone who can help!

05-02-2008, 09:45 AM	#2 (permalink)
bobbydiaz Registered User Join Date: Sep 2007 Posts: 24 OS: Windows XP/Server 2003	Re: 64.28.189.210 stealing my info??? Hmm sounds like a redirect that fails. Try installing SpyBot and see what it finds. http://www.safer-networking.org/en/download/index.html

05-03-2008, 01:38 PM	#3 (permalink)
SLAiNTRAX Registered User Join Date: May 2008 Posts: 2 OS: Windows XP	Re: 64.28.189.210 stealing my info??? found a thread similar to this: please. Help my friends

05-04-2008, 08:11 AM	#4 (permalink)
Slapshot Registered User Join Date: Feb 2008 Posts: 117 OS: Vista	Re: 64.28.189.210 stealing my info??? Sounds like malware When was the last time you scanned

05-05-2008, 01:11 AM	#5 (permalink)
SmoothFloyd13 Registered User Join Date: May 2008 Location: New York Posts: 2 OS: Windows XP Pro	Re: 64.28.189.210 stealing my info??? I scan every night while I'm sleeping with Trend Micro & Spybot, and it still does it. Seems to be usually when I use Wikipedia

05-05-2008, 01:50 PM	#6 (permalink)
Slapshot Registered User Join Date: Feb 2008 Posts: 117 OS: Vista	Re: 64.28.189.210 stealing my info??? Botnet maybe? Cernel.net is the site your browser redirects to.

05-08-2008, 07:20 PM	#7 (permalink)
royalhonor Registered User Join Date: Dec 2007 Posts: 13 OS: XP MCE 2005 SP3	Re: 64.28.189.210 stealing my info??? Try using hijackthis, and post your log in the appropriate forum.