System Doctor annoyance

Every single time I access the main page ( http://www.datorrents.com ), I get this -> http://sharkma.pp.fi/system_doctor.jpg and it redirects me to SystemDoctor - Fix damaged documents, video, music, images. Registry optimization

This is quite annoying since it opens the page instead of datorrents.com

[KiraRin]

Googling systemdoctor makes it sound like you've picked up some malware. Use this link to help remove it:

How To Remove Systemdoctor 2006

And then make sure you are up to date, not only with your anti-viru, but with an anti-spyware program:

Basic Computer Security (Antivirus, Spyware Removal + Firewalls) + Other Useful Tools

H.

[Blanchimont]

SystemDoctor is a rogue antispyware/adware,

meaning you should get rid of it fast and do a complete system checkup of your computer.

Instructions to do so can be found at;
How To Remove Systemdoctor 2006 (bleebingcomputer)

Sincerely, Blanchimont

quote from the above site;

"SystemDoctor 2006 is a rogue anti-spyware application that gets installed by Spyware/malware without asking for permission. This infection can also be accompanied by other malware that changes your desktop background to a fake warning or by Trojans that issue fake taskbar security alerts. These are all used as a scare tactic to have you purchase their commercial software."

from Symantec;

"Updated: May 24, 2007 1:24:03 PM
Type: Other
Publisher: malwarewipe.com
Risk Impact: Medium
Systems Affected: Windows 98, Windows 95, Windows XP, Windows Me, Windows NT, Windows Server 2003, Windows 2000

Behavior: SystemDoctor is a Security Risk that may give exaggerated reports of threats on the computer. The program then prompts the user to purchase a registered version of the software in order to remove the reported threats. "

Um... I'm not using Windows, it's Linux. It's clearly KDE that's on the screenshot. So I highly doubt I have any System Doctor installed on my system.

And I only get this when accessing datorrents.

[seorang]

Does it show up always when you access datorrents, or its just now and then?

Would help in knowing whether its just one bad ad out of a number, or is it a fixed one.

I gotta say, I am running firefox with adblock and I don't get anything when accessing datorrents. Tried opening it with a naked IE a few times (ie. no adblock), and I don't get it.

So I'd recommend scanning/cleaning your pc with anti-spyware/anti-adware programs, and try accessing datorrents again.

Its not that we don't believe you, but we'd need some amount of proof, and to be sure it ain't anything else.

Originally Posted by seorang

Does it show up always when you access datorrents, or its just now and then?

Every single time I access http://www.datorrents.com/index.asp with Firefox or Opera.

Originally Posted by seorang

I gotta say, I am running firefox with adblock and I don't get anything when accessing datorrents. Tried opening it with a naked IE a few times (ie. no adblock), and I don't get it.

So I'd recommend scanning/cleaning your pc with anti-spyware/anti-adware programs, and try accessing datorrents again.

I get it even with adblocker. And addition to that I'm running GNU/Linux. To my knowledge, Windows spyware doesn't work under Linux. :P

I would be happy to try removing spyware, if you point out where I can get some removal tools for GNU/Linux

EDIT: I have the same problem in Windows XP, and spyware scans don't find a thing.

Originally Posted by seorang

Its not that we don't believe you, but we'd need some amount of proof, and to be sure it ain't anything else.

I can always take a video if you're not satisfied

[seorang]

I've talked to a few people. I agree with you that windows spyware shouldn't work in Linux. But you're getting the problem.

I've also asked a number of people running linux to try accessing the site to get the popup. Not even 1 report so far. Firefox, Konqueror, etc.

Somebody suggested using Clamav just to make sure there's nothing on your pc. Another friend suggested clearing the cache.

To be honest, I don't know what the problem is, but I don't think its the site.

Originally Posted by seorang

I've talked to a few people. I agree with you that windows spyware shouldn't work in Linux. But you're getting the problem.

I've also asked a number of people running linux to try accessing the site to get the popup. Not even 1 report so far. Firefox, Konqueror, etc.

I don't get it with Konqueror. But I don't use it for web browsing.

Originally Posted by seorang

Somebody suggested using Clamav just to make sure there's nothing on your pc. Another friend suggested clearing the cache.

To be honest, I don't know what the problem is, but I don't think its the site.

I get the same with my Windows laptop, which I checked with F-Secure before going to datorrents.com for the first time with it :/

And when I went with IE6, I got that spyware installed on my laptop.

But I'll try to get few of my friends to try it (one tried with IE7 already, and no problems). And I'll see the results of clamav scan when I get back home on Sunday. EDIT: Nothing was found with that scan

I have no idea how it's possible that I got the same crap in temp folder on 3 computers, especially my mom's since she uses it only to browse a few websites (and she has GNU/Linux too). But clearing everything in it fixed the problem.

... I just out of whim tried file search with *datorrents* and found that there was many files matching that on my temp folder, so I tried deleting all files there ~_^. Thanks for your help anyway.

[Tranmir]

Well this has started happening to me since i upgrade to the latest norton which dosn't included ad blocking by default anymore.

Getting redirected from the site is extremly annoying, but i've blacklisted the ad's now, so they can't run.

Nothing being run on the pc, unless u'r security is too low or u allow the activex to run. Its just one really big annoyance.