Friday, June 6, 2014

Redirected to Blank Page, How to Stop Being Redirected and Remove It?

stop from redirecting

  • occurs
  • What is
  • Can be dangerous?
  • Removal thread to help stop Occurs

  • Clicking on hyperlinks (on or fatwallet) will take searchers to
  • The full link of is
  • appears to be blank.

What Is

According to its behavior, security company has identified it as a browser redirector. It is a program that hooks API to direct traffic to its partners’ sites. By doing so, manages to get profitable commission, protect the reputation of the sites that hire it to help intercept traffic and prevent victims from eradicating it quickly as it simply disappear after directing traffic to destinations.

A browser redirector is not technically virus. It must have been programmed by programmer who knows the BHO and JS techniques well and is aware of that some modifications would intercept traffic frequently without being stopped by build-in security defense as the two techniques are basic in building a web page.


Knowledge supplement: traffic is one of the major elements that help to enhance rankings in the search results, it would also influence the exposure rate proportionally. To sell more products online than other online operators, some would pay such redirector/hijacker to help gather huge traffic and direct people to its sites by force. Is Potentially Dangerous

Practices have proven that fact that being harassing by would finally end up with more redirects, such as:
  • newegg
  • tigerdirect
  • meritline

To push products to online searchers, many operators have obviously paid Thus, random ads will appear and more redirects will happen. What’s worth the attention is that most online operator take a lazy approach to optimizing their sites and few of them knows how, they would prefer to pay for some service online. As a consequence, the sites will not be compact to unveil bugs. In other word, the sites redirected by are easy to be affected by infections.

Once being attacked, BHO and JS techniques will be utilized maliciously to modify DNS settings, preload vicious codes into DLL module and record any in-put information, which could finally end up with identity theft and money loss.

Besides, with more random and unknown items loaded onto the machine in the middle of the searching, more CPU will be consumed and the internal resource will be taken up unreasonably to cause instability. This could weaken the computer in warding off potential threats effectively.

Follow Thread to Stop from Redirecting 

1. Reset browser settings.

Internet Explorer
Tools menu > Internet Options > Advanced tab > Restore Defaults button > OK.

Mozilla Firefox
Firefox button > Help > Troubleshooting information > ‘Reset Firefox’ button.

Google Chrome
‘Customize and Control Google Chrome’ menu > ‘Options’ > ‘Under the Hood’ > ‘Reset to Defaults’ button.

Show hidden files and folders (explicit instruction shown in Step3) > navigate to "C:\Users\user_name\AppData\Roaming\Opera\Opera\" > remove Operapref.ini.

Safari menu > ‘Reset Safari’ > tick all given options > ‘Reset’ button.

2. end the related services.

Before access the service window to end the associated ones, please access Running Tasks to help figure out the related ones.

  • Select All Apps from Start Screen to choose Accessories.
  • (for Windows 7/XP/Vista it is to choose All programs from Start menu and select Accessories)
  • Select System Tools and then System Information. 
  • Please expand Software Environment to locate Running Tasks.
  • See the path for each service and program in the right pane?
  • Locate the one(s) with the directory pointing to the place where settles.
access System Information to help figure out the services related to

Win+R key > type “services.msc” > Enter key > services window > remove/disable the related service.

Windows 8
Windows Explorer > Administrative tools > Services icon > remove/disable related service.

Mac OS X
Finder menu >“Services” >“Services Preferences” > “Services” > locate service on the right > remove/disable related service.

3. Remove all the Temp files under the following directories.

Windows 7/XP/Vista
Click open ‘Control Panel’ > search for ‘Folder Options’ > tap View tab > tick ‘Show hidden files and folders' and non-tick 'Hide protected operating system files (Recommended)’.

Windows 8
Start screen > open any folder > open Windows Explorer > select View tab > Tick ‘File name extensions’ and ‘Hidden items’ options.

  • navigate to the following directories and remove all the files and folders:
C:\Documents and Settings\[user name]\Local Settings\Temp
C:\Documents and Settings\[user name]\Local Settings\Temporary Internet File

Mac OS X
Finder > Utilities folder > terminal:
access Macs Terminal

  1. type
    cd ~/Library/Logs
    sudo rm -rf ~/Library/Logs/*
    and press Return button.
  2.           type
    rm -rf ~/Library/Safari/Downloads.plist
    cd ~/Library/Caches
    sudo rm -rf ~/Library/Caches/*
    and press Return button.

  • Access the following folders to remove the items generated on the day when was firstly detected:
C:\Users\[your username]\Documents\
C:\Program Files\
 (tip: to filter out the items generated on the day when appeared, please right click on the space of a window that is under inspection to select "Arrange by"; then select "day" in the drop-down list)
Arrange by day to remove the items generated by

Be noted that additional items brought in by can be random; but most of them are web applications.  It is recommended to remove them in the process so as to prevent from its re-image. Please understand that there’s no universal explicit instruction to help remove as the situation (the items dropped by, the directory settles in and the name of the dropped down items) can vary from OS to OS. Therefore, an effective thread is offered and certain level of computer knowledge as well as skill is required to carry out the steps to move forward complete and thorough removal.
get expert help in stopping


No comments: