Website keeps forwarding to track.nuxues.com

[SRRAE]

Hi,

My browser default home page is the msn.co.uk.  When I click on most news articles msn.co.uk, loads the article for a fraction of a second and then forwards to track.nuxues.com site.  It does this on both Edge and Firefox.

I have bitdefender installed and its not found anything untoward and it only happens on links on the MSN.co.uk site.
Is it likely that I have a virus or it likely its the site with where these articles are hosted?

 

[SupaKomputa]

Yes most likely you have a virus in the computer.

[PorkishPig]

You should grab Malwarebytes to remove malicious applications. You should also remove Firefox extensions you do not recognize by typing about:addons into your address bar.

[SRRAE]

The only Firefox extension I have is Honey, which I tried a couple of times.  I have installed Malwarebytes and it has found nothing.

Im wondering if I should just reinstall windows to be safe

 

[LogicalDrm]

12 hours ago, SRRAE said:

Im wondering if I should just reinstall windows to be safe

 

Let's not go that far. There are steps to try first. Have you tried reinstalling browsers or other browsers besides those mentioned? Have you tried in Safe Mode? What about using your phone on same network? And if you can, using PC on another network.

 

This could be issue with your router, or even ISP. In which case you don't fix it by OS reinstall. Safe Mode is great way to see if it could be software related at all.

[homeap5]

It may be even changed dns by some malware or registry entry that affect every browser you want to use. I can handle with that type of infection (if it is infection), but first try methods recommended by @LogicalDrm.

 

AdwCleaner can find something and made basic repair.

[SRRAE]

12 hours ago, LogicalDrm said:

Let's not go that far. There are steps to try first. Have you tried reinstalling browsers or other browsers besides those mentioned? Have you tried in Safe Mode? What about using your phone on same network? And if you can, using PC on another network.

 

This could be issue with your router, or even ISP. In which case you don't fix it by OS reinstall. Safe Mode is great way to see if it could be software related at all.

It only happened the day my original post.  The next day it didn't do it on any browser which is making me think it was something else that was compromised. Those news pages are full of adverts.

[homeap5]

1 hour ago, SRRAE said:

It only happened the day my original post.  The next day it didn't do it on any browser which is making me think it was something else that was compromised. Those news pages are full of adverts.

So use AdwCleaner first. If you can't find any suspicious files and malware, you can (as last step) use SpyHunter for analyze (it has not so good reputation, but still - it was the only utility that found that type of malware for me few times; but some experience is needed since SH only detect problems, but not resolve it in free version; anyway, you'll get full info about locations in registry and in filesystem, that should be enough).

[SRRAE]

Used AdwCleaner and it found nothing untoward.  I installed SpyHunter which again reported nothing untoward.

I ran AdwCleaner again and that recommended uninstalling SpyHunter lol

[homeap5]

14 hours ago, SRRAE said:

Used AdwCleaner and it found nothing untoward.  I installed SpyHunter which again reported nothing untoward.

I ran AdwCleaner again and that recommended uninstalling SpyHunter lol

Yes, uninstall SH as soon as you finish scan and fix problems. But that is unusual - SH always find something that you can fix. It may seems to be unrelated, but sill worth to investigate.

[SRRAE]

5 hours ago, homeap5 said:

Yes, uninstall SH as soon as you finish scan and fix problems. But that is unusual - SH always find something that you can fix. It may seems to be unrelated, but sill worth to investigate.

SH found one thing which wasn't really worth doing anything about.  It was a website cookie which had access to my webcam, which I used to scan a QR code.