Blogger Hacked and Redirected to Deplayer.net Here is How To Fix It
If you use Blogger (blogspot) and installed a Visitor Counter plugin you may have gotten an unexpected redirect to a scam website today 3/5/10. That’s what happened to me on my blog Joe-Cannon.blogspot.com
Every time I logged on to the blog I was taken to the site “deplayer.net” . Every page I tried to access took me instead to that site. When I tried to remove the visitor counter, it wouldn’t let me. After some digging I discovered “The Real Blogger Status website which gave me hints on how I could remove the program.
This is what I did
1. Use Internet Explorer (firefox might work too but I used IE). Go to Tools and then Click on Internet. Set security level to High or medium high (if medium doesn't work use High)
3. Go to your blog. It may not load because the security is set to high. That’s ok . now from Blogger go to you Layout. Look for the Visitor counter and click remove. That should take care of it. Hit refresh and the visitor counter should be removed and your blog should work it did for me
Deplayer.net took several weeks to do its dirty work so I suggest you do not use the visitor counter from the Blogspot website. Instead use Google Analytics or another program called Statcunter which I have also used and is good.
Posts
Thanks for your help. I had the same problem and found when I got rid of my 'gadgets' it stopped redirecting. I added some in one at a time, found the culprit and removed it. Am I safe now or will the worm still show up?
ReplyDeleteI am running regular scans with nothing found.
Had the same problem.
ReplyDeleteI found it in the funny oneliners widget and deleted the widget. seems to have fixed the issue
I think your safe It doesn't look like you have a virus etc on your computer. it looks like the deplayer.net scam was localized to your blog. Ive scanned my computer several times with Norton Antivirus and I seem to be ok. Im glad I was able to help you
ReplyDeleteJoe
Thank you for this. I had the same problem on my blog- it turned out to be a game called Amazon Quest. Getting rid of that widget fixed it, but I had to do it in html- just editing it wasn't enough.
ReplyDeleteI had almost the same problem. I could acess my blog, but others couldn't. I already removed my visitor's counter, so I think it will solve the problem.
ReplyDeleteInvestigadora yes your one blog seems to be working well however when I went to your other blog
ReplyDeleteInvestigações sobre a Igreja Mórmon (SUD)
it didnt seem to be. After a few seconds it sent me to another location. hope you are able to resolve the problem
Joe
I had the deplayer.net problem, too. I didn't have a visitor counter but it was in another gadget, a stressball game link. I couldn't remove it by simply changing the security setting to high and going into the layout to take it out. Deplayer would mess with the removal confirmation window and I couldn't click okay. I ended up going through 'edit html'. I copied the code to word, did a search on stressball to find the gadget or widget code for it. Once I knew where it was I went back to the original and removed it there. This way I had a copy of the code in the word document in case I needed it again. Once that was removed I went back to the blog view. Everything worked fine, deplayer was gone. Won't be adding on that stressball link again, I guess. LOL
ReplyDeleteI'm glad you were able to resolve the issue and thanks for the heads up that this bug is found on other programs also.
ReplyDeleteJoe
Hi Joe
ReplyDeleteJust today I was able to fix the problem using the free version of WinPatrol. In Active Tasks I found a program called GBUSTER BROWSER DEFENSE.EXE.
Clicking with the right, I was able to delete file on reboot. It was the only program that really worked, and I will let WinPatrol on because it tells me everytime any kind of program that tries to install itself without my permission.
But for sure it's a problem with blogspot, and something about security must be done!
Im glad you were finally able to resolve your problems. I had no idea this could happen when I downloaded stuff from blogger. It sure opened my eyes!
ReplyDeleteJoe