Spyware, Viruses, & Security forum

General discussion

Phishing on Google Image Search - t3.gstatic.com/images

by XFiiire / July 13, 2010 8:46 PM PDT


Every single time I search any phrase on Google Images on Firefox (or Internet Explorer - but Firefox is my main browser), my Kaspersky Internet Security alerts me to Phishing Attacks -
this is one example

blocked: phishing address http://t3.gstatic.com/images
URL: http://t3.gstatic.com/images?q=tbn:oFwPaewhXJcegM:http://i288.photobucket.com/albums/ll176/yescomm/hello/hello020.gif

Hence the apparent phishing attack seems to operate by taking the images shown from the search and then turning it into what Kaspersky finds as a phishing attack - those images (on the browser) do not show up - they become a blank white box normally with a small red X in the top left hand corner

This started after visiting a dodgy website which offered me one of those rogue spyware/antivirus softwares - my normal procedure is just to abort firefox and upon the session restore simply untick the box for the "rogue" website - although this seems to have failed

So far I have scanned with Malwarebytes and found Rogue.RegSweep - although quarantining and deleting this has not solved the problem

At the moment I am scanning my whole system using Trend Micro Housecall - although I am still unsure as to whether it fill find anything on my system and whether if it will solve the problem

What should I do?

Note: I have done one system restore to the 13th of July (the latest one I had to restore to) - previous to this date I did not have the problem

Note: When using Firefox's Private Browsing Mode and searching Google Images - the problem does not occur - Kaspersky does not warn me of any phishing attempts and all the images on Google show up as they normally should

Thank You

Discussion is locked
You are posting a reply to: Phishing on Google Image Search - t3.gstatic.com/images
The posting of advertisements, profanity, or personal attacks is prohibited. Please refer to our CNET Forums policies for details. All submitted content is subject to our Terms of Use.
Track this discussion and email me when there are updates

If you're asking for technical help, please be sure to include all your system info, including operating system, model number, and any other specifics related to the problem. Also please exercise your best judgment when posting in the forums--revealing personal information such as your e-mail address, telephone number, and address is not recommended.

You are reporting the following post: Phishing on Google Image Search - t3.gstatic.com/images
This post has been flagged and will be reviewed by our staff. Thank you for helping us maintain CNET's great community.
Sorry, there was a problem flagging this post. Please try again now or at a later time.
If you believe this post is offensive or violates the CNET Forums' Usage policies, you can report it below (this will not automatically remove the post). Once reported, our moderators will be notified and the post will be reviewed.
Collapse -
by XFiiire / July 13, 2010 10:11 PM PDT

It seems like it does affect Private Browsing... however that means that for some reason on one occasion it did not do anything and the Google Image Search actually worked

Collapse -
Any more news on this?
by ElliottShafii / July 13, 2010 10:50 PM PDT

I'm getting the same thing although i didn't go to any dodgy website and run and dodgy scan.

Is there any more news on this issue?

Collapse -
by XFiiire / July 14, 2010 1:18 AM PDT
In reply to: Any more news on this?

Hi Elliott, hopefully my Trend Micro Housecall scan will finish soon, it has found 14 "threats" so maybe one of those will correspond to this problem.

The only thing that confuses me is the cause - I am unsure whether it would be a file on the computer system or anything else... Since once Firefox started having the problem, Internet Explorer (which I never use) also developed it...

Collapse -
by XFiiire / July 14, 2010 3:38 AM PDT
In reply to: Re:

The scan finally finished revealing some files (although I actually believe that none corresponded to the problem) - they were all executables (which I already knew about... keygens...) and all of them were false positives since they had been on the computer for much longer than this problem.

Although, what I believe may have led to the solution is using Uniblue Registry Booster 2 - this cleaned up my registry and deleted certain entries. However I am unsure whether it was this or maybe something else but the problem is no more! Happy

Collapse -
This is safe
by RangerPHX / June 13, 2012 10:46 AM PDT
In reply to: SOLVED!

This is safe

by Anonymous

In Reply to: SOLVED!

(Darn try again this site closed with all my data lost)

I submitted this URL to VIRUS TOTAL A acredited site that can check either a file or (in this case) a URL: It returned at 0/27 CLEAN on the shown longer url at the top of this thread. Sorry I do not see a way to post a live link but shown below is a link specific to my test and their results. I strongly suggest you use this firm offten as I do, yes it's free.


Further the address for them is http://www.virustotal.com


Popular Forums
Computer Help 51,912 discussions
Computer Newbies 10,498 discussions
Laptops 20,411 discussions
Security 30,882 discussions
TVs & Home Theaters 21,253 discussions
Windows 10 1,672 discussions
Phones 16,494 discussions
Windows 7 7,855 discussions
Networking & Wireless 15,504 discussions


Want to see the future of car technology?

Brian Cooley found it for you at CES 2017 in Las Vegas and the North American International Auto Show in Detroit.