Computer Support Forum

Google, Bing, Yahoo Websites unreachable!!

Question: Google, Bing, Yahoo Websites unreachable!!

Im helping my father troubleshoot his computer. Regardless of the browser, He is unable to browse to google, or bing... browser says its unabel to connect to the server / server not found. He can get to yahoo.com homepage, but gives the same error when trying to perform a search. Every other website i tried works fine.. cleared cache etc etc... I then tried pinging the these sites from the command line and the requests timed out. Anyone have any experience with this? Also, he has an up to date version of Trend Micro Internet Security with latest def. files.

Below are the specs for his PC:

Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows XP Home Edition, Service Pack 3, 32 bit
Processor: Intel(R) Core(TM)2 Duo CPU T5270 @ 1.40GHz, x86 Family 6 Model 15 Stepping 13
Processor Count: 2
RAM: 2045 Mb
Graphics Card: NVIDIA GeForce 8400M GS, 256 Mb
Hard Drives: C: Total - 235837 MB, Free - 203546 MB;
Motherboard: Dell Inc., 0HX767
Antivirus: Trend Micro Titanium Internet Security, Updated: Yes, On-Demand Scanner: Enabled
Thanks is advance

Relevance 100%
Preferred Solution: Google, Bing, Yahoo Websites unreachable!!

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

Answer: Google, Bing, Yahoo Websites unreachable!!

follow advice here and post the logs those programs make

1 more replies
Relevance 76.67%

Hi,

Please help me get rid of this virus. When I click on the link from the search result at Google or Bing, I get redirected to another different website. I tried MalwareBytes, Hitman Pro, TDSSkiller, AVG and Avira antivirus software, but none found the virus.

DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 9.0.8112.16457 BrowserJavaVersion: 10.9.2
Run by Tammy at 19:44:55 on 2012-12-21
Microsoft? Windows Vista? Home Premium 6.0.6002.2.1252.1.1033.18.4094.2391 [GMT -5:00]
.
AV: Avira Desktop *Enabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Enabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCService.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.... Read more

Answer:Redirect to other websites in Google and Bing

Greetings and Welcome to The Forums!!My name is Gringo and I'll be glad to help you with your malware problems.I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of usPlease do not run any tools unless instructed to do so.
We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.
Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.
Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.
A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE: At the top o... Read more

12 more replies
Relevance 75.85%

Hi,
Everytime I do a search on Bing Or Google or any other search engine I am redirected to other websites when I click on a link that I want to go to. The websites are usually have nothing to do for what I am searching for. I tried the Gmer but my system froze both times after trying.
DDS (Ver_09-09-29.01) - NTFSx86
Run by K & L Norvick Laptop at 8:10:10.32 on Tue 10/05/2010
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1014.479 [GMT -7:00]
AV: Panda Antivirus Pro 2011 *On-access scanning enabled* (Updated) {EEE2D94A-D4C1-421A-AB2C-2CE8FE51747A}
FW: Panda Personal Firewall 2011 *enabled* {7B090DC0-8905-4BAF-8040-FD98A41C8FB8}
============== Running Processes ===============
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\Program Files\Panda Security\Panda Antivirus Pro 2011\TPSrv.exe
svchost.exe
C:\PROGRAM FILES\PANDA SECURITY\PANDA ANTIVIRUS PRO 2011\WebProxy.exe
svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2011\PsCtrls.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2011\PavFnSvr.exe
C:\Program Files\Common File... Read more

More replies
Relevance 75.85%

Hi,
When I do a search in IE using Bing or Google and I click on a link, it redirects me to other websites that has nothing to do with what I'm searching for. Thank you in advance.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:04:30 AM, on 10/5/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2011\TPSrv.exe
C:\PROGRAM FILES\PANDA SECURITY\PANDA ANTIVIRUS PRO 2011\WebProxy.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2011\PsCtrls.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2011\PavFnSvr.exe
C:\Program Files\Common Files\Panda Security\PavShld\pavprsrv.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2011\Firewall\PSHOST.EXE
C:\Program Files\Panda Security\Panda Antivirus Pro 2011\PsImSvc.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2011\PskSvc.exe
c:\Program Files\Common Files\Intuit\... Read more

More replies
Relevance 74.62%

Whenever I do a query in Yahoo, Google or Bing and select a result, it gets redirected to other sites which look like ads for different things. Tried my Malwarebytes and my McAfee to remove - they found trojans but this has not fixed the issue. Hoping y'all can help! For a while when I opened Yahoo, I would get the website and two additional pages would start 'loading' but I cld close them out. That seems to have stopped now. I do get error msgs when I rebooted that certain .dll files weren't working. Other than the redirections, I don't seem to have any other issues. Thanks!
DDS (Ver_09-12-01.01) - NTFSx86
Run by TONI at 17:26:38.10 on Wed 12/09/2009
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_15
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.510.141 [GMT -6:00]

AV: McAfee VirusScan *On-access scanning enabled* (Updated) {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}
FW: McAfee Personal Firewall *enabled* {94894B63-8C7F-4050-BDA4-813CA00DA3E8}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bon... Read more

Answer:Yahoo, Google Bing, etc., redirecting

Hi jtmansur,Welcome to BC HijackThis forum. I am farbar. I am going to assist you with your problem.Please refrain from making any changes to your system (scanning or running other tools, updating Windows, installing applications, removing files, etc.) from now on as it might interfere with our fixes. Please let me know in your next reply if you agree with this.You have still some leftovers from an incomplete uninstalled Norton Antivirus on your computer.

To remove the leftovers please download and run the Norton Removal Tool.

Note: Norton removal tool is one and the same for all versions named below. It doesn't matter which version you have.

Warning: The Norton Removal Tool uninstalls all Norton 2008/2007/2006/2005/2004/2003 products and Norton 360 from your computer. If you use ACT! or WinFAX, back up those databases before you proceed.

I see on the log the Coupon Printer for Windows is installed on your computer:
This program is known to be bundled with adware/spyware.

For more information please see this:
A Closer Look at Coupons.com

To uninstall Coupon Printer for Windows:

Click "start" on the taskbar and then click on the "Control Panel" icon.
Please doubleclick the "Add or Remove Programs" icon.
A list of programs installed will be "populated" this may take a bit of time.
If they exist, uninstall the following by clicking on the following entries and selecting "remove":

Coupon Printer for Windows

Also delete the folders in bold (if present):

C:\Program Fi... Read more

16 more replies
Relevance 74.62%

Hi:
Yesterday my web browser started redirecting all of my Google / Bing searches to a variety of different phony sites every time I clicked on a site in Google. I suspect a Malware problem. I've tried virus scan and Spy doctor but they haven't helped.

When I look at Task Manager processes I see pnkbstra and pnkbstrb but when I turn them off nothing changes.

If you can help me with this I'll be forever grateful.

Thanks,
John Lawson

Answer:Google/Bing/Yahoo Redirect

Hello and welcome to Bleeping Computer.Please subscribe to your topic so that you will be notified as soon as I post a reply, instead of you having to check the topic all of the time. This will allow you to get an email notification when I reply.To subscribe, go to your topic, and at the top right hand corner by your first post, click the Options button and then click Track this topic. The bullet the immediate notification bubble. Then press submit.Lets take a look with MalwarebytesPlease download Malwarebytes' Anti-Malware from here:MalwarebytesPlease rename the file BEFORE downloading to zztoy.exe instead of mbam-setup.exeMBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.Double Click zztoy.exe to install the application.* Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.* If an update is found, it will download and install the latest version.* Once the program has loaded, select "Perform Quick Scan", then click Scan.* The scan may take some time to finish,so please be patient.* When the scan is complete, click OK, then Show Results to view the results.* Make sure that everything is checked, and click Remove Selected.* When disinfection is completed, a log will open in Notepad and ... Read more

2 more replies
Relevance 74.62%

I need help getting rid of the yahoo/bing/google redirect virus. I have Malwarebytes and Avira--they are currently running scans but last night malwarebytes did not pick up anything. i also downloaded the kaspersky scanner and have run that--nothing found.I need help. Not sure I can afford a new computer right now. :-/

Answer:Yahoo/Google/Bing Redirect

as an addition-- tonight malwarebytes has found nothing. hitman -- found nothing. avira-- nothing.

3 more replies
Relevance 74.62%

For the last couple days i have been unable to do any searches using the following search engines: Google, Bing or Yahoo. Also I can not access any of my Gmail Email Accounts on this computer.

However every other website i go to will work. Also Google Images will work as well.

I have ran a virus scan, spybot S&D, and Malware bytes and everything comes out clean. Any help you all can give me I would greatly appreciate it.

Thanks,

------------
DDS Log
--------------

.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_21
Run by ARS Server at 8:11:26 on 2011-09-21
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3327.2756 [GMT -5:00]
.
AV: AntiVir Desktop *Enabled/Updated* {AD166499-45F9-482A-A743-FDD3350758C7}
.
============== Running Processes ===============
.
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\HP\ToolBoxFX\bin\HPTLBXFX.exe
C:\Program Files\HP\HP UT\bin\hppusg.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
svchost.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\WINDOWS\System32\svchost.exe -k HPZ12
C... Read more

Answer:Can not search with Google, Bing, or Yahoo

anyone have any ideas ont his?

19 more replies
Relevance 74.62%

Hello,
I've used Malwarebytes & TDSSKiller.exe to try to remove whatever malware is causing the problem, but it's still happeneing. Can someone please help me with thia problem?

Answer:Still getting rerouted on google, bing, yahoo, etc.

Hello.

Are you using a router in your home?

~Blade

1 more replies
Relevance 74.62%

I'm getting hit with the Google / Bing Redirect, typically to buzzclick and their associated sites. Win 7, IE & Chrome Browsers, Company laptop (travel havily for work) Any help is appreciated and I'm traveling today, so I apologize if it takes time to get back

.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 8.0.7600.16385
Run by chrduf03 at 11:59:31 on 2011-09-09
Microsoft Windows 7 Enterprise 6.1.7600.0.1252.1.1033.18.3892.1633 [GMT -5:00]
.
AV: Symantec Endpoint Protection *Enabled/Updated* {88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Symantec Endpoint Protection *Enabled/Updated* {33A8BBD2-AA01-20A2-213B-0B8EB45B02E8}
FW: Symantec Endpoint Protection *Enabled* {B0F2DB13-C654-2E74-30D4-99C9310F0F2E}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\ibmpmsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\WUDFHost.exe
C:\Program Files (x86)\Symantec\S... Read more

Answer:Google / Bing / Yahoo Redirect

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.Do not run any other tool untill instructed to do so!Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.Run Combofix:You may be asked to install or update the Recovery Console (Win XP Only) if this happens please allow it to do so (you will need to be connected to the internet for this)Before you run Combofix I will need you to turn off any security software you have running, If you do not know how to do this you can find out >here< or >here<Combofix may need to reboot your computer more than once to do its job this is normal.You can download Combofix from one of these links.Link 1Link 2Link 3 1. Close any open browsers or any other programs that are open.2. Close/disable all anti virus and anti malware programs so they do not interfere with the r... Read more

22 more replies
Relevance 74.62%

I was instructed to run DDS and GMER: http://www.bleepingcomputer.com/forums/topic469705.html/page__p__2849950#entry2849950
I had a TCP/IP infection a while ago and ran ComboFix. It seems I've
re-infected as now Google, Bing and Yahoo all re-direct me when I click a Results link.

Also AVG and Malware keep finding new infections, but I don't think they are changing the root problem.

I ran DDS and got a BSOD. It restarted and I ran DDS with no other programs open and it created the logs.
I am posting the DDS.txt and ARK.txt. I have ATTACH.txt, but will wait to post until requested.

This is my DDS.txt log:

DDS (Ver_2012-11-07.01) - NTFS_x86
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_30
Run by Administrator at 9:14:31 on 2012-11-08
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3036.2115 [GMT -7:00]
.
AV: AVG Anti-Virus Free Edition 2012 *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
============== Running Processes ================
.
c:\Program Files\Fingerprint Sensor\AtService.exe
c:\Program Files\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\SCardSvr.exe
C:\... Read more

Answer:Google, Bing, Yahoo all re-directing

Sorry, here is ark.txt and attach.txt as attachments

26 more replies
Relevance 74.62%

I havnt been able to browse any search engines (google, bing, yahoo) Also i can not check any of my gmail accounts. It doesnt redirect to any pages.. It just sits there trying to connect to google and stays a blank page. When I do a tracert google.com it shows it going to an 87.125.87.99 IP Address. All other pages i go to works fine unless there are google ads and then it takes forever for the page to load.I have ran malwarebytes, spybot search & destroy and virus scans and all come back clean.--------------------------------DDS Log--------------------------------.DDS (Ver_2011-08-26.01) - NTFSx86 Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_21Run by ARS Server at 8:11:26 on 2011-09-21Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3327.2756 [GMT -5:00].AV: AntiVir Desktop *Enabled/Updated* {AD166499-45F9-482A-A743-FDD3350758C7}.============== Running Processes ===============.C:\WINDOWS\system32\nvsvc32.exeC:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcssvchost.exesvchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\Program Files\HP\ToolBoxFX\bin\HPTLBXFX.exeC:\Program Files\HP\HP UT\bin\hppusg.exeC:\WINDOWS\system32\RUNDLL32.EXEC:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exesvchost.exeC:\Program F... Read more

Answer:Cannot Browse Google, Bing, or Yahoo

Hi,Please do the following:Download ComboFix from one of the following locations:Link 1 Link 2 VERY IMPORTANT !!! Save ComboFix.exe to your Desktop * IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here Double click on ComboFix.exe & follow the prompts.As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures. Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:Click on Yes, to continue scanning for malware.When finished, it shall produce a log for you. Please include the C:\C... Read more

2 more replies
Relevance 74.62%

yahoo bar in firefox redirects to a different search enginechrome browser also gets redirectsI removed thinkpoint last month with MBAM.running gmer gives me BSOD flashes, flags uxldypob.sysI have clean win7 OS on a different drive, ran gmer on the drive with the infected vista OS.DDS (Ver_10-11-03.01) - NTFSx86 Run by Evan at 19:16:46.06 on Wed 11/03/2010Internet Explorer: 8.0.6001.18975 BrowserJavaVersion: 1.6.0_22Microsoft? Windows Vista? Home Premium 6.0.6002.2.1252.1.1033.18.3326.1807 [GMT -7:00]AV: avast! Antivirus *On-access scanning enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}SP: avast! Antivirus *enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}============== Running Processes ===============C:\Windows\system32\wininit.exeC:\Windows\system32\lsm.exeC:\Windows\system32\svchost.exe -k DcomLaunchC:\Windows\system32\nvvsvc.exeC:\Windows\system32\svchost.exe -k rpcssC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestrictedC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestrictedC:\Windows\system32\svchost.exe -k netsvcsC:\Windows\system32\AUDIODG.EXEC:\Windows\system32\svchost.exe -k GPSvcGroupC:\Windows\system32\SLsvc.exeC:\Windows\system32\svchost.exe -k LocalServiceC:&#... Read more

Answer:google/yahoo/bing redirect

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.In the upper right hand corner of the topic you will see a button called Options. If you click on this in the drop-down menu you can choose Track this topic. By doing this and then choosing Immediate E-Mail notification and then clicking on Proceed you will be advised when we respond to your topic and facilitate the cleaning of your machine.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The ... Read more

3 more replies
Relevance 73.8%

Hello. Thank you in advance for helping me.
I was directed to post in this forum after "Boopme" assisted me in the "Am I infected? What do I Do" posts.
After many scans (Rkill, MBAM, TDSS, etc) I am still getting those frustrating search redirects in Google, Yahoo, Bing, etc in both IE and Firefox.
I reset my Netgear router and changed the default password. I also have a Westell 6100 modem from verizon but it was already protected with a unique username and password.
I originally had the Whitesmoke infection but all is clean now, just the darn search redirects remain.
Attaching log files as per "Boopme".
Thanks again for your help! It is greatly appreciated!
.
DDS (Ver_11-03-05.01) - NTFSx86
Run by Compaq_Administrator at 2:27:36.01 on Sat 04/02/2011
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_20
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3006.2445 [GMT -4:00]
.
AV: Anti-Virus - Verizon Yahoo! Online Protection *Enabled/Updated* {17CFD1EA-56CF-40B5-A06B-BD3A27397C93}
AV: AntiVir Desktop *Enabled/Updated* {AD166499-45F9-482A-A743-FDD3350758C7}
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
svchost.exe
C:\WINDOWS\E... Read more

Answer:Search redirects in Google, Yahoo, Bing

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you are unable to create a log because your computer cannot start up successfully please provide detailed information about the Windows version you are using: What we in particular need to know is version, edition and if it is a 32bit or a 64bit system. If you are unsure about any of these caracteristics, just let us know and we'll help you figuring it out. Please also tell us if you have your Windows CD/DVD handy.Please include a clear description of the problems you're having, along with any steps you may have performed so far.Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.Even if you have already provided information about your ... Read more

35 more replies
Relevance 73.8%

My computer is running Windows 10 Home and it's a 64bit operating system. The only Browser I use is Firefox.
 
Somewhere on Nov. 4 or 5, when trying to access google.com through Firefox, the page would say Connection Untrusted. I'm fairly certain that I also tried to reach google.com through Microsoft Edge and was unable to do so there as well.
 
Anyway, in Firefox it would say "Connection Untrusted"
 
" The certificate is not trusted because the issuer certificate is unknown. The server might not be sending the appropriate intermediate certificates. An additional root certificate may need to be imported."
 
There was a button to click that said 'Get Me Out Of Here.' There was nowhere I could select to make an exception.
 
I have no problems accessing any other site, just google. I tried searching through Firefox support and saw someone with a similar issue. The fix they used didn't work for me, but I found out if I removed the s in https I was able to access google. Also that person was told to check the certificate which I decided to do as well. I can't remember the specifics but it said something like 'DO NOT TRUST' and that it came from fiddler2
 
I apologise if this isn't entirely clear as I was feeling very unwell at the time. I also ran Malwarebytes and Windows Defender. Windows Defender found nothing on a full scan and Malwarebytes found three entries:
 
Files: 3
PUP.Optional.InstallCore, C:\Users\Lady Of Greatness\AppData\Local\Temp... Read more

Answer:Can't access google, bing or yahoo search.

Welcome aboard   Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2. SecurityCheck may produce some false warning(s), so leave the results reading to me.NOTE 3. If you receive UNSUPPORTED OPERATING SYSTEM! ABORTED! message restart computer and Security Check should run Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeList Restore PointsClick Go and post the result. Please download Malwarebytes Anti-Malware (MBAM) to your desktop.NOTE. If you already have MBAM 2.0 installed scr... Read more

19 more replies
Relevance 73.8%

Hi, I recently helped a friend troubleshoot a computer issue where she could browse the internet freely except for search engine sites Google, Bing and Yahoo. Actually Yahoo would load but not be able to conduct any searches.

After much troubleshooting I singled out the problem to her System and the Windows Hosts File where I encountered the following entries:

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost
::1 localhost
74.125.45.100 4-open-davinci.com
74.125.45.100 securitysoftwarepayments.com
74.125.45.100 privatesecuredpayments.com
74.125.45.100 secure.privatesecuredpayments.com
74.125.45.100 getantivirusplusnow.com
74.125.45.100 secure-plus-payments.com
74.125.45.100 www.getantivirusplusnow.com
74.125.45.100 www.secure-plus-payments.com
74.125.45.100 www.getavplusnow.com
74.125.45.100 www.securesoftwarebill.com
74.125.45.100 secure.paysecuresystem.com... Read more

Answer:Google, Bing, and Yahoo blocked - any idea who would do this?

8 more replies
Relevance 73.8%

I am like many others on here having problems with redirecting. I actually had this problem a few months ago and resolved the problem with deleting some application(?) folders. I am not sure what or where they were. I really wish I would have bookmarked that page with the directions. At any rate, I am getting redirects with not only Firefox but with IE as well which didn't happen last time. The other difference is that I am not getting redirected directly after going to the google/yahoo/bing etc. page but after I've searched and clicked on a link it will redirect me. I've done a full scan with McAfee and Malwarebytes. Here is my log from Malwarebytes:

Malwarebytes' Anti-Malware 1.45
www.malwarebytes.org

Database version: 4009

Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.13

8/7/2010 4:32:04 PM
mbam-log-2010-08-07 (16-32-04).txt

Scan type: Full scan (C:\|)
Objects scanned: 337161
Time elapsed: 2 hour(s), 58 minute(s), 49 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)
... Read more

Answer:Google/Yahoo/Bing etc Redirect in Firefox and IE

Few new things....

IE works, Firefox does not.

I just scanned my computer again and found a registry file infected:
Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.13

8/9/2010 3:17:41 AM
mbam-log-2010-08-09 (03-17-41).txt

Scan type: Quick scan
Objects scanned: 114465
Time elapsed: 36 minute(s), 47 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 1
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\xpwsemei (Rogue.AntivirusSuite.Gen) -> Quarantined and deleted successfully.

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

I don't know if this will fix it as I am scared to restart my computer as it takes about 20 times of getting through BSODs with fatal error codes to get my computer to somewhat work again.

Whatever this new malware is, it is BAD

1 more replies
Relevance 73.8%

I have a windows XPsp3 that will not load any web search sites. does not matter what browser the search sites time out. I am able to go to any other site. I am posting this from the PC with the problem.

any help would be great.
sean

log from HiJackThis

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 1:13:06 PM, on 4/11/2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Dell Support Center\bin\sprtsvc.exe
C:\Program Files\NVIDIA ... Read more

Answer:Google.com, search.yahoo.com, bing.com don't load

Good evening. As HijackThis has not been seriously updated by Trend Micro in some time, it is now no longer considered to be an effective tool for malware removal. You will need to go here, follow steps 6, 7 and 8 and post accordingly into this thread.

2 more replies
Relevance 73.8%

I have run Adaware, Spybot, SPyware Doctor, Malwarebytes Anti-malware, and reegserv registry cleaner. Still Google, bing and Yahoo search lists are reidrected most of the time on both Firefox and IE. For some reason when a google or yahoo or bing support forum is in the list, it will go to those sites. Maybe coincidence? Also my automated windows updates continualy says it has four updates to download, but when I try to upload, they always fail. I'm running XP with SP3. I've Attached the DDS log and the GMER log. When I ran GMER, at what seemed to be the end I got a Send Error box (GMER was forced to shut down unexpectedly etc. However, it never did really shut down.) I saved the log and have attached it, but am not sure it is complete.OK Thanks, Here is the DDSDDS (Ver_10-03-17.01) - NTFSx86 Run by Owner at 12:43:04.00 on Sun 04/25/2010Internet Explorer: 8.0.6001.18702Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.2039.1322 [GMT -4:00]AV: McAfee VirusScan *On-access scanning enabled* (Updated) {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}FW: McAfee Personal Firewall *enabled* {94894B63-8C7F-4050-BDA4-813CA00DA3E8}============== Running Processes ===============C:WINDOWSsystem32svchost -k DcomLaunchC:WINDOWSsystem32svchost -k rpcssC:WINDOWSSystem32svchost.exe -k netsvcsC:Program FilesIntelWirelessBinEvtEng.exeC:Program FilesIntelWirelessBinS24EvMon.exeC:WINDOWSsystem32svchost.exe -k NetworkServiceC:WINDOWSsystem32spoolsv.exeC:WINDOWSsystem32rundll3... Read more

Answer:Infected with Google, Bing Yahoo Redirect

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

23 more replies
Relevance 73.8%

I run Mozilla on my computer, recently it quit loading google, bing or yahoo search, I have ran virus scans, malware and such to no avail. I have tried using IE and same thing. I updated both browsers, still nothing. I flushed my dsn's, still..nothing.The firewalls do not have these sites blocked in either browser. Any advise?

Answer:I cannot load Google, Bing or Yahoo Search

do a full scan with malwarebytes and fix all it findsSome HELP in posting on Computing.net plus free progs and instructions Cheers

5 more replies
Relevance 73.8%

Hello,

I have a trojan/adware/spyware on one of my computers installed.
Combofix, Malwarebytes, Avira, Kaspersky, DrWeb, Spybot, Panda Cloud and Superantispyware cannot find it. They all say the computer is clean.
When I use google the link I click goes to another site then I selected. Same goes for Yahoo and Bing.
When I open the link in a new window it works.

Also Windows is reporting the security center does not work.

Here is the log from Combofix (it says Panda is enabled, but it was deinstalled):

ComboFix 12-03-04.02 - Gebruiker 05-03-2012 16:34:13.2.3 - x64 MINIMAL
Microsoft Windows 7 Professional 6.1.7601.1.1252.31.1043.18.4095.3405 [GMT 1:00]
Gestart vanuit: F:\CFx.exe
AV: Panda Cloud Antivirus *Enabled/Updated* {86971480-9989-6750-B122-681A86518D59}
SP: Panda Cloud Antivirus *Enabled/Updated* {3DF6F564-BFB3-68DE-8B92-5368FDD6C7E4}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Nieuw herstelpunt werd aangemaakt
.
.
(((((((((((((((((((( Bestanden Gemaakt van 2012-02-05 to 2012-03-05 ))))))))))))))))))))))))))))))
.
.
2012-03-05 15:38 . 2012-03-05 15:38 -------- d-----w- c:\users\Gebruiker\AppData\Local\temp
2012-03-05 15:38 . 2012-03-05 15:38 -------- d-----w- c:\users\Gast\AppData\Local\temp
2012-03-05 15:38 . 2012-03-05 15:38 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-02-24 17:20 . 2012-02-24 17:20 -------- d-----w- c:\progr... Read more

Answer:New Google/Yahoo/Bing redirect virus?

.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_31
Run by Wisso at 17:40:51 on 2012-03-06
Microsoft Windows 7 Professional 6.1.7601.1.1252.31.1043.18.4095.2735 [GMT 1:00]
.
AV: Panda Cloud Antivirus *Enabled/Updated* {86971480-9989-6750-B122-681A86518D59}
SP: Panda Cloud Antivirus *Enabled/Updated* {3DF6F564-BFB3-68DE-8B92-5368FDD6C7E4}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:&... Read more

20 more replies
Relevance 73.8%

Dear Bleepingcomputer,
Would you be able to help me through the solutions to this search engine redirect problem?  I'd much appreciate your help.  I first got this trojan/virus about 2 months ago.  Basic info: I am using IE9 on Windows 7/64 bit on a Dell Studio XPS 9000 computer.  To attempt to fix the problem, I recently updated Java to the latest version and uninstalled the older versions, installed all available Windows updates, and ran three different virus/malware scanners but they could not fix the problem (as you probably guess).
 
I have already downloaded Combofix but I will not run it until instructed.
 
Below is the DDS.txt log and attached is the Attach.txt log from DDS.
 
Thanks very much!
Phil
 
=============================
DDS.TXT
=============================
DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 9.0.8112.16470  BrowserJavaVersion: 10.17.2
Run by Phil at 22:52:38 on 2013-04-21
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.1.1033.18.4087.2652 [GMT -4:00]
.
AV: avast! Antivirus *Enabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Enabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RP... Read more

Answer:I have the Google/Bing/Yahoo redirect problem

Hello Pylanbleep1 I would like to welcome you to the Malware Removal section of the forum.Around here they call me Gringo and I will be glad to help you with your malware problems.Very Important --> Please read this post completely, I have spent my time to put together somethings for you to keep in mind while I am helping you to make things go easier, faster and smoother for both of us!Please do not run any tools unless instructed to do so.We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the sa... Read more

13 more replies
Relevance 73.8%

Hello, I use Firefox as my primary web browser, I just started ahving problems with redirects today. Already ran Malwarebytes, attempted to run GMER however it wouldn't let me select what was detailed in the tutorial. So I will be attaching the DDS report and attaching the attach one.


DDS (Ver_10-03-17.01) - NTFSX64
Run by Tammy at 18:11:24.01 on Tue 08/24/2010
Internet Explorer: 7.0.6002.18005 BrowserJavaVersion: 1.6.0_17
Microsoft? Windows Vista? Home Premium 6.0.6002.2.1252.1.1033.18.3838.1881 [GMT -5:00]

AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
SP: AVG Anti-Virus Free *enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Program Files (x86)\AVG\AVG9\avgchsva.exe
C:\Program Files (x86)\AVG\AVG9\avgrsa.exe
C:\Program Files (x86)\AVG\AVG9\avgcsrva.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\system32\Ati2evxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\... Read more

Answer:Google/Bing/Yahoo redirect problems

Please download MBRCheck.exe to your desktop.Be sure to disable your security programs.
Double-Click on the file to run it (Vista and Windows 7 users will have to confirm the UAC prompt).
A window will open on your desktop.
if an unknown bootcode is found you will have further options available to you, at this time press N the press Enter twice.
If nothing unusual is found just press Enter
A .txt file named MBRCheck_mm.dd.yy_hh.mm.ss should appear on your desktop.
In your next reply, please include the log from MBRChecker.
Thanks

4 more replies
Relevance 73.8%

I can't search the internet using google, yahoo, or bing. When I enter something is the search box and click Search, nothing happens and all I see is a blank page. I don't get any results or any indication that the search is being processed

I am able to access internet sites if I directly type in the URL or if I use a bookmark.

All of these search engines work fine on another laptop of mine.

I'm on XP SP3 using FireFox 12 and/or IE 8.

I have Webroot anti-virus and Malwarebytes, and after running scans using each, nothing comes up.

I appreciate any ideas.

Answer:Can't search the internet using google, yahoo, bing, etc.

Same computer as here?
http://www.bleepingcomputer.com/forums/topic452464.html/page__p__2688707__fromsearch__1#entry2688707

12 more replies
Relevance 73.8%

Hi,I've downloaded and ran several antivirus programs, but I still can't seem to search the internet on any browser. I've ran HijackThis, and it told me that my system has denied access to the Hosts file, and that it may not be able to help me with hijacked domains in this file. I'm not too tech savvy, and I'm not sure what to do next. Any help or guidance would be greatly appreciated. Thanks so much.Mikeedited by moderator: remove un-requested log

Answer:Can't Google/Yahoo/Bing search on any browser

I would suspect that your computer is still infected with spyware. You should download a legitimate anti-spyware software and run a full scan. I would recommend using malwarebytes antimalware or spybot. Download links could be found at http://www.pcrisk.com/top-spyware-r... Download, install and update. Then run a full scan. This should help. Have in mind that when you can have several antispyware programs on your computer, you should only have one antivirus program, having two different programs may cause problems.

2 more replies
Relevance 73.8%

I have a redirect virus. I have read all of the posts on this and performed the same actions as others, but it is not fixed. I had the fake AV alert a week ago, which I removed, but since then I get the browser redirects. I have used ComboFix, MalwareBytes, ESET, SpyDoctor, SpyBot, TDSSkiller, RootRepeal, SuperAntiSpyWare, GMER, etc. I haved tried every program I have read in these forums and I am still not fixed.Can someone help me with this?What log do you wish for me to post?Thank you!Here is the HijackThis log file...Logfile of Trend Micro HijackThis v2.0.2Scan saved at 02:13, on 2010-07-08Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeC:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeC:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exeC:\Program Files\Symantec AntiVirus\DefWatch.exeC:\Program Files\Java\jre6\bin\jqs.exeC:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXEC:\Program Files\Symantec AntiVirus\SavRoam.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Analog Devices\Core\smax4pnp.exeC:\Program Files\Syman... Read more

Answer:Redirect Virus, Google, Yahoo, Bing

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.In the upper right hand corner of the topic you will see a button called Options. If you click on this in the drop-down menu you can choose Track this topic. By doing this and then choosing Immediate E-Mail notification and then clicking on Proceed you will be advised when we respond to your topic and facilitate the cleaning of your machine.Note** If you are having problems posting the complete log into this thread upload them here http://www.rapidshare.com/ and post the links in this thread We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.I order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is ... Read more

11 more replies
Relevance 73.8%

One of my users can't access most search engines. Google will not open. Yahoo.com will open but search doesn't work. Lycos does work. No other issues with other websites. I ran through the cleanup procedure you have posted but it still doesn't work. Same problem in IE, Firefox, and Chrome. I've attached the logs.

He's running XP 32 bit.
 

Answer:Can't open Google or search using Yahoo or Bing

Here's the last log attachment...
 

6 more replies
Relevance 73.8%

I can't load Google,Yahoo and Bing as of last week. I scanned my computer with Trendmicro and found a few trogan viruses which I have cleaned off, but I still can't get Google, Yahoo or Bing to load up. Does anyone have any advice. I have a HiJackThis log if anyone what to take a peek at that I can post it.

Answer:Google, Yahoo and Bing wont load

Hello and Welcome to Bleeping Computer!!My name is Gringo and I'll be glad to help you with your computer problems. I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of us1.Do not run any other tool untill instructed to do so!doing so will only at best cause you unneeded worry as it finds our backups and may even list our toolsand at worst can cause conficts with our tools and lead to unforseen things to happen2.Please Do not Attach logs or put in code boxes.besides the time it takes me to open the reports it makes it harder to find something if I need to go back to do more research and putting them in code boxes just makes them so hard to read3. After each step give me a little feedback It does not need to be long but just something so I know how things are going it can be something likeI am still getting redirected The computer is running as it shouldDon't put things like - it is the same as before or still the same this just makes me go back and look for you last feedback as to how things are4. read every post completely before doing anythingPay special attention to the Notes** I have put inThese are things I have found that happen allot and can be taken care of easily just by reading the Notes**Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.Pl... Read more

17 more replies
Relevance 72.98%

Hello all. I am suffering from redirects from multiple search engine results. I have previously ran MBAM several times, but it will not pick up anything. I have included the DDS log and also MBAM log. I did not run the GMER, as it said for 32 bit systems only. Please let me know if You need me to provide any more info. thanksWin 7 x64 home premium. Lennovo Laptop approximately 1.5 months old. DDS LOG.DDS (Ver_2011-06-23.01) - NTFSAMD64 Internet Explorer: 9.0.8112.16421Run by Matt at 11:17:50 on 2011-07-01Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.3895.2059 [GMT -4:00].SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}.============== Running Processes ===============.C:\windows\system32\wininit.exeC:\windows\system32\lsm.exeC:\windows\system32\svchost.exe -k DcomLaunchC:\windows\system32\svchost.exe -k RPCSSC:\windows\System32\svchost.exe -k LocalServiceNetworkRestrictedC:\windows\System32\svchost.exe -k LocalSystemNetworkRestrictedC:\windows\system32\svchost.exe -k netsvcsC:\windows\system32\svchost.exe -k LocalServiceC:\windows\system32\svchost.exe -k NetworkServiceC:\windows\System32\spoolsv.exeC:\windows\system32\svchost.exe -k LocalServiceNoNetworkC:\windows\system32\taskeng.exeC:\windows\system32\rundll32.exeC:\Program Fil... Read more

Answer:TDSS Removal??// Google/Bing/Yahoo redirects

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

20 more replies
Relevance 72.98%

Hello.

For the past several days whenever I would use google, yahoo, or bing, my search results are redirected through a website called "searchingandclick44.com" and the original search terms are then plugged into several other websites.
I'm not completely sure that this is connected to it, but at the same time this started happening I became unable to use Gmail, as my browser (Both IE and Firefox) started saying "There is a problem with this website's security certificate." The same thing would happen when I used other websites that required the use of Gmail, such as signing into Youtube.
Occasionally when using the search toolbar to the right of my address bar with google, it will state that the 302 has moved and will give me a link.

I have tried to use MalwareBytes, but it will not pick up the problem, even after updating the program.
I tried to use gmer to see if I could find anything, but that didn't work either, because whenever I open it, it says, "C:\Windows\system32\config\system: The system cannot find the file specified." And the only things that can be checked afterwards are Services, Registry, Files, and ADS.

I use Windows 7, IE 8, and Firefox 3.5.11

I'd like to thank you in advance, and I look forward to you're help.
Ivan the Submissive.

Answer:Search results for Google, Yahoo, and Bing are redirected

Try this:http://www.bleepingcomputer.com/virus-remo...sing-tdsskiller

1 more replies
Relevance 72.98%

whenever i search on any search engine and on any browser(opera, firefox, and explorer). I have used Avira, malware bytes, spybot search and destroy, ad aware, and hitman pro none of which have fixed my problem here is my hijack this log someone please help!!!

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:52:02 AM, on 5/26/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\LeapFrog\LeapFrog Connect\CommandService.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Motive\McciCMService.exe
C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpe... Read more

Answer:bing, yahoo, and google searches go to wrong site

My name is SweetTech. I would be glad to take a look at your log and help you with solving any malware problems.

If you have already received help elsewhere please inform me so that this topic can be closed.

If you have not, please adhere to the guidelines below and then follow instructions as outlined further below:

Logs from malware removal programs (OTL is one of them) can take some time to analyze. I need you to be patient while I analyze any logs you post.
Please make sure to carefully read any instruction that I give you.
Reading too lightly will cause you to miss important steps, which could have destructive effects.
If you're not sure, or if something unexpected happens, do NOT continue! Stop and ask!
These instructions have been specifically tailored to your computer and the issues you are experiencing with your computer. It's important to note that these instructions are not suitable for any other computer, even if the issues are fairly similar.
Do not do things I do not ask for, such as running a spyware scan on your computer. The one thing that you should always do, is to make sure sure that your anti-virus definitions are up-to-date!
If I instruct you to download a specific tool in which you already have, please delete the copy that you have and re-download the tool. The reason I ask you to do this is because these tools are updated fairly regularly.
Please do not use the Attachment feature for any log file. Do a Copy/Paste of the entire contents ... Read more

3 more replies
Relevance 72.98%

Ok, I've been combating this for days. I even lost a whole night of sleep to this. I first got attacked by 3 or so viruses. I ran malwarebytes and Microsoft security essentials. They got rid of the vast majority of the problems. I even had to reset my router because my router settings got hijacked. Anyhow, I've gotten rid of most everything, and every single adware-anti-virus I run is coming up clean, but I know there is still a problem.

Symptoms:
1. Google/Bing/Yahoo searches get redirected to false sites, but only if it is a new site. Once press "back" and go the site I just clicked on, it directs me to the correct site. This is both on Firefox and IE. It doesn't appear to be redirecting Google Chrome.
2. There seems to be an unusual amount of ads for Vimax. It seems like every site has a banner with them all of a sudden. I think this is a result of whatever is messing up my browser.

3. I'm getting popup ads on sites that don't normally have popups.

What I've done.
Ran malewarebytes. Ran AVG Anti-Vir. Ran Microsoft Security Essentials. Ran BHODemon. Everything is showing up clean.

I saw a video on how to stop redirects on youtube.com

YouTube - How to fix the google redirect error




It directs me to go to the C:/Windows/System32/drivers/etc/hosts file, and change the file to read

::1 localhost
127.0.0.1 localhost

as opposed to how it previously was written

127.0.0.1 localhost
::1 localhost

That seems to have stopped ... Read more

Answer:Google/Bing/Yahoo redirect. Continous popups

Ok I'm back. I got sick of it, so instead of bothering trying to remove it, I just backuped my important files and did a clean install.

2 more replies
Relevance 72.98%

I've been struggling for several days trying to resolve a search redirect problem that I hope you can help me with. The address fsbr.us is often seen as the redirect occurs. MBAM doesn't detect any problems, though I do get messages every once in a while from Symantec Endpoint Protection saying that it has detected Trojan.Gen.2 in C:\Windows\assembly\tmp\U. So there's definitely something there. DDS log to follow, thanks in advance for any help. System is Windows 7 64-bit.

.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 8.0.7600.16385
Run by Jason at 18:52:53 on 2011-09-04
Microsoft Windows 7 Professional 6.1.7600.0.1252.1.1033.18.7988.5372 [GMT -6:00]
.
AV: Symantec Endpoint Protection *Enabled/Updated* {88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Symantec Endpoint Protection *Enabled/Updated* {33A8BBD2-AA01-20A2-213B-0B8EB45B02E8}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\ibmpmsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\... Read more

Answer:Persistent Google / Bing / Amazon / Yahoo redirects

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.Do not run any other tool untill instructed to do so!Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.Run Combofix:You may be asked to install or update the Recovery Console (Win XP Only) if this happens please allow it to do so (you will need to be connected to the internet for this)Before you run Combofix I will need you to turn off any security software you have running, If you do not know how to do this you can find out >here< or >here<Combofix may need to reboot your computer more than once to do its job this is normal.You can download Combofix from one of these links.Link 1Link 2Link 3 1. Close any open browsers or any other programs that are open.2. Close/disable all anti virus and anti malware programs so they do not interfere with the r... Read more

10 more replies
Relevance 72.98%

Multiple browsers and multiple search engines,
Search results appear normal, but links (clicked or copied) all begin hxxp://adsense.yahoodbengimesearch.com/...

Clear cache problem resolves temporarily, then recurs after a few searches.

Symantec Antivirus Corporate Edition 10.1.7 defs from Jan4, 2011 finds nothing.

Malwarebytes finds nothing wrong:
Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Database version: 5457

Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.13

1/4/2011 12:09:48 PM
mbam-log-2011-01-04 (12-09-48).txt

Scan type: Full scan (C:\|)
Objects scanned: 161421
Time elapsed: 47 minute(s), 6 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

HJT is this:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 1:41:46 PM, on 1/4/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17091)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WI... Read more

Answer:Search results hijacked (IE7, Moz 6.15; Google, Yahoo, Bing)

Ran Kaspersky TDSS rootkit and "Cured" Backdoor.Win32.Sinowal.knf

So far effective.
2011/01/05 11:12:15.0234 TDSS rootkit removing tool 2.4.12.0 Dec 16 2010 09:46:46
2011/01/05 11:12:15.0234 ================================================================================
2011/01/05 11:12:15.0234 SystemInfo:
2011/01/05 11:12:15.0234
2011/01/05 11:12:15.0234 OS Version: 5.1.2600 ServicePack: 3.0
2011/01/05 11:12:15.0234 Product type: Workstation
2011/01/05 11:12:15.0234 ComputerName: SVAHS-A-130-TEA
2011/01/05 11:12:15.0234 UserName: User
2011/01/05 11:12:15.0234 Windows directory: C:\WINDOWS
2011/01/05 11:12:15.0234 System windows directory: C:\WINDOWS
2011/01/05 11:12:15.0234 Processor architecture: Intel x86
2011/01/05 11:12:15.0234 Number of processors: 1
2011/01/05 11:12:15.0234 Page size: 0x1000
2011/01/05 11:12:15.0234 Boot type: Normal boot
2011/01/05 11:12:15.0234 ================================================================================
2011/01/05 11:12:15.0390 Initialize success
2011/01/05 11:12:23.0140 ================================================================================
2011/01/05 11:12:23.0140 Scan started
2011/01/05 11:12:23.0140 Mode: Manual;
2011/01/05 11:12:23.0140 ================================================================================
2011/01/05 11:12:24.0156 ACPI (8fd99680a539792a30e97944fdaecf17) C:\WINDOWS\system32\DRIVERS\ACPI.sys
2011/01/05 11:12:24.0234 ACPIEC (98... Read more

12 more replies
Relevance 72.98%

Hi,

Search results from Google, Yahoo and Bing are being re-directed to other sites. It seems like the first result I click on is OK, but if I back-arrow back to the results and select another it is redirected to random sites. Your assistance is appreciated. Here is the log:
DDS (Ver_09-07-30.01) - NTFSx86
Run by Christina at 14:33:03.57 on Sat 08/01/2009
Internet Explorer: 8.0.6001.18813
Microsoft? Windows Vista? Home Premium 6.0.6001.1.1252.1.1033.18.3070.1286 [GMT -4:00]

AV: ESET NOD32 Antivirus 3.0 *On-access scanning enabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
SP: ESET NOD32 Antivirus 3.0 *enabled* (Updated) {E5E70D32-0101-4B98-A4D6-D1D15C3BB448}
SP: Spybot - Search and Destroy *enabled* (Updated) {ED588FAF-1B8F-43B4-ACA8-8E3C85DADBE9}
SP: Lavasoft Ad-Watch Live! *enabled* (Updated) {67844DAE-4F77-4D69-9457-98E8CFFDAA22}
SP: Windows Defender *enabled* (Outdated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32�... Read more

Answer:Google/Yahoo/Bing Results are redirected to other sites

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

12 more replies
Relevance 72.98%

Hello,

While reading my morning news, I subbled upon one of the local site visits, that apparently was hacked.

It redirected me to a youtube video, and asked me to install various stoftware, at which point I immediatly closed IE.

Apparently not soon enough, as now I can not use either Yahoo, Bing or Google search engines. It simply times out. However, I can brouse Yahoo, but not the others.

Here are the results of the scans;

______________________________________________________________________________________________________________________________
Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows XP Professional, Service Pack 3, 32 bit
Processor: Intel(R) Core(TM)2 Duo CPU T7100 @ 1.80GHz, x86 Family 6 Model 15 Stepping 13
Processor Count: 2
RAM: 1013 Mb
Graphics Card: Mobile Intel(R) 965 Express Chipset Family, 256 Mb
Hard Drives: C: Total - 76285 MB, Free - 9978 MB;
Motherboard: Dell Inc., 0KU184
Antivirus: AVG Anti-Virus Free Edition 2012, Updated: Yes, On-Demand Scanner: Enabled

_____________________________________________________________________________________________________________________________________

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:08:51 PM, on 3/4/2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\PROGRA~1\AVG\AVG2012\avgrsx.exe
C:\Program Files\AVG\AVG2012\avgcsrvx.exe
C:\WINDOWS\s... Read more

More replies
Relevance 72.98%

Google, Yahoo, and Bing search Hyperlink Jacked

I have been doing research and using Google and Yahoo search engines... I never had an issue until a few days ago.... google,Yahoo, and bing links to one web site re-direct to a scam site.

It's not my computer..

I have tried the searches on 5 different computer to include iPad and iphones.... It's all the same. Google has a " warning " on the site now....

However, if I type the web address into the browsers it comes up just fine.

What would cause this issue seeing that it is not my computer(s) and its not the hosting server that the web site is using?

For some reason both Google, Yahoo, and Bing are being re-direct away from the actual site....

It get this "/wevwubhy.ru/links/1.php" and this " sumjecyg.ru/count15.php...

I looked them up and there are known Mal sites...

So what can be done and how can this happen if the Web Server hosting the site is fine.... Because I can type the site address directly into the browsers and it goes to the site I need.... But If I click on the link it goes to the Mal site?????



__________________

Answer:Google, Yahoo, and Bing search links jacked

Hi there,
my name is Marius and I will be assisting you with your Malware related problems.

Before we move on, please read the following points carefully.
First, read my instructions completely. If there is anything that you do not understand kindly ask before proceeding.
Perform everything in the correct order. Sometimes one step requires the previous one.
If you have any problems while you are follow my instructions, Stop there and tell me the exact nature of your problem.
Do not run any other scans without instruction or Add/ Remove Software unless I tell you to do so. This would change the output of our tools and could be confusing for me.
Post all Logfiles as a reply rather than as an attachment unless I specifically ask you. If you can not post all logfiles in one reply, feel free to use more posts.
If I don't hear from you within 3 days from this initial or any subsequent post, then this thread will be closed.
Stay with me. I will give you some advice about prevention after the cleanup process. Absence of symptoms does not always mean the computer is clean.
My first language is not english. So please do not use slang or idioms. It could be hard for me to read. Thanks for your understanding.

Preparing for the malware removal process

While a description of the trouble you're having is of help, we need more information. A comprehensive set of logs is required to determine the presence of malware.

Please follow our pre-posting process outlined here:

NEW I... Read more

5 more replies
Relevance 72.98%

Mod Edit: MOVED to Virus,Trojan and Malware Removal Logs ~~boopmeHello Board MembersI am running a windows XP with SP3. AVG is my antivirus program. I have been unable to connect to any search engines via Chrome or IE. The only exception is Ask.com which is suspicous. I have run several of the virus and malware removal tools with no success. My Hijackthis log is posted below. I have cleaned out some of the processes and registry entries that I trust. Any Help would be most appreciated. Thank youRich Logfile of Trend Micro HijackThis v2.0.4Scan saved at 10:27:31 AM, on 5/19/2012Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\PROGRA~1\AVG\AVG2012\avgrsx.exeC:\Program Files\AVG\AVG2012\avgcsrvx.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exeC:\PROGRA~1\ESRI\License\arcgis9x\lmgrd.exeC:\Program Files\Intel\AMT\atchksrv.exeC:\Program Files\AVG\AV... Read more

Answer:Search Engines Blocked: Google, Bing, Yahoo

Hello and Welcome to Bleeping Computer!!My name is Gringo and I'll be glad to help you with your computer problems. I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of usPlease do not run any tools unless instructed to do so.
We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.
Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.
Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.
A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE:... Read more

11 more replies
Relevance 72.98%

I too am on the "that's not the link I wanted... oh crap" redirection bandwagon and I want off.

I've run Ad-aware, MalwareBites, HitMan Pro 3.5 which have found some things but can't quite get to the root of the problem.

I've downloaded Hijack This and am ready to tackle this SOB. Would anyone be able to help me out with this?

Thanks!

Answer:Search engine redirects (Google, Yahoo, Bing...)

well, after browsing through other similar threads with similar problems, I tried the TDSS killer and it worked.

I can now search for "USA Rugby" and get USA Rugby, not Illinoismarketplacespamwarehouse.com

thanks!

2 more replies
Relevance 72.98%

A day or two ago I picked up something that redirects the search sites results to ad sites. This happens in IE and Firefox. It seems to happen with the results from google, yahoo and Bing. I havent really tried any other search engines. I have AVG free installed, and the spybot resident. I have run MalwareBytes, Spybot and although they found some tracking cookies and such, have not fixed the issue. I d/l'ed and installed HitMan Pro 3.5 as others have had luck with Rootkits with that, and it did report finding a rootkit in firefox.exe and quarantined it, removing firefox. It runs cleannow too, but the redirection remains.Attached are le logs from the Preperation guide.I really appreciate any help you can give me, thanl you so very much.DDS (Ver_10-03-17.01) - NTFSx86 Run by Philipvw at 17:53:37.68 on Sun 08/15/2010Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_14Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1023.514 [GMT -4:00]AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcssvchost.exeC:\Program Files\AVG\AVG9\avgchsvx.exeC:\Program Files\AVG\AVG9\avgrsx.exesvchost.exeC:\Program Files\AVG\AVG9\avgcsrvx.exeC:\WINDOWS\system32\spoolsv.exesvchost.exeC:&... Read more

Answer:Google, Yahoo, Bing search results Redirection

Hello , And to the Bleeping Computer Malware Removal Forum. My name is Elise and I'll be glad to help you with your computer problems.I will be working on your malware issues, this may or may not solve other issues you may have with your machine.Please note that whatever repairs we make, are for fixing your computer problems only and by no means should be used on another computer.The cleaning process is not instant. Logs can take some time to research, so please be patient with me. I know that you need your computer working as quickly as possible, and I will work hard to help see that happen. Please reply using the Add/Reply button in the lower right hand corner of your screen. Do not start a new topic. The logs that you post should be pasted directly into the reply. Only attach them if requested or if they do not fit into the post.Unfortunately, if I do not hear back from you within 5 days, I will be forced to close your topic. If you still need help after I have closed your topic, send me or a moderator a personal message with the address of the thread or feel free to create a new one.You may want to keep the link to this topic in your favorites. Alternatively, you can click the button at the top bar of this topic and Track this Topic, where you can choose email notifications. The topics you are tracking are shown here.-----------------------------------------------------------If you have since resolved the original problem you were having, we would appreciate you... Read more

25 more replies
Relevance 72.98%

My search results for google/yahoo/bing are being redirected using either Explorer or Firefox. Copying the link to the address bar works fine. Malware Bytes, Spybot S&D, and Ad Aware have all been run and report no problems. What steps should I take to fix this? Thanks.

Answer:Google/Yahoo/Bing Search Links redirect

try google chromeOr check host file is there any chnges are made

2 more replies
Relevance 72.16%

Hey,
It's pretty much just like the title says- anytime I search anything I end up on bogus pages. Really out of ideas, I have run TDSS, Hitman Pro, Malwarebytes, Spyhunter, you name it, iv'e run it. Any help would be greatly appreciated.
Logs:
Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 7 Home Premium, Service Pack 1, 64 bit
Processor: Intel(R) Core(TM)2 Duo CPU T6500 @ 2.10GHz, Intel64 Family 6 Model 23 Stepping 10
Processor Count: 2
RAM: 3999 Mb
Graphics Card: Mobile Intel(R) 4 Series Express Chipset Family, 1807 Mb
Hard Drives: C: Total - 292361 MB, Free - 34897 MB; D: Total - 12877 MB, Free - 2033 MB;
Motherboard: Quanta, 3627
Antivirus: None
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 1:05:22 PM, on 12/21/2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16455)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\Hewlett-Packard\Media\DVD\DVDAgent.exe
C:\Program Files (x86)\Hp\Digital Imaging\bin\hpqtra08.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe
C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
C:\Program Files (x86)\Hp\HP Software Update\hpwuschd2.exe
C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
C:\Prog... Read more

More replies
Relevance 72.16%

One of the computers on a small office peer to peer network is unable to access google, bing and yahoo search engines. I updated Malwarebytes and ran a scan and it found 2 infections of Rogue.AntiMalwareLab which it quarantined and deleted successfully. I posted a copy of Malwarebytes log info below for your review. Still being unable to access the above search engines I flushed the dns cache and ran a winsock fix program to see if possibly damaged tcp/ip stacks or lsp were the problem. Still no success. It is able to access the internet just no search engines. I then installed and ran HiJack this. HiJack this message was that it could not gain access to the hosts file but it did generate a log and I have posted that here for your review below (it appears after the Malwarebytes log below). Thank you for your help.

mbam-log-201 1-08-29 (1 1-36-43).txt Malwarebyte& Anti-Maiware 1.51.1.1800
www.malwarebytes.org
Database version: 7605
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702
8/29/2011 11:36:43 AM
mbam-log-201 1-08-29 (1 1-36-43).txt
Scan type: Quick scan
Objects scanned: 164659
Time elapsed: 11 minute(s), 21 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 2
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Page 1
mbam-log-201 1-08-... Read more

Answer:Unable to access Google, Bing or Yahoo search engines

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.Do not run any other tool untill instructed to do so!Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.Run Combofix:You may be asked to install or update the Recovery Console (Win XP Only) if this happens please allow it to do so (you will need to be connected to the internet for this)Before you run Combofix I will need you to turn off any security software you have running, If you do not know how to do this you can find out >here< or >here<Combofix may need to reboot your computer more than once to do its job this is normal.You can download Combofix from one of these links.Link 1Link 2Link 3 1. Close any open browsers or any other programs that are open.2. Close/disable all anti virus and anti malware programs so they do not interfere with the r... Read more

3 more replies
Relevance 72.16%

Ok, I've been combating this for days. I even lost a whole night of sleep to this. I first got attacked by 3 or so viruses. I ran malwarebytes and Microsoft security essentials. They got rid of the vast majority of the problems. I even had to reset my router because my router settings got hijacked. Anyhow, I've gotten rid of most everything, and every single adware-anti-virus I run is coming up clean, but I know there is still a problem.

Symptoms:
1. Google/Bing/Yahoo searches get redirected to false sites, but only if it is a new site. Once press "back" and go the site I just clicked on, it directs me to the correct site. This is both on Firefox and IE. It doesn't appear to be redirecting Google Chrome.
2. There seems to be an unusual amount of ads for Vimax. It seems like every site has a banner with them all of a sudden. I think this is a result of whatever is messing up my browser.

3. I'm getting popup ads on sites that don't normally have popups.

What I've done.
Ran malewarebytes. Ran AVG Anti-Vir. Ran Microsoft Security Essentials. Ran BHODemon. Everything is showing up clean.

I saw a video on how to stop redirects on youtube.com
YouTube - How to fix the google redirect error

It directs me to go to the C:/Windows/System32/drivers/etc/hosts file, and change the file to read

::1 localhost
127.0.0.1 localhost

as opposed to how it previously was written

127.0.0.1 localhost
::1 localhost
... Read more

Answer:Google/Bing/Yahoo redirect in Firefox and IE. Continuous Popups

Hello and welcome to TSF.

HijackThis is no longer the preferred initial analysis tool in this forum.

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

1 more replies
Relevance 72.16%

Recently have been unable to search on any of the search engines. When doing a search on google or other sites I am redirected when trying to click on a site of interest. Attempted to use antivirus and anitmalware without luck.

Appreciate boopme and his assistance
Attached is the information requested

Thanks for the help

.
DDS (Ver_11-03-05.01) - NTFSx86
Run by Nicholas at 19:26:12.43 on Mon 03/21/2011
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.503.80 [GMT -5:00]
.
AV: Microsoft Security Essentials *Disabled/Updated* {BCF43643-A118-4432-AEDE-D861FCBCFCDF}
AV: Charter Security Suite 9.01 *Enabled/Updated* {E7512ED5-4245-4B4D-AF3A-382D3F313F15}
FW: Charter Security Suite 9.01 *Enabled*
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\AGRSMMSG.exe
svchost.exe
C:\Program Files\Sony\VAIO Update 2\VAIOUpdt.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\Program Files\Sony\VAIO Zone Remote Commander\AvRmtCtr.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\... Read more

Answer:Infected with google/bing/yahoo etc redirect virus and un able to search

Hello and welcome to Bleeping Computer We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here. If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far. Upon completing the steps below another staff member will review your topic an do their best to resolve your issues. If you have already posted a DDS log, please do so again, as your situation may have changed. Use the 'Add Reply' and add the new log to this thread. Thanks and again sorry for the delay. We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scr DDS.pifDouble click on the DDS icon, allow it to run. A small box will open, with an explaination about the tool. No input is needed, the scan is running. Notepad will open with the results. Follow the instructions that... Read more

16 more replies
Relevance 72.16%

I google stuff and click on the links it is redirecting me to a different AD page called like Medolife or something like that. When use a differnt page it seems to work fine.


I could not run the gmer thing because somehow my computer would say something about a computer error happened for safety and will automatically shut down my comp it was a blue screen. I tried to do it in safe mode same problem. The scan wouldnt start when i open the gmer soo i did the instructions it said to uncheck those tabs and clicked scan. When i start the gmer it does a quick scan then stops in like 3 seconds so i saved w/e that scan did, not sure it will help.


I've added a combofix just incase that will help.


DDS (Ver_09-12-01.01) - NTFSx86
Run by Mike at 12:51:44.76 on Sat 02/13/2010
Internet Explorer: 8.0.6001.18882 BrowserJavaVersion: 1.6.0_18
Microsoft? Windows Vista? Home Premium 6.0.6002.2.1252.1.1033.18.3071.1608 [GMT -5:00]

SP: Windows Defender *disabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
SP: SUPERAntiSpyware *disabled* (Updated) {222A897C-5018-402e-943F-7E7AC8560DA7}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:... Read more

Answer:Browser redirecting me when i click on links on google, bing,yahoo etc.

Hello and Welcome to TSF.

Please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription.

Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.

------------------------------------------------------

Please note that these fixes are not instantaneous. Most infections require more than one round to properly eradicate.

Please stay with me until given the 'all clear' even if symptoms seemingly abate.

Kindly follow my instructions and please do no fixing on your own or running of scanners unless requested by a helper.

------------------------------------------------------

Due to the restrictions on Vista, all tools should be started by right-click > Run as Administrator

If you click 'Start' and have no 'Run' function, please right-click Start > Properties > Start menu tab > Customize button > and tick the 'Display Run' or 'Run command' box > OK > OK.

------------------------------------------------------

Who instructed you to run ComboFix? As stated in the disclaimer you had to pass when running ComboFix, it is not intended for unsupervised use.

As you also should have read here in Step 2 of our NEW INSTRUCTIONS thread:

Why we don't ask you to run ComboFix from the onset ... Read more

19 more replies
Relevance 72.16%

My laptop is a HP dv6000 t2250 1.73GHz 2 GB RAM running windows xp sp3. I have the search engine redirecting problem, but only with ie8 and firefox. I can still use chrome for google, yahoo, etc. The links all work as intended. There is nothing wrong with my computer speed or connection. I decided to look into the problem the other day when I ran the Norton Scan and it found Spyguard 2008 and had it removed from my laptop. Also, I am not sure if this is related to the virus, but whenever I restart my laptop I get the Blue Screen right before it loads the desktop and then it restarts the entire reboot all over again. Usually it only does this once, then it loads properly the second time. However, recently it gave me the blue screen twice and then loaded on the third time. I ran my avast antivirus (full scan last night then a quick scan today) and it moved what it found to the virus chest. I can provide the logs for both scans if needed. I have run TDSS killer and it came back clean. Same thing with Malwarebytes, the results came back clean. I also used CCleaner to clean my computer and clear my registry. I read that an old version of Java contributed to getting the virus/malware so i removed all the old versions on the laptop and then downloaded the newest one. Here is my HijackThis Log. Thank you for your help.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:07:07 PM, on 8/14/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Unable to get Internet Explorer ve... Read more

Answer:Google/Yahoo/Bing search engine links are being redirected to ads

16 more replies
Relevance 72.16%

For a while now I have not been able to go to any search engine sites... google, bing, yahoo... all come up saying "Internet Explorer cannot display the webpage" so I ran a Spybot S&D test and it came up Microsoft.Windows.RedirectedHosts (207 files) and Fraud.windowsprotectionsuite (12 files)... I tried to have SB S&D fix it but it couldn't... any suggestions:I really need help.Here's a log from hijackthisLogfile of Trend Micro HijackThis v2.0.4Scan saved at 12:52:08 PM, on 9/25/2010Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:WINDOWSSystem32smss.exeC:WINDOWSsystem32winlogon.exeC:WINDOWSsystem32services.exeC:WINDOWSsystem32lsass.exeC:WINDOWSsystem32svchost.exeC:WINDOWSSystem32svchost.exeC:WINDOWSSystem32WLTRYSVC.EXEC:WINDOWSSystem32bcmwltry.exeC:WINDOWSsystem32spoolsv.exeC:Program FilesBroadcomASFIPMonAsfIpMon.exeC:WINDOWSsystem32svchost.exeC:PROGRA~1SPEEDB~2VideoAcceleratorService.exeC:WINDOWSExplorer.EXEC:WINDOWSSystem32svchost.exeC:Program FilesSpeedBit Video AcceleratorVideoAccelerator.exeC:WINDOWSsystem32ctfmon.exeC:Program FilesIObitAdvanced SystemCare 3AWC.exeC:WINDOWSsystem32wuauclt.exeC:PROGRA~1SPEEDB~2VideoAcceleratorEngine.exeC:Program FilesMozilla Firefoxfirefox.exeC:WINDOWSsystem32msiexec.exeC:Program FileshijackthisTrend MicroHiJackThisHiJackThis.exeRemoved improperly posted HJT log

Answer:microsoft.windows.redirecthosts can't use google, bing, yahoo or msn search

OMFG I FIXED IT!!! AFTER SO FREAKING LONG I FIXED IT!!! I CANT BELIEVE HOW EASY IT WAS!!!!!!! ALL I HAD TO DO WAS DELETE THE GOOGLE THINGS IN HIJACKTHIS!!!! OMG!!!!! as you can see im a little happy!!!!

4 more replies
Relevance 72.16%

Hi

I am experiencing problems with my Internet Explorer (IE). Whenever I search for a keyword on any search engine (Google/Bing/Yahoo), the main links of the results would redirect to various Ad websites. When I point the mouse over the main link, the status bar of the IE shows a link starting with http://1942.r.google.com... If the link is clicked, another window of IE opens up and redirects to another site. However, if I close that window or press the back key, it will take me to my original window that I initially intended to go to.

I, like any other tech, ran several software in safe mode, such as AVG, Trend Micro Worry Free, Symantec Endpoint Security, Spy-Bot, Ad-Aware, Malware Bytes and more. Even though it cleaned many viruses/spy-wares, it could not fix the redirecting issue. I even checked and removed suspicious registry entries from the system. However, I was unable to get rid of the redirection.

I am including log files that were requested. Please help get rid of this redirection issue. Any help will be greatly appreciated.

Thank You!

========================= DDS.txt =====================================
DDS (Ver_10-12-12.02) - NTFSx86
Run by raf at 21:53:40.07 on Fri 12/17/2010
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_23
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2037.1284 [GMT -5:00]

AV: Microsoft Security Essentials *Disabled/Updated* {BCF43643-A118-4432-AEDE-D861FCBCFCDF}
AV: Trend Micro Security... Read more

Answer:search engine redirect virus (Google/Bing/Yahoo) on IE

Hi and welcome to TSF.

My name is Iain and I will be helping you clean your system.

You may wish to Subscribe to this thread (Thread Tools > Subscribe to this thread) so that you are notified when you receive a reply.

Please read these instructions carefully and then print out or copy this page to Notepad in order to assist you when carrying out the fix. You should not have any open browsers or live internet connections when you are following the procedures below.

Note that the fix may take several posts. Please continue to respond to my instructions until I confirm that your logs are clean. Remember that although your symptoms may vanish, this does NOT mean that your system is clean.

If there is anything you don't understand, please ask BEFORE proceeding with the fixes.

Please ensure that you follow the instructions in the order I have them listed.

Please do not install or uninstall any programmes, or run any other scanners or software, unless I specifically ask you to do so. Also please copy and paste logs into the thread, rather than add them as attachments.


Combofix
We will begin with ComboFix.exe. Please visit this webpage for download links, and instructions for running the tool:

http://www.bleepingcomputer.com/comb...o-use-combofix

Please read all the information carefully! If using Windows XP you should ensure you install the Recovery Console.

You MUST disable your AntiVirus and AntiSpyware applications - please read this thread as a guide. They ... Read more

10 more replies
Relevance 72.16%

Hi

I am experiencing problems with my Internet Explorer (IE). Whenever I search for a keyword on any search engine (Google/Bing/Yahoo), the main links of the results would redirect to various Ad websites. When I point the mouse over the main link, the status bar of the IE shows a link starting with http://1942.r.google.com... If the link is clicked, another window of IE opens up and redirects to another site. However, if I close that window or press the back key, it will take me to my original window that I initially intended to go to.

I, like any other tech, ran several software in safe mode, such as AVG, Trend Micro Worry Free, Symantec Endpoint Security, Spy-Bot, Ad-Aware, Malware Bytes and more. Even though it cleaned many viruses/spy-wares, it could not fix the redirecting issue. I even checked and removed suspicious registry entries from the system. However, I was unable to get rid of the redirection.

I am including log files that were requested. Please help get rid of this redirection issue. Any help will be greatly appreciated.

Thank You!

========================= DDS.txt =====================================
DDS (Ver_10-12-12.02) - NTFSx86
Run by raf at 21:53:40.07 on Fri 12/17/2010
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_23
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2037.1284 [GMT -5:00]

AV: Microsoft Security Essentials *Disabled/Updated* {BCF43643-A118-4432-AEDE-D861FCBCFCDF}
AV: Trend Micro Security Agent *Disa... Read more

Answer:search engine redirect virus (Google/Bing/Yahoo)

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

3 more replies
Relevance 71.34%

I'm having problems with Google, Yahoo, and Bing searches directing me to nonrelated sites. This just started yesterday afternoon, probably after trying to download an update to Flash Player HD (?). Also some websites are loading really slow.

I have Windows XP home edition and run IE8.
1st I tried System Restore, but it just stops after I pick a date to restore too.

2nd I downloaded GMER and ran it. It showed 4 areas with possible rootkit problems, but didn't highlight them in red and I couldn't fix them.

3rd I downloaded Sophos Anti-Rootkit software and ran it. The check took 41 minutes and came up with 16 files, but didn't recommend fixing any of those.

4th I downloaded HiJackThis from Trend Micro, Inc. and ran the scan. Trend sent me to this forum for help.

Answer:Search Engine (Yahoo, Google, and Bing) Redirection to nonrelated sites

Hello and welcome to Bleeping ComputerPlease subscribe to your topic so that you will be notified as soon as I post a reply, instead of you having to check the topic all of the time. This will allow you to get an email notification when I reply.To subscribe, go to your topic, and at the top right hand corner by your first post, click the Options button and then click Track this topic. The bullet the immediate notification bubble. Then press submit.Lets take a look with MalwarebytesPlease download Malwarebytes' Anti-Malware from here:MalwarebytesPlease rename the file BEFORE downloading to zztoy.exe instead of mbam-setup.exeMBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.Double Click zztoy.exe to install the application.* Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.* If an update is found, it will download and install the latest version.* Once the program has loaded, select "Perform Full Scan", then click Scan.* The scan may take some time to finish,so please be patient.* When the scan is complete, click OK, then Show Results to view the results.* Make sure that everything is checked, and click Remove Selected.* When disinfection is completed, a log will open in Notepad and yo... Read more

38 more replies
Relevance 71.34%

I am using a Dell Dimension DIM 4550 with a Pentium4, 2.4GHz, 2.39 GHz 768 RAM running Windows XP Home 2002 Service Pack 3. (I have not updated Windows for over one year because when a Windows update form the last year or so gets installed I cannot get a wireless connection between my Netgear RangeMax Wireless N Gigabit router WNR3500 and Netgear RangeMax Dual Band Wireless-N USB 2.0Adapter WNDA3100-- I have the auto update disabled after figuring out that if I system restored to a point before updates I do not lose wireless connection.)

My problem is that when trying to use the internet, I cannot get passed the search engine page. I use Internet Explorer and Google. I have switched the search engine to Bing and Yahoo and each results in same problem. I also loaded Firefox and tried Google, Bing and Yahoo with Firefox with same bad result.

I use ESET and ran Malwarebytes. I am able to access updates for each. I've run scans with each and have found and removed things a couple of times. I still can't get passed the search engine homepage.

This is what happens when I run a search, go to a favorite or type in a URL. I initially get to the next page but then I get a warning
"ESET NOD 32 Antivirus
Address has been blocked
URL
clkh71yhks66.com/eOGNg6de5asc8hvI2S5Xpeg...
IP
78.47.249.228:80"

Then I get an error message telling me that Internet Explorer has encountered a problem and needs to close. Then I get an error page that says "X we were unable ... Read more

Answer:Search Engine Redirected and can't get past Google/Bing/Yahoo page

Please read carefully and follow these steps.

Download TDSSKiller and save it to your Desktop.
Extract its contents to your desktop.
Once extracted, open the TDSSKiller folder and doubleclick on TDSSKiller.exe to run the application, then on Start Scan.

If an infected file is detected, the default action will be Cure, click on Continue.

If a suspicious file is detected, the default action will be Skip, click on Continue.

It may ask you to reboot the computer to complete the process. Click on Reboot Now.

If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.
If a reboot is required, the report can also be found in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here.

 

3 more replies
Relevance 71.34%

I have had a search engine redirect virus for some time. Inititally I thought it was the "google redirect" virus, so I started playing with other search engines (Bing, Yahoo) from both Firefox and IE, but I get redirected on all search hits through those engines too. I disabled PrevX software, Spybot software, and AVG software, ran Malwarebyte's Anti-malware which identified 5 things to remove - most it couldn't remove until reboot - but the reboot did not remove them. I ran Hijack This, which directed me to here and to the DDS tool.

Thanks in advance - Sara.

The DDS log is as follows:
DDS (Ver_09-06-26.01) - NTFSx86
Run by Sara at 11:07:36.18 on Sat 06/27/2009
Internet Explorer: 6.0.2900.5512 BrowserJavaVersion: 1.6.0_13
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2046.1446 [GMT -4:00]

AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
AV: Prevx Edge *On-access scanning enabled* (Updated) {D486329C-1488-4CEB-9CC8-D662B732D901}

============== Running Processes ===============

J:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
J:\WINDOWS\System32\svchost.exe -k netsvcs
J:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
J:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
J:\WINDOWS\system32\spoolsv.exe
J:\WINDOWS\Explorer.EXE
J:\Program Files\McAfee\Common... Read more

Answer:Redirect virus from variety of search engines (e.g., google, bing, yahoo)

I also should mention two things:

1 - that I have run "Find" on GooredFix.exe and here is the log it creates:

GooredFix v1.92 by jpshortstuff
Log created at 13:42 on 27/06/2009 running Option #1 (Sara)
Firefox version 3.0.11 (en-US)

=====Suspect Goored Entries=====

=====Dumping Registry Values=====

[HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Mozilla Firefox 3.0.11\extensions]
"Plugins"="J:\Program Files\Mozilla Firefox\plugins"

[HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Mozilla Firefox 3.0.11\extensions]
"Components"="J:\Program Files\Mozilla Firefox\components"

[HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\extensions]
"[email protected]"="J:\Program Files\AVG\AVG8\Toolbar\Firefox\[email protected]"

[HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\extensions]
"[email protected]"="J:\Program Files\Java\jre6\lib\deploy\jqs\ff"

[HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\extensions]
"{3f963a5b-e555-4543-90e2-c3908898db71}"="J:\Program Files\AVG\AVG8\Firefox"
And 2, I have run CCCleaner, and here is that log (though I did not have it clear the Firefox cache as I was busy composing this post at the same time):

CLEANING COMPLETE - (4.849 secs)
------------------------------------------... Read more

7 more replies
Relevance 71.34%

On @11/1 i would get redirected to sites that have nothing to do with the search engine result i clicked on. I would need to rerun the search and click on it again to get to it. BACK does not work on the site i'm redirected to, it just sends me to the main page that i'm redirected to.Happens with bot IE and Firefox.I have dwm.exe running from my temp directory and i can't delete it, even in safe mode. Also looks like shell.exe and svchost.exe are running from a wrong directory. Note: I downloaded GMER but the buttons that the instructions say to check are grayed out & uncheckable. Services, Registry & Files & c:/ & ADS are the only ones i'm allowed to check. I did not run it.Here are my logs as per http://www.bleepingcomputer.com/forums/topic34773.html .DDS.txt:DDS (Ver_10-11-03.01) - NTFS_AMD64 Run by John at 4:49:51.15 on Thu 11/04/2010Internet Explorer: 8.0.7600.16385 BrowserJavaVersion: 1.6.0_17Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.2814.1630 [GMT -4:00]============== Running Processes ===============C:\Windows\system32\wininit.exeC:\Windows\system32\lsm.exeC:\Windows\system32\svchost.exe -k DcomLaunchC:\Windows\system32\svchost.exe -k RPCSSC:\Windows\system32\atiesrxx.exeC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestrictedC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestrictedC:\Windows&#... Read more

Answer:Browser redirect in Search Engine results (Yahoo, Bing, Google)

Moderator - please close this thread.
I followed boopme's 1st post in the below thread and i'm good now.
http://www.bleepingcomputer.com/forums/topic358309.html

THANK YOU!

2 more replies
Relevance 70.52%

Good Day,

My sister in laws laptop got a program called Live Security Platinum and she took it to a computer shop. They removed the program but the system keeps redirecting to random websites when searching on Yahoo, Google and MSN(Bing). The operating system is Windows Vista with Service Pack 2. The redirects are occuring in both Chrome and Internet Explorer. The browser will travel to the website in the search links but then forwards on to a random website. When I got it I figured it was a exploit of Java 6 so I removed older versions and install the lastest version from Sun/Oracle. Below is the DSS.com log and attached are the Attach and Gmer logs. When running GMER it did not provide me with the options to select from System all the way downs to Libraries. The only options were for Services, Registry, Files(with C drive, and ADS. There is a copy of ComboFix on the machine so I believe that was ran on this machine by the computer shop. I will await instructions on what to do next.

DDS (Ver_2012-10-14.05) - NTFS_AMD64
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 10.7.2
Run by Owner at 9:25:53 on 2012-10-14
Microsoft? Windows Vista? Home Premium 6.0.6002.2.1252.1.1033.18.3934.1125 [GMT -7:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {B140BF4E-23BB-4198-90AB-A51A4C60A69C}
SP: Microsoft Security Essentials *Enabled/Updated* {0A215EAA-0581-4E16-AA1B-9E6837E7EC21}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
=======... Read more

Answer:Malware Live Security Platinum removed but now Google, Yahoo, Bing redirect

Greetings and Welcome to The Forums!!My name is Gringo and I'll be glad to help you with your malware problems.I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of usPlease do not run any tools unless instructed to do so.
We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.
Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.
Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.
A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE: At the top o... Read more

16 more replies
Relevance 70.52%

I was downloading a file and Microsoft Security Essentials popped up with an alert about a potential threat. When I opened the pop-up, I was told there was a Severe threat Trojan and it was recommended to clean the computer to remove the Trojan. I allowed the program to remove the file. Shortly after I noticed while websurfing I kept being redirected to strange search sites and product sites. This only occurs when I am following a link resulting from a search engine query. There is no redirect when I copy the address directly into my browser. I thought maybe there was another virus so I ran Malwarebytes and after a full system scan there were no reported threats. I decided to update Microsoft Security Essentials because it originally detected this virus. Maybe the Virus Definitions were out of date... Anyway, I am unable to get the updates because the program keeps giving me an error message that I should check my internet connections and try again. I also keep getting Internet Explorer connection issues while web sites are trying to load. Some sites are taking forever to load and then fail. When I diagnose connection issues, the only helpful advise I get is to consult my owners manual...In the meanwhile I am able to use numerous other programs that require internet connections and aren't having any problem with them. I use a broadband connection and have full signal right now. I'm not sure if the Redirect problem and the connection/updates problem are connected, but ... Read more

Answer:Bing/Yahoo/Google Redirect and Microsoft Security Essentials update blocked

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.1.Please do not run any other tool untill instructed to do so!2.Please reply to this thread, do not start another!3.Please tell me about any problems that have occurred during the fix.4.Please tell me of any other symptoms you may be having as these can help also.5.Please try as much as possible not to run anything while executing a fix.If you follow these instructions, everything should go smoothly.Please subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.I would like to get a better look at your system, please do the following so I can get some more detailed logs.DeFogger: Please download DeFogger to your desktop.Double click DeFogger to run the tool. The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will appear Click OKDeFogger may ask you to reboot the machine, if it does - click OKDo not re-enable these drivers until otherwise instructed.IMPORTANT! If you receive an error message while running DeFogger, please post the log defogger_disable which will appear on your desktop.Download DDS:Please download DDS by... Read more

11 more replies
Relevance 70.52%

Please help! I have been infected by something that redirects me do random sites after I have done a searchs on Google, Yahoo or Bing. The latest redirects have taken me to the following website hxxp://server2.mediajmp.com/surveys/don-index.html?sub=yahoo.comor hxxp://server2.mediajmp.com/surveys/don-index.html?sub=google.comBoth of these links have an audio file asking me to participate in a 30 second survey. I have run Byspot Search & Destroy, PC Tools Spyware Doctor. Adaware & Malwaresbytes Anti Malware and still can not rid this thing. Other sites worth noting which are part of the redirect there are 9 click.php files here are some of the URL'shxxp://64.111.208.43/click.php?re=1&cc=eNoVUs3OqjAUfCATbQuUduECUPlERAFBYHNDC4j8qKCCEB7-amYyyUxOchYz10kkFE0I4GlfKB-r2H4mMAdQ_OkvBxRCRABCVMJTeIbSVjdyXn-q1F4uJ8gTIGaMEiDwOOYZSBCDCUScpISSmP-DNOM4FgSQUkw4FzOJUSQnNMNMRoyyCaJJmFLrXnlW9b6Mir0wGmLUGrevD7-yhfJuKbaSO2LDe-e-jfr6eOwwbt24dcfnuD96_Wc1k9vv20p5FabpGsRD2H0koPKNzs5eoguHRTc8mjxVr59z4dB1mWe3esXtNKt0t6tIK-zOg8w3z-RlVUBk6_Wi1AYr90vzSA6CT1Zdu7iPqNmWffHurdQYj3-qLcB920inRluczuqmf2yybnSawNEeRSll1Ws3vNP4-Iy4FP3lQxU4GCq9mvsZ9e-BWjfrEgkzwxc7sFadYIisp25oPDx_Bh_qoLeiY9kf6pNXBhqbxfygaKi-xeSa6UPirzwxuuyk0NuBgofrw-4un3TlOr5uTXgYxtCTN7PNFcscRqV5qQ-tebLExZ4IWvq4pezQlK5K3MdMSYYn8y7LiZI5QtJcIF9OYIKEzEUwl9Ec_-yEpkRIBLOGHbtZIAqMVxgYbRQ4PdM3ReRKBUOg-17-8O00RhCbZ-cdBepg1lbHfntBIMFJmooES4jiFCBKMlliTGIA41RG_wGSB9Po&cu=54d123a8433ce1b67595029df86bafdf&co=bc2be11daa9a7ffd8567da1141096460&... Read more

Answer:Search Engine Result Redirect Google, Yahoo & Bing http://r9237242.cn/

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

2 more replies
Relevance 70.11%

Good morning! I think I am posting everything as requested - if there's anything else you need to help me or I am submitting incorrectly, please let me know. Thank you! ~Robyn

My situation
My computer started having problems a few days ago with redirects when clicking on search results. My virus scanner seemed to be catching issues and everything else seemed fine so I did a few extra scans... On Tuesday evening, the problem escalated to refusing to open any google sites (including gmail or search pages) and any other sites that weren't typed in directly, restarting, and refusing to run other programs as well (ie. TweetDeck, internet aircard, etc). I ran more virus scans (for pretty much all day yesterday - and removed a lot of viruses...), updated java, and installed a registry cleaner program (CCleaner). I can now search via AOL search and visit any website I type in myself (my internet aircard, TweetDeck, and other programs seem to be okay too), but still have no access to gmail or other google, yahoo, bing search pages. I finally gave in and took the computer to Best Buy last night - they couldn't find the problem and suggested a system restore/new computer purchase. I can't find the disks (I've moved a few times) and know I definitely need a new computer, but would prefer to wait a few weeks when I will have more time to select the right one (due to a big work project with a hard deadline, I won't have time to research options until that's completed).

To summarize ... Read more

Answer:Search engines (bing, yahoo...) & all google pages (mail, calendar...) refuse to load

Okay - so most of my problems seem to have resolved themselves :)

Remaining Issues
1. Search results when clicked (in google only for now, it appears) redirect to hxxp://www.moonsearch.com or another unwanted advertisement page.
2. My TweetDeck won't open (crashes and requests submission of report to Microsoft).

Thanks again so much for your help!

19 more replies
Relevance 68.06%

I have read other similar threads but none of them seem to be exactly my problem.

I have an Acer Aspire 5742z-4404 laptop with Windows 7 Home Premium, 64 bit. There are times that I am unable to access any website except Google or Yahoo. This seems to happen intermittently. I am able to use IE9 or Firefox for a few minutes to a couple hours and then I can't pull up any site except Google and sometimes Yahoo. Any other site gives me a message, "The connection to the server was reset" on Firefox, or something like that. IE simply tells me it is unable to display the page. If I walk away for a while (anywhere from 5-15 minutes) and then try to access a different site, it will work. I am currently working from a hotel room and have been in contact with their internet provider tech service numerous times. They have given me a static IP, a new default gateway, new DNS server addresses and a proxy server. These seemed to help temporarily, but then the same issue would arise again. I always have a good connection to the network.

I took my laptop back to my home wireless network where I never had issues before. Now I am having the same problem there. I have tried dnsflush, which seemed to work initially but now has little or no effect. I am able to ping the websites that will not pull up. I tried uninstalling Avast! anti virus and reinstalling with no effect. I've scanned for viruses (Avast!) and malware/adware (Spybot S&D) several times with no results. The other W... Read more

Answer:Can only access Google / Yahoo websites

Sounds like a DNS issue, have you manually set this yourself?

Try going to your command prompt by going to your start menu, typing in CMD and running the search result that comes up then type in "ping websitegoeshere.com" <= But put the website you're trying to go there instead of my example.

If you're getting good response but still cant browse let us know. If you get no response but other computers/phones can see it then it'll be either DNS or Routing issue.

9 more replies
Relevance 67.24%

I got the AV Security Suite infection and managed to get rid of most of the problem. I switched my browser (using Firefox) to not use a proxy and that seemed to work around the issue and then I deleted a few registry entries as suggested by a post on your site. I am still having problems getting redirected to spam sites when I click on web links from Yahoo or Google and my CPU runs at 100% much of the time. Can you please help? I have also attached my DDS log and my GMER log for your review.Thanks in advanceHere is my DDS logDDS (Ver_10-03-17.01) - NTFSx86 Run by Jeff Kreiss at 11:23:11.16 on Sat 07/10/2010Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_20Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1535.389 [GMT -4:00]AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}============== Running Processes ===============C:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcsC:\Program Files\Intel\Wireless\Bin\EvtEng.exeC:\Program Files\AVG\AVG9\avgchsvx.exeC:\Program Files\AVG\AVG9\avgrsx.exeC:\Program Files\AVG\AVG9\avgcsrvx.exeC:\Program Files\Intel\Wireless\Bin\S24EvMon.exeC:\Program Files\Intel\Wireless\Bin\WLKeeper.exesvchost.exesvchost.exeC:�... Read more

Answer:I am being redirected to spam websites from Yahoo and Google

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.In the upper right hand corner of the topic you will see a button called Options. If you click on this in the drop-down menu you can choose Track this topic. By doing this and then choosing Immediate E-Mail notification and then clicking on Proceed you will be advised when we respond to your topic and facilitate the cleaning of your machine.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.Double click DeFogger to run the tool. The ap... Read more

21 more replies
Relevance 67.24%

Using IE7 each time l do a google or yahoo search after l click on the desire link l get redirected to another site...sometimes it redirects me to this:
"http://" and also to other spamming websites
l have run my anti-virus(CA) but it doesn't detect anything..l have also run anti-spywares like ad-aware, spybot and Ccleaner but stills the same....

this is only happening to me with explorer, firefox has not problems at all...

PS:sorry if my english is bad not my origin language

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:26:44 AM, on 1/7/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Program Files\BigFix\bigfix.exe
C:\Program Files (x86)\IOI\Smart Copy\ButtonMonitor.exe
C:\Program Files (x86)\Java\jre6\bin\jusched.exe
C:\Program Files (x86)\Adobe\Reader 8.0\Reader\reader_sl.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files\CA\CA Internet Security Suite\ccProxySrvc.exe
C:\Program Files (x86)\Internet Explorer\ieuser.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.gateway.com/g/startpage.html?Ch=Retail&SubCH=&Br=GTW&Loc=ENG_US&Sys=DTP&M=DX4710-UB801A
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.yahoo.com/search/ie.html
R1 - HKCU\Software\... Read more

Answer:Google/Yahoo redirecting to unwanted websites

plz can someone help???????
 

2 more replies
Relevance 67.24%

I'm not sure if I should open a new topic or contiue posting under some existing topics. My internet search results are always directed to unwated websites on my Vista PC now. Below is the logfile from running HijackThis:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 9:20:13 AM, on 6/17/2009Platform: Windows Vista SP1 (WinNT 6.00.1905)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\Windows\system32\taskeng.exeC:\Windows\system32\Dwm.exeC:\Windows\Explorer.EXEC:\Windows\SOUNDMAN.EXEC:\Program Files\iTunes\iTunesHelper.exeC:\Program Files\Java\jre6\bin\jusched.exeC:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exeC:\Program Files\Windows Sidebar\sidebar.exeC:\Windows\ehome\ehtray.exeC:\Program Files\Windows Media Player\wmpnscfg.exeC:\Program Files\Spybot - Search & Destroy\TeaTimer.exeC:\Program Files\Canon\PIXELA\ImageMixer 3 SE\CameraMonitor.exeC:\Program Files\Microsoft Office\Office12\ONENOTEM.EXEC:\Windows\ehome\ehmsas.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Windows\system32\Macromed\Flash\FlashUtil10b.exeC:\Program Files\Internet Explorer\iexplore.e... Read more

Answer:Google, Yahoo and search websites hijack

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

2 more replies
Relevance 67.24%

Whenever I initiate a search in Google, Yahoo, etc., the links are displayed; However, when I click on them I am redirected to some other website....usually some other bogus search page. I have run trojan remover, spyware doctor, malwarebytes, spyware terminator, ESETS on line and mcafee all to no avail. The computer is also running slowly and sometimes freezes. I followed steps 1-9 on your site as best I could. Please help!!!DDS (Ver_10-03-17.01) - NTFSx86 Run by Owner at 19:36:06.79 on Sat 06/26/2010Internet Explorer: 7.0.5730.11 BrowserJavaVersion: 1.6.0_14Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.1535.513 [GMT -5:00]AV: McAfee VirusScan Enterprise *On-access scanning enabled* (Updated) {918A2B0B-2C60-4016-A4AB-E868DEABF7F0}============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchC:\WINDOWS\system32\svchost -k rpcssC:\WINDOWS\System32\svchost.exe -k netsvcsC:\WINDOWS\System32\svchost.exe -k NetworkServiceC:\WINDOWS\System32\svchost.exe -k LocalServiceC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\System32\svchost.exe -k LocalServiceC:\WINDOWS\System32\alg.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\Program Files\Seagate\Basics\Service\SyncServicesBasic... Read more

Answer:Google, yahoo searches being redirected to other websites

Hi Pasaito,Welcome to Malware Removal (VTSMR) forum. I am going to assist you with your problem.Please refrain from making any changes to your system (scanning or running other tools, updating Windows, installing applications, removing files, etc.) from now on as it might interfere with our fixes. In case of making changes I shall assume my assistance is not needed any more.If the issue is not resolved please update me on the current condition of your computer.Download the GMER Rootkit Scanner exe file from here and save it to your desktop.Run GMER, uncheck all boxes but let the box next to Sections and C drive remain checked. Click Scan.When it finished press Save to save the log and post it to your reply. It will not take more than a minute.Please download MBR.EXE by GMER. Save the file in your Windows directory (C:\Windows).Please run Notepad (start > All Programs > Accessories > Notepad) and copy and paste the text in the code box into a new file:[email protected] offif exist mbr.log del mbr.logmbr.exe -t ping 1.1.1.1 -n 1 -w 1000 >nulstart mbr.logGo to the File menu at the top of the Notepad and select Save as.Select Save in: desktopFill in File name: look.batSave as type: All file types (*.*)Click save.Close the Notepad.Locate look.bat on the desktop. It should look like this: Double-click to run it.A notepad opens, copy and paste the content (log.txt) to your reply.

15 more replies
Relevance 67.24%

Hi everyone and thanks for any help that i will receive in advance.

Whenever i click on links that i search for in google, yahoo etc.
I get redirected to strange websites that i did not intend to go to.

The problem started happening late last night and was also accompanied by strange audio that was advertising these websites.

The audio has stopped but the redirects still persist. I'm running windows vista home premium and i use firefox as my browser.

I also run AVG, Ad-aware, and a-squared but these all came up with no infections. So im at a loss on what to do and was hoping you guys could help me out. Heres my hijack this log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:15:16 PM, on 02/07/2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Unable to get Internet Explorer version!
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\hp\support\hpsysdrv.exe
C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Games & Other Programs\iTunes\iTunesHelper.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Ray Adams\ATI Tray Tools\atitray.exe
C:\Windows\System32\mobsync.exe
C:\Windows\ehome\ehmsas.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\hp\kbd\kbd.exe
C:\Games & Other Programs\Mozilla Firefox\firefox.exe
C:\Gam... Read more

Answer:Yahoo and google redirecting to strange websites

Bumping because it fell to the 2nd page.
 

1 more replies
Relevance 66.83%

Well, like the title says, when I search on yahoo or google (even in images), I'll click on either a link to site or to go to the next page of results & be taken to a site that Firefox tells me is unsafe. It doesn't happen every time I click on a link, but enough times for me to come on here to see what's going on. I've yet to notice the same thing occur using IE, but then again I rarely use IE.

Ran a quick-scan with Malwarebytes AntiMalware and nothing was found. Is it some kind of malware or just something wrong with FireFox?

Answer:Links on google & yahoo are taking me to 'dangerous' websites

GreetingsPlease download GooredFix from one of the locations below and save it to your DesktopDownload Mirror #1Download Mirror #2Double-click GooredFix.exe to run it. Select 1. Find Goored (no fix) by typing 1 and pressing Enter. A log will open, please post the contents of that log in your next reply (it can also be found on your desktop, called GooredLog.txt).Note: Do not run Option #2 yet.

16 more replies
Relevance 66.83%

Whenever I would have a pc problem I always searched for the answers to that problem on different forums. And usually I always found someone who had a similar problem as I and in this way I resolved my problem as well. This time, unfortunately, I could not find any solution on the internet that could solve it, so I would really appreciate if you guys could help me out!


The problem + details

Since a little over a week I can not access certain websites anymore. It is mostly the more popular websites like google, yahoo, youtube, hotmail, etc

strangly enough I can access subdomains from google and yahoo (images.google.com ; mail.yahoo.com ; etc ) but youtube and hotmail aren't working at all.

I can search google by typing in the adress bar in google chrome, but not also in firefox or ie.

Any browser I use just let's me wait and then gives me a timed-out error

The connection has timed out
The server at Google is taking too long to respond. (firefox)


- I usually use wireless, but it gives the same error also when I am plugged in.

- we have a broadband connection

- I use the internet at our office. The problem occurs only on my laptop, not on any other computer in the office.

- I use a hp probook 4545s with windows 7 SP1 (64 bit)


I first thought that a virus would be the issue, so I scanned my computer also with online v-scanners and I got rid of 2 trojans. But it didn't solve the problem.

Answer:[SOLVED] Cant access certain websites (google, youtube, yahoo)

update:
I just tried at my parents house to see if it would work there. But also here it doesn't work... :-(

So there should be a problem with my laptop... could it be because of the two viruses I had?

4 more replies
Relevance 66.01%

Hello,
I've recently realised that I am unable to access a few websites, including Microsoft and most anti-virus sites such as Norton, Microtrend, Kaspersky etc.
However, I believe this issue has been prevalent for sometime and have no knowledge of what may have caused it.
I receive the error message 'Server not found' while using Firefox, and have confirmed the same problem with IE.
I'm aware of lingering viruses on my system such as wc2.virut but I am not requesting help with this, merely mentioning for additional information.

Here is my HiJackThis log:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:25:55 PM, on 14/03/2011
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17023)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Microsoft Shared\Ink\KeyboardSurrogate.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\SYSTEM32\WISPTIS.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\tabbtnu.exe
C:&#... Read more

Answer:Microsoft & Anti-Virus Websites Unreachable

Hello and welcome to the forums!My secret agent name on the forums is SweetTech (you can call me ST for short), it's a pleasure to meet you. I am very sorry for the delay in responding, but as you can see we are at the moment being flooded with logs which, when paired with the never-ending shortage of helpers, resulted in the delayed responding to your thread.I would be glad to take a look at your log and help you with solving any malware problems.If you have since resolved the issues you were originally experiencing, or have received help elsewhere, please inform me so that this topic can be closed. If you have not, please adhere to the guidelines below and then follow instructions as outlined further below:Logs from malware removal programs (OTL is one of them) can take some time to analyze. I need you to be patient while I analyze any logs you post. Please remember, I am a volunteer, and I do have a life outside of these forums.Please make sure to carefully read any instruction that I give you. Attention to detail is important! Since I cannot see or directly interact with your computer I am dependent on you to "be my eyes" and provide as much information as you can regarding the current state of your computer.If you're not sure, or if something unexpected happens, do NOT continue! Stop and ask!In Windows Vista and Windows 7, all tools need to be started by right clicking and selecting Run as Administrator!These instru... Read more

12 more replies
Relevance 66.01%

Hello!
I have a big problem here.I can open any web page except google youtube facebook yahoo and hotmail..I tried to turn off windows firewall and my antivirus Microsoft Security Essentials but it didn't work..I tried to restore default internet settings but it still cannot open this websites..When I connect another modem It's everything ok..What should I do cause I have 8 hours trying to fix this problem..

Answer:I can't open some websites like Google Facebook Youtube Yahoo Hotmail

  
Quote: Originally Posted by Henry Lost


Hello!
I have a big problem here.I can open any web page except google youtube facebook yahoo and hotmail..I tried to turn off windows firewall and my antivirus Microsoft Security Essentials but it didn't work..I tried to restore default internet settings but it still cannot open this websites..When I connect another modem It's everything ok..What should I do cause I have 8 hours trying to fix this problem..


Download Malwarebytes and run it just in case.

Malwarebytes : Download free malware, virus and spyware tools to get your computer back in shape!

4 more replies
Relevance 65.6%

The problem is any search website comes up with page can't be found: Google.com, Bing.com, Yahoo.com comes up but when I try a search it does nothing. I have no issues going to any other website, just search websites.

I have a laptop running Windows 7 Home Premium 64 bit with AVG Anti-Virus Free Edition 2011 and no third party firewall.

AVG scan is clean. Malwarebytes scan is clean. Ccleaner has been run. I have reset IE 8 settings to default. I have flushed the DNS. I have run HiJackThis and don't see any problems. I have checked the host file and there are no strange entries.

I need to know what to try next. Any help or direction would be appreciated.

Thank you.

Answer:Can't Access Search sites: Google, Bing, Yahoo Search

Hello,Please follow the instructions in ==>This Guide<==. If you cannot complete a step, skip it and continue.Once the proper logs are created, then make a NEW TOPIC and post it ==>HERE<== Please include a description of your computer issues and what you have done to resolve them.If you can produce at least some of the logs, then please create the new topic and explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the topic and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.Kindest Regards,SweetTech.

3 more replies
Relevance 65.6%

This is one of the most difficult problems I've faced with Windows.

MSIE 8 will not bring up google.com. It works fine on Bing.com, Yahoo.com, etc.

I can go to most any site and it works, (EXCEPT certain pages on the MS website, google.com, etc)

But if I try to go to a ssl site, https://.... it will either time out, or only show the text and nothing else, or just give an error msg that the page does not exist.

Windows Update also fails. gives error number 0x80072EE2.

I have scanned for viruses, using the MS safety scanner, Forticlient and Mcfee all report nothing. AVG does report hooks into atapi and 3 other files. I read as much as I could on these notices and most people online felt these were false positives. Since everyone other program has not alerted to these I have not been too concerned.

I have tried every solution listed here:
http://support.microsoft.com/kb/813444

except no. 6.

I reset MSIE to all the defaults. no diff
I tried to reinstall MSIE 8 by going to the Ms website with Opera (which also works fine) and downloading the stand alone version of MSIE 8 and it installed, but give several errors and rebooted automatically.

When I ran the sfc /scannow it did it's thing had me put the CD in the drive and copied files over... about 60% of the way it said I had the wrong windows CD. The computer originally came with Windows XP Media Edition sp2 and I had upgraded it to Sp3. The CD I was using was Widows XP pro with SP3 from another computer. Sh... Read more

Answer:MSIE 8 won't show Google but bing, yahoo okay. Most non-SSL sites okay, SSL sites not

Okay, I solved one part of this myself. I noticed on MS answers that someone said to make sure SSL 2 was checked under advanced. I had reset all parameters in MSIE to default, so I just assumed it would be. But I checked and found it was not. So I enabled it and so far, good signs. google.com redirects to https://www.google.com and it works now.

However other secure sites are having some trouble with images/graphics. The page starts to load but does not complete sometimes.

On one of them I got an error msg. I've attached a screen capture.
And windows update still does not work.
 

1 more replies
Relevance 65.19%

Okay, I use my computer for school, facebook, and google pretty much. So, I know very little. I know I have two desk computers & 2 laptops & they are all on Windows 7. Our internet provider is HughesNet & we use a wireless router that is 3 years old. Last night, I tried to access facebook, and the webpage couldn't connect (to the server?) I think it said. I could search stuff through google and yahoo main page pulled up as well, but once you click on "mail" it won't load the page. We can't login to email, the bank, our school accounts...nothing that requires anykind of a login at all. This is the same for both laptops & the one desk computer. The main desk computer has been shut down for a couple weeks - it is only a grey screen once you turn it on. I haven't had time to try to figure it out - maybe toddler messed with the monitor settings? Anyway, PUHLEEEZE help if you can. My husband and I are both students & we have a handful of kids who do school work on the computers too, so....this is somewhat urgent. THANKS!!!
 

More replies
Relevance 64.78%

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

Answer:Infected with: win32/olmarik trojan ; browser redirect (Google, bing, yahoo) ; variant of win32/injector.HCW and surely more th...

No problem, i saw you have lot of work here....Well... Logs:dds.txt.DDS (Ver_2011-06-12.02) - NTFSx86 Internet Explorer: 6.0.2900.2180 BrowserJavaVersion: 1.6.0_23Run by Administrador at 16:48:33 on 2011-06-29Microsoft Windows XP Professional 5.1.2600.2.1252.34.3082.18.2045.1175 [GMT -3:00].AV: ESET NOD32 Antivirus 4.0 *Disabled/Updated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}.============== Running Processes ===============.C:\ARCHIV~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXEC:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcsC:\WINDOWS\system32\svchost.exe -k WudfServiceGroupsvchost.exeC:\WINDOWS\system32\spoolsv.exeC:\Archivos de programa\Apache Software Foundation\Apache2.2\bin\httpd.exeC:\Archivos de programa\Archivos comunes\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\WINDOWS\system32\bgsvcgen.exeC:\Archivos de programa\Bonjour\mDNSResponder.exeC:\Archivos de programa\Apache Software Foundation\Apache2.2\bin\httpd.exeC:\Archivos de programa\ESET\ESET NOD32 Antivirus\ekrn.exeC:\Archivos de programa\Java\jre6\bin\jqs.exeC:\Archivos de programa\MySQL\MySQL Server 5.1\bin\mysqld.exeC:\WINDOWS\system32\nvsvc32.exeC:\WINDOWS\system32\PSISer... Read more

19 more replies
Relevance 64.78%

Hey guys! For the past 2 days, my IE and Mozilla Web Browser has been acting wierd. Everytime I go to Google, Yahoo, MSN, or other related websites, the search results keeps redirecting me to marketing links like monstermarketing.com, etc. The problem occured when I was watching drama from mysoju.com-Mozilla just froze, and after closing and reopening Mozilla, the search results started linking me to other websites. I think this may have been caused by visiting websites like torrentz.com, etc. earlier in the day.

I've tried reinstalling Mozilla, but problem still occurs. I've ran scans with AdwareRemover but nothing has been working. Please help!

I'm currently using Windows XP, and I have Norton Antivirus installed. Please note that I uninstalled all adware programs and other antivirus programs, except Norton Antivirus. I've also turned off all running programs (norton included) while scanning with DDS and GMER.

I've posted the contents of my DDS log below and have attached my other logs (contained in Attach.zip)

Thank you!

//---------------------------------------------------------------


DDS (Version 1.0.1) - NTFSx86
Run by Edwin at 22:30:21.78 on 12/13/2008 Sat
Internet Explorer: 6.0.2900.2180 BrowserJavaVersion: 1.6.0_06
Microsoft Windows XP Professional 5.1.2600.2.950.852.1033.18.1023.519 [GMT -8:00]

============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
... Read more

Answer:Mozilla IE Browser -Search Results Redirects(Google, Yahoo, MSN) to Differen Websites

"BUMP, please" - 72 hours have passed!

Please advise if I have posted my logs incorrectly or if I'm not providing enough information. Thank you.

Please reply!

1 more replies
Relevance 64.37%

So I've been using the Google search engine forever. Since the changing the default search engine in Edge is buried in Advanced Setting and way near the bottom, I didn't do it right away. However, yesterday I came across a post on how to change the default search engine in Edge so I changed it to Google without delay.
But then every search came up with an annoying message box in the upper right-hand corner telling me to install Chrome. After half an hour I had gotten so tired of it, I switched it back to Bing.

Answer:Switched Default Search Engine in Edge from Bing to Google and Back to Bing after Half an Hour

Originally Posted by mrmobileperformance But then every search came up with an annoying message box in the upper right-hand corner telling me to install Chrome That's because Google detects which browser you are using and then decides that you should be using Chrome. I've seen it happen quite often when you visit google.co.uk etc when using someone else's PC, but isn't there a tickbox to tell it not to display again?
I tried changing Edge to Google, but I don't get any message for some reason?

1 more replies
Relevance 58.63%

Whenever I try to access www.dlink.com (or subdomains), or www.dzone.com, I get a "Connection closed by remote server" error in Opera (similar messages in other browsers).

When I try to ping or tracert either of the hosts, I get a "Destination host unreachable" error.

This has also occurred on other websites, which I cannot remember right now, and occurs with both Optus (my ISP) and OpenDNS as dns servers.

It also seems to be intermittent. Yesterday, I was able to access www.dzone.com without any issues for some time, yet today and the day before, this error was occurring.

Also, possibly unrelated, the website www.tv.com is extremely slow when loading.

Does anyone have any ideas as to what the issue is?

The traceroute and ping work fine from network-tools.com, so it must be something from my end.

The IP's are resolved correctly (when I ping or tracert, the IP shown is correct according to OpenDNS's cache). However, when typing either the hostname or the IP in the address bar, I still get the error.

Thanks for reply.

Edit: Also, a ping from my router is "successful", ie: in firmware, there is an option to ping hosts, and this returns successful. All firewalls are disabled.

Additionally http://www.dictionary.com does not work, but the basically aliased http://dictionary.reference.com/ does. However most of the images in http://dictionary.reference.com are served from http://sp.ask.com/ which doesn't load, whereas http://ask... Read more

Answer:Unable to access certain websites: "destination host unreachable"?

Sounds like you've got a DNS issue. Those are handled by your ISP, so you're pretty much screwed if that's the problem. Here's how to check your DNS connections:

1. Open a command prompt Start -> Run... -> cmd.
If you're using Vista, the command prompt is under the Accessories Menu.

2. At the prompt, type ns lookup, and hit enter. This puts your command prompt into Domain Naming Service lookup mode, meaning you can try to resolve websites' names and ip's from their websites.

3. Type the web address of a known website, such as yahoo.com or google.com, and hit enter. You should get the name and the ip address of the site in the command prompt window.

4. Once you've found one that works every time, this will be your Control site. You know it works, so you use it to check your connection.

5. Now, use the address of one of the sites that's not working. If you do get a reply from the site, then the problem isn't with your ISP. You'll need to check your connection speeds and other network settings to test the problem further. If the websites don't resolve, contact your ISP, and tell them their DNS isn't working properly. You're going to need to get to someone fairly high up the food chain, so be ready to be really patient for that part.
 

3 more replies
Relevance 56.99%

New install aren't easy for me and I'm sicker than a dog right now (cold). I have a program called "Everything" that I use to cull things wit, I'm listed as the admin but some of them I need system admin permission. Also I don't know how to quickly access the Seagate expansion. Things are still moving slow as molasses around here.

Answer:MS, IE, Bing and Yahoo.

Have you tired to run this program as 'Run as administrator'.

Also programs like this usually contain a lot of Malware. Try googling for 'CCleaner'

4 more replies
Relevance 56.58%

When trying to open the above I get the message :This file does not have a program associated with it for performing this action.Create an association in the folder options in control panel. I do not know how to do this can anyone advise please. It was all working fine when I shut down yesterday Cheers John

Answer:yahoo and bing etc will not open

right click the file - select open with from the menu
select IE or any other browser you may be using
check the box always open with this program.

3 more replies
Relevance 56.58%

I have tried countless ways to delete Yahoo and Bing search engines from my laptop but to no avail. Please..... is there anyone who can tell me how to do this? I have tried the options route on the toolbar, the add/remove programmes in the Control Panel and a piece of software downloaded from the internet which would 'clean' out malware. Nothing seems to have changed. I am supposed to be using Mozilla Firefox which is being listed as my default browser.
Here's hoping........... and with thanks in advance..........

Answer:How to Remove Yahoo and Bing

Maureen Blakely said:

I have tried countless ways to delete Yahoo and Bing search engines from my laptop but to no avail. Please..... is there anyone who can tell me how to do this? I have tried the options route on the toolbar, the add/remove programmes in the Control Panel and a piece of software downloaded from the internet which would 'clean' out malware. Nothing seems to have changed. I am supposed to be using Mozilla Firefox which is being listed as my default browser.
Here's hoping........... and with thanks in advance..........



In FF, go to Settings > Search, delete any search engine you don't want and set default search engine you want.

3 more replies
Relevance 56.58%

I have tried countless ways to delete Yahoo and Bing search engines from my laptop but to no avail. Please..... is there anyone who can tell me how to do this? I have tried the options route on the toolbar, the add/remove programmes in the Control Panel and a piece of software downloaded from the internet which would 'clean' out malware. Nothing seems to have changed. I am supposed to be using Mozilla Firefox which is being listed as my default browser.
Here's hoping........... and with thanks in advance..........

Answer:How to Remove Yahoo and Bing

Originally Posted by Maureen Blakely


I have tried countless ways to delete Yahoo and Bing search engines from my laptop but to no avail. Please..... is there anyone who can tell me how to do this? I have tried the options route on the toolbar, the add/remove programmes in the Control Panel and a piece of software downloaded from the internet which would 'clean' out malware. Nothing seems to have changed. I am supposed to be using Mozilla Firefox which is being listed as my default browser.
Here's hoping........... and with thanks in advance..........



In FF, go to Settings > Search, delete any search engine you don't want and set default search engine you want.

0 more replies
Relevance 56.58%

I keep getting re-directed to this yahoo/bing search engine when I try to view webpages pages. It dosen't happen eveytime I view webpages, just sometimes. I tried googling the issue and am afraid it could be something serious. Any help would be appreciated

Answer:Yahoo/Bing Re-Direct

Hi there,my name is Marius and I will assist you with your malware related problems.Before we move on, please read the following points carefully. First, read my instructions completely. If there is anything that you do not understand kindly ask before proceeding. Perform everything in the correct order. Sometimes one step requires the previous one. If you have any problems while following my instructions, Stop there and tell me the exact nature of your problem. Do not run any other scans without instruction or add/remove software unless I tell you to do so. This would change the output of our tools and could be confusing for me. Post all logfiles as a reply rather than as an attachment unless I specifically ask you. If you can not post all logfiles in one reply, feel free to use more posts. If I don't hear from you within 3 days from this initial or any subsequent post, then this thread will be closed. Stay with me. I will give you some advice about prevention after the cleanup process. Absence of symptoms does not always mean the computer is clean. My first language is not english. So please do not use slang or idioms. It could be hard for me to read. Thanks for your understanding.   Scan with FRST in normal modePlease download Farbar's Recovery Scan Tool to your desktop: FRST 32bit or FRST 64bit (If not sure: Start --> Computer (right click) --> properties)Run FRST. Don´t change one of the checkboxes and hit Scan. Logfiles are created on your desk... Read more

8 more replies
Relevance 55.76%

fyi

Microsoft & Yahoo Search Deal


Quote:




What?s New With Bing & Yahoo Search Alliance
Jul 20, 2010 at 5:01pm ET by Barry Schwartz

Yahoo has provided an update on the current status of the transition over to Bing's search technology. On the organic side, Yahoo began testing Bing powered results. They are currently testing Bing powered results on about 25 percent of the traffic. They hope to transition over to Bing fully, sometime in September or October. That is, of course, if their tests go well. On the paid side, Yahoo is currently testing Bing powered ads, adCenter ads, on about 3.5% of the search queries. Yahoo has provided a detailed PDF document detailing the difference between the Yahoo and Microsoft ad [...]

Answer:Yahoo changing to use Bing's tech

Im almost positive this was posted. As this happened over the summer. Yahoo has been powered by Bing since at least August.

1 more replies
Relevance 55.76%

i am trying to get my yahoo messenger or clasic back i dont like bing and it wont go away

Answer:need out of bing back to yahoo messenger

Go here for expert help and provide them with more detail than you have here! http://help.yahoo.com/l/us/yahoo/he...

2 more replies
Relevance 55.76%

Hello - Within the last few days, i have apparently been infected with this seemingly common problem. I use Bing mainly, but it appears to be affecting me if i use Yahoo or Google as well. Doesn't redirect every time - but does so i would say about 70% of the time.
Neither my Malwarebytes or Norton have picked anything up.
My redirect usually goes to the "livesearchnow" mostly - sometimes to another site i can't think of right now.
 
My reports from he DDS are pasted below and the 'attach' file attached. Thanks for having a look.
--------------------------------------------------------------------------------
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 9.0.8112.16464  BrowserJavaVersion: 10.9.2
Run by family at 11:13:33 on 2013-02-16
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.1.1033.18.6048.4220 [GMT -6:00]
.
AV: Norton 360 Premier Edition *Enabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Norton 360 Premier Edition *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
FW: Norton 360 Premier Edition *Enabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C... Read more

Answer:infected with Bing, Yahoo, etc redirect

Please do the following:Download the appropriate version for your system of the Farbar Recovery Scan Tool and save it to a flash drive.Plug the flashdrive into the infected PC.Enter System Recovery Options.To enter System Recovery Options from the Advanced Boot Options:Restart the computer.As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.Use the arrow keys to select the Repair your computer menu item.Choose your language settings, and then click Next.Select the operating system you want to repair, and then click Next.Select your user account and click Next.To enter System Recovery Options by using Windows installation disc:Insert the installation disc.Restart your computer.If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings.Click Repair your computer.Choose your language settings, and then click Next.Select the operating system you want to repair, and then click Next.Select your user account an click Next.On the System Recovery Options menu you will get the following options:Startup RepairSystem RestoreWindows Complete PC RestoreWindows Memory Diagnostic ToolCommand PromptSelect Command PromptIn the command window type in notepad and press Enter.The notepad opens. Under File menu select Open.Select "Computer" and find your flash drive letter and close the notepad.In the command window type e:\frst.exe (for x64 bit version type e:... Read more

2 more replies
Relevance 54.53%

my site is hometutorsplatform.com and i want to promote it on yahoo bing network . thanks

More replies
Relevance 54.53%

can i change the search engine on edge from bing to yahoo and how do i do it ?

Answer:can i change the search engine on edge from bing to yahoo

Hit the 3 ... on the right hand side. Go to settings. Then View Advanced Settings. Scroll till you see search in the address bar with. Click on this then click on add. Click on Yahoo then add as default if you wish to make it your default search engine.

4 more replies
Relevance 54.53%

Please help me. My laptop won't open any google related websites including gmail, google, google maps etc. The most annoying one is gmail as that is my email provider. All other websites appear to be fine.

When I try to go onto google I get the error message "Internet explorer cannot display the webpage" Diagnose a connection problem but there is no connection problem as all other non google websites work.

The other error I get is "the address is not valid" when it clearly is.

Please help me as this problem is driving me mad.

Thanks,
Karen


The address is not valid


Most likely causes:
There might be a typing error in the address.
If you clicked on a link, it may be out of date.
Internet Explorer cannot display the webpage


What you can try:

Diagnose Connection Problems

[IMG]res://ieframe.dll/down.png[/IMG] More information

Answer:My laptop won't open any google related websites inc google, gmail, google maps etc

Someone please help as I am not doing anything stupid like writing the link wrong or using an old link

2 more replies
Relevance 53.3%

Bing and Yahoo use the same search engine. They allow ads at the top of searches and are not as goodat vetting those ads for malicious intent as Google is. So the malware criminals have moved away from Google and placing their malware on Bing/ Yahoo search engines. The result of Bing and Yahoo's negligence is seen regularly these days. As seen in this report: Bing and Yahoo Sponsored Results Lead to Hard-to-remove Rootkit By Lucian Constantin, IDG News Oct 14, 2011 9:50 am .......In the new attack observed by GFI Software, a sponsored result shown when searching for "Adobe Flash" linked to a page called "Download Flash Player" under the GetAdobeFlash.com domain.However, according to Alex Eckelberry, vice president and general manager of the security software division at GFI, clicking on the link redirected users to a rogue page that was advertising Flash Player 10 but distributed a dangerous rootkit instead."In this case, we're talking Sirefef (ZeroAccess aka Max++), probably the nastiest piece of malware circulating on the 'net right now," said Eckelberry. "Sirefef kills any attempt to remove it, and is nearly impossible to clean (short of booting onto a rescue disk and performing cleanup actions, or reformatting)," he added.................Google used to have similar problems, with cybercriminals regularly tricking its sales team into accepting rogue... Read more

Answer:Bing and Yahoo Sponsored Results Lead to Hard-to-remove Rootkit

Bing THIS. I haven't used Yahoo in about 4-5 years. Unfortunately, it's all about the $$$. Google's gotten more vigilant & militant lately, still not enough IMHO.

1 more replies
Relevance 52.89%

Microsoft has integrated Bing Rewards into the Bing header for easy and quick access to earning credits and redeeming rewards. Bing Rewards is now available to users on Internet Explorer 7 or later and the latest versions of Firefox, Chrome, and Safari browsers. By expanding the ways to participate in Bing Rewards new members are no longer limited to using IE and the Bing Bar. Existing members can now sign in to Bing to continue earning credits when they are on a computer without the Bing Bar installed.
Full read: Bing A new way to earn with Bing Rewards - Search Blog - Site Blogs - Bing Community

More replies
Relevance 52.07%
Question: Bing or Google?

Im not sure if this is the correct forum but what do yall use and why? Bing or Google?

Answer:Bing or Google?

  
Quote: Originally Posted by lsufrontier


Im not sure if this is the correct forum but what do yall use and why? Bing or Google?



Google

9 more replies
Relevance 52.07%
Question: Google vs. Bing

Google vs. Bing
I have only just found Bing as a search engine. My browsing is just ordinary surfing, nothing complicated. no acrobatics. 
My initial reaction to Bing is that it is very good, I like it very much. Bing does all of the things that Google does for my activity, but having been with Google for 12 years, it is a difficult decision to change a winning team and dump an old friend who has served me impeccably.
I have looked up all the Bing comments and comparisons on the web, but would like some ordinary users who have had a long experience with Bing and Google to give me their honest opinions. Goods and bads.
Thank you.

Answer:Google vs. Bing

I don't use either one much so can't really offer an opinion, but why not compare the two side by side for yourself at:
bing-vs-google? You'll get the results of your search from both at the same time.
 

3 more replies
Relevance 51.66%

Hi Folks,

I have had a recurring issue with my Windows 7 computer redirecting Google, Yahoo, and sometimes Facebook to a Yahoo Developer page (or a generic error page on iPhones and iPads on the network). Once it starts, it sometimes stops on its own after a couple minutes, sometimes it requires a power cycle of all networked devices (modem, router, a printer, 2 iPhones, and iPad and my PC).

I've had Norton continuously since purchasing the computer, run anti-malware bytes and SuperAntispyware, and none of them have been able to locate an issue.

I even tried re-installing Windows 7, but I think perhaps because I have an upgrade disk rather than the original I didn't get a full purge and the problem continued before I returned any backed up files onto it..

I also removed my PC from the network for about a month and never experienced the problem with my other devices. I'm fairly positive it's the PC, but I can't figure out the issue and am hoping someone here can help.

Per Cookiegal's instructions, here is my Hijack This log

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 4:55:47 PM, on 2/9/2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16457)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Steam\steam.ex... Read more

Answer:Google, Facebook, Yahoo redirect to Yahoo Developer Page

Hiya and welcome to Tech Support Guy

Are you still having this problem? If so, can you do the following:

Download Security Check from here.
Save it to your Desktop.
Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
A Notepad document should open automatically called checkup.txt; please post the contents of that document.

Please download Junkware Removal Tool to your desktop.

Shut down your protection software now to avoid potential conflicts.
Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
The tool will open and start scanning your system.
Please be patient as this can take a while to complete depending on your system's specifications.
On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
Post the contents of JRT.txt into your next message.

Please download AdwCleaner by Xplode onto your desktop.

Double click on AdwCleaner.exe to run the tool.
Click on Search.
A logfile will automatically open after the scan has finished.
Please post the contents of that logfile with your next reply.
You can find the logfile at C:\AdwCleaner[R1].txt as well.


Please include the checkup.txt, JRT.txt and adwCleaner[R1].txt in your next reply

eddie
 

3 more replies