Over 1 million tech questions and answers.

Random redirects and occasional pop-up while browsing with Firefox (particularly when using Firefox Add-On StumbleUpon)

Q: Random redirects and occasional pop-up while browsing with Firefox (particularly when using Firefox Add-On StumbleUpon)

Hello,I have been lurking bleepingcomputer as a non-member for a while now. I typically am able to find the instructions to fix almost any problem a computer (be it mine or a friends) has from your forum. Now it seems I am unable to find the solution to my specific problem, so I finally signed up as a member! My problem is similar to all these redirect virus issues I have been reading, but slightly different and not quite the same.Here's the problem:Randomly when I am browsing the internet, every now and again a site that I come across (typically while using StumbleUpon [Firefox Add-On]) will redirect to some completely random site. It doesn't appear to follow any pattern, and has redirected to various different websites. The websites I am redirected to are rarely the same website I was redirected to before, the only exception being theclickcheck.com and yellowpages.com, both of these websites I have been redirected to more than once. Additionally, even if I don't have a browser open a pop-up will appear in a new window. If a browser is open, the pop-up window error will occur more frequently it seems(in a separate window, not a separate tab). Also, I noticed each redirect or pop-up goes through google-analytics.com, so this may still be the google redirect virus, but I am unsure.I have had this issue for about a week now, and I have been unable to get the time to really find the problem. I wish to do online banking, bill paying, and the what not but fear that my information might become compromised. So far, this is my current efforts to find the problem:- Full System Scan using ESET Smart Security 4 [This is the upgraded version of just the standard ESET NOD32 Antivirus 4]- Ran HitmanPro35, found nothing (probably was unnecessary to run Hitman)- Downloaded and ran TDSSKiller from http://support.kaspersky.com/viruses/solutions?qid=208280684 (Found a potential problem with a file called sptd.sys, which I later learned is part of Daemon Tools)- Downloaded Defogger.exe (To block CD emulation before I post logs here)- Checked the 'hosts' file in C:\WINDOWS\system32\drivers\etc for any potential tampering or modification as it had been suggested on other websites. No problems detected.- Just downloaded MalwareBytes and currently running a full scan. I have ran so many scans already with other programs, I am not sure if MalwareBytes will find anything, but I know you guys like it for your logs, so I am in the process of doing that now.Any help would be greatly appreciated. I apologize for the lengthy post, but I know it is extremely helpful for me when im lurking around if someone is more specific with there problem and has posted some of their attempted solutions. Also, I hope by describing my problem and attempted fixes this will aid in finding the solution.Thanks a bunch!NessajHere is my MalwareBytes log.Malwarebytes' Anti-Malware 1.46www.malwarebytes.orgDatabase version: 4052Windows 5.1.2600 Service Pack 2Internet Explorer 7.0.5730.1311/5/2010 6:10:27 PMmbam-log-2010-11-05 (18-10-27).txtScan type: Full scan (C:\|D:\|E:\|F:\|G:\|H:\|)Objects scanned: 250038Time elapsed: 1 hour(s), 15 minute(s), 31 second(s)Memory Processes Infected: 0Memory Modules Infected: 0Registry Keys Infected: 0Registry Values Infected: 0Registry Data Items Infected: 2Folders Infected: 0Files Infected: 0Memory Processes Infected:(No malicious items detected)Memory Modules Infected:(No malicious items detected)Registry Keys Infected:(No malicious items detected)Registry Values Infected:(No malicious items detected)Registry Data Items Infected:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.Folders Infected:(No malicious items detected)Files Infected:(No malicious items detected)EDIT: Posts merged ~BP

RELEVANCY SCORE 200
Preferred Solution: Random redirects and occasional pop-up while browsing with Firefox (particularly when using Firefox Add-On StumbleUpon)

I recommend downloading and running DAP. It can help sort out any driver and firmware related issues on your system

It's worked out well for many of us in the past.

You can download it direct from this link http://downloaddap.org. (This link will open the download page of DAP so you can save a copy to your computer.)

A: Random redirects and occasional pop-up while browsing with Firefox (particularly when using Firefox Add-On StumbleUpon)

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.In the upper right hand corner of the topic you will see a button called Options. If you click on this in the drop-down menu you can choose Track this topic. By doing this and then choosing Immediate E-Mail notification and then clicking on Proceed you will be advised when we respond to your topic and facilitate the cleaning of your machine.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will appear Click OKDeFogger may ask you to reboot the machine, if it does - click OKDo not re-enable these drivers until otherwise instructed.Download DDS:Please download DDS by sUBs from one of the links below and save it to your desktop:
Download DDS and save it to your desktop

Link1
Link2
Link3

Please disable any anti-malware program that will block scripts from running before running DDS.

Double-Click on dds.scr and a command window will appear. This is normal.Shortly after two logs will appear:
DDS.txt Attach.txtA window will open instructing you save & post the logsSave the logs to a convenient place such as your desktopCopy the contents of both logs & post in your next replyScan With RKUnHookerPlease Download Rootkit Unhooker Save it to your desktop.extract RKUnhooker to your desktop
Note** it is zipped up in a .rar file - If you do not have a program to unzip this type of file
you can get a free one from here - http://www.7-zip.org/Now double-click on RKUnhookerLE.exe to run it.Click the Report tab, then click Scan.Check (Tick) Drivers, Stealth,. Uncheck the rest. then Click OK.Wait till the scanner has finished and then click File, Save Report.Save the report somewhere where you can find it. Click Close.Copy the entire contents of the report and paste it in a reply here.Note** you may get this warning it is ok, just ignore"Rootkit Unhooker has detected a parasite inside itself!It is recommended to remove parasite, okay?""just click on Cancel, then Accept".information and logs:In your next post I need the following1.logs from DDS2.log from RKUnHooker3.let me know of any problems you may have had[/list]Gringo

Read other 3 answers
RELEVANCY SCORE 86.4

After Firefox upgraded itself to version 2.0.0.6, The Stumbleupon toolbar disapeared and I cannot launch it even with <CTRL> F11. Under "TOOLS, ADDONS" Stumbleupon is still there but greyed out. It says it will start after closing and reopenning the browser...but it doesn't. Any ideas or suggestions?

Thanks

A:Stumbleupon disapears in firefox 2.0.0.6

Do you have the latest version? (3.06)

https://addons.mozilla.org/en-US/firefox/addon/138

Read other 2 answers
RELEVANCY SCORE 85.6

Today, Firefox updated itself to the latest version. Also, it updated an addon I have installed called flashget. I'm not sure which caused the problem but I suspect it was flashget, but I can't prove it.

The error I experienced was that when I clicked the Stumble button, I would always get sent to this URL: ht.tp://s.kuaiche.com/so/index.html (note, I put an extra dot in the http part so it won't turn into a link).

Anyway, I was able to ix it by uninstalling then reinstalling StumbleUpon. Have any other Stumblers out there come across this?

Read other answers
RELEVANCY SCORE 85.6

Hello. I have Windows XP Home, SP 3 on a Dell with 2 Gigs of RAM. When I use StumbleUpon, it does not take long before the memory usage gets very high (~ 400,000 K or more) slowing the PC response noticeably. Are there any settings I can adjust on my PC to keep the memory usage from going so high ? ThanksEdit: Moved topic from XP to the more appropriate forum. ~ Animal

A:StumbleUpon - Firefox & Memory Usage

You can adjust your virtual memory settingshttp://technet.microsoft.com/en-us/library/cc737315.aspxhttp://www.aumha.org/win5/a/xpvm.php

Read other 2 answers
RELEVANCY SCORE 82.4

Hello. I've been getting BSOD, sometimes a few in a hour, or othertimes I wouldn't get one the whole day. I might even get the BSOD a few minutes after restarting. Mostly its been while I'm browsing, and sometimes when I'm away from the computer doing nothing. Attached zip. Any help would be appreciated. Thanks.

Attachment 341411

A:Random BSOD - mostly while browsing IE, FireFox

Ran Memtest found on this site and quickly encountered error. Tried suspect RAM on another slot and still error. Thank you for those who have read my post seeking help.

Read other 1 answers
RELEVANCY SCORE 82.4

Ok, this is really getting annoying now!
I'm currently in the process of repairing my computer after a massive virus attack. Whenever I'm on a website on firefox, I'll click on a link (e.g. to another video on YouTube or to a friend's profile on Facebook) and for some reason, rather than loading the page I want, another tab opens up and a completely different website loads up. The website it loads up seems to change depanding on what I click on. Sometimes it's a random video site, sometimes it's a random search engine, and once I got linked to a page trying to download an ActiveX update. This might be a virus messing with my browser but I'm not sure. I'm scanning my computer with Malwarebytes at the moment. I'll post the log once it's finished. I'd be grateful for any ideas as to what's going on.

A:Random links while browsing on firefox

malwarebytes will likely take care of this....

Read other 10 answers
RELEVANCY SCORE 82.4

hello all,

Few days ago IE7 and Firefox stopped to respond on my Vista PC, and popups started - "systemerrorfixer" warning claiming my PC infected.

Lavasoft Adaware, Microsoft Defender, or Norton couldnt find anything.

I will appreciate if you can help me to fix this.

thanks a lot

baris

A:Spyware - IE7 and Firefox are not browsing and random pop-ups

Hello and welcome to TSF

I would recommend that you go here; read and follow the instructions very carefully; then, post all the requested logs and information; as instructed, to here. (Just click on the coloured links.)

Once done, please be patient, as the Security Team Analysts are usually very busy; one of them will answer your request as soon as they can.
Good luck

Please also remember DO NOT post your logs in this thread, please start a new thread here. (Just click on the coloured link.) and post the logs.

Read other 1 answers
RELEVANCY SCORE 82

During a session in IE, the browser will suddenly open another browser window and start to go to an obviously commercial site. The windows will close by itself after a few seconds and I can continue my session. However, it seems there may be something running that shouldn't be there. I'm attaching a hijackthis log. Thanks.

A:Occasional redirects while browsing

Hello , And to the Bleeping Computer Malware Removal Forum. My name is Elise and I'll be glad to help you with your computer problems.I will be working on your malware issues, this may or may not solve other issues you may have with your machine.Please note that whatever repairs we make, are for fixing your computer problems only and by no means should be used on another computer.The cleaning process is not instant. Logs can take some time to research, so please be patient with me. I know that you need your computer working as quickly as possible, and I will work hard to help see that happen. Please reply using the Add/Reply button in the lower right hand corner of your screen. Do not start a new topic. The logs that you post should be pasted directly into the reply. Only attach them if requested or if they do not fit into the post.Unfortunately, if I do not hear back from you within 5 days, I will be forced to close your topic. If you still need help after I have closed your topic, send me or a moderator a personal message with the address of the thread or feel free to create a new one.You may want to keep the link to this topic in your favorites. Alternatively, you can click the button at the top bar of this topic and Track this Topic, where you can choose email notifications. The topics you are tracking are shown here.-----------------------------------------------------------If you have since resolved the original problem you were having, we would appreciate you let... Read more

Read other 2 answers
RELEVANCY SCORE 81.2

hello all,Problem appeared just few days ago with a pop up window asking installation of Antispywaresuite (Systemerrorfixer). Then internet explorer started not to respond i.e. no yahoo.com or google search. Adaware, Windows Defender or Norton couldn't find anything on PC.I Run the combobox application as described in this forum and pasting the log below. I would really appreciate if you can help!thanks a lot.----------------ComboFix 08-05-28.4 - BY78016 2008-05-29 14:29:25.1 - NTFSx86Microsoft? Windows Vista? Enterprise 6.0.6001.1.1252.1.1033.18.1078 [GMT 2:00]Running from: C:\Users\by78016\Desktop\ComboFix.exe * Created a new restore point.((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))).C:\Windows\System32\cMSDfMoq.iniC:\Windows\System32\cMSDfMoq.ini2C:\Windows\system32\dqdcceoo.dllC:\Windows\system32\efcBrqRh.dllC:\Windows\system32\fqwlddgl.iniC:\Windows\system32\khFxxVpm.dllC:\Windows\System32\mpVxxFhk.iniC:\Windows\System32\mpVxxFhk.ini2C:\Windows\System32\ooeccdqd.iniC:\Windows\System32\pvcblobt.iniC:\Windows\system32\pxqaiuci.dllC:\Windows\system32\qoMfDSMc.dllC:\Windows\system32\tbolbcvp.dllC:\Windows\System32\wvothumk.iniC:\Windows\system32\xcdhxyit.iniC:\... Read more

A:Spyware - Firefox/ie7 Is Not Browsing And Random Pop-up Windows

Welcome to Bleeping Computer, please be sure you have read and followed the Preparation Guide For Use Before Posting A Hijackthis Log, Instructions for receiving help in cleaning your computer http://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/All advice given is taken at your own risk.I apologize for the wait, if your issues are not resolved, read the instructions posted above and then follow the directions below. If you no longer need help, I would appreciate a quick post letting me know so I can close your topic.Forum GuidelinesRead this topic before posting a log.DO NOT post a ComboFix log unless requested to.If you still need help, read the directions and the Forum Guidelines and start with a HJT log using Add Reply:Download Trend Micro Hijack This? to your Desktophttp://download.bleepingcomputer.com/hijac.../HJTInstall.exeDoubleclick the HJTInstall.exe to start it.By default it will install HijackThis in the Program Files\Trendmicro folder and create a desktop shortcut.HijackThis will open after install. Press the Scan button below. This will start the scan and open a log.Copy and paste the contents of the log in your next reply.Thanks

Read other 2 answers
RELEVANCY SCORE 80.4

with MBAM currently installed, i wonder if it is interfering with SystemShield... I see in the DDS.txt log that SystemShield is disabled, but i can "see" that it is running.

when this is all over with, as much as i have enjoyed using Iolo system mechanic (utilities) and thus bought Systemshield to go with it... maybe you can make a recommendation for preferred/better virus protection SW... Is SystemShield not as good as i was lead to believe? Maybe It didn't matter, and any AV would have had this issue(?)

ok, talk to you soon...

A:Random Firefox redirects

fwiw.. i just got a redirect when i was trying to navigate to change my notification options on your site... took me to this address:

http://click.get-answers-fast.com/ads-clicktrack/click/jump2.do?affiliate=46831&subid=7_f8&terms=bleepingcomputer.com%20user%20cp

Read other 19 answers
RELEVANCY SCORE 80.4

occasionally, clicking a link in Firefox browser initiates a redirect... usually a page of links, or a yellowpages-type of site.

in a separate, but related thread, boopme asked me to run Fixtdss and aswmbr then MBAM and post the logs in a new topic thread....

brb with logs

A:Random Firefox Redirects

fixTDSSno infectionsaswmbr log:aswMBR version 0.9.9.1532 Copyright© 2011 AVAST SoftwareRun date: 2012-03-06 21:13:34-----------------------------21:13:34.355 OS Version: Windows x64 6.0.6002 Service Pack 221:13:34.355 Number of processors: 2 586 0x170621:13:34.356 ComputerName: OFFICE-PC UserName: Jim21:13:35.068 Initialize success21:16:28.653 AVAST engine defs: 1203060021:17:35.084 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-021:17:35.085 Disk 0 Vendor: WDC_WD6400AAKS-75A7B0 01.03B01 Size: 610480MB BusType: 321:17:35.106 Disk 0 MBR read successfully21:17:35.107 Disk 0 MBR scan21:17:35.124 Disk 0 Windows VISTA default MBR code21:17:35.140 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 126500 MB offset 204821:17:35.158 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 483977 MB offset 25907404821:17:35.161 Service scanning21:17:35.850 Service sptd C:\Windows\System32\Drivers\sptd.sys **LOCKED** 3221:17:36.386 Modules scanning21:17:36.388 Disk 0 trace - called modules:21:17:36.392 ntoskrnl.exe CLASSPNP.SYS disk.sys acpi.sys >>UNKNOWN [0xfffffa80077f32c0]<<spnl.sys ataport.SYS pciide.sys PCIIDEX.SYS hal.dll atapi.sys 21:17:36.394 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8008b05790]21:17:36.397 3 CLASSPNP.SYS[fffffa6000fccc33] -> nt!IofCallDriver -> [0xfffffa80079ed9b0]21:17:36.39... Read more

Read other 9 answers
RELEVANCY SCORE 80.4

Don't know where I picked up a bug, but it randomly redirects every 25th click or so to sites like PCKeeper and feedbackexplorer. FWIW, I just switched to Windows 10 last week and the problems started a few days ago.  Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:05-12-2015Ran by Jerome (administrator) on HAL (07-12-2015 05:48:04)Running from C:\Users\Jerome\DownloadsLoaded Profiles: Jerome (Available Profiles: Jerome)Platform: Windows 10 Home Version 1511 (X64) Language: English (United States)Internet Explorer Version 11 (Default browser: FF)Boot Mode: NormalTutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/==================== Processes (Whitelisted) =================(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchService.exe(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore64.exe(CobianSoft, Luis Cobian) C:\Program Files (x86)\Cobian Backup 11\cbVSCService11.exe() C:\Program Files (x86)\Fatal1ty Utility\F-Stream Tuning\Bin\IOMonitorSrv.exe(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe(Qualcomm Atheros... Read more

A:Random Redirects in Firefox

Greetings DocWhoops and to BleepingComputer's Virus/Trojan/Spyware/Malware Removal forum.My name is Oh My! and I am here to help you! Now that we are "friends" please call me Gary.If you would allow me to call you by your first name I would prefer to do that.===================================================Ground Rules:First, I would like to inform you that most of us here at Bleeping Computer offer our expert assistance out of the goodness of our hearts. Please try to match our commitment to you with your patience toward us. If this was easy we would never have met. Please do not run any tools or take any steps other than those I will provide for you while we work on your computer together. I need to be certain about the state of your computer in order to provide appropriate and effective steps for you to take. Most often "well intentioned" (and usually panic driven!) independent efforts can make things much worse for both of us. If at any point you would prefer to take your own steps please let me know, I will not be offended. I would be happy to focus on the many others who are waiting in line for assistance.Please perform all steps in the order they are listed in each set of instructions. Some steps may be a bit complicated. If things are not clear, be sure to stop and let me know. We need to work on this together with confidence.Please copy and paste all logs into your post unless directed otherwise. Please do not re-run any programs I suggest. If you encounter probl... Read more

Read other 12 answers
RELEVANCY SCORE 80.4

I have a similar problem to http://www.bleepingcomputer.com/forums/t/271417/google-redirect-both-ie-and-firefox/When I search in Google and click on a link in the organic search section I occasionally get redirected to another site. At first, I was being redirected to various Clickbank products. I did some research and found it was always a hoplink with a certain affiliate code. I alerted Clickbank and they have closed that account. But I'm still getting redirected, it just goes to an error page from Clickbank stating that the account has been closed or disabled. I also get redirected to Amazon. I'm assuming that it's probably the same guy. The redirects happen randomly (not every time). I use Firefox 3.5.5. I'm also using TrendMicro Internet Security Pro 17.1.1250 with the latest updates.I've run full scans with both TM and MalwareBytes, but neither find any problems. I don't see anything that pops out in my HighJackThis Log.Usually, I can find and remove these things on my own, but this is over my head. I'm stumped. I've seen other posts with similar problems that point to it being a rootkit and that's a little beyond my level of expertise.Please help. Thanksrbr451

Read other answers
RELEVANCY SCORE 80.4

The crashes are completely random.
The computer does not appear to be under any significant strain.
Two have occurred thus far.
Attached are requested files.
Thank you.

A:BSOD Occurs At Random Intervals While Browsing (Firefox)

Please enable driver verifier and allow it to crash your system, once it has crashed disable driver verifier and post back here with your new files the same way you posted the first time.

Driver Verifier - Enable and Disable

Tip: If you can not boot normally after enabling driver verifier boot into safe mode and then disabling driver verifier.

Read other 9 answers
RELEVANCY SCORE 80.4

EDIT: Split from here: http://www.bleepingcomputer.com/forums/t/311114/random-redirects-on-clicking-links-or-random-tab-pop-ups-in-firefox/ ~BPOk heres all the files. I skiped step 9 as i did not know if i need to create a new post or continue this topic.DDS.txt:DDS (Ver_10-03-17.01) - NTFSx86 Run by alex at 22:10:32.04 on Tue 04/20/2010Internet Explorer: 7.0.5730.11Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1022.367 [GMT -5:00]AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcsC:\Program Files\AVG\AVG9\avgchsvx.exeC:\Program Files\AVG\AVG9\avgrsx.exesvchost.exesvchost.exeC:\Program Files\AVG\AVG9\avgcsrvx.exeC:\WINDOWS\system32\spoolsv.exesvchost.exeC:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\Program Files\AVG\AVG9\avgwdsvc.exeC:\Program Files\AirLink101\AWLL5026\WLService.exeC:\Program Files\AirLink101\AWLL5026\AWLL5026.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\WINDOWS\system32\CTsvcCDA.exeC:\WINDOWS\ehome\ehSched.exeC:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXEC:\Program Files\AVG\AVG9\avgnsx.exeC:\WINDOWS\system32\nvsvc32.exeC:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exeC:\WINDOWS\sy... Read more

A:Random Redirects on Clicking Links or Random Tab Pop-ups In Firefox

Hi, qwertyasd Please download ComboFix from Here or Here to your Desktop.**Note: In the event you already have Combofix, this is a new version that I need you to download. It is important that it is saved directly to your desktop**Please, never rename Combofix unless instructed.Close any open browsers.Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.-----------------------------------------------------------Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".Click on this link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.-----------------------------------------------------------Close any open browsers. WARNING: Combofix will disconnect your machine from the Internet as soon as it startsPlease do not attempt to re-connect your machine back to the Internet until Combofix has completely finished.If there is no internet connection after running Combofix, then restart your computer to restore back your connection.-----------------------------------------------------------Double click on combofix.exe & follow the prompts.Install the Recovery Console if prompted.When finished, it will produce a report f... Read more

Read other 10 answers
RELEVANCY SCORE 80.4

Recently i have been getting a lot of random pop-ups that normally lead to sites trying to give me a virus. AVG Free Edition 9.0 always blocks these attacks but i really want to get rid of this because i can't ever get to the site i am trying to get to. About a week ago i had a rouge anti-virus (Windows Defender 2010) which i finally got rid of using Malyware Malbytes. After that my PC was acting weird and Just-In-Time Debugging keeps popping up. Sometimes SVChost or something like that crashes and then nothing works. Also after i removed the rogue anti-spyware none of the icons on desktop or in start folder would open. So i looked it up and i had to copy this into notepad and save it as fix.reg.

Pasted the following:

Windows Registry Editor Version 5.00

[-HKEY_CURRENT_USER\Software\Classes\.exe]
[-HKEY_CURRENT_USER\Software\Classes\secfile]
[-HKEY_CLASSES_ROOT\secfile]
[-HKEY_CLASSES_ROOT\.exe\shell\open\command]

[HKEY_CLASSES_ROOT\exefile\shell\open\command]
@="\"%1\" %*"

[HKEY_CLASSES_ROOT\.exe]
@="exefile"
"Content Type"="application/x-msdownload"

This let me open all programs but then Mozilla Firefox would do random tabs and redirects.
Also i tried this.

Went to: C:\WINDOWS\system32\drivers\etc
Opened Hosts and deleted EVERYTHING. Then saved.
Deleted all backup hosts and thats about it.
A... Read more

A:Random Redirects on Clicking Links or Random Tab Pop-ups In Firefox

Please download GMER from one of the following locations and save it to your desktop:Main Mirror
This version will download a randomly named file (Recommended)Zipped Mirror
This version will download a zip file you will need to extract first. If you use this mirror, please extract the zip file to your desktop.Disconnect from the Internet and close all running programs.Temporarily disable any real-time active protection so your security programs will not conflict with gmer's driver.Double-click on the randomly named GMER file (i.e. n7gmo46c.exe) and allow the gmer.sys driver to load if asked.Note: If you downloaded the zipped version, extract the file to its own folder such as C:\gmer and then double-click on gmer.exe.
GMER will open to the Rootkit/Malware tab and perform an automatic quick scan when first run. (do not use the computer while the scan is in progress)If you receive a WARNING!!! about rootkit activity and are asked to fully scan your system...click NO.Make sure the Sections option is checked (in the right hand panel). Leave all other options unchecked!Now click the Scan button. If you see a rootkit warning window, click OK.When the scan is finished, click the Save... button to save the scan results to your Desktop. Save the file as gmer.log.Click the Copy button and paste the results into your next reply.Exit GMER and re-enable all active protection when done.-- If you encounter any problems, try running GMER in Safe Mode.

Read other 6 answers
RELEVANCY SCORE 79.6

Although I consider myself fairly astute at resolving computer issues, this one has gotten the best of me. When I do a Google search using Firefox 3.0.6, i get randomly redirected to non-related sites when i select a google provided link. Sometimes clicking on the link is successful; othertimes i'm redirecting to anything but what I was looking for.I've run (in safe mode) Malwarebytes anti-malware, Super AntiSpyware Free Edition, Spy-bot 1.6, AdAware, as well as McAfee. I've been "successful" in removing a few trojans (vundo), but nothing has helped the redirect problem.My HiJack log is:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 7:18:50 PM, on 2/15/2009Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\ibmpmsvc.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Windows Defender\MsMpEng.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Intel\Wireless\Bin\EvtEng.exeC:\Program Files\Intel\Wireless\Bin\S24EvMon.exeC:\Program Files\Lavasoft\Ad-Aware\aawservice.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\Lo... Read more

A:Random redirects when using Firefox (HijacK)

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a description of your problem, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.comDDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Follow the instructions that pop up for p... Read more

Read other 2 answers
RELEVANCY SCORE 79.6

Hi First time posting. So I don't know if this is the correct part of the forum to submit to so if its not, just let me know where to submit  it to  My problem is that I use Firefox (main browser Win 7) to browse and every so often it will redirect my websites to adware. For example when I "middle click" on a site at Google or Reddit, it usually opens a new tab but sometimes it opens this completely other site which im guessing is malware, I use Adblock Plus so not every malware site redirects to it, a lot of the time it is just a blank page with an obvisouly incorrect URL. I used to be able to browse just fine, but now it seems every so often that it wants to redirect me to this other site. MSE always pops up telling me it wants to send a ".tmp" file to Microsoft because it doesn't know what it is. But whenever I use MSE or Malware Bytes (even on the full trial version, or rootkit scan) it never picks up anything when it has been scanned. I have scanned it normally and on Windows safe mode. If anyone could help it would be much appreciated. Thanks.

A:Firefox redirects random websites

Please download TDSSKiller from here and save it to your DesktopDoubleclick on TDSSKiller.exe to run the application, then click on Change parameters


Check Loaded Modules  and Detect TDLFS file system.  Do not check Verify file digital signatures (even though it is checked in the example)If you are asked to reboot because an "Extended Monitoring Driver is required" please click Reboot now


Click Start Scan and allow the scan process to run

If threats are detected select Skip for all of them unless I instruct you otherwiseClick Continue


Click Reboot computerPlease post the contents of  TDSSKiller.[Version]_[Date]_[Time]_log.txt found in your root directory (typically c:\)in your reply===================================================aswMBR--------------------Download aswMBR and save it to your desktop.
Please disable your real time protection of any Antivirus, Antispyware or Antimalware programs temporarily. They will interfere and may cause unexpected results.If you need help to disable your protection programs see here and here.Double click the aswMBR.exe file to run it. Please allow when you are asked to download AVAST antivirus engine defs.Wait until the AV update is done, then click on the Scan button to start. The program will launch a scan.

When done, you will see Scan finished successfully. Please click on Save log and save the file to your desktop.

Please post the contents of the log in your next reply.NOTE:  aswMBR will create M... Read more

Read other 1 answers
RELEVANCY SCORE 78.8

Was having random browser redirects and popups in Firefox
AVG & Malwarebytes found nothing.
Ran some misc fixes based on forum entries.
Computer seems better but would like confirmation that there is nothing lurking.
Ran scans based on "Preparation Guide For Use Before Using Malware Removal Tools and Requesting Help"
DeFogger
DDS
GMER

Can you review the attached scans, and let me know if any further action
is required.

Thanks

A:Random browser redirects and popups in Firefox

Hi,Welcome to Bleeping Computer. My name is m0le and I will be helping you with your log.Please subscribe to this topic, if you haven't already. You can subscribe by clicking the Options box to the right of your topic title and selecting Track This Topic.

Please avoid installing/uninstalling or updating any programs and attempting any unsupervised fixes or scans. This can make helping you impossible.

Please reply to this post so I know you are there.The forum is busy and we need to have replies as soon as possible. If I haven't had a reply after 3 days I will bump the topic and if you do not reply by the following day after that then I will close the topic.Once I receive a reply then I will return with your first instructions.Thanks

Read other 2 answers
RELEVANCY SCORE 78.8

Hi, as the topic says my problem is random redirects and Firefox isn't saving browsing history for more than a day, and that has nothing to do with settings.
The only redirect address I've noticed and remember is server2.mediajmp.com, but there have been others.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:55:59 AM, on 6/23/2010
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18470)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\tbh\base\bin\tbhSystray.exe
C:\Program Files\Norton Security Suite\Engine\3.8.0.41\ccSvcHst.exe
C:\Program Files\RocketDock\RocketDock.exe
C:\Program Files\Steam\steam.exe
C:\Windows\System32\mobsync.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\TeamSpeak 3 Client\ts3client_win32.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Users\Lovick\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Program Files\Common Files\Java\Java Update\jucheck.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.aqworlds.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&... Read more

A:Random Redirects and Firefox not saving history

Read other 7 answers
RELEVANCY SCORE 78.8

A few days ago, I started to get browser redirects in both IE and Firefox - it seems random in Firefox; in IE, it's about every second or third link that redirects in a Google search. I'm also getting random popups from both IE and Firefox. I have ran Malwarebytes, Adaware, Trend Micro's Housecall, Spybot, SuperAntispyware. I had upgraded Adaware to their paid service, and it found trojans, but did not take care of the popup and redirect problems. Now, nothing is being found by any of the anti-malware, but I'm still having the same issues. I'm having issues getting into Adaware to give details on the trojans. Additionally, I downloaded CA Anti-Virus Plus Anti-Spyware 2010, but the install failed and now I can't get rid of it off of my computer. I am hoping I'm doing this right, here is my Hijackthis log:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 1:38:38 AM, on 4/11/2010Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.17023)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\Program File... Read more

A:Browser redirects in both IE and Firefox - random pops also

Hello and and Welcome to BleepingcomputerPlease note we are very busy, so if I don't hear from you within 5 days the topic will be closed, If you have sinceresolved your issues I would appreciate if you would let me no so I can close this topic.We need to create an OTL ReportPlease download OTL from one of the following mirrors:This is THE MirrorSave it to your desktop.Double click on the icon on your desktop.Click the "Scan All Users" checkbox.Under the Custom Scans/Fixes box at the bottom, paste in the following bold text.%appdata%\*.exe%systemroot%\system32\*.dll /lockedfiles%systemroot%\Tasks\*.job /lockedfiles%SYSTEMDRIVE%\*.exenetsvcsmsconfig/md5startproquota.exesfcfiles.dlleventlog.dllscecli.dllnetlogon.dllcngaudit.dllsceclt.dllntelogon.dlllogevent.dllbeep.sysiaStor.sysnvstor.sysatapi.sysnvatabus.sysviamraid.sysnvata.sysiastorv.sys/md5stopCREATERESTOREPOINTPush the button.Two reports will open, copy and paste them in a reply here:OTL.txt <-- Will be openedExtra.txt <-- Will be minimizedThanks

Read other 35 answers
RELEVANCY SCORE 78.8

For the past 3 days, this computer has had several problems with getting on the internet. I was able to solve some of the problems preventing Firefox from being opened, but two issues still remain.1) While using Firefox, and I am unable to use anything related to google.comGoing to google.com returns a white page with "404 Not Found" in large text, and "nginx" in smaller text below that.2) I randomly get redirected to advertising websites while viewing some of my favored sites.For an example of 2:
Spoiler
Earlier I was viewing Blizzard's Blue posts at http://blue.mmo-champion.com/1st: Went to http://blue.mmo-champion.com/2nd: I click a topic of interest, went to http://blue.mmo-champion.com/topic/191513/negative-ghostrider-the-pattern-is-fullThis next part is where I get redirected3rd: I click one of the buttons, the Blizz button with the arrow, which normally is supposed to take me to the source or the post itself.I'm supposed to go here: http://us.battle.net/wow/en/forum/topic/3048064944?page=19#371But instead, this shows up in my browsing history:http://allglobesales.com/aff?aff=http%3A%2F%2Fbridge2.admarketplace.net%2Fct%3Fversion%3D7.0.0%26key%3D62256396176.3275365%26ci%3D1313772378950.10158&i=HctLDoQgDADQdW_RC0iQj5Xj1AIOyQgTMOH6mtm-5JFTwSnjVmU2ME6DVtpY8kCwARkbJW-aD-Gd6BBKa7C7DzH4KDaDBLiutsiHr19pFRecrX8jtoyTu3TON9Y0B3KN2LnEUk8cd-c7nSUNfPOfx_vmAw~~http://bridge2.admarketplace.net/ct?version=7.0.0&key=62256396176.3275365&ci=131377... Read more

A:404 nginx google/firefox - random redirects

Please download MiniToolBox, save it to your desktop and run it.Checkmark the following checkboxes:Flush DNSReport IE Proxy SettingsReset IE Proxy SettingsReport FF Proxy SettingsReset FF Proxy SettingsList content of HostsList IP configurationList last 10 Event Viewer logList Installed ProgramsList Users, Partitions and Memory size.List Minidump FilesClick Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run.Note: When using "Reset FF Proxy Settings" option Firefox should be closed.

Read other 20 answers
RELEVANCY SCORE 78.8

Well, like the title says, Firefox keeps redirecting me to random sites. For instance I clicked on a wikipedia link and got sent to Travelocity.com. This just started happening earlier today, out of nowhere, and it's only Firefox that does this. The last things I remember downloading are Artweaver, Torsion, Notepad++, and Torsion, but that was all maybe over a week ago. I've used Malwarebytes' Anti-Malware and deleted four infected files. I've researched a few other threads but I'm still not exactly sure what I need to do. Can somebody please give me some direction? I'm using Windows XP by the way.
 

A:Mozilla Firefox Redirects to Random Sites

Read other 16 answers
RELEVANCY SCORE 78.8

Recently purchased new laptop this thing has had next to none internet exposure however its seems i've still managed to pick somthing up....

Simply put everytime i open a new search in firefox i'm redirected to sites i've not searched for an example of would be searched facebook clicked on the link and found myself at ebay.. I have installed mcafee security center run a full scan and found nothing i have noticed there is another thread on the forum with the exact same problem so it nice to know i'm not the only person in this boat....

DDS (Ver_09-05-14.01) - NTFSx86
Run by Tim at 23:46:12.16 on 28/05/2009
Internet Explorer: 7.0.6001.18000
Microsoft? Windows Vista? Home Basic 6.0.6001.1.1252.44.1033.18.894.200 [GMT 1:00]

SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\rundll32.exe
C: ... Read more

A:Browser (firefox) Redirects to random sites.

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 2 answers
RELEVANCY SCORE 78

A while ago I got the fake antivirus malware. I ran Malware Bytes that seemed to have solved the problem. Then after a while I started noticing random redirects after I search on Google. I've ran GMER and Hijack this and have attached the logs. I super appreciate it, thanks for your help in advance!GMER Scan Log:=====================GMER 1.0.15.15281 - http://www.gmer.netRootkit quick scan 2010-07-28 16:53:57Windows 6.1.7600 Running: 5m4tw2w6.exe; Driver: C:\Users\philyuen\AppData\Local\Temp\fxldipog.sys---- System - GMER 1.0.15 ----Code \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwCreateProcessEx [0x90329B9C]Code \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwCreateSection [0x903299C0]Code \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwLoadDriver [0x90329AFA]Code \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) NtCreateSectionCode \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ObMakeTemporaryObject---- Devices - GMER 1.0.15 ----AttachedDevice \FileSystem\fastfat \Fat fltmgr.sys (Micr... Read more

A:Spyware that does random redirects in Firefox Google Search

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.In the upper right hand corner of the topic you will see a button called Options. If you click on this in the drop-down menu you can choose Track this topic. By doing this and then choosing Immediate E-Mail notification and then clicking on Proceed you will be advised when we respond to your topic and facilitate the cleaning of your machine.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.Double click DeFogger to run the tool. The ap... Read more

Read other 22 answers
RELEVANCY SCORE 78

Hi,

I recently had a virus/rootkit or some type of malware installed on my computer. Basically because I accidentally clicked yes to one of those "you're computer is infected" links. I ran Malwarebytes and AD-Aware before hand and I thought I got rid of everything, unfortunately I did not as Firefox still opens random tabs.

I read the first steps, my logs are attached below. Unfortunately I do not have a Windows Install CD, I think it's forever lost somewhere.

I read the previous posts similar to mine but was not able to figure out what exactly to do. Any help would be greatly appreciated!




DDS (Ver_10-03-17.01) - NTFSx86
Run by Gov at 18:12:00.67 on Thu 05/13/2010
Internet Explorer: 7.0.6001.18000 BrowserJavaVersion: 1.6.0_18
Microsoft? Windows Vista? Home Premium 6.0.6001.1.1252.1.1033.18.3070.1727 [GMT -4:00]

AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
SP: AVG Anti-Virus Free *enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe ... Read more

A:Firefox opens random tabs / redirects sites

Hi ettes and welcome to TSF.

If you still require assistance and are not seeking help elsewhere, then please carry out my instructions.

Please subscribe to this thread so that you are notified when you receive a reply. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Add Subscription.

** Note: Please stick with me until I declare that your system is free from malware. Even though your system may not have any symptoms of malware, it may still be infected. **

--------------------------------------------------------------
Please visit this webpage for instructions for downloading and running ComboFix:

http://www.bleepingcomputer.com/comb...o-use-combofix

* Ensure you have disabled all anti virus and anti malware programs so they do not interfere with the running of ComboFix. You can find instructions HERE.

Reply back with the following: C:\ComboFix.txt

Read other 19 answers
RELEVANCY SCORE 78

Hey, i tried using a windows vista recovery disc, but that does me no good, i get google redirects almost 90% of the time i click a link, and when i want to shut down my computer, i cant because it just shows a blue screen warning, then restarts. My computer is also very slow now, any help?
 

A:I get google redirects, random firefox tab ads and blue screens

Read other 16 answers
RELEVANCY SCORE 78

Hi, I suspect I'm infected with spyware. Wierd web pages redirects started after I went to a friend's lan party.

Another friend told me to run Malwarebytes' Anti-Malware, which I did. It found 11 infections which it promptly removed. It seem better for a day or two but now it seems to have resumed.

I have no idea what to do next. Any help would be greatly appreciated.

I am running Windows XP Pro SP2 (x64).

Here are the information requested in the forum :

>>> HijackThis >>>
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:26:21, on 26-02-2011
Platform: Windows 2003 SP2 (WinNT 5.02.3790)
MSIE: Internet Explorer v6.00 SP1 (6.00.3790.1830)
Boot mode: Normal

Running processes:
D:\Program Files\Alwil Software\Avast5\AvastSvc.exe
D:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
D:\WINDOWS\RTHDCPL.EXE
D:\Program Files (x86)\DAEMON Tools Lite\daemon.exe
D:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
D:\Program Files (x86)\Mozilla Firefox\firefox.exe
D:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\TÚlÚchargements\_CLEANT_IT_\HijackThis.exe

F2 - REG:system.ini: UserInit=userinit,
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Microsoft Web Test Recorder 10.0 Helper - {DDA57003-0068-4ed2-9D32-4D1EC707D94D} - C:\Program Files (x86)\Microsoft Vis... Read more

Read other answers
RELEVANCY SCORE 78

Hi,

I seem to have picked up a nasty trojan. I use Firefox 3.5 to browse (though the issue happens with IE too).. For the past several days, while clicking on a google search result (or links on other pages), I get a new firefox window opened with 3 tabs. The first 2 tabs are just urls with weird characters. The 3rd tab is usually pointing to a mozilla folder followed by funny characters: Message: Firefox can't find the file at /C:/Program Files/Mozilla Firefox/<funny characters>

I have VirusScan OnAccess enbled and it constantly seems to be cleaning a file iaStor.sys, which it detects as a trojan. But cannout seem to fix it. I ran MBA-M and it does not detect anything. VirusScan on-demand also detects nothing.

This is my work laptop and am afraid to lose anything. Please help !!

At wits end.
Saandy

A:Google search results and FireFox/IE random redirects

This is my work laptop and I am really worried. Can someone please respond and help ? Do I need to run HJT and post the logs first ?

Worried...
Saandy3

Read other 1 answers
RELEVANCY SCORE 77.2

Hi,

I've recently discovered what I believe is a trojan horse, which is hijacking links, and taking me to different sites from the one that I requested. This does not happen every single time, but is obviously causing a lot of worry and stress about whether the sites I am looking at are the correct ones. If anyone could help, that would be very appreciated.

My DDS log:
DDS (Ver_09-05-14.01) - NTFSx86
Run by Matt Tremayne at 10:28:26.65 on 20/06/2009
Internet Explorer: 7.0.5730.11
Microsoft Windows XP Home Edition 5.1.2600.2.1252.44.1033.18.1023.371 [GMT 1:00]

AV: PC Tools AntiVirus 5.0.0.16 *On-access scanning enabled* (Updated) {832E7172-E406-4BB2-8B19-6D29F2C93A98}
AV: Norton Internet Security *On-access scanning disabled* (Outdated) {E10A9785-9598-4754-B552-92431C1C35F8}
AV: AntiVir Desktop *On-access scanning enabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}
FW: Norton Internet Security *disabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
C:\WINDOWS\system32\svchost -k rpcss
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program... Read more

A:Using IE7 or Firefox, clicking on links redirects me to totally random sites

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 38 answers
RELEVANCY SCORE 77.2

Hi folks I seem to have the usual unknown malware pest attack!I've been away from my computer (was traveling and using the laptop) and noticed that internet was so slow. I have 1MB plan but I get 256kbps or something. Then occasionally I would have random pop-ups when I click on some websites, I use firefox and when I open a blank page I get a Pesar website instead. I hope someone can help me! Thank you in advance!!! Here is my log: Logfile of Trend Micro HijackThis v2.0.2Scan saved at 2:23:03 AM, on 4/23/2010Platform: Windows Vista SP2 (WinNT 6.00.1906)MSIE: Internet Explorer v8.00 (8.00.6001.18904)Boot mode: NormalRunning processes:C:\Windows\Domino.exeC:\Program Files (x86)\Rainlendar2\Rainlendar2.exeC:\Program Files (x86)\Launchy\Launchy.exeC:\Program Files (x86)\DestroyTwitter\DestroyTwitter.exeC:\Program Files\Alwil Software\Avast5\AvastUI.exeC:\Program Files (x86)\iTunes\iTunesHelper.exeC:\Program Files (x86)\SonarPM\SonarPM\sonar_gui.exeC:\Program Files (x86)\Mozilla Firefox\firefox.exeC:\Program Files (x86)\iTunes\iTunes.exeC:\Program Files (x86)\Trillian\trillian.exeC:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exeC:\Program Files (x86)\Trend Micro\HijackThis\HijackThis.exeR0 - HKCU\Software\Microsoft\Internet Explorer\... Read more

A:SLOW INTERNET, RANDOM POP-UPS, FIREFOX REDIRECTS TO SPAM WEBSITES

hi Tengal,Your log is a few days old. If you still need help simply reply to my post.

Read other 3 answers
RELEVANCY SCORE 76.4

[UPDATES TO SUBJECT: All ads seem to be in IE, none in Firefox; also, ads appear while browsing in Safari, too; also, they're popunders, not popups, if that matters.]

I'm running Windows XP Home SP3 and latest versions of Firefox, IE7 and Chrome on a fairly new Dell desktop.

Two days ago, began experiencing:

* Extremely slow startup (10+ minutes)

* Extremely slow performance (4+ minutes to start Firefox)

* Chrome (my usual browser) starts but will not load web pages

* Popup ads in new browser windows while browsing -- sometimes in IE7, sometimes in Firefox [UPDATE: They're all in IE, I think, but some use a Firefox mini-icon], never in Chrome; ads begin resolve through redirector URLs on domain adtrgt.com before resolving to various other sites (Address.com, Searchfeed.com, YouTube, etc.)

McAfee scans yielded no improvements, and no threats found.

Uninstalled McAfee and installed Sunbelt VIPRE, which found several Trojans but did not resolve issue.

HijackThis log is below. Appreciate any help anyone can provide. I think this is a great service, and will donate as soon as this problem is resolved (just in case there's a keylogger in this mix of badness).

-=-=-=-=-

HJT LOG

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:18:04 PM, on 2/28/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WI... Read more

A:IE/Firefox browsing = IE/Firefox ad popups (adtrgt.com)

Hi fmj and Welcome to TSG!

Sorry for the delay. Do you still need some help? If so, Please post a new HijackThis log
 

Read other 1 answers
RELEVANCY SCORE 76.4

Firstly, I think I probably got this from some shady porno sites while in private browsing, fwiw

basically, whenever I google stuff using firefox on my laptop (64 bit windows 7, dell xp), oftentimes, when I click on the links, it opens up some random spam website. It takes numerous clicks to actually get the actual link to open. Also, when this doesn't happen, clicking on any google searches redirects the browser to google.com/webhp. I have to exit this tab and open a new tab for google to work after this. Finally, firefox now uses up to 25% of my cpu performance when I check my task manager. So far, these problems only exist on firefox, and IE is fine, but I'd still like to get rid of this possible malware. Thanks!

A:Firefox google redirects to webhp after a search/opens up random links

Welcome aboard Download Security Check from HERE, and save it to your Desktop. * Double-click SecurityCheck.exe * Follow the onscreen instructions inside of the black box. * A Notepad document should open automatically called checkup.txt; please post the contents of that document.=============================================================================Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply.====================================================================================Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeClick Go and post the result.=============================================================================Download Malwarebytes' Anti-Malware (aka MBAM): http://www.malwarebytes.org/products/malwarebytes_free to your desktop. * Double-click mbam-setup.exe and follow the prompts to install the program. * At the end, be sure a checkmark is placed next t... Read more

Read other 6 answers
RELEVANCY SCORE 76.4

http://www.bleepingcomputer.com/forums/topic459101.html
as an add-on, firefox in general runs sluggishly

I skipped step 8 in the preparation guide: http://www.bleepingcomputer.com/forums/topic34773.html since I have a 64 bit computer

.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_29
Run by Rajiv Desikan at 23:53:58 on 2012-07-03
Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.8106.5432 [GMT -4:00]
.
AV: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {3D54B793-665E-3129-9103-206115370C8A}
FW: McAfee Firewall *Enabled* {BE0ED752-0A0B-3FFF-80EC-B2269063014C}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Program... Read more

A:Firefox google redirects to webhp after a search/opens up random links

Greetings and Welcome to The Forums!!My name is Gringo and I'll be glad to help you with your computer problems. I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of usPlease do not run any tools unless instructed to do so.
We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.
Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.
Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.
A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE: At... Read more

Read other 16 answers
RELEVANCY SCORE 76.4

I've recently had many trojans get downloaded onto my computer when AVG crashed while detecting several threats. I remember my pc being locked out where I could not open any programs or task manager unless I download the fake anti-malware program. I had several types but I could only remember anti-malware doctor being present. I removed most of the stuff with malwarebytes, spybot and SUPERantispyware in safe mode but it doesn't seem to get rid of my firefox browser directing me to a random site periodically. I scan multiple times a day and each time I find a trojan which I thought I had already removed. Also GMER.exe seems to freeze whenever I try to scan and my CPU goes to 100% whenever the program is opened.Any help would be much appreciated,- JennyDDS (Ver_10-03-17.01) - NTFSx86 Run by User at 1:56:35.90 on Tue 09/14/2010Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_17Microsoft Windows XP Professional 5.1.2600.3.1252.61.1033.18.2046.1202 [GMT 10:00]AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}============== Running Processes ===============C:\WINDOWS\system32\nvsvc32.exeC:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcsC:\WINDOWS\system32\svchost.exe -k WudfServiceGroupsvchost.exeC:\Program Files\AVG\AVG9\avgchsvx.exeC:\Program Files\AVG\AVG9\avgrsx.... Read more

A:Firefox opens/redirects to a random ad website randomly, as well as infections with various trojans

Hello , And to the Bleeping Computer Malware Removal Forum. My name is Elise and I'll be glad to help you with your computer problems.I will be working on your malware issues, this may or may not solve other issues you may have with your machine.Please note that whatever repairs we make, are for fixing your computer problems only and by no means should be used on another computer.The cleaning process is not instant. Logs can take some time to research, so please be patient with me. I know that you need your computer working as quickly as possible, and I will work hard to help see that happen. Please reply using the Add/Reply button in the lower right hand corner of your screen. Do not start a new topic. The logs that you post should be pasted directly into the reply. Only attach them if requested or if they do not fit into the post.Unfortunately, if I do not hear back from you within 5 days, I will be forced to close your topic. If you still need help after I have closed your topic, send me or a moderator a personal message with the address of the thread or feel free to create a new one.You may want to keep the link to this topic in your favorites. Alternatively, you can click the button at the top bar of this topic and Track this Topic, where you can choose email notifications. The topics you are tracking are shown here.-----------------------------------------------------------If you have since resolved the original problem you were having, we would appreciate you... Read more

Read other 13 answers
RELEVANCY SCORE 75.6

Hi. Can you please help. My internet browsers, Internet Explorer and Firefox, keep on shutting down unexpectedly especially when I try to load a new page. In addition, when I use google in Firefox I am redirected to ad pages instead of the actual website. SInce I started having this problem, sometimes my computer freezez and the clock on my computer stops. I've run Malwarebytes Anti-Malware,Ad-Adware and even though they found some viruses it hasn't fixed the problem. Below is the hijackthis log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:18:17 AM, on 4/21/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\ActivCard\acautoreg.exe
C:\Program Files\Common Files\ActivCard\accoca.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:... Read more

Read other answers
RELEVANCY SCORE 75.6

Hi,A couple days ago I got a virus or something that would pop up a fake Windows AntiSpyware (don't remember exact name) program. I was finally able to get rid of it using AVG and MalwareByte's Anti-Malware.Now Firefox will open up random tabs on it's on (don't have to click on anything) and when I click on links sometimes it will redirect me for like 5 clicks of the link and then after that allow me to go to the site and then it will repeat this action maybe 10 minutes later.It also will not let me go to the microsoft update site (in IE and Firefox), and when I search w i n d o w s u p d a t e . m i c r o s o f t (without the spaces) in google or any text field that I submit (tried it in a forum) (in IE or Firefox) it will just bring up a page that says connection was reset or page failed to load. I have also tried it in safe mode and I get the same symptoms.I have tried running MalwareByte's Anti-Malware, Spybot S&D, AVG, and HJT. At one time MalwareBtyes said something about a tcipip.sys thing but I don't remember too much about what was wrong.I followed the prep guide but I cannot get a full gmer scan to run. It either just restarts my computer, freezes, shuts down the program, or locks down my computer (have to do a hard reset).Thanks for any and all helpEDIT: One of the pop-up tabs lingered on a site for a second before going to an ad site, the url of this site was..hxxp://apachejct.com/key/?qs=9434cd09aed34cc216c628c7eac958b4aa78b00b6706ac1a... Read more

A:Firefox opens random tabs and redirects, blocks microsoft update - rootkit?

Hello and welcome to Bleeping Computer! We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Fo... Read more

Read other 8 answers
RELEVANCY SCORE 74.8

Ok so i've noticed that firefox randomly will open ad pages in new tabs and redirect my google searches.

I have run complete scans with superantisypware, avira, spybot, malwarebytes, iobit security 360 and inbuilt windows malware scanner. Some of which came up with detections which i got rid yet the problem remains. I tried to restore my comp but it failed, obviously one of the malwares clever tricks.

Here is my DDS log. The attach.txt file is attached but i could not get the GMER rootkit scanner to work. It would complete the scan but as soon as i tried to save it it would give a blue screen and restart...not good i would say. So hence i dont have an ark.txt.

Really starting to worry. I read that these things are usually to direct internet traffic to specific sites to increase ad revenue for the malware people. I havn't done any internet banking cos i am not that foolish but is there much of a chance they will get control of my gmail or facebook accounts? How paranoid should i be in terms of infections spreading to other networked computers and external hard drives?


DDS (Ver_09-12-01.01) - NTFSx86
Run by Darren at 16:35:42.58 on Wed 13/01/2010
Internet Explorer: 8.0.7600.16385
Microsoft Windows 7 Professional 6.1.7600.0.1252.61.1033.18.3323.2523 [GMT 10.5:30]


============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system... Read more

A:Due to adware/spyware/malware firefox opens random tabs and google redirects pages

BUMP, please

Read other 12 answers
RELEVANCY SCORE 73.2

Hello i have currently experienced this problem and i don't know how to stop it. What happens is sometimes when i am on firefox a random popup comes up. It is not very often but it happens on websites like Google and websites i know that dont have popups. This problems also arose with the popups at the same time and that is sometimes i click a google link it redirects me to a random page. Some of these pages are free malware removal, shopping websites, and sometimes even yellow pages come up. I have experienced this for 2 days and have tried Super AntiSpyware and Malwarebytes with both saying i have no infections. I would appreciate any help as this is starting to irritate me.

A:Occasional Random Popups and Google Redirects

Can you post the logs from the scans performed with Malwarebytes and Super Anti-Spyware?

Read other 2 answers
RELEVANCY SCORE 72.4

I started getting some random link redirects in the latest Firefox (with Adblock Plus and NoScript) and Opera browsers to sites like "askthecrew.net" as well as others which I cannot recall. It's occasional and doesn't seem to be website specific. I'm not sure if it's related but not long after noticing the redirects my Windows User Account control settings were reset from never notify to default. I had NOD32 version 4 installed and ran a scan which found malicious java files in the temporary folder. I uninstalled NOD32 and installed the latest version of Kaspersky Internet Security, yet some time later I started getting the same occasional redirects with no malicious files detected in a scan but with at least some of the malicious links blocked by Kaspersky. As an example some of the links appear as xx.xxx.xxx.xxx.com/favicon.ico.

I have run Malwarebytes, TDSSkiller, TFC, aswMBR, and few of the online scan tools with no results.

A:Occasional link redirects to random sites such as "askthecrew.net"

Download Security Check from HERE, and save it to your Desktop. * Double-click SecurityCheck.exe * Follow the onscreen instructions inside of the black box. * A Notepad document should open automatically called checkup.txt; please post the contents of that document.=============================================================================Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply.====================================================================================Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeClick Go and post the result.=============================================================================Download Malwarebytes' Anti-Malware (aka MBAM): http://www.malwarebytes.org/products/malwarebytes_free to your desktop. * Double-click mbam-setup.exe and follow the prompts to install the program. * At the end, be sure a checkmark is placed next to Update Malwar... Read more

Read other 15 answers
RELEVANCY SCORE 70.8

Hi folks,

Thought I may need to start a new thread, I noticed other threads have similar issues to what I'm seeing and didn't want to confuse by re-posting in the same thread.

I have Windows 7 Enterprise and just started having many random windows blue screens. I think it started as soon as I tried to run a trainer for a game Company of Heroes, since McAfee said it was a trojan and I tried to restore it after seeing online by other folks that the file was legit.

Anyway, since then I think, i started to see many BSoDs, not always the same BSoD message and they would occur during normal windows usage, a few times in Safe mode with networking. But most of the time, usually within 5 to 30min of running normally.

Anyways, I ran the McAfee virusscan and it found a few viruses, also ran spybot and malware bytes, and Stinger. I ran them from safe mode and was able to clean out the affected files.

I still see fewer BSoDs, but mainly now my google chrome browser won't work. I've tried uninstall/reinstall and every time I load it, it never works. sometimes freezes and I have to do a hard power off/on on my laptop. I have a lenovo w510.

Other problems is that my windows randomly freezes. Also, so far I can use Internet Explorer and Firefox, not able to install Opera. But when using Firefox or IE, i sometimes get random redirects.

I have ran hijackthis and can provide the log file. I can also provide the windows minidump files.

Please help! I greatly appreciate... Read more

A:Windows 7 - malware, random BSoDs, browsing redirects, random freezes

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

Read other 3 answers
RELEVANCY SCORE 70.4

Hi, and thanks in advance for helping. It really is a great service of you guys.Anyway, I do my best to keep my computer very clean. But low and behold, random websites open every few minutes, I'll turn on the computer and hear ads for condoms, etc., without seeing any browser open (the firefox process will be running though), and I keep getting error messages telling me firefox or I.E. or some other program has to quit. In fact, I just received one saying that the media center store has stopped working:Problem signature: Problem Event Name: APPCRASH Application Name: mcupdate.EXE Application Version: 6.0.6002.18005 Application Timestamp: 49e02324 Fault Module Name: StackHash_27f2 Fault Module Version: 0.0.0.0 Fault Module Timestamp: 00000000 Exception Code: c0000005 Exception Offset: 0001197d OS Version: 6.0.6002.2.2.0.768.3 Locale ID: 1033 Additional Information 1: 27f2All other information, including root repeal, is below or attached. I am just exhausted and it's taking forever to complete). I have run a norton scan, a bit Defender scan, a windows live scan (that seemed to fail at the last step), a Malwarebytes scan, an ad-aware scan, and a spybot scan. Nothing has helped except that the bit defender scan pointed out a possibly infected file labeled 86.tmp and mentioned Trojan.TDss. However, I followed all directions and the problem remains, though the file is gone as bit defender deleted it. Thanks much for helping me. I really do appreciate it.DDS (Ve... Read more

A:Malware -- Site Redirects/Random Ads invisibly running/Firefox stops running (I.E. Too)

Hello! My name is Sam and I will be helping you. In order to see what's going on with your computer I will ask for you to post various logs from the tools that we will use to resolve your issue. Please also share with me any information about how your computer is reacting and behaving each step of the way as we work through this process.Please download Malwarebytes Anti-Malware and save it to your desktop.alternate download link 1alternate download link 2Make sure you are connected to the Internet.Double-click on Download_mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan. If an update is found, the program will automatically update itself. Press the OK button to close that box and continue. If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to install.On the Scanner tab:Make sure the "Perform Quick Scan" option is selected.Then click on the Scan button.If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.The scan will begin and "Scan in progress" will show at the top. It may ta... Read more

Read other 31 answers
RELEVANCY SCORE 70

I've got a new system, and almost at random I get a BSOD on occasion. No excessive system load, and the only correlation I can see is that Firefox had been open each time.

I've included CPUZ screen shots in addition to the dump files.

System:
i5 3570k, Gigabyte GA-Z77X-UD5H (F7 BIOS), Corsair Vengeance DDR3 1600 CAS9 2 x 4GB (Running XMP profile), EVGA GTX 480, SeaSonic Platinum 860w PSU, Cooler Master Hyper 612 PWM, Cooler Master HAF XM case with 2 extra 140mm side intake fans.

A:Occasional BSOD, Firefox always open.

Analysis:BugCheck 0x124
You have a 0x124 hardware bugcheck. If the system is still under warranty, I would recommend sending it in to have diagnostic tests done and any bad hardware replaced.



   Warning
Before you proceed with the following, answer these two questions: Are you still under warranty? Does your warranty allow you to open up the machine to check hardware? If you are unsure of the answers to these questions, contact your system manufacturer. WARNING: The steps that follow can void your warranty!!!

For your hardware stop 0x124 crash, read through Stop 0x124 - what it means and what to try and use the following hardware checks to supplement that link.
If you are overclocking any hardware, please stop.

If you have an SSD, make sure the following are up to date:SSD firmware
BIOS Version
Chipset Drivers
Hard disk controller drivers/SATA drivers
If you have a Marvell IDE ATA/ATAPI device, make sure the drivers are up to date from the Intel site or Marvell site and not from your motherboard/vendor support site.

Run all but the advanced tests with SeaTools for HDDs.SeaTools for Windows

SeaTools for DOS
Monitor temperatures during the following tests. Use the following programs to monitor the temperatures. Real Temp is a good CPU temperature monitor.
Speccy - System Information - Free Download will monitor all hardware temperatures.
HWiNFO, HWiNFO32 & HWiNFO64 - Hardware Information and Analysis Tools can be inaccurate for CPU temperatures, but... Read more

Read other 6 answers
RELEVANCY SCORE 68.8

Hello, came to this site after being frustrated by my laptop. Also motivated by the fact that a similar (same?) problem was solved on the thread http://www.bleepingcomputer.com/forums/ind...850&hl=db76It started three days ago when I noticed that my google searches (on firefox) were leading me (when I clicked on them) to random websites. One of them is toseeka, and a couple were pages non-existent, and I believe a couple were shopping sites. 1. I ran full scans using symantec and spybot S&D, nothing came up.2. I downloaded and ran Malwarebyte's anti-malware program, and Superantispyware. Both of them found something, and they seemed to quarantine/remove the infection. However, when I used google again, the problem persisted. I ran both the programs again and they found nothing. I tried running them in the safe mode and they still did not find anything.In frustration, earlier today, I completely un-installed firefox and reinstalled it (version 3.5). It initially seemed not to redirect anymore, but that did not last. Around this point, my attempts to reboot were followed, some times, by the blue screen at startup asking me to remove any new software/hardware that I have installed. I resisted the temptation to remove the new anti-malware software that I have downloaded. I am able to always boot into the safe mode.In the normal mode, it gives me the blue screen some times. After a couple attempts, I was able to get into the normal mode, get online, download DDS.scr and ru... Read more

A:Firefox google redirect followed by occasional blue screen

Hello frustration_persist,Sorry about the delay. If you still need help, please post a new HijackThis log to make sure nothing has changed, and I'll be happy to look at it for you.Please do this:1. Download HijackThis? here:http://www.trendsecure.com/portal/en-US/th.../hijackthis.php2. Click 'Do a System Scan and Save log'.The HJT log will open in notepad.Thanks,tea

Read other 2 answers
RELEVANCY SCORE 68

I am having a strange problem where occasionally after a Google search the site I click on will redirect to a dummy search site. If I go back to my search results (back button) and reload the page, the link to the site I'm trying to get to will work. The problem does not seem to be very repeatable (many searches will work, then another redirect will occur). The redirect link does show up in the status bar of Firefox when I hover over a link that will be redirected. The link usually always begins with the URL like:
http://googleads.g.doubleclick.net/...

I ran GMER, but many of the selections that were supposed to be enabled were grayed out. Only "Services", "Registry", "Files", "C:\", and "ADS" were checked - all the others I could not enable. GMER reported:
---------------------------
GMER
---------------------------
GMER hasn't found any system modification.
---------------------------
OK
---------------------------

Thank you for any help!

Here is the DDS log:

DDS (Ver_10-12-05.01) - NTFS_AMD64
Run by Matt at 22:27:35.56 on Tue 12/07/2010
Internet Explorer: 8.0.6001.18975 BrowserJavaVersion: 1.6.0_18
Microsoft? Windows Vista? Ultimate 6.0.6002.2.1252.1.1033.18.8190.4962 [GMT -8:00]

SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\... Read more

A:Occasional redirect to dummy sites after a Google Search in Firefox

Hi methomas, and welcome to Bleeping Computer.Your log reveals a malicious Add-on for Firefox installed...Download OTL.exe by OldTimer to your Desktop.Close all windows and double click OTL.exe.In the "Custom Scans/Fixes" window (under the light green bar) paste the following in bold:

netsvcs
drivers32
%SYSTEMDRIVE%\*.*
%systemroot%\*. /mp /s
CREATERESTOREPOINT
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs

Click Run Scan and let the program run uninterrupted.When the scan completes, it will open two Notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL. Post both logs in this thread.You may need to use two posts to get it all.

Read other 12 answers
RELEVANCY SCORE 67.2

The search results for any search engine in Firefox/IE have been redirected to advertisement websites. Also, every 15 minutes or so, a new tab will open of its own accord with similar advertisement websites. Looks similar to a problem a lot of people are having. I was unable to obtain the GMER log. I ran it a few times and it either blue-screened or froze up. Below is the DDS log and I attached the other log. Thanks in advance for the help.DDS (Ver_10-03-17.01) - NTFSx86 Run by Kelly Williams at 11:43:28.73 on Sat 06/12/2010Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_19Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2046.1365 [GMT -5:00]AV: Symantec Endpoint Protection *On-access scanning enabled* (Updated) {FB06448E-52B8-493A-90F3-E43226D3305C}============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcsC:\Program Files\Symantec AntiVirus\Smc.exesvchost.exesvchost.exeC:\Program Files\Common Files\Symantec Shared\ccSvcHst.exeC:\WINDOWS\System32\WLTRYSVC.EXEC:\WINDOWS\System32\bcmwltry.exeC:\WINDOWS\system32\spoolsv.exesvchost.exeC:\Program Files\Apoint\Apoint.exeC:\WINDOWS\system32\rundll32.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\Program ... Read more

A:Firefox/IE searches results redirect to advertisement site; Occasional pop ups for the same sites

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Do not Attach logs unless I ask you to.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.Do not run any other tool untill instructed to do so!In the upper right hand corner of the topic you will see a button called Options. If you click on this in the drop-down menu you can choose Track this topic. By doing this and then choosing Immediate E-Mail notification and then clicking on Proceed you will be advised when we respond to your topic and facilitate the cleaning of your machine.Note** If you are having problems posting the complete log into this thread upload them here http://www.rapidshare.com/ and post the links in this thread Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.Gmer is the best but can be hard to get a log lets try this and see what we get.Scan With RKUnHookerPlease Download Rootkit Unhooker Save it to your desktop.Now double-click on RKUnhookerLE.exe to run it.Click the Report tab, then click Scan.Check (Tick) Drivers, Stealth, Files, Code Hooks. Uncheck the rest. then Click OK.Wait till the scanner has finished and ... Read more

Read other 20 answers