Over 1 million tech questions and answers.

Windows 10 1703 IE 11 'Intranet Sites' and 'Internet Sites' have changed?

Q: Windows 10 1703 IE 11 'Intranet Sites' and 'Internet Sites' have changed?

Hello
We are testing Windows 10 1703 prior to rolling it out to our estate and have come across an issue with Internet Explorer Site Zoning and just wondering if anyone else has seen the issue.
So on Windows 7, 8.1 and Windows 10, 1511 and 1607 using IE11. We have a SharePoint intranet site setup on intranet.example.co.uk. We use a proxy so we have a list of sites that by pass the proxy so for example we have *.example.co.uk in the bypass
proxy exceptions. On the above clients OS we browse to the site in IE and it loads, checking the zone it has picked it up as 'Local Intranet' so seems to use the 'Automatic logon on in Intranet Zone' setting. - all good.
Just for clarity these settings are same in IE on all versions. as are the default security options.

When we do the same thing on Windows 10 1703 it results in the user being prompted for credentials. the same proxy exceptions settings are applied as above. Entering the username/password allows access to the site. Checking the zone and the site is
being seen as an 'internet site'. This issue also appears in Chrome and Edge and only on Windows 10 1703
Adding intranet.example.co.uk to the bypass list makes no difference either, the only thing that does work is by adding intranet.example.co.uk into the Local Intranet Zone sites list - again all other settings are the same as above and work on
previous versions of Windows.
So the question is has Microsoft changed something in IE on Windows 10 1703 that affects the 'bypass proxy exceptions' list.

Does it now mean that everything that is an Intranet site will have to be specified in the Local Intranet Zone sites list?
Has anyone else come across this issue?
Thanks

Read other answers
RELEVANCY SCORE 200
Preferred Solution: Windows 10 1703 IE 11 'Intranet Sites' and 'Internet Sites' have changed?

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

RELEVANCY SCORE 110

Hi Guys,

Original post:

http://www.techsupportforum.com/f100...es-368470.html

Im new here. Please help me on this. Everytime I tried to browse to our intranet sites, it redirects me to some 'malicious' internet sites. I can't access all of our intranet sites now, since last week. And a lot of pop ups are showing whenever I tried to browse the web, very irritating..

Your help will be greatly appreciated..

=============== DDS.txt ===========================

DDS (Ver_09-03-16.01) - NTFSx86
Run by ADMIN at 11:31:27.28 on Mon 04/20/2009
Internet Explorer: 7.0.5730.11
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1014.328 [GMT 8:00]

AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated)
AV: Microsoft Forefront Client Security *On-access scanning enabled* (Updated)
FW: Sygate Security Agent *enabled*

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
c:\Program Files\Microsoft Forefront\Client Security\Client\Antimalware\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
C:\Program Files\Sygate\SSA\smc.exe
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
C:\Program Files\Microsoft Forefront\Client Security\Client\SSA\FcsSas.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\M... Read more

A:Intranet Sites Redirected to Other Internet Sites

Hello and Welcome to TSF.

Please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription.

Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.

------------------------------------------------------

It appears that you have two antivirus programs installed and running, AVG and Microsoft Forefront Client Security. While this may seem like better protection, they can actually conflict with one another and cause system instability or even system hangs. Please choose one to keep and uninstall the other via Add or Remove Programs in your Control Panel.

------------------------------------------------------

Please note that these fixes are not instantaneous. Most infections require more than one round to properly eradicate.

Please stay with me until given the 'all clear' even if symptoms seemingly abate.

Kindly follow my instructions and please do no fixing on your own or running of scanners unless requested by a helper.

------------------------------------------------------

Please visit this webpage for download links, and instructions for running ComboFix:

http://www.bleepingcomputer.com/comb...o-use-combofix

* Ensure you have disabled all antivirus and antimalware programs so they do not inter... Read more

Read other 9 answers
RELEVANCY SCORE 100.8

IE11 tel: Link does not work in trusted sites or intranet sites
If the site is in internet zone the link does work.

Any hints for a fix?

Read other answers
RELEVANCY SCORE 94.4

Hi Guys,

Im new here. Please help me on this. Everytime I tried to browse to our intranet sites, it redirects me to some 'malicious' internet sites. I can't access all of our intranet sites now, since last week. And a lot of pop ups are showing whenever I tried to browse the web, very irritating..

Your help will be greatly appreciated..

Here's my log from HijackThis. I don;t have any idea how to interpret this..
-------------------------------------------------------
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:02:13 AM, on 4/20/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
c:\Program Files\Microsoft Forefront\Client Security\Client\Antimalware\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Sygate\SSA\smc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
C:\Program Files\Microsoft Forefront\Client Security\Client\SSA\FcsSas.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\system32\CCM\CLICOMP\RemCtrl\Wuser32.exe
C:\WINDOWS\system32\CCM\Ccm... Read more

A:Please Help. :( Intranet Sites Redirected to Other Sites

Hello and welcome to TSF.

HijackThis is no longer the preferred initial analysis tool in this forum

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Read other 1 answers
RELEVANCY SCORE 91.6

Hello,
Is there Registry key to uncheck Display intranet sites in Compatibility View from Internet Explorer ?

-Subramani

Read other answers
RELEVANCY SCORE 88

Hi,

When i am opening my intranet websites which have security prompts
from IE11 in windows server 2016 as shown below and passing the credential,its not responding after clicking OK button.


Request advise on the same.



Thank you.

Regards,
Prashant

Read other answers
RELEVANCY SCORE 84.8

I can not consistently load pages using IE8 on my local intranet. I never receive a "page not found" error. You just get a "wait for..." message in the progress bar and nothing ever happens.

This only affects my PC. All other PCs in the network load the pages without issue.

I do develop web applications on this PC, so not sure it software or settings on my PC are preventing a consistent load.

Any help is appreciated.
 

A:IE and Intranet sites

Read other 7 answers
RELEVANCY SCORE 84.8

INTERNET URLs being changed to point to other sites

When I use AOL/IE the home pages come up OK. However as soon as I select another URL (e.g. http://forums.techguy.org) the page starts to load but is then replaced by another URL (e.g. www.hitpointer.com/ssredir/gb.html - adult site or www.sweepstakes.com) Plus lots more IE windows with adverts are started. I CAN NO LONGER ACCESS ANY SITE OF MY CHOICE. I.e. this is being posted via another computer

Original problem was about:blank which had hijacked my default IE page. Search of various sites indcated use of Spybot Search and Destroy and Adaware. I also tried to get CWShredder but the links to this no longer appear to work.

Scans using above located C2.lop amongst others. This caused Spybot 1.2 to hang. Now have Spybot 1.3 - no longer hangs. Ran and fixed all in red. Latest log below. Note the DSO Exploit and Primesoft entries come up again and again even after a fix.

Ran Adaware 6.0 Personal Build 181. Quarantined all and removed. Log below.

Ran Hijackthis - log below. Please also note that I am using AOL V7.0

Note also running Zone Alarm 4.5.594.000. This is detecting attempts to access the net from infus.exe, sncntr.exe znwmldfj.exe and other programs I don't recognise.

Also have Norton 9.05.15 which is finding nothing.

HIJACK THIS LOG
Logfile of HijackThis v1.97.7
Scan saved at 21:46:21, on 16/08/2004
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v5.50 (5.50.4134.0600)

Running processes:
C:\... Read more

A:INTERNET URLs being changed to point to other sites

i would say do one of the following.... try to reinstall that version of aol or update it along with IE... and wait and see once some one can tell you what to take off of your "hijack this" log.
 

Read other 1 answers
RELEVANCY SCORE 82.8

I recently switched internet providers for a better price and higher up and down speeds. But now my google chrome and mozilla firefox web browsers are both having a hard time loading web sites and/or pages on web sites. Most of the time the little loading circle on the top left of the browser remains grey in color and circles endlessly until several different messages appear. At other times, the grey circle does turn to blue, but it still takes way too long to load. Some messages that appear say, took to long, check internet connection, or cannot find dns server, or check your proxy and fire wall. I never had this problem prior to changing internet services. I called tech at my new service, and they checked everything from their end, including re-booting the modem, and the problem remains. I'm having no problem whatsoever with the internet connection and am eventually able to load a web site, but it's time consuming, and frustrating. Can anyone help? Thanks!     

A:Changed internet service, now having problems loading web sites from browser

The first thing I would do is go to control panel, internet options, lan settings, and make sure nothing is checked.  Also, I would open Ccleaner (install if you do not have it,) open it, and run cleaner.  Let it close whatever is open.  You can also check to see what is in start up under the tools option.  You may have lots of things there.  You can disable all to see if that helps.  Last resort would be to open device manager, under network adapters, find yours, right click and select uninstall.  Then restart.  Your computer will find the network adapter, and reinstall it.  Hopefully something helps.  If your new ISP had you install a bunch of software when you subscribed perhaps that is what is causing the issue.  You do not need any additional software to connect to cable internet.

Read other 0 answers
RELEVANCY SCORE 82.8

I am using the browser Internet Explorer7 . I am trying to open the 'Local Intranet' sites but i am unable to open the local sites. Please any one help me to open the local intranet sites using IE7 browser.

Thank You,
Jug

A:Can't Open Local Intranet sites Using IE7

what happens when you try and open them

Read other 2 answers
RELEVANCY SCORE 82.8

Hi

I'm not sure that anyone can help me with this problem but I'd like to ask.

DETAILS:

IBM Thinkpad T22 Laptop
Windows 2000 Professional

A user at our company connects to an internal intranet website. The web server is located in the US (we are in the UK) and so its a bit slow but ok.

When he gets to a certain site he clicks a link that should open an Excel document. He clicks the link and his pc appears to freeze up. I checked task manager and IE is still running, cpu usage is around 3%. If you wait for 8 minutes (timed it a few times) the document opens up fine.

I logged the user off and logged on as myself. I accessed the link and the document opend up with 10 seconds!

Things I have tried:

1. Ran an IE browser repair.
2. Rebuilt the users Windows 2000 Profile.
3. Deleted Temp Internet Files including Index.dat
4. Detect and Reapir in Excel (just in case!)

Its not a major problem but the document should open up in about 10-15 seconds instead of 8 minutes.

Does anyone have any suggestions for me?

Regards

Pileyrei
 

A:Problems accessing intranet sites

Anyone?
 

Read other 1 answers
RELEVANCY SCORE 82

I have, what seems to me, a strange problem. The company I work for uses sharepoint for our intranet sites (no, this is not a sharepoint question) and we have recently upgraded to a new version. When we upgraded, the site now needs to be added to the local
intranet site list in order for it to automatically receive windows log in credentials and log users in to SharePoint. This is a simple fix, I have done it on dozens of machines, but on a select few the fix doesn't seem to work. Whenever I add a website to
the intranet sites list, it acts as if it was added... then as soon as I close the dialog box that is used to enter and display this info, it's gone, and by gone I mean I open back up the box and it has disappeared from the list. There is no trace of me ever
having changed a setting. There are currently no GPOs active that would cause these to be taken out of the list, I have tried adding the sites directly into the registry and they disappear there too, I'm not sure if this is the right place for my question
but I figure it's a start. So again:
Problem: Sites do not stay in proper security zone, all traces of them existing are erased on closing of dialog box.

Troubleshooting Done so Far: Tried directly placing in registry, no fix. No GPO's are active to remove said sites from zones.

A:IE 11 - Intranet sites added to list do not stay

Hi,
"but on a select few the fix doesn't seem to work"
Confused with this sentence, does this issue only occur in a specific PC\user account?
Have you tried the suggestion mentioned in the your original thread to reset IE, test the result?
What about other security zones, like Internet or trusted zone? Are there any other websites under the Intranet zone? Though you mentioned that these's no GPO applied to control this, I still recommend you run cmd rsop to check the settings applied
on this machine and user account.
Yolanda Zhu
TechNet Community Support

Read other 4 answers
RELEVANCY SCORE 81.6

I have a problem.....I have go-back drive available on my computer....but I do not want it to revert any of the internet sites or chats from the past. What can I do to make sure that no recovery of these sites/chats can be restored at a later date (either from Wildfire or any other recovery disc)? Thanks Dana Potter
 

A:eliminating access of recovery/go-back drives to all internet sites and chat sites vi

Hiya and Welcome

I assume these chats are done via web sites. The best way to safeguard yourself if you don't want these ever to be recovered is to Wipe them.

You won't be able to wipe direct from your Temperory Internet Folder. What you need to do, is go to Find Files and ensure that the Look In is set to your Tempory Internet Folders.

Then type in *.jpg, *.gif, *.bmp, *.html, and anything else that is in there. Once they come up, you will be able to wipe. Use a 7DoD wipe.

Best product is BCWipe from www.jetico.sci.fi/bcwipe.htm

Regards

eddie
 

Read other 1 answers
RELEVANCY SCORE 81.2

Good morning. Have been having lots - and I mean lots - of problems with computer booting up and shutting down. Have had to shut down from tower more times than I like to think about. My computer is a Penium III and I am using Windows 98. I read in one of the threads here about the restricted and trusted sites listed in the "tools internet options". When I went there and looked at the restricted sites listed I was amazed. There are things there that I have no idea what they are or where they come from. I did find "coolwwwsearch" listed there several times (and I have been trying to find this forever!) My question is: Do I have to have any of these things listed there? and Is there someway to keep them from coming back if they are deleted? I made a list of some of the things listed there but there are many many more: *Blazefind.com, Kliksearch.com, *zoofil.com; *cameup.com; www. gohip.com, *search.rub.to, *duolaime.net, revolto3.da.ru - and the list goes on an on. I also found numerous sites which appeared to be porn sites and I have already deleted those (at least I hope I got them deleted). Any ideas? Will be leaving for work shortly but will be back after 6:00 p.m (EST) and will check back for any ideas or help. Thanks so much for all your valuable anticipated help.
 

A:sites lissted as restricted sites in Internet Options Security??

Read other 6 answers
RELEVANCY SCORE 81.2

Hello,

My computer is automatically redirecting me searchalligator.com for either single word address bar searches or when looking up intranet sites (but not connected to my intranet via vpn).
This line item pops up every few seconds in my TCP view and the IP address resolves to searchalligator.com. Please help.

I am on a wireless network, if that makes any difference.

Here's my tcpview:
AppleMobileDeviceService.exe 268 TCP 127.0.0.1 27015 0.0.0.0 0 LISTENING
CcmExec.exe 3800 UDP 127.0.0.1 2553 * *
cvpnd.exe 680 TCP 127.0.0.1 62514 127.0.0.1 2487 ESTABLISHED 488 24,400 488 7,808
cvpnd.exe 680 UDP 127.0.0.1 62514 * *
iexplore.exe 1016 UDP 127.0.0.1 1522 * * 1,334 1,334 1,335 1,335
iexplore.exe 3020 UDP 127.0.0.1 1873 * * 20 20 21 21
iexplore.exe 3020 TCP 192.168.0.100 3220 204.2.187.17 80 ESTABLISHED
iexplore.exe 3020 TCP 192.168.0.100 3221 204.2.187.17 80 ESTABLISHED
iexplore.exe 3020 TCP 192.168.0.100 3222 204.2.187.17 80 ESTABLISHED
iexplore.exe 3020 TCP 192.168.0.100 3223 204.2.187.17 80 ESTABLISHED
iexplore.exe 3020 TCP 192.168.0.100 3225 204.2.187.17 80 ESTABLISHED
iexplore.exe 928 TCP 127.0.0.1 3231 127.0.0.1 5152 FIN_WAIT2
jqs.exe 1692 TCP 127.0.0.1 5152 127.0.0.1 2938 CLOSE_WAIT
jqs.exe 1692 TCP 127.0.0.1 5152 0.0.0.0 0 LISTENING
lsass.exe 1728 UDP 0.0.0.0 500 * *
lsass.exe 1728 UDP 127.0.0.1 2500 * *
lsass.e... Read more

Read other answers
RELEVANCY SCORE 81.2

how can I enable this option ( display intranet sites in compatibility view ) in IE 11

Read other answers
RELEVANCY SCORE 80.4

I can't call up any sites with Internet Explorer. I don't know whether this is a blessing or a curse. I have tried all of the pinned suggestions. I have a linksys router which I've bypassed and I've turned off my ZoneAlarm Internet Security; heck, I've even uninstalled it. Reiinstalled when discovered that that wasn't the problem. My uber-geek bud, 'SoundBlister,' wonders what is my problem. My Firefox, Opera, and K-meleon work fine. Automatic Updates works fine. I have even uninstalled and reinstalled the OS, XP Professional SP2, and still obtain the same results. I have tried it without selected programs installed. I have had the hardware and software environment checked by an ex-employee of Microsoft. He couldn't find anything wrong, except IE can't raise any sites. I live in Huntsville, AL and in a rural setting without any profound radiation sources. None of my neighbors have this problem. I figured that I must be doing something during setup or configuration (like turning off the wrong service), so I got a friend to install XP the last time. Nope. I forgot about the problem for a few months because it doesn't really bother me. I can download from the Microsoft sites with Firefox; Microsoft provides a plugin for that. It is the mystery that bothers me. Any theories welcome. I don't have this problem on my other Windows computer, just my main one. I don't use IE on my Mac.Any information needed beyond what I given?

A:I Can't Access Any Sites With Internet Explorer, Not Even Microsoft Sites

Hello,This is just a suggestion you may consider trying, not a fix or workaround. Maybe downloading and installing IE7 beta is worth a shot. Just some food for thought.Hope this helps,nos

Read other 3 answers
RELEVANCY SCORE 80.4

Hello, i'm really clueless as to my next, step possibly a re-install of windows if no one here can help.

i have a laptop and another PC both networked to my PC using crossover cables. 2 network cards in my computer bridged and ICS shared over the bridge. Both can access the internet with no problems using internet explorer, MSN etc.

My PC however will only do the following:

Ping IP addresses/domain names
allow a bit torrent client to download files
allow a poker program to run online
update ad-aware definitions

It will not:

open web pages using Internet Explorer or Firefox
sign into msn (has once or twice since this problem started)

I have scanned with ad-aware and norton 2007 both up to date, found some things and fixed them but still not working.

HijackThis log....

Logfile of HijackThis v1.99.1
Scan saved at 01:19:23, on 06/04/2007
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\Mixer.exe
C:\Program Files\DU Meter\DUMeter.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\... Read more

A:connected to the internet, can ping sites, but can't open sites in IE/FF

Read other 9 answers
RELEVANCY SCORE 78.4

Hi, i am looking for a policy that will allow me to uncheck 'display intranet sites in compatibility view' without graying out the option to recheck it if a user needs the option in the future. So far the only option i found under Computer
Configuration/Administrative Templates/Windows Components/Internet Explorer/Compatibility View/Turn on Internet Explorer Standards Mode for Local Intranet would gray out the option to recheck the box.

Read other answers
RELEVANCY SCORE 78.4

Hi,

We have an odd issue. IE11 is running all sites in compatibility mode. This appears to be because it is treating all sites as being in the Intranet Zone. This is:
a) breaks many websites that require modern browsers 
b) is a huge security issue as many protections are disabled by default on the intranet zone.

Has anyone else seen this or have ideas on what we can do to solve it.

I will add that we have autodetect proxy settings enabled, and wpad hosts a proxy.pac that instructs browsers to go direct to all websites. 

Thanks

Nick

Read other answers
RELEVANCY SCORE 76

Dear All,

I have a problem in that I cannot connect to Microsft sites et al and I have been referred to this place in order to seek help to solve this problem. I have read the sticky threads and I think I have complied well with the instructions therein...so here goes:

This is the Hijackthis log:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:02:12, on 12/09/2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINXP\System32\smss.exe
C:\WINXP\system32\csrss.exe
C:\WINXP\system32\winlogon.exe
C:\WINXP\system32\services.exe
C:\WINXP\system32\lsass.exe
C:\WINXP\system32\Ati2evxx.exe
C:\WINXP\system32\svchost.exe
C:\WINXP\system32\svchost.exe
C:\Program Files\Trusteer\Rapport\bin\RapportMgmtService.exe
C:\WINXP\System32\svchost.exe
C:\WINXP\system32\svchost.exe
C:\WINXP\system32\Ati2evxx.exe
C:\WINXP\system32\svchost.exe
C:\WINXP\system32\svchost.exe
C:\WINXP\system32\spoolsv.exe
C:\WINXP\system32\svchost.exe
C:\Program Files\Siber Systems\GoodSync\Gs-Server.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\Program Files\Google\Update\1.3.21.115\GoogleCrashHandler.exe
C:\WINXP\system32\IoctlSvc.exe
c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
C:\Documents and Settings\All Users\Application Data\Skype\Toolbars\Skype C2C Service\c2c_service.exe
C:\WINXP\system32\svchost.exe
C:\WINXP\system32\atwtusb.exe
C:\WINXP\System32\alg.exe
C:\WINXP\Explorer... Read more

A:Windows XP cannot access Microsoft sites or Security Sites

Read other 11 answers
RELEVANCY SCORE 74.4

Greetings!,

I have a machine with the following specs:




HP Compaq Pro 6305 MT
Windows 7 Professional (x64) Service Pack 1 (build 7601)
3.80 gigahertz AMD A10-5800B APU with Radeon HD Graphics




192 kilobyte primary memory cache




4,096 kilobyte secondary memory cache




64-bit ready




Multi-core (2 total)




Hyper-threaded (4 total)




Board: HP 1850




Serial Number: 2UA3470MW8




Bus Clock: 100 megahertz




BIOS: HP K06 v02.57 8/16/2013





As of 04/25/2017 it refuses to go to http sites, but it will go to https sites.  I have used Explorer, Chrome, and Firefox with the same results.  The Websites are saved as favorites in each browser, and we have gone to them for years, now they
all say that the webpage cannot be displayed, check that I have entered the url correctly and try again.  However, if I go into the address bar and just add "s" behind the http it goes to the site with no problem.  Why is this happening
now after all this time going to these sites?  What has changed and how can I fix it?  I have reset explorer, cleared history, cache, etc, reset Winsock, and IPV4, reset the following:  
regsvr32 softpub.dll
regsvr32 wintrust.dll
regsvr32 initpki.dll
regsvr32 dssenh.dll
regsvr32 rsaenh.dll
regsvr32 gpkcsp.dll
regsvr32 sccbase.dll
regsvr32 slbcsp.dll
regsvr32 cryptdlg.dll

not using a proxy, not using Windows Firewall, We have Sym... Read more

Read other answers
RELEVANCY SCORE 72.4

Everytime I go to a certain website, such as youtube.com or myspace.com, the browser always brings me to dictionary.com instead.(This applies for any browser, IE, Mozilla, etc.) It gets really frustrating at times because then I have to use uk.youtube.com, and I can't seem to get into myspace. I think it has to do with the settings, but I don't know how to fix the problem. Any suggestions?

A:Sites Changed to Another Site

you are infected follow the 5 steps here
http://www.techsupportforum.com/showthread.php?t=15968

Read other 1 answers
RELEVANCY SCORE 71.6

Hi,
 
When I try to browse these 2 sites:
 
http://www.pixiv.net/bookmark_new_illust.php
http://www.bleepingcomputer.com/forums/t/538020/ie-browser-hi-jacked-by-demdex/ (yes, within bleepingcomputer itself)
 
Ads that shouldn't be there are disrupting the page. I'll post a screenshot later.
 
I also noticed that my router's DNS got changed to something that it shouldn't be. I changed it back, but it was something like 93.xx.xxx.xxx. It also got changed to 46.16.97.220 once as well. I feel like whatever is crawling around in my computer might have caused it...
 
For the pixiv.net link, this is what happens:
 
Screenshot 1, this is what pixiv ads normally look like:

 
Screenshot 2, But after the page is loaded:

 
 
And for bleepingcomputer, it's even worse!
 

 
Checking the console on the browser while these pages are loading, there are way too many ads scripts loading but I couldn't find what exactly is causing it. I did, however, find a few things like 'demdex' and 'ybf.io', and upon searching, these things aren't good.
 
I'm currently running on safe mode as I type and screenshot all of this.
 
I have run Malwarebytes Anti-Malware, Windows Defender, JRT, TDSSkiller, Windows Defender. And then CCleaner at the end for cleanup. It's still there.
 
FRST:
 
 
 
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 04-11-2016
Ran by Zekira Drake (administrator) on G... Read more

Read other answers
RELEVANCY SCORE 71.6

Hello, I've recently run into an issue where occasionally, when I click on a link while using Firefox under Windows 7, I am redirected to an ad site. I'm not sure if I should post the ad site url here, but the name that I keep seeing before it loads is "purchasereviews". After it does this, it seems to send me to "adfly", and then the ad is skipped and I am sent to Google. I'm unsure at the moment if it is sending me to my homepage, which is Google, or if it is just sending me to Google (what I mean is if I changed my homepage, I'm not sure if it'll send me there instead or still send me to Google). Something that I recently discovered is that all of the links on one page get changed to the "purchasereviews" website once in a while. I've taken screenshots of this and uploaded them. You can see what the links are in the bottom-left corner. I caught the links that were changed in the first screenshot compared to when the links are sometimes normal, which is the second screenshot. I'm not sure if Tinypic is the best place for uploading screenshots, but here they are:
 
Links are changed:
http://tinypic.com/view.php?pic=2wcqrfo&s=6
 
Normal, no changed links:
http://tinypic.com/view.php?pic=2rg03yr&s=6
 
I'm unsure what is causing this. So far, I've downloaded Malware Bytes (which was very difficult because of this redirecting issue) and ran it. It detected some things but removed them and rebooted. The problem still occurs though. I also ran Windows Defend... Read more

A:Redirected to ad sites, links being changed

Please download TDSSKiller from here and save it to your DesktopDoubleclick on TDSSKiller.exe to run the application, then click on Change parameters
Check Loaded Modules and Detect TDLFS file system. Do not check Verify file digital signatures (even though it is checked in the example)If you are asked to reboot because an "Extended Monitoring Driver is required" please click Reboot now
Click Start Scan and allow the scan process to runIf threats are detected select Skip for all of them unless I instruct you otherwiseClick Continue
Click Reboot computerPlease post the contents of TDSSKiller.[Version]_[Date]_[Time]_log.txt found in your root directory (typically c:\)in your replyDue to forum upgrade you may face issues posting the TDSSkiller log.Just last few lines of log is sufficient===================================================RKILLPlease download Rkill by Grinler from one of the 4 links below (if one of them does not work try another.) and save it to your desktop:Link 1Link 2Link 3Link 4In order for Rkill to run properly you must disable your anti-malware software. Please refer to this page if you are not sure how.Double-click on Rkill. (If you are using Windows Vista, please right-click on it and select Run As Administrator)Note: You may have to run Rkill a few times before it is successful. You may also have to download Rkill from a different link which will save it as a different file name.A black screen will appear and then disappear. Please do not worry, th... Read more

Read other 9 answers
RELEVANCY SCORE 71.6

Neustar starting blocking websites and I changed my DNS server to 8.8.8.8 and 8.8.4.4
Its still blocking me from doing anything. I want my movies back.
What else can I do to get around this?
 

A:Neustar Blocking sites after changed DNS

What is "Neustar" and why do you need it?
is it ISP?
 

Read other 8 answers
RELEVANCY SCORE 70.8

Hi,Google searches in Internet Explorer (I don't use FireFox - no judgements please) are returning results where title and descriptions look like valid results to my search but the website link is replaced with a link to an ad site.I am using Windows XP Pro SP3 (current on all updates) with ZoneAlarm Security Suite (current on all updates).I tried running the DDS Tool but did not receive any log files. When running the tool, a command screen briefly appears (more like flases) and nothing else seems to happen. I tried downloading the tool a second time with the same results. Downloading DDS and renaming the file at the save screen also yields the same results.I have posted my HJT log below. Thank you for any help you can give me.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 10:39:06 AM, on 4/4/2009Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\WINDOWS\system32\inetsrv\inetinfo.exeC:\... Read more

A:Links in Google search changed to ad sites

Hello asilverleaf,Please download Malwarebytes' Anti-Malware from one of these places:http://www.majorgeeks.com/Malwarebytes_Ant...ware_d5756.htmlhttp://www.besttechie.net/mbam/mbam-setup.exeDouble Click mbam-setup.exe to install the application. * Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish. * If an update is found, it will download and install the latest version. * Once the program has loaded, select "Perform Quick Scan", then click Scan. * The scan may take some time to finish,so please be patient. * When the scan is complete, click OK, then Show Results to view the results. * Make sure that everything is checked, and click Remove Selected. * When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note) * The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM. * Copy&Paste the entire report in your next reply along with a fresh HijackThis log.Extra Note:If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediately.Thanks,tea

Read other 6 answers
RELEVANCY SCORE 70.8

Hi, is any body can help?When I navigate to any URL all add images in any page changed with links to different sites like: 85.17.166.173, 85.12.43.98, <http://www.ya.ru> etc.I run Hijackthis and here is the log file:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 9:30:54 PM, on 3/21/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16608)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\csrss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Windows Defender\MsMpEng.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exeC:\Program Files\Alwil Software\Avast4\aswUpdSv.exeC:\Program Files\Alwil Software\Avast4\ashServ.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\WINDOWS\System32\cisvc.exeC:\Program Files\Cisco Systems\VPN Client\cvpnd.exeC:\... Read more

A:All Add Images In Any Website Changed With Links To Different Sites

Hello kalex Welcome to Bleeping Computer! Sorry about the delay. We're all volunteers here, and it's been very busy. If you still need help, please post a new HijackThis log to make sure nothing has changed. Before posting the log, please make sure you follow all the steps found in this topic: Preparation Guide For Use Before Posting A Hijackthis Log <--link And I'll be happy to take a look at it for you. I also need to see a different type of log from Hijackthis: Run Hijackthis.Click on "Open the Misc Tools section".Next click on "Open uninstall manager".Press the button 'save list'. It will open a Notepad file.Place the content of that file here in your next reply.Thanks, for your patience.

Read other 1 answers
RELEVANCY SCORE 69.2

Hi,

SInce i reformatted and re installed Vista Business in my laptop i was unable to connect to microsoft websites and certain bank websites.

I found the problem is with the wireless router, as when i connect directly to the modem all sites work fine.

Any idea which settings can be wrond in the router?

Thanks

Best regards
Khawar
 

A:Wireless Router blocking access to Microsoft sites and Bank log in sites

It might help to know what brand and model of wireless router you are using!
 

Read other 3 answers
RELEVANCY SCORE 69.2

Hey Guys,

I sure hope someone can help me with this one. The problem is basically what the title says - any link clicked on via Google is redirected to an ad site, a dead site, or some kind of anti-spyware site (seldom the same site), pretty much all Anti-Virus anti-spyware sites are inaccessible unless visited via a proxy, and likewise no programs can update via the internet.

I read somewhere that it could be in the windows Hosts file redirecting traffic, but there is nothing like that in there. Really clueless here. Here are my logs.

Info.txt

info.txt logfile of random's system information tool 1.04 2008-12-09 16:39:09

======Uninstall list======

-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0016-0409-0000-0000000FF1CE} /uninstall {4CA4ECC1-DBD4-4591-8F4C-AA12AD2D3E59}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0018-0409-0000-0000000FF1CE} /uninstall {4CA4ECC1-DBD4-4591-8F4C-AA12AD2D3E59}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001B-0409-0000-0000000FF1CE} /uninstall {4CA4ECC1-DBD4-4591-8F4C-AA12AD2D3E59}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {3EC77D26-799B-4CD8-914F-C1565E796173}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120... Read more

A:All Google Links & Antivirus Sites Redirect to Spam/Ad/Junk Sites

Hello rolypoly,Well, you posted all the garbage I don't need, and didn't post the part I do need. Delete that thing, please and get HijackThis : http://www.trendsecure.com/portal/en-US/th.../hijackthis.phpPlease post the log in your reply. Do you have a router?Thanks,tea

Read other 9 answers
RELEVANCY SCORE 69.2

Please help me. I am having several problems that I've never had before with my computer and I am now convinced that it is hi-jacked and infected with malware.

The only protection I have used since I got the computer is avast antivirus protection and piriform ccleaner. I have had no malware, spyware or viruses on this computer in the past. I've had it for almost a year.

However my computer has since yesterday (i think) become infected. It has not slowed down much, but whenever I use Google, it redirects me to random sites. Many websites I visit regularly that have never had pop-up ads before now have pop-up ads.

When I went to check my e-mail in Hotmail, I received this message constantly:

"Please refresh your browser window. When you access your Windows Live Hotmail account from more than one computer, we ask you to sign in again to help keep your account private and secure."
At this point I decided to install Spybot, however the website was blocked. I went to download.com and downloaded it and attempted to install but I was unable to, receiving this message:

"Error sending request. The server name or address could not be resolved."

I just installed ad-aware and did a full scan and it found one malware agent and supposedly fixed it, but after rebooting all of these issues are still occuring.

So this brings me to here and now. I just downloaded Trend Micro HijackThis and here is my log:

Logfile of Trend Micro HijackThis v2.0.2
Sca... Read more

A:Google redirects to random sites, some sites blocked, can't install spybot.

Read other 6 answers
RELEVANCY SCORE 69.2

Hi,
 
I can't access certain sites owing to Avast Anti-vir detecting a trojan infection - "JS:Includer-BOF".  The browser tabs display blank pages.  When I try to reach the sites via Google links, I'm redirected to what I assume are malicious sites, which are impossible to leave, save for closing the tab.
 
All help is gratefully appreciated.  Thanks.
 
AdwCleaner 6.3.0 detects 3 registry entries, but I have left them in place.
 
# AdwCleaner v6.030 - Logfile created 21/11/2016 at 20:48:22
# Updated on 19/10/2016 by Malwarebytes
# Database : 2016-11-21.2 [Local]
# Operating System : Windows 7 Home Premium Service Pack 1 (X64)
# Username : Dad - DAD-PC
# Running from : C:\Users\Dad\Downloads\AdwCleaner.exe
# Mode: Scan
# Support : https://www.malwarebytes.com/support
 
 
 
***** [ Services ] *****
 
No malicious services found.
 
 
***** [ Folders ] *****
 
No malicious folders found.
 
 
***** [ Files ] *****
 
No malicious files found.
 
 
***** [ DLL ] *****
 
No malicious DLLs found.
 
 
***** [ WMI ] *****
 
No malicious keys found.
 
 
***** [ Shortcuts ] *****
 
No infected shortcut found.
 
 
***** [ Scheduled Tasks ] *****
 
No malicious task found.
 
 
***** [ Registry ] *****
 
Key Found:  HKLM\SOFTWARE\Classes\CLSID\{9522B3FB-7A2B-4646-8AF6-36E7F593073C}
Key Found:  HKCU\Software\Microsoft\Windows\... Read more

Read other answers
RELEVANCY SCORE 69.2

Hi,
 
I can't access certain sites owing to Avast Anti-vir detecting a trojan infection - "JS:Includer-BOF".  The browser tabs display blank pages.  When I try to reach the sites via Google links, I'm redirected to what I assume are malicious sites, which are impossible to leave, save for closing the tab.
 
All help is gratefully appreciated.  Thanks.
 
AdwCleaner 6.3.0 detects 3 registry entries, but I have left them in place.
 
# AdwCleaner v6.030 - Logfile created 21/11/2016 at 20:48:22
# Updated on 19/10/2016 by Malwarebytes
# Database : 2016-11-21.2 [Local]
# Operating System : Windows 7 Home Premium Service Pack 1 (X64)
# Username : Dad - DAD-PC
# Running from : C:\Users\Dad\Downloads\AdwCleaner.exe
# Mode: Scan
# Support : https://www.malwarebytes.com/support
 
 
 
***** [ Services ] *****
 
No malicious services found.
 
 
***** [ Folders ] *****
 
No malicious folders found.
 
 
***** [ Files ] *****
 
No malicious files found.
 
 
***** [ DLL ] *****
 
No malicious DLLs found.
 
 
***** [ WMI ] *****
 
No malicious keys found.
 
 
***** [ Shortcuts ] *****
 
No infected shortcut found.
 
 
***** [ Scheduled Tasks ] *****
 
No malicious task found.
 
 
***** [ Registry ] *****
 
Key Found:  HKLM\SOFTWARE\Classes\CLSID\{9522B3FB-7A2B-4646-8AF6-36E7F593073C}
Key Found:  HKCU\Software\Microsoft\Windows\... Read more

A:JS:Includer-BOF [Trj] hijacked my popular sites; redirects Chrome to susp. sites

Apologies for posting this twice.  I continually received "ERROR" on a blank page, after clicking "Post", so didn't think it had posted.  I'm using another laptop to post this reply.
 
Only this second post appears to have included the attached "Addition.txt".

Read other 11 answers
RELEVANCY SCORE 69.2

Hi

I am new to this forum. I am having a major issues with my pc. First its all started when the malware paytime.exe attacked my pc. It turned off my firewall(SP2 Firewall), real-time virus scanner(Trend microoffice client,not using its firewall, provided by my service provider). With the help of hijackthis, spybot and ewido and also the interent , able to delete paytime.exe and its related files.
To this I entered in safe mode.

Now I am able to control my firewall. Thats the only success BUT when I click nvmixer.exe in my taskbar, it shows visual C++ runtime error and my virus scanner is saying that officescan client has not started. So in control panel I entered in administrative tools and tried manually to start real time scan process but I failed again. It shows cannot start this process in safe mode.The same thing is repeated for other processes like error reporting etc. I am booting in normal mode only but its showing cant run in safe mode.

For runtime error I tried to download visual runtime files from support.microsoft, I failed to do so. My browser doesnt open sites of microsoft. When I typed support.microsoft.com, Page cannot display error is coming. I even disabled my firewall still it doesnt works.

Could you tell me how to make my process start again? And is there any program that will tell me about missing dlls if any(presently there are no dialogs of missing dlls). And about my browser security settings?

I also present you the log of the hijackthis.

Logfi... Read more

A:Cant able to run virus scanner, open microsoft sites(support sites) in any browser

Sometimes when viruses are cleaned out the process damages system files etc too. I'd suggest starting with a sfc and then if no go run a 'repair' (this installs os over itself and retains data but you'll have to re-do updates).
 

Read other 1 answers
RELEVANCY SCORE 69.2

Hello
This thanksgiving i was download a few files from the internet.. and wha thappened next is that .. whenever i search for something on google, it redirects to a new site that are allll maliciious sites/porn sites !! I am scared to death as this is my office laptop and i am not the kind to browse for this sort of stuff, especially on my office laptop ! I am sure there is a lot of viruses/malwares infecting my laptop . I tried running sophos antivirus , avast antivirus (which did remove a few viruses)) , followed by malware-byte antimalware and spyware doctor. The problem still remains !! I have tried this on IE , Firefox and Chrome. Problem persists on ALL of them !!
Please help me ... here is the contents of the dds.txt pasted below , and the attach.txt and ark.txt are attached. Thanks !!!!

DDS.txt ---
DDS (Ver_09-11-29.01) - NTFSx86
Run by 203017980 at 12:18:36.74 on Mon 11/30/2009
Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_10
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.2038.1152 [GMT -6:00]

AV: Spyware Doctor with AntiVirus *On-access scanning disabled* (Updated) {D3C23B96-C9DC-477F-8EF1-69AF17A6EFF6}
AV: Sophos Anti-Virus *On-access scanning enabled* (Updated) {3F13C776-3CBE-4DE9-8BF6-09E5183CA2BD}
AV: Symantec AntiVirus Corporate Edition *On-access scanning disabled* (Updated) {FB06448E-52B8-493A-90F3-E43226D3305C}
FW: Sophos Client Firewall *enabled* {0786E95E-326A-4524-969... Read more

A:Malware infected. Redirects google searches to mal-sites and porn-sites

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 2 answers
RELEVANCY SCORE 69.2

I would very much appreciate your help with this. It?s driving me Crazy. When clicking on links using Google search pages, I am relentlessly redirected to other commercial sites, many infected and most of them sticky. I must copy and paste the URLs to reach the correct site. Even that can be overridden. The same is true of Yahoo search to a lesser degree. Once redirected, an AVG ?Threat Blocked? window often comes up with a basketful of Trojans. MalwareBytes etc. have neither detected nor fixed it.Wow. Things have gotten nasty out there! Thank you so much!p.s. While running GMER, Resident Shield found 2 instances of ?Trojan Horse Generic2_cACOT?. I removed one but the other was ?inaccessible?, presumably because it had just been removed. (?) DDS (Ver_10-03-17.01) - NTFSx86 Run by Kay at 20:38:40.00 on Wed 05/12/2010Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_20Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2047.783 [GMT -7:00]AV: AVG Anti-Virus *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}AV: Data Protection *On-access scanning enabled* (Outdated) {28e00e3b-806e-4533-925c-f4c3d79514b9}AV: Microsoft Security Essentials *On-access scanning enabled* (Updated) {BCF43643-A118-4432-AEDE-D861FCBCFCDF}============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exec:\Program Files\Microsoft Security Essentials\MsMpEng.exeC:\WINDOWS\S... Read more

A:Google, Yahoo search redirect to infected sites, commercial sites

Hello nandinaWelcome to BleepingComputer ==========================Download OTL to your desktop.Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.When the window appears, underneath Output at the top change it to Minimal Output.Under the Standard Registry box change it to All.Under Custom scan's and fixes section paste in the below in boldnetsvcs%SYSTEMDRIVE%\*.*%systemroot%\*. /mp /sCREATERESTOREPOINT%systemroot%\system32\*.dll /lockedfiles%systemroot%\Tasks\*.job /lockedfiles%systemroot%\System32\config\*.sav %systemroot%\system32\drivers\*.sys /90Check the boxes beside LOP Check and Purity Check.Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post it with your next reply.====================Download the following GMER Rootkit Scanner from HereDownload the randomly named EXE file to your Desktop. Remember what its name is since it is randomly named.Double click on the new random named exe file you downloaded and run it. If prompted about the Security Warning and Unknown Publisher go ahead and click on RunIt may take a minute to load and become available.If it gives you a war... Read more

Read other 25 answers
RELEVANCY SCORE 69.2

Hi,
 
I can't access certain sites owing to Avast Anti-vir detecting a trojan infection - "JS:Includer-BOF".  The browser tabs display blank pages.  When I try to reach the sites via Google links, I'm redirected to what I assume are malicious sites, which are impossible to leave, save for closing the tab.
 
All help is gratefully appreciated.  Thanks.
 
AdwCleaner 6.3.0 detects 3 registry entries, but I have left them in place.
 
# AdwCleaner v6.030 - Logfile created 21/11/2016 at 20:48:22
# Updated on 19/10/2016 by Malwarebytes
# Database : 2016-11-21.2 [Local]
# Operating System : Windows 7 Home Premium Service Pack 1 (X64)
# Username : Dad - DAD-PC
# Running from : C:\Users\Dad\Downloads\AdwCleaner.exe
# Mode: Scan
# Support : https://www.malwarebytes.com/support
 
 
 
***** [ Services ] *****
 
No malicious services found.
 
 
***** [ Folders ] *****
 
No malicious folders found.
 
 
***** [ Files ] *****
 
No malicious files found.
 
 
***** [ DLL ] *****
 
No malicious DLLs found.
 
 
***** [ WMI ] *****
 
No malicious keys found.
 
 
***** [ Shortcuts ] *****
 
No infected shortcut found.
 
 
***** [ Scheduled Tasks ] *****
 
No malicious task found.
 
 
***** [ Registry ] *****
 
Key Found:  HKLM\SOFTWARE\Classes\CLSID\{9522B3FB-7A2B-4646-8AF6-36E7F593073C}
Key Found:  HKCU\Software\Microsoft\Windows\... Read more

A:JS:Includer-BOF [Trj] hijacked my popular sites; redirects Chrome to susp. sites

Apologies for posting this twice.  I continually received "ERROR" on a blank page, after clicking "Post", so didn't think it had posted.  I'm using another laptop to post this reply.
 
Only this second post appears to have included the attached "Addition.txt".

Read other 0 answers
RELEVANCY SCORE 69.2

Hi,
 
I can't access certain sites owing to Avast Anti-vir detecting a trojan infection - "JS:Includer-BOF".  Trying to reach the sites via Google links, redirects me to nefarious sites, which are impossible to leave, save for closing the tab.
 
All help is gratefully appreciated.  Thanks.
 
AdwCleaner 6.3.0 detects 3 registry entries, but I have left them in place.
 
# AdwCleaner v6.030 - Logfile created 21/11/2016 at 20:48:22
# Updated on 19/10/2016 by Malwarebytes
# Database : 2016-11-21.2 [Local]
# Operating System : Windows 7 Home Premium Service Pack 1 (X64)
# Username : Dad - DAD-PC
# Running from : C:\Users\Dad\Downloads\AdwCleaner.exe
# Mode: Scan
# Support : https://www.malwarebytes.com/support
 
 
 
***** [ Services ] *****
 
No malicious services found.
 
 
***** [ Folders ] *****
 
No malicious folders found.
 
 
***** [ Files ] *****
 
No malicious files found.
 
 
***** [ DLL ] *****
 
No malicious DLLs found.
 
 
***** [ WMI ] *****
 
No malicious keys found.
 
 
***** [ Shortcuts ] *****
 
No infected shortcut found.
 
 
***** [ Scheduled Tasks ] *****
 
No malicious task found.
 
 
***** [ Registry ] *****
 
Key Found:  HKLM\SOFTWARE\Classes\CLSID\{9522B3FB-7A2B-4646-8AF6-36E7F593073C}
Key Found:  HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9522B3FB-7A2B-4646-8AF6-36E7F593073C}
Key ... Read more

Read other answers
RELEVANCY SCORE 69.2

Hi,
 
I can't access certain sites owing to Avast Anti-vir detecting a trojan infection - "JS:Includer-BOF".  Trying to reach the sites via Google links, redirects me to nefarious sites, which are impossible to leave, save for closing the tab.
 
All help is gratefully appreciated.  Thanks.
 
AdwCleaner 6.3.0 detects 3 registry entries, but I have left them in place.
 
# AdwCleaner v6.030 - Logfile created 21/11/2016 at 20:48:22
# Updated on 19/10/2016 by Malwarebytes
# Database : 2016-11-21.2 [Local]
# Operating System : Windows 7 Home Premium Service Pack 1 (X64)
# Username : Dad - DAD-PC
# Running from : C:\Users\Dad\Downloads\AdwCleaner.exe
# Mode: Scan
# Support : https://www.malwarebytes.com/support
 
 
 
***** [ Services ] *****
 
No malicious services found.
 
 
***** [ Folders ] *****
 
No malicious folders found.
 
 
***** [ Files ] *****
 
No malicious files found.
 
 
***** [ DLL ] *****
 
No malicious DLLs found.
 
 
***** [ WMI ] *****
 
No malicious keys found.
 
 
***** [ Shortcuts ] *****
 
No infected shortcut found.
 
 
***** [ Scheduled Tasks ] *****
 
No malicious task found.
 
 
***** [ Registry ] *****
 
Key Found:  HKLM\SOFTWARE\Classes\CLSID\{9522B3FB-7A2B-4646-8AF6-36E7F593073C}
Key Found:  HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9522B3FB-7A2B-4646-8AF6-36E7F593073C}
Key ... Read more

Read other answers
RELEVANCY SCORE 69.2

Hi

I am new to this forum. I am having a major issues with my pc. First its all started when the malware paytime.exe attacked my pc. It turned off my firewall(SP2 Firewall), real-time virus scanner(Trend microoffice client,not using its firewall, provided by my service provider). With the help of hijackthis, spybot and ewido and also the interent , able to delete paytime.exe and its related files.
To this I entered in safe mode.

Now I am able to control my firewall. Thats the only success BUT when I click nvmixer.exe in my taskbar, it shows visual C++ runtime error and my virus scanner is saying that officescan client has not started. So in control panel I entered in administrative tools and tried manually to start real time scan process but I failed again. It shows cannot start this process in safe mode.The same thing is repeated for other processes like error reporting etc. I am booting in normal mode only but its showing cant run in safe mode.

For runtime error I tried to download visual runtime files from support.microsoft, I failed to do so. My browser doesnt open sites of microsoft. When I typed support.microsoft.com, Page cannot display error is coming. I even disabled my firewall still it doesnt works.

Could you tell me how to make my process start again? And is there any program that will tell me about missing dlls if any(presently there are no dialogs of missing dlls). And about my browser security settings?

I also present you the log of the hijackthis.

Logfi... Read more

A:Cant able to run virus scanner, open microsoft sites(support sites) in any browser

This is 'also' your thread right?

http://forums.techguy.org/windows-n...icrosoft-sites-support-sites-any-browser.html

You must not post a new thread if its the same problem, if you need to add a reply, use the 'Post a Reply!' button.
 

Read other 2 answers
RELEVANCY SCORE 69.2

Hi,
 
I can't access certain sites owing to Avast Anti-vir detecting a trojan infection - "JS:Includer-BOF".  Trying to reach the sites via Google links, redirects me to nefarious sites, which are impossible to leave, save for closing the tab.
 
All help is gratefully appreciated.  Thanks.
 
AdwCleaner 6.3.0 detects 3 registry entries, but I have left them in place.
 
# AdwCleaner v6.030 - Logfile created 21/11/2016 at 20:48:22
# Updated on 19/10/2016 by Malwarebytes
# Database : 2016-11-21.2 [Local]
# Operating System : Windows 7 Home Premium Service Pack 1 (X64)
# Username : Dad - DAD-PC
# Running from : C:\Users\Dad\Downloads\AdwCleaner.exe
# Mode: Scan
# Support : https://www.malwarebytes.com/support
 
 
 
***** [ Services ] *****
 
No malicious services found.
 
 
***** [ Folders ] *****
 
No malicious folders found.
 
 
***** [ Files ] *****
 
No malicious files found.
 
 
***** [ DLL ] *****
 
No malicious DLLs found.
 
 
***** [ WMI ] *****
 
No malicious keys found.
 
 
***** [ Shortcuts ] *****
 
No infected shortcut found.
 
 
***** [ Scheduled Tasks ] *****
 
No malicious task found.
 
 
***** [ Registry ] *****
 
Key Found:  HKLM\SOFTWARE\Classes\CLSID\{9522B3FB-7A2B-4646-8AF6-36E7F593073C}
Key Found:  HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9522B3FB-7A2B-4646-8AF6-36E7F593073C}
Key ... Read more

Read other answers
RELEVANCY SCORE 69.2

Hi

My computer has recently been hit (last 24 hours) with something which is disabling all of my microsoft sites/programs and access to antivirus sites .

Going back 24 hours i had another virus which made my computer really slow redirected sites and posted 3 porn links on my desktop. After this i did a non destructive system recovery (after which i got an ntdlr is compressed message but i fixed it). As soon as i had got the computer running back to normal i installed sp2 as my computer originally came with sp1 and windows 2003 xp home edition.

when i got back on the internet i found my problem and i couldnt sign into msn messenger or access antivirus sites. I have tried these programs :Ad-Aware spybot search , vundo fix , super anti spyware and malware bytes anti spyware.

i have also booted my pc into safe mode and used sdfix. And i have used atf cleaner and cc cleaner to delete cookies and temp files and i have cleared my cache.

Another note i have tried to run Combofix from the desktop but it just says its been compromised and i need to download a new copy and then deletes its self (i have downloaded new copies)

Below is my DDS log

DDS (Ver_09-07-30.01) - NTFSx86
Run by Owner at 16:43:41.29 on 02/08/2009
Internet Explorer: 6.0.2900.2180
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.1023.506 [GMT 1:00]


============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32... Read more

A:Unknown virus/spyware/trojan blocking access to microsoft sites and antivirus sites

Hello and welcome to Tech Support Forum.

My name is km2357 and I will be helping you to remove any infection(s) that you may have.

I will be giving you a series of instructions that need to be followed in the order in which I give them to you.

If for any reason you do not understand an instruction or are just unsure then please do not guess, simply post back with your questions/concerns and we will go through it again.

Please do not start another thread or topic, I will assist you at this thread until we solve your problems.

Lastly the fix may take several attempts and my replies may take some time but I will stick with it if you do the same.

Sorry for the delay in replying, the forum is very busy. If you still need help, please post a fresh DDS Log

Read other 3 answers
RELEVANCY SCORE 68.8

Hi all,

My PC appears to be infected, but nothing is detecting it, including Malwarebytes' Anti-Malware.

I'm experiencing tons of redirects on site loads, e.g. typing in a site into the address bar, Google searches, etc. as well as inappropriate popup ads.

Could someone please assist me in some next steps as to how to remove these redirect attacks I'm experiencing?

Thanks -

Best,

Anthony

A:Sites & Google Searches Redirecting to Ad Sites, Innapropriate Popups

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.Do not run any other tool untill instructed to do so!Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.I would like to get a better look at your system, please do the following so I can get some more detailed logs.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will appear Click OKDeFogger may ask you to reboot the machine, if it does - click OKDo not re-enable these drivers until otherwise instructed.IMPORTANT! If you receive an error message while running DeFogger, please post the log defogger_disable which will appear on your desktop.Download DDS:Please dow... Read more

Read other 34 answers
RELEVANCY SCORE 68.8

In addition to the browser redirects. Boot up time has become extremely long. Often when boot up is complete Macaffee and wireless network adapter are not working. Thanks much for any support you can provide.
RSL
DDS (Ver_09-07-30.01) - NTFSx86
Run by Family at 17:13:11.14 on Tue 09/22/2009
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1022.133 [GMT -4:00]

AV: McAfee VirusScan *On-access scanning enabled* (Updated) {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}
FW: McAfee Personal Firewall *enabled* {94894B63-8C7F-4050-BDA4-813CA00DA3E8}

============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\Program Files\Aventail\Connect\as32svc.exe
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\D-Link\D-Link DWA-552 Xtreme N Desktop Adapter\acs.exe
svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\WINDOWS\system32\dlcxcoms.exe
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched... Read more

A:IE Browser Hijacked... Redirects to random sites/search sites

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. Pleaseinclude a clear description of the problems you're having, along with any steps you may have performed so far.Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.Even if you have already provided information about your PC, we need a new log to see what has changed since you originally posted your problem.Please download OTL from following mirror:This is THE MirrorSave it to your desktop.Double click on the icon on your desktop.Click the "Scan All Users" checkbox.Push the button.Two reports will open, copy and paste them in a reply here:OTL.txt <-- Will be openedExtra.txt <-- Will be minimizedIn the upper right hand corner o... Read more

Read other 2 answers
RELEVANCY SCORE 68.8

It first started when I kept getting this javascript error every time a popup would come up. I tried to search the error code in google and found out that every time I click a link, I get redirected.

I also don't know if this is related, but I have bellsouth internet and on a regular basis I have a ping of around 90, but recently, it's been about 2000 with a jitter of around 1500. However, when I'm in a skype call with a friend from Cali., it goes back down to 90 and stays that way til we hang up. I don't know if it's related or not, but if it's not, I just really need the first problem fixed.

A:Google links redirecting me to other sites like anti-virus sites

Hi,

Please do the following:

Please download DDS from either of these links

LINK 1
LINK 2

and save it to your desktop.Disable any script blocking protection
Double click dds to run the tool.
When done, two DDS.txt's will open.
Save both reports to your desktop.
---------------------------------------------------
Please include the contents of the following in your next reply:

DDS.txt
Attach.txt.
NEXT

Please download aswMBR to your desktop.Double click the aswMBR.exe icon to run it
When asked if you want to download Avast's virus definitions please select Yes.
Click the Scan button to start the scan
On completion of the scan, click the save log button, save it to your desktop and post it in your next reply.
You will also notice another file created on the desktop named MBR.dat. Right click that file and select Send To>Compressed (zipped) file. Attach that zipped file in your next reply as well

Read other 10 answers
RELEVANCY SCORE 68.8

I have been having problems with my internet ever since I was infected from an attack java ad on a website. The attack left a few adware and malware problems that were easily wiped with Spybot and MalwareBytes. The only remaining problem left is every time I search from google and click a search result, the result redirects to a reported attack site, an ad site that relates to my search results, or simply a javascript that my MSE active scan detects as an attack and is cleaned. I have found that it happens way less often when I right click and open in a new tab, but it still happens, leaving me frustrated as I have to click a search result several times to get to what I want. I have tried to use Bing too, and the same problem happens. One thing I have noticed that might help is the fact that sometimes when my internet is going slow, I can catch a url (after clicking a search result) with an ip address. It leads me to think that my results are being proxied to the resulting attack sites. Please help me as soon as someone can, this is quite a nuisance that I fear is slowly degrading my already degrading computer.

DDS (Ver_10-12-12.02) - NTFSx86
Run by Dylan at 15:48:53.03 on Sat 01/15/2011
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_23
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.2686.1969 [GMT -6:00]

AV: Microsoft Security Essentials *Enabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}

============== Running Processes =========... Read more

A:Google search results redirecting to attack sites and ad sites

Please make sure you disable ALL of your Antivirus/Antispyware/Firewall before running ComboFix.. Please visit HERE if you don't know how.. Please re-enable them back after performing all steps given..Please download ComboFix by sUBs from HERE or HERE and save it to your Desktop.During the download, rename Combofix to Combo-Fix as follows:It is important you rename Combofix during the download, but not after.**NOTE: If you are using Firefox, make sure that your download settings are as follows:Tools->Options->Main tabSet to "Always ask me where to Save the files".After that, double-click and run Combo-Fix. Let it finish its job and post the log hereIf ComboFix asked you to install Recovery Console, please do so.. It will be your best interest..Note: DON'T do anything with your computer while ComboFix is running.. Let ComboFix finishes its job..

Read other 5 answers