Over 1 million tech questions and answers.

Cannot reach any www.google site

Q: Cannot reach any www.google site

Hi
I have a Win XP SP3 desktop PC that developed a problem reaching search engine sites.
I have cleared out viruses and malware using various apps including MWB and other security software.
 
Had a problem with Bing but seems to be clear now, but still won't reach any www.google sites. Does reach google sites with prefix, such as maps.google, etc. but none of the www.google sites.
 
In accordance with your instructions I have run diagnostics and attach logs dds.txt and attach.zip
Also attached report from minitoolbox.
 
I hope you may have an answer up your sleeve.
Many thanks for any assistance.
 
Kind regards
Mike
 
 

RELEVANCY SCORE 200
Preferred Solution: Cannot reach any www.google site

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

A: Cannot reach any www.google site

Hello qpager I would like to welcome you to the Malware Removal section of the forum.Around here they call me Gringo and I will be glad to help you with your malware problems.Very Important --> Please read this post completely, I have spent my time to put together somethings for you to keep in mind while I am helping you to make things go easier, faster and smoother for both of us!Please do not run any tools unless instructed to do so.We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE: At the top of your post, click on the "Follow This Topic" Button, make sure that the "Receive notification" box is checked and that it is set to "Instantly" - This will send you an e-mail as soon as I reply to your topic, allowing us to resolve the issue faster.NOTE: Backup any files that cannot be replaced. Removing malware can be unpredictable and this step can save a lot of heartaches if things don't go as planed. You can put them on a CD/DVD, external drive or a pen drive, anywhere except on the computer.NOTE: It is good practice to copy and paste the instructions into notepad and print them in case it is necessary for you to go offline during the cleanup process. To open notepad, navigate to Start Menu > All Programs > Accessories > Notepad. Please remember to copy the entire post so you do not miss any instructions.These are the programs I would like you to run next, if you have any problems with one of these just skip it and move on to the next one.-AdwCleaner-Please download AdwCleaner by Xplode onto your desktop.Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click on Delete.Confirm each time with Ok.Your computer will be rebooted automatically. A text file will open after the restart.Please post the content of that logfile with your next answer.You can find the logfile at C:\AdwCleaner[S1].txt as well.-Junkware-Removal-Tool-Please download Junkware Removal Tool to your desktop.Shut down your protection software now to avoid potential conflicts.Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".The tool will open and start scanning your system.Please be patient as this can take a while to complete depending on your system's specifications.On completion, a log (JRT.txt) is saved to your desktop and will automatically open.Post the contents of JRT.txt into your next message.When they are complete let me have the two reports and let me know how things are running.Gringo

Read other 22 answers
RELEVANCY SCORE 60

For some reason, I am unable to reach Ann Coulter - Official Home Page on my computer. It's been several weeks since I was last able to visit the site. The problem happens in every browser I have, including recent or current versions of Firefox, IE, Opera and Chrome. I can reach any other website I try to get to just fine. I never used to have any trouble reaching that website until about a month ago. No one else uses this computer and I live alone.

It appears that I've blocked that one site but I'm darned if I can figure out how.

Here's what I've tried so far:
1. Run Avast Free Antivirus with the latest version of the program and definitions. Results: no threats found with either the quick scan or the full scan.
2 Run Malware Bytes with the latest definitions. Results: Results: two threats found and removed but I still can't reach the Coulter website.
3. Checked my Hosts file. Results: nothing there is blocking any website.
4. Checked my router settings. Can't see any blocks there.
5. Had other people try to access the site; they were successful.
6. Googled and found one other forum where someone was having the same problem with respect to the Coulter website. But his problem apparently went away two weeks ago. He didn't indicate if he had done anything to make it go away.
7. Checked the Windows Event logs but can't see anything there reflecting my problem.

Can anyone suggest anything else I can check?

I can live without this website working but it's bugging me tha... Read more

A:Can't reach one site

Since it's happening in all browsers, my guess is it's blocked in your modem/router. Any liberals been around? lol

Read other 15 answers
RELEVANCY SCORE 60

This is bizarre.

I'm trying to persuade my browser to connect with www.piratour.net. It times out and fails to find it.

I try on my phone using the home wi-fi - same result.

I switch off my phone wi-fi and try with data. Success!

This happens on the PC with both Firefox and Edge.

I open a command window and try ping www.piratour.net. Nothing, however the screen tells me immediately that the ip address is 167.250.5.29 .

I have spent quality time with my ISP (Plusnet in the UK). The man tried that address from his own machine - no success.

I have tried changing the DNS servers (my idea). No luck.

The fact that the service guy also couldn't reach it suggests that the problem is somewhere way outside my setup.

I would appreciate any thoughts.

Tech Support Guy System Info Utility version 1.0.0.4
OS Version: Microsoft Windows 10 Home, 64 bit
Processor: Intel(R) Celeron(R) CPU J3060 @ 1.60GHz, Intel64 Family 6 Model 76 Stepping 4
Processor Count: 2
RAM: 3941 Mb
Graphics Card: Intel(R) HD Graphics, 1024 Mb
Hard Drives: C: 149 GB (85 GB Free); D: 780 GB (663 GB Free);
Motherboard: ASUSTeK COMPUTER INC., A_F_K20CE
Antivirus: Windows Defender, Enabled and Updated
 

Read other answers
RELEVANCY SCORE 59.2

I bought My Elite X2 on 24th Dec 2016.  I checked my warranty thru ' http://h20566.www2.hp.com/hpsc/wc/public/home '  Since the warranty is not correct, so I have attemped to dispute the warranty thru ' http://support.hp.com/us-en/checkwarranty?openCLC=true ' But I could not checked my warranty thru this site.  I wonder how I open dispute warranty? 

Read other answers
RELEVANCY SCORE 59.2

I'm trying to reach a friend's FTP site and can't get any connection/response.

Direct FTP attempt: The operation "times out".
Pinging his IP address from CMD prompt: All attempts time out.
Tracert to his IP: It begins the trace process, but loses the route after about 4 hops.

I have placed his IP address in the excluded (allowed) sites in my firewall settings. I can't figure out what else may be preventing my connection. Any help?

Dave Danger

XP Pro SP2, Asus A7N8X-X MoBo, AMD Athlon XP at 1837.5 MHz.
512 MB DDR-SDRam.
Symantec Internet Security, AVG Free 7.0.308, SpySubtract/Adsubtract, NoAdware, Ad-Aware SE Personal
 

A:Solved: Can't reach an FTP site

Read other 7 answers
RELEVANCY SCORE 58.8

I am using a NetGear RP614 v1 router to share a cable network connection to the Internet. We need to connect to the web site of out local school system, (ip = 168.31.104.246). We cannot see any pages from this domain if the router is connected, however everything is OK if we connect any of our computers to the cable modem. The router is not set up to block any sites. I have reduced the maximum packet size from 1500 to 1400 to 1300 bytes, but no change in connectivity has happened. Any ideas wher to look?
The DNS servers listed by the router are correct, and I still cannot connect if I enter the IP address rather than the URL.

There are computers on the lan running Win 95, Win98, WinXP and all see the same thing. We are using a Motorola SurfBoard SB5100.
 

A:Can't reach a known good web site when using router.

You can not access your own IP, if that is the IP-number in your router.
Just use http://www.forsyth.k12.ga.us/ and all should be fine.
 

Read other 7 answers
RELEVANCY SCORE 58.8

Using three different computers 1 Win 7, 2 Win 10 and one android phone.
On the Windows 7 machine I cannot reach one web site (SanduskyRotaryPizzaChallenge.com), I get 503 server unavailable. All other web sites work fine on the Win 7 machine. Using Chrome, IE and Edge.
On the Win 10 and Android the web site works fine.
Only the one web site on only the one computer does it not work.
I can using FileZilla I can FTP into the site, on ALL computers.
So what should I be looking at on the Win 7 machine? Remember all other sites work fine.

Read other answers
RELEVANCY SCORE 58.8

It happens on all browsers on every computer in the house. I am running NIS 2012
and can't find if/where that is causing the problem. It maybe my ISP but how would I know? Any advice is welcome. Thank you.

A:Can't reach Newegg consistently and I know their site is up

Newegg.com is working for me now but their are times it doesn't. A couple weeks ago I couldn't get to them.

Read other 5 answers
RELEVANCY SCORE 58.8

To use some features on the Nascar.com web site, you need to log in through https://secure.audience.nascar.com. Problem is, the site can't be reached or pinged. Increasing ping time generates nothing but timeout errors. Something in the computer is blocking it from reaching that web address, whether it's entered as a name or a numeric address. This problem happens with four different web browsers - IE8, Firefox 3, Chrome and Safari.

It's a Gateway laptop with Vista SP1. It happens with a LAN connection. WiFi and Ev-Do. The web address is available on one machine with an identical WiFi link but not with the Gateway laptop.

Here are some of the attempts to solve the problem that have failed:

Resetting TCP/IP stack.
Switching DNS server.
Removing Norton Internet Security 2008.
Shutting down Windows Defender.
Running the computer with no firewall.
Removing and reinstalling network adapters and reinstalling drivers.
Running Vista in safe mode with networking.
Removing all temporary files and history.
Adding the domain to the IE trusted sites list.

The secure.audience.nascar.com address and the nascar.com domain are not blocked in the Hosts list.

NASCAR tech support has no idea what's going on.
Several checks of other web sites and Microsoft's online support on problems with accessing https secure sites have turned up no problems with accessing that site.

The Gateway has no trouble accessing several other https secure sites, but can not reach secure.a... Read more

A:Can't reach a https secure site

Read other 7 answers
RELEVANCY SCORE 58

Hi guys!!  Boy, I hope you can help me because I am about to pull my hair out over this one.
 
I think I got infected with some virus called HEU_AEGIS_HttpDownloader blah blah a month back.  I think this because it came up in my AV (Trend Micro Titanium Maximum Security).  The AV did its thing and I guess cleaned the virus or removed it.  It no longer shows up.  During this time, I also received about a dozen of other warnings about a suspicious file which Trend deleted whenever it showed up.  It was always found at: C:\Documents and Settings\Owner\Local Settings\Temp\***.tmp.exe (the *** would always be some random letters and numbers).  This virus and ***.tmp.exe file no longer shows up.  However...
 
Since that virus popped up (and these two things may not be related) I keep getting a web threat listed in Trend Micro which shows a web threat which happens about twice every hour.  It says it 'blocked' a web threat to website address 176.9.##.###/ip.php
 
I have checked my services, msconfig start up settings, registry, and even a complete search on my hard drive for that IP (which I partially masked on purpose).  Nothing can find it.
 
I tried running full scans of Trend Micro Titanium Maximum Security, Ad Aware, MalwareBytes, and Super AntiMalware.  All of them say my machine is clean.
 
I even tried using my earliest system restore point, and that did not rid me of these constant web threats.
... Read more

A:HEU_AEGIS, computer keeps trying to reach a suspicious site

I believe I found the cause of this issue.  A rootkit was hiding itself pretty well.  Malwarebytes, SuperAntiSpyware, Trend Micro Titanium, and Ad Aware could not find it.  I finally tried Kaspersky's TDSSKiller and it found and deleted an .exe file and registry entry it said was a high risk.  Since it removed the file, I have had no web threats in the past 24 hours.
 
Here is the text of the infected file TDSSKiller reported and removed:
 
UDS:DangerousObject.Multi.Generic
File: C:\Document and Settings\Owner\Application Data\Sun\Java\Deployment\SystemCache\6.0\25\winhlp32.exe
Malware object, high risk
 
If anyone else is experiencing a constant barage of web threats being blocked and can't find the cause; be sure to try TDSSKiller.

Read other 3 answers
RELEVANCY SCORE 57.2

Hi, I have known a problem lately about some malware that won't let you get to any of microsoft's sites or antimalware sites - by scaning my computer found some 01.tmp, 02.tmp files - the files are being deleted by malwarebytes at startup but spawn alive againg every time.I was looking for help at this forum - found some topics about the issue, but could'nt find any answer.so I went to war alone, and won... (after too many hours - about 6)anyway, I'm new around here and probably won't last long, so this is kind of an advice for whomever has this malware problem or for the administrators of the forum trying to help other's:the little $!#!#! is poisening the dns cache - that's why you can't get to any site even you're editing your hosts file.so what you shoud do is:1. open CMD.EXE,2. type in the command line: TASKLIST /SVC - this will list all proccesses currently runing with the services in the background.3. look for a proccess "svchost.exe" with the service "Dnscache"4. open task manager, and if you still don't have the "PID" column, go to "VIEW", "SELECT COLUMNS" and add it5. kill the svchost proccess that is runing the dns cache by comapring the PID's from the CMD to those in the taskmanager.6. now you can access site freely: the microsoft malicous remove tool will find it for you and also COMODO free antivirus.7. NOTICE that until the malware is wiped out you should do steps 1-5 every time your computer is ... Read more

A:Can't reach microsoft'w site and antimalware sites - 01.tmp file

You can simply stop and restart the DNS Service using these commands :NET STOP DNSCache
NET START DNSCacheYou can save these lines in a file with extension .CMD and when you need to run it, just double click on the file.

Read other 1 answers
RELEVANCY SCORE 53.6

I have been trying to clean up this mess for a couple of days now, agh!

Got a bunch of the anti-spyware/adware things, Hijack This, etc...

Happy to post a log file if needed, how do I get the browser to stop redirecting the URL? Is this some sort of DNS change?

Any help is appreciated, and of course, thank the Godz for sites like this one where fellowship and assistance can be found!
 

A:Can't reach Google

Please don't post dupliates. Reply here:

http://forums.techguy.org/showthread.php?p=1772534#post1772534

This thread is now closed.
 

Read other 1 answers
RELEVANCY SCORE 52.4

First, please note that Iím in my mid-80s and that I have Alzheimerís and am not as quick on the uptake as as I used to be, /SIZE][/SIZE]

For the past few days Iíve been trying to get help from Google. Over time Iíve had various user-names and passwords and lost or forgotten them. I want Googleís help in canceling all of these and using the same, single new user-name and password for all future Google activity ó searching, email and a running a blog.

Iím used to outstanding help from Apple, Picasa and other sites, but simply canít find a helpful voice for this straightforward request to Google.

Can anyone here please help me?

Many thanks.
 

A:How to reach a real person at Google?

Hi,
Do you need access to anything in those dormant accounts? If not, they expire after (I think) 9 months of inactivity.
If you don't need anything rescued from them you can just open up a new account.
Like many people I have more than one Gmail account. I like to keep family, colleagues, web sites etc. separated. I know that can be done with tags/labels, but I find discrete addresses simpler!

Hope this helps?

Richard.
 

Read other 3 answers
RELEVANCY SCORE 52.4

Hey guys,
My new wifi router got installed some days ago. Everything works fine for all wifi devices and smartphones. I just connected the machine of my Girlfriend and I only can reach google websites. I tried to connect to the Router configuration by typing the IP into my web browser but I also only get the response:
This website can't be reached.
I found the IP address with Prompt: ipconfig

Default Gateway: 10.0.0.1
Subnet Mask: 255.256.255.0
IP4 Address: 10.0.0.2

I also tried to restart and reset the router.

Pls help

Thank you very much,
Alex
 

Read other answers
RELEVANCY SCORE 52.4

The browser on my computer is being redirected to an ip address of 93.186.119.129 whenever I type in www.bing.com or www.google.com. I have added malwarebytes and it gives me a clean bill of health, but the problem persists.

I can browse to other sites ok, but I get the blocked Ip address info from Malware bytes. Llike www.msn.com, www.earthlink.net but it opens the sites . How do I stop the IP hijacking, other computers on my net work just fine.

I tried combo fix and have a log, but browsing still not working for Google or BING.

Read other answers
RELEVANCY SCORE 51.6

Hi,Ran a Malwarebytes scan earlier this evening (see below). Seems to have found various things and removed them - however I now find that I cannot access the Windows UPdate service - either via Help & SUpport on my PC, or by clicking on the URL (says IE cannot display the page). Can't connect to any site with Windows Update linkage. Other Google searches are also being randomly redirected.Have also seen a few error message posted on my desktop re. Java 6 fatal errors - not sure if this is connected.Finally, ran Hijack this, and removed ahuie.exe which a search revealed was a Trojan.However, problems still remain. Can anyone help??Malwarebytes' Anti-Malware 1.46www.malwarebytes.orgDatabase version: 4121Windows 5.1.2600 Service Pack 2Internet Explorer 7.0.5730.1320/05/2010 22:21:44mbam-log-2010-05-20 (22-21-44).txtScan type: Quick scanObjects scanned: 110277Time elapsed: 5 minute(s), 57 second(s)Memory Processes Infected: 0Memory Modules Infected: 0Registry Keys Infected: 8Registry Values Infected: 2Registry Data Items Infected: 4Folders Infected: 1Files Infected: 5Memory Processes Infected:(No malicious items detected)Memory Modules Infected:(No malicious items detected)Registry Keys Infected:HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{19127ad2-394b-70f5-c650-b97867baa1f7} (Backdoor.Bot) -> Quarantined and deleted successfully.HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\C... Read more

A:Can't reach Windows Update via Google - + other redirects

Think I've now solved the problem. Found someone on another forum with exactly the same problem -random redirects and unable to connect to Windows UPdate sites....I know I should have waited.. but...ran Combofix and it deleted:- ahuie.exe- 3460593599.dat from the windows/system32/drivers folder...and found an infected copy of c:\windows.0\system32\drivers\pci.sysFollowing reboot etc. everything now seems OK.

Read other 3 answers
RELEVANCY SCORE 51.2

I recently got infected by a Trojan Qhost virus. Using the symantec removal tool, I managed to remove the virus from my computer. However, I am having difficulties accessing search engines such as google.com or searching with Yahoo. With the directions of some people here in this site, I managed to get rid of some of the junk in my computer. Yet, I still cannot access the google website. Please help!!! Here's my Hijackthis log:

Logfile of HijackThis v1.97.2
Scan saved at 7:02:32 PM, on 10/4/2003
Platform: Windows 2000 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\NavNT\defwatch.exe
C:\WINNT\System32\svchost.exe
C:\Program Files\NavNT\rtvscan.exe
C:\WINNT\System32\nvsvc32.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\System32\mspmspsv.exe
C:\WINNT\Explorer.exe
C:\WINNT\System32\MsgSys.EXE
C:\Program Files\NavNT\vptray.exe
C:\DOCUME~1\DAVIDM~1\LOCALS~1\Temp\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {A5366673-E8CA-11D3-9CD9-0090271D075B} - C:\PROGRA~1\FLASHGET\jccatch.dll
... Read more

A:Cannot reach Google and Yahoo search does not work properly...

I have replied to one of your multiple posts here
http://forums.techguy.org/showthread.php?s=&threadid=169053&perpage=30&pagenumber=2

And you have ben answered here by someone else
http://forums.techguy.org/showthread.php?s=&threadid=169398

please try to keep all your posts about the same problem in one thread, it is much easier to help if we can see what has been done or suggested previously
 

Read other 2 answers
RELEVANCY SCORE 50.8

i also seem to have a lot of com/active x errors......also i had symantec and removed but believe monsters still there...Logfile of Trend Micro HijackThis v2.0.2Scan saved at 8:45:38 AM, on 8/21/2009Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\PRISMSVR.EXEC:\Program Files\McAfee.com\Agent\mcagent.exeC:\WINDOWS\system32\igfxtray.exeC:\WINDOWS\system32\hkcmd.exeC:\Program Files\Java\jre6\bin\jusched.exeC:\Program Files\Comcast\Desktop Doctor\bin\sprtcmd.exeC:\Program Files\comcasttb\ComcastSpywareScan\ComcastAntispy.exeC:\Program Files\comcasttb\ComcastSpywareScan\ComcastAntiSpyService.exeC:\Program Files\CA\PPRT\bin\ITMRTSVC.exeC:\Program Files\Java\jre6\bin\jqs.exeC:\Program Files\McAfee\SiteAdvisor\McSACore.exeC:\PROGRA~1\McAfee\MSC\mcmscsvc.exec:\PROGRA~1\COMMON~1\mcafee\... Read more

A:google redirecting, type in site get a different site, weird downloading

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine.??If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine.??Please perform the following scan:Download DDS by sUBs from one of the following links.??Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool.??No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 2 answers
RELEVANCY SCORE 50.4

please could someone help me - I have the same problem as Coltrane.

I just installed the MS patch that's supposed to clear this problem up, however it's not! A student without Google is like.... a car without wheels!!! please help!
please email me when you've replied at [email protected] here is my log from hijackthis:

Logfile of HijackThis v1.97.5
Scan saved at 08:02:11, on 11/10/03
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\RxMon.exe
C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe
C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE
C:\WINDOWS\System32\CTHELPER.EXE
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Reality Fusion\Reality Fusion GameCam SE\Program\RFTRay.exe
C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\Playlist.exe
C:\WINDOWS\System32\CTSvcCDA.EXE
C:\Program Files\Executive Software\DiskeeperWorkstation\DKService.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\tcpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Documents and Settings\alex\Local Settings\Temp\Temporary Direc... Read more

A:Can't Reach Google & search Engines? QHosts-1 Virus Removal

Hi boofta,

Check the items listed below in HijackThis, close all windows except HijackThis and click Fix checked:
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\SYSTEM\blank.htm
O1 - Hosts file is located at: C:\WINDOWS\help\hosts
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [SystemSearch] REGEDIT.EXE -S c:\ie.reg
O16 - DPF: {AD7FAFB0-16D6-40C3-AF27-585D6E6453FD} (loader Class) - http://dload.ipbill.com/del/loader.cab
O17 - HKLM\System\CCS\Services\VxD\MSTCP: Domain = mydomain.com
O17 - HKLM\System\CS1\Services\VxD\MSTCP: Domain = mydomain.com
O17 - HKLM\System\CS1\Services\VxD\MSTCP: NameServer = 69.57.146.14,69.57.147.175
O17 - HKLM\System\CS2\Services\VxD\MSTCP: Domain = mydomain.com
O17 - HKLM\System\CS2\Services\VxD\MSTCP: NameServer = 69.57.146.14,69.57.147.175
O17 - HKLM\System\CCS\Services\VxD\MSTCP: NameServer = 69.57.146.14,69.57.147.175

Then reboot and delete:
c:\ie.reg
C:\WINDOWS\help\hosts

Regards,

Pieter
 

Read other 1 answers
RELEVANCY SCORE 50.4

Hey every time I restart my homepage is searchV. Is a similar thing happening to me?
 

A:Can't Reach Google & search Engines? QHosts-1 Virus Removal

jjerneg

Welcome to TSG!

Please do this. Go here http://www.tomcoyote.org/hjt/ and download Hijack This. Un Zip it and click on the Hijackthis.exe.

Click the "Scan" button when the scan is finished the scan button will become "Save Log" click that and save the log.

Go to where you saved the log and click on "Edit > Select All" then click on "Edit > Copy" then Paste the log back here in a reply.

Do NOT have Hijack This fix anything yet. Most of what it finds will be harmless or even required. Someone here will be glad to advise you on what to fix.
 

Read other 2 answers
RELEVANCY SCORE 50.4

I noticed a few days ago that I could not reach Google or many other search engines.
This drove me nuts until I found out about the QHosts-1 virus. It was identified Sep 30th as the QHOSTS-1 Virus, (AKA Trojan.Qhosts)

I just removed it from my computer - had me baffled for 2 days.

For more info check: (Partial quote below)
I used the remover, and that did not do the job. I had to turn off the system restore for XP and do the manual removal
http://us.mcafee.com/virusInfo/defa...;virus_k=100719
(quoted @ bottom), and perform the critical updates before it was wiped out.
I did notice from the removal program that the viral file was sitting in an internet temp folder under my wife's login (on XP) - Thanks Honey!

More info see Symantic Security Response:
http://securityresponse.symantec.co...jan.qhosts.html

*****(Quote from Symantic Security Response)*****
Trojan.Qhosts is a Trojan Horse that will modify the TCP/IP settings to point to a different DNS server.

Trojan.Qhosts cannot spread by itself. For a computer to become infected, you would have to open an HTML page that contains code, which allows it to open a viral HTML file on the target computer, so that the script can create and run the malicious executable.

Symantec Security Response has developed a removal tool to repair damage from infections of Trojan.Qhosts.

Symantec Security Response has received reports that visiting a specific page on www.fortunecity.com caused a popup to be displayed that redirecte... Read more

A:Can't Reach Google & search Engines? QHosts-1 Virus Removal

Read other 8 answers
RELEVANCY SCORE 50.4

hello everyone
i hope you are well
i can find the problem in my site with help dear cchamberland
that is  an iframe injection at the bottom of my pages, in index.php, footer.php,etc
then i removed the iframe,And also i was applied some other security  to the site.
< iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://highperformancetraining.org/chhd.html?i=1526587 >< /iframe >
but now after 1 day My site was infected again the same iframe.
I really do not know what should i do?
Is there anyone who can help me?
 
my site is   www.pasak.org
regards.
Pasak Sh
 

A:problem in my site , google alarm that my site is Suspicious

Hi,Welcome to Bleeping Computer. My name is m0le and I will be helping you with your log.Please subscribe to this topic, if you haven't already. Click the Watch This Topic button at the top on the right.Please avoid installing/uninstalling or updating any programs and attempting any unsupervised fixes or scans. This can make helping you impossible.Please reply to this post so I know you are there.The forum is busy and we need to have replies as soon as possible. If I haven't had a reply after 3 days I will bump the topic and if you do not reply by the following day after that then I will close the topic.Once I receive a reply then I will return with your first instructions.Thanks

Read other 2 answers
RELEVANCY SCORE 50

I am missing any key in my registry that has tcpip. I am using Windows ME. Although I have deleted the hosts as per the other steps in the fix, I still cannot access google .com

Here is what I am missing:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\
Tcpip\

Does anyone know why I am missing this key, and how I can continue to fix this annoying trojan?

Thanks!
CT
 

A:[Resolved] Can't Reach Google & search Engines? QHosts-1 Virus Removal

Read other 8 answers
RELEVANCY SCORE 46.8

Hi All,
I'm having a real frustration with Windows 2003 Server x32 and Internet Explorer 8.
I'm running Dynamics NAV on this server and simply want to backup the DB's to a Google Drive folder so that they get synced to Google Drive nightly.  For this I need to install and sign-in to the Google Drive downloadable application.
However, Google Drive opens up a IE dialog for the sign-in and I get this:

In IE itself I cannot access any Google domain site, including Youtube. (I get the same result as above in the actual browser). I also have Chrome installed on this server, and I
can access all of those sites in Chrome.

I understand that IE8 is no longer supported by Google, and im guessing that this is the issue.  However, I don't think there is a newer version of IE available for Server 2003 x32.
I have done a full reset on IE, run ipconfig /flushdns, checked the host file just in case and nada.  I still get the cannot display error.

Any suggestions?  I just need to get around this dialog to sign into Google Drive , and I'll never need to use IE for any other reason.

Thanks for any help,
Andrew

Read other answers
RELEVANCY SCORE 45.6

google sites like gmail etc' gave me a 404 in Spanish. www.google.com referred me to some blog with the title ALAN HEROES. After a restart i can access google sites again but i want to check if i'm infected with something.thanksLogfile of Trend Micro HijackThis v2.0.4Scan saved at 09:06:58, on 13/07/2010Platform: Windows 7 (WinNT 6.00.3504)MSIE: Internet Explorer v8.00 (8.00.7600.16385)Boot mode: NormalRunning processes:C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exeC:\Program Files (x86)\Siber Systems\AI RoboForm\robotaskbaricon.exeC:\Program Files (x86)\RocketDock\RocketDock.exeC:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exeC:\Program Files (x86)\Common Files\Java\Java Update\jusched.exeC:\Program Files (x86)\Everything\Everything.exeC:\Program Files (x86)\iTunes\iTunesHelper.exeC:\Program Files (x86)\Babylon\Babylon-Pro\Babylon.exeC:\Program Files (x86)\Replay Media Catcher\FLVSrvc.exeC:\Program Files (x86)\Windows Live\Device Integrator\wldi.exeC:\Program Files (x86)\Windows Live\Contacts\wlcomm.exeC:\Program Files (x86)\Windows Live\Device Integrator\DI_HIDServer.exeC:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exeC:\Program Files (x86)\Trend Micro\HijackThis\H... Read more

A:couldn't access google.com or any other google site

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.1.Please do not run any other tool untill instructed to do so!2.Please reply to this thread, do not start another!3.Please tell me about any problems that have occurred during the fix.4.Please tell me of any other symptoms you may be having as these can help also.5.Please try as much as possible not to run anything while executing a fix.If you follow these instructions, everything should go smoothly.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.Vista and Win 7 Users please Right Click and run as Admin all programs that I ask you to run: Malwarebytes' Anti-Malware :Please download Malwarebytes' Anti-Malware to your desktop.Double-click mbam-setup.exe and follow the prompts to install the program.At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware then click Finish.If an update is found, it will download and install the latest version.Once the program has loaded, select Perform quick scan, then click Scan.When the scan is complete, click OK, then Show Results to view the results.Be sure that everything is Checked (ticked) except items in the C:\System Volume Information folder and click on Remove Selected.W... Read more

Read other 10 answers
RELEVANCY SCORE 45.6

Logfile of Trend Micro HijackThis v2.0.2Scan saved at 2:33:08 PM, on 11/21/2009Platform: Windows 2000 SP4 (WinNT 5.00.2195)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Boot mode: NormalRunning processes:C:\WINNT\System32\smss.exeC:\WINNT\system32\winlogon.exeC:\WINNT\system32\services.exeC:\WINNT\system32\lsass.exeC:\WINNT\system32\svchost.exeC:\WINNT\system32\spoolsv.exeC:\Program Files\Alwil Software\Avast4\aswUpdSv.exeC:\Program Files\Alwil Software\Avast4\ashServ.exeC:\WINNT\System32\svchost.exeC:\WINNT\system32\hidserv.exeC:\Program Files\Java\jre6\bin\jqs.exeC:\Program Files\Super_DVD_Creator_9.8\NMSAccessU.exeC:\WINNT\system32\nvsvc32.exeC:\WINNT\system32\regsvc.exeC:\WINNT\system32\MSTask.exeC:\WINNT\System32\WBEM\WinMgmt.exeC:\WINNT\system32\svchost.exeC:\WINNT\Explorer.EXEC:\Program Files\Alwil Software\Avast4\ashWebSv.exeC:\Program Files\Alwil Software\Avast4\ashMaiSv.exeC:\WINNT\system32\RUNDLL32.EXEC:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exeC:\Program Files\Java\jre6\bin\jusched.exeC:\Program Files\Spybot - Search & Destroy\TeaTimer.exeC:\WINNT\system... Read more

A:when on google and find a site and sometime it take me back to google

Welcome to the BleepingComputer Forums. Since it has been a few days since you scanned your computer with HijackThis, we will need a new HijackThis log. If you have not already downloaded Random's System Information Tool (RSIT), please download Random's System Information Tool (RSIT) by random/random which includes a HijackThis log and save it to your desktop. If you have RSIT already on your computer, please run it again. Double click on RSIT.exe to run RSIT. Click Continue at the disclaimer screen. Please post the contents of log.txt. Thank you for your patience.Please see Preparation Guide for use before posting about your potential Malware problem. If you have already posted this log at another forum or if you decide to seek help at another forum, please let us know. There is a shortage of helpers and taking the time of two volunteer helpers means that someone else may not be helped. Please post your HijackThis log as a reply to this thread and not as an attachment. I am always leery of opening attachments so I always request that HijackThis logs are to be posted as a reply to the thread. I do not think that you are attaching anything scary but others may do so. While we are working on your HijackThis log, please: Reply to this thread; do not start another! Do not make any changes on your computer during the cleaning process or download/add programs on your computer unless instructed to do so. Do not run any other tool until ... Read more

Read other 2 answers
RELEVANCY SCORE 44

I can't open www.google.com or any site that has google on it. It starts looking for the site and then it just hangs up and eventually times out. I thought maybe it was a virus, but I am not redirected to any other site, I just can't open that one. I am using a toshiba qosmio laptop F10 and I reformatted the hard drive and reloaded the recovery software to try to get rid of the problem. The only things I have reloaded are Norton Internet Security and Windows live messenger. I tried disabling the Internet security and accessing google.com, but I still can't get it. The wierd part is that I have another computer connected to the same router as my laptop and I have no trouble getting google on it, so I know the site is not down. It worked on the laptop fine until a couple of weeks ago. Accessing any other site works. Any help would be appreciated. Note - I saw that "newlinerealty" was also having google problems in another post and tried the suggestions that members made there (like trying https instead of http) and i also tried the link to google in that post, but they did not work.

A:Can't Open Google.com Or Site That Contains Google

The looking in IE and make sure it has not been blocked.

Read other 20 answers
RELEVANCY SCORE 44

Anyone else getting that old Google bar when visiting a Google site with Edge?

A:Anyone else getting that old Google bar when visiting a Google site ..

Yup..shows up here.

Read other 20 answers
RELEVANCY SCORE 42.4

Okay, so I have recently downloaded Google Chrome and started using it as a web browser. I remember a couple days ago, it appeared completely normal. However, last night, I noticed after conducting a google search and entering youtube.com, links to ads would appear on top of those websites (links more within google). These were obviously sketchy ones links should not have been there in the first place. So, I uninstalled and reinstalled it. It seemed to be cleared up, but was not. So, I ran superantispyware and it remove adware tracking cookies as a result of both a quick and full scan. I uninstalled and reinstalled Chrome and it slightly worked again without those ads appearing, but reverted back to the same thing, except not appearing on top of youtube. I did research online about it and saw something about removing the unnecessary browser extensions. It was a similar thing that I did for Firefox. So, I removed two extensions that seemed meaningless from Google Chrome's browser, which led the weird ads "not by this site" and "ads not by google" to disappear.

However, I want to know if the problem is truly gone. I wanna make sure there are no hidden problems (spyware, malware, etc) that is involved with this. There is not good information on this topic, so it would be nice to be educated about this not ads by this site thing. So please let me know what this is about and the best course of action that will make sure this problem is truly f... Read more

A:Ads not by Google/ads not by this site

Download Security Check from HERE, and save it to your Desktop. * Double-click SecurityCheck.exe * Follow the onscreen instructions inside of the black box. * A Notepad document should open automatically called checkup.txt; please post the contents of that document.=============================================================================Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply.====================================================================================Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeClick Go and post the result.=============================================================================Download Malwarebytes' Anti-Malware (aka MBAM): http://www.malwarebytes.org/products/malwarebytes_free to your desktop. * Double-click mbam-setup.exe and follow the prompts to install the program. * At the end, be sure a checkmark is placed next to Update Malwar... Read more

Read other 15 answers
RELEVANCY SCORE 42.4

Every web site I go to I keep seeing this ad for a remote control airplane. This is only in google chrome. Not IE.

http://i.imgur.com/OG6YC.jpg

A:Google ad on every site

Hello,Please follow the instructions in ==>This Guide<== starting at step 6. If you cannot complete a step, skip it and continue.Once the proper logs are created, then post them in a reply to this topic by using the Add Reply button.If you can produce at least some of the logs, then please create the post and explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the reply and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.Please note that I am not a member of the Malware Removal Team and will not be assisting you in removing the infection. I'm simply helping you to post the information they need in order to assist you.If HelpBot replies to your topic, PLEASE follow Step One so it will report your topic to the team members.Orange Blossom

Read other 3 answers
RELEVANCY SCORE 42.4

Since a few days after buying my new computer with Vista, something is wrong.
Every now and then, and lately more often, something is very wrong.

For example,
- I go to Google.com and I end up on Microsoft.com,
- go to Gmail.com, end up on webtrends.com,
- go to site X, it loads site Y,
- go to site Y, get an error screen from a random server.

Here are some screnshots in case you want to see.
Screenshot #1
Screenshot #2
Screenshot #3
Screenshot #4
Screenshot #5
Screenshot #6
Screenshot #7: TSF ends up as Google

I thought maybe a DNS issue, but "ipconfig /flushdns" doesn't do anything.
A reboot usually helps, but not always.
Holding CTRL+F5 for a few seconds helps sometimes.

It happends in Microsofts IE7, as well in Mozilla Firefox 2.

It has to be this computer that is the problem, because my XP machines never had this issue, and still don't. They are hookedup to the same router, are online at the same time, and are experiencing no issues.


Has anyone an idea that might cause this?



I've tried Googling, but you get SO many searchresults, and none are even remotely relevant.

A:Go to Google, get MS site instead.

Sounds like a spyware problem to me. It is not a problem with Vista. The smart thing to do is scan for spyware and viruses. If that doesn't fix it, reinstall windows.

Sorry about the bad news

Read other 2 answers
RELEVANCY SCORE 42

Can anyone help me please? Everytime i do a search on google and click on any of the results i get redirected to other search engines or advertisement sitesMy Dss log is belowDeckard's System Scanner v20071014.68Run by David Turnbull on 2008-07-08 21:12:33Computer is in Normal Mode.---------------------------------------------------------------------------------- System Restore --------------------------------------------------------------Successfully created a Deckard's System Scanner Restore Point.-- Last 5 Restore Point(s) --52: 2008-07-08 20:12:48 UTC - RP737 - Deckard's System Scanner Restore Point51: 2008-07-08 15:50:10 UTC - RP736 - Avg8 Update50: 2008-07-06 20:37:07 UTC - RP735 - Restore Operation49: 2008-07-05 15:04:58 UTC - RP734 - Installed AVG Free 8.048: 2008-07-05 14:43:19 UTC - RP733 - Installed Ad-Aware-- First Restore Point -- 1: 2008-05-02 14:51:43 UTC - RP686 - Software Distribution Service 3.0Backed up registry hives.Performed disk cleanup.Percentage of Memory in Use: 77% (more than 75%).Total Physical Memory: 448 MiB (512 MiB recommended).-- HijackThis (run as David Turnbull.exe) --------------------------------------Logfile of Trend Micro HijackThis v2.0.2Scan saved at 21:15:16, on 08/07/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16674)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC: ... Read more

A:Google Keeps Re Directing Me To Other Site

Sorry for the delay. If you are still having problems please post a brand new HijackThis log as a reply to this topic. Before posting the log, please make sure you follow all the steps found in this topic:Preparation Guide For Use Before Posting A Hijackthis LogPlease also post the problems you are having.

Read other 1 answers
RELEVANCY SCORE 42

When I do a google search and click on a link, it takes to an ad site such as "scour.com". Sometimes the browser opens a window itself to an ad site. I have HIJackThis software installed and ran a scan.Could someone please advise? Thanks very very much.Could someone help me with this. I got very disturbed how searches redirecting to ad sites. What else do I need to do? Thanks in adv.Logfile of Trend Micro HijackThis v2.0.4Scan saved at 6:23:25 AM, on 7/20/2010Platform: Windows Vista SP1 (WinNT 6.00.1905)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\Windows\system32\Dwm.exeC:\Windows\Explorer.EXEC:\Windows\System32\rundll32.exeC:\Program Files\Alwil Software\Avast5\AvastUI.exeC:\Program Files\Tall Emu\Online Armor\oaui.exeC:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exeC:\Program Files\Privoxy\privoxy.exeC:\Program Files\Tall Emu\Online Armor\OAhlp.exeC:\Program Files\Mozilla Firefox\firefox.exeC:\Program Files\Mozilla Firefox\plugin-container.exeC:\Windows\system32\taskeng.exeC:\Program Files\VanDyke Software\SecureCRT\SecureCRT.exeC:\Program Files\WordWeb\wweb32.exeC:\Program Files\Trend Micro\HiJackThis\HiJackThis.exeC:\Windows\system32\DllHost.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = PreserveR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.cnn.com/R1 - HKLM\... Read more

A:Google redirects to ads site (FF and IE)

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. Please include a clear description of the problems you're having, along with any steps you may have performed so far.Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.Even if you have already provided information about your PC, we need a new log to see what has changed since you originally posted your problem.We need to create an OTL ReportPlease download OTL from one of the following mirrors:This is THE MirrorSave it to your desktop.Double click on the icon on your desktop.Click the "Scan All Users" checkbox.In the custom scan box paste the following:CODEmsconfigsafebootminimalactivexdrivers32netsvcs%SYSTEMDRIVE%\*.exe/md5st... Read more

Read other 2 answers
RELEVANCY SCORE 42

Hi. Just a very quick and (probably) simple question. All of the sudden, when I go to Google, I automatically get to the secure (https) page, not the usual http. Note that this is true for Firefox only, not IE. Is this true for everybody, or is it something specific to my computer? Thanks.

A:Google secure site?

Apparently, certain versions of Firefox will force https if autocomplete is turned on.

https://bugzilla.mozilla.org/show_bug.cgi?id=769994

However, Google specifically went https a couple of years ago.

Google now encrypting your search results | News | TechRadar

Read other 2 answers
RELEVANCY SCORE 42

Hi
After updating to version 45.02454.85m of Google chrome. on some of the web site that I got to I can not get the images to load up. Is anyone besides me having this trouble? Is there a fixes to this ? Thank you

. The web site is www.rantsports.com. I have windows 10 home 64 bit
 

Read other answers
RELEVANCY SCORE 42

I hv IE6 XP. When i try to open a link from google searched page, then some times it goes to unwanted site. I hv tried antivirus & other softwares. But cannot get rid of this.
Here is my hijackthis log file.

Logfile of HijackThis v1.99.1
Scan saved at 2:28:20 PM, on 6/29/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\SYSTEM32\ZONELABS\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
g:\System Mechanic Professional 6\IoloSGCtrl.exe
C:\Program Files\Eset\nod32krn.exe
D:\CounterSpy\SBCSSvc.exe
C:\WINDOWS\system32\tcpsvcs.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\STacSV.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\WFXSVC.EXE
h:\WinFax\WFXMOD32.EXE
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wfxsnt40.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\sttray.exe
C:\WINDOWS\system32\hkcmd.exe
G:\System Mechanic Professional 6\SystemGuardAlerter.exe
D:\ZoneAlarm\zlclient.exe
C:\Program Files\Eset\nod32kui.ex... Read more

A:from google to unwanted site

Hi mhtplsh

Sorry for the delay in getting to you, the forum has been really busy lately and all our helpers are volunteers.

1. Download combofix to your desktop from 1 of these locations

2. Double click combofix.exe & follow the prompts.

3. When finished, it shall produce a log for you. Post that log in your next reply

Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall

------------------------------------

Download Deckard's System Scanner to your Desktop. Note: You must be logged onto an account with administrator privileges.Close all applications and windows.
Double-click on dss.exe to run it, and follow the prompts.
When the scan is complete, 2 text files will open - main.txt and extra.txt
Copy (Ctrl+A then Ctrl+C) and paste (Ctrl+V) the contents of main.txt back in this thread (do not attach it).
Please attach extra.txt to your post.


To attach a file to a new post, simplyClick the[Manage Attachments] button under Additional Options > Attach Files on the post composition page, and
copy and paste the following into the "Upload File from your Computer" box: C:\Deckard\System Scanner\extra.txt

Click Upload.

What DSS will do: create a new System Restore point in Windows XP and Vista.
clean your Temporary Files, Downloaded Program Files, and Internet Cache Files, and also empty the Recycle Bin on all drives.
check some important areas of your system and produce a report for your ana... Read more

Read other 10 answers
RELEVANCY SCORE 42

My father installed the malicious program Personal AV onto his computer and I managed to get rid of it. However, many sites are disabled including Google. I do have Spybot, and Ad-Aware, but something is preventing them from accessing their update servers.

Here's the DDS log. The other two results are attached.


DDS (Ver_09-07-30.01) - NTFSx86
Run by Derek at 19:01:07.53 on Tue 08/25/2009
Internet Explorer: 7.0.5730.13
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.495.72 [GMT -5:00]

AV: Symantec AntiVirus Corporate Edition *On-access scanning enabled* (Updated) {FB06448E-52B8-493A-90F3-E43226D3305C}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\Program Files\ActivIdentity\ActivClient\accoca.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\svchost.exe -k imgsvc
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\system32\wu... Read more

A:Google gone, site reroutes.

Hello, and Welcome to TSF.

Please subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.

Before beginning the fix, read this post completely. If there's anything that you do not understand, kindly ask your questions before proceeding. Ensure that there aren't any opened browsers when you are carrying out the procedures below. Save the following instructions in Notepad as this webpage would not be available when you're carrying out the fix.

It is IMPORTANT that you don't miss a step & perform everything in the correct order/sequence.

---------------------------------------------------------------------------------------------

One or more of the identified infections is a backdoor trojan.

This type of infection allows hackers to remotely control your computer, steal critical system information and download and execute files without your knowledge.

If you do any banking or other financial transactions on the PC or if it should contain any other sensitive information, please get to a known clean computer and change all passwords where applicable, and it would be wise to contact those same financial institutions to apprise them of your situation.

You can read this: How Do I Handle Possible Identify Theft, Internet Fraud and CC Fraud?

---------------------------------------------... Read more

Read other 2 answers
RELEVANCY SCORE 42

IT usually takes forever to load any page. When i do a search on google it redirects me to another search engine. Sometimes loading pages is instant, and sometimes takes ten minutes.

Here is my sytem info:
running windows vista home premium edition
HP Model:a6457c
AMD Phenom(tm) 8400 triple-core processor 2.10 GHz
4.00 Gigs memory (ram)
64 bit operating system

Running proceses

.
DDS (Ver_11-03-05.01) - NTFS_AMD64
Run by pablo at 18:16:07.68 on 17/03/2011
Internet Explorer: 7.0.6001.18000
Microsoft? Windows Vista? Home Premium 6.0.6001.1.1252.2.1033.18.3966.2244 [GMT -7:00]
.
AV: Norton 360 *Enabled/Outdated* {88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Norton 360 *Enabled/Outdated* {33A8BBD2-AA01-20A2-213B-0B8EB45B02E8}
FW: Norton 360 *Enabled* {B0F2DB13-C654-2E74-30D4-99C9310F0F2E}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Program ... Read more

A:google site gets redirected

Hello, Welcome to TSF.
I'm nasdaq and will be helping you.

You may wish to Subscribe to this thread (Thread Tools > Subscribe to this thread) so that you are notified when you receive a reply.

Please read these instructions carefully and then print out or copy this page to Notepad in order to assist you when carrying out the fix.

Note that the fix may take several posts. Please continue to respond to my instructions until I confirm that your logs are clean. Remember that although your symptoms may vanish, this does NOT mean that your system is clean.

If there is anything you don't understand, please ask BEFORE proceeding with the fixes.

Please ensure that you follow the instructions in the order I have them listed.

Please do not install or uninstall any programs, or run any other scanners or software, unless I specifically ask you to do so. Also please copy and paste logs into the thread, rather than add them as attachments.
===

I need you to run the following tools in the order listed.

Please download Malwarebytes Anti-Malware and save it to your desktop.
alternate download link 1
alternate download link 2Make sure you are connected to the Internet.
Double-click on Download_mbam-setup.exe to install the application.
When the installation begins, follow the prompts and do not make any changes to default settings.
When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-Malware
Launch Malwarebytes' An... Read more

Read other 14 answers
RELEVANCY SCORE 42

Hello all,
If you need more information, please let me know. This is my first time posting to the forum. My google/yahoo/bing search links are redirected to an ad site on both Firefox and IE. I've tried running AVG and Webroot, but neither can find anything wrong. Below is the HijackThis log. I appreciate any help!

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:56:36 PM, on 2/8/2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16981)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\Program Files\AVG\AVG9\avgrsx.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Apoint\Apoint.exe
C:\Program Files\Apoint\ApMsgFwd.exe
C:\Program Files\Apoint\HidFind.exe
C:\Program Files\Apoint\Apntex.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Lexmark 4900 Series\lxdrmon.exe
C:\Program Files\Lexmark 4900 Series\ezprint.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Seagate\SeagateManager\F... Read more

Read other answers
RELEVANCY SCORE 42

I run Windows Vista Home Premium, Service Pack 2 on a Dell Insipiron 1525

For the last several hours, I have been receiving a sporadic redirect whenever I use urls that contain google.com

Instead of the regular google page, I am redirect to another site, which appears to be for travel. When I try to access country-specific google sites (such as google.co.in , google.com.hk, google.co.uk and so on), I receive a 403 error. This error extends to mail.google.com and other similar services.
Other search engines do not seem to be affected, however when this problem comes up, I lose access to the Kaspersky and TrendMicro websites

I have looked at the hosts file, which is in Windows\System32\Drivers\etc and it is the same as default. I also noted that there are no extra copies of the host file that show up upon search.

Strangely the problem is intermittent, and appears to have something to do with enabling or disabling of javascript on my browsers. That said, I am yet to figure out what that exact link between the two is.
For the most part, if I leave javascript enabled for some time, the redirect problem starts again. Following this, I disable javascript, open the hosts file as an administrator and save it (it never seems to have any changes), close all my browsers.
After this sequence, occasionally, google begins to work again.

I face the same issue with Firefox, Internet Explorer, Google Chrome and Opera

The period of time after which I face automatic redirec... Read more

A:google.com is redirected to a different site

Trouble connecting: Google.com automatically takes me to another Google siteIn a nutshellIf you find yourself on a country-specific Google homepage, such as http://www.google.co.uk, you can always easily get back to Google.com by clicking the link below the search box.Google Web Search is customized for a number of countries and regions across the world. For example, Google.fr provides search results that are most relevant for users in France; Google.co.jp is the Google domain for Japan. We try to direct users to the site that will give them the most relevant results.Changing your settingsIf you'd rather use a different Google site, like Google.com, no matter where you are, try one of the following tips: * Click the Google.com link on any other domain. * Choose a Google domain manually by visiting the Language Tools page (the section with the flags). * Bookmark http://www.google.com/ncr. This is an alternative web address for Google.com that always takes you to Google.com without redirecting you.http://www.google.com/support/websearch/bi...&answer=873

Read other 3 answers
RELEVANCY SCORE 42

Hi, recently, when searching on Google, the search result links sometimes redirect to a different site. After clicking on the link, the page goes blank and the status bar says "waiting for js.doubleclick.net". I think it's probably an adware site? I know many people have been having this problem with redirects. Please help! **I am using Mozilla Firefox 3.0.7**Here is my HijackThis Log:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 1:10:42 PM, on 3/15/2009Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18372)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Windows Defender\MsMpEng.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Windows Defender\MSASCui.exeC:\Program Files\Java\jre6\bin\jusched.exeC:\WINDOWS\system32\hkcmd.exeC:\WINDOWS\system32\igfxtray.exeC:\Program Files\Microsoft Office\Office12\GrooveMonitor.exeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\Microsoft Office\Office12\ONENOTEM.EXEC:\Program Files\Java\jre6\bin\jqs.e... Read more

A:Google Redirecting to another site!

hi,Your log is several days old. The trojan has changed your DNS lookup to redirect web browsing.If you still need help MBAM will do the job:Please download Malwarebytes' Anti-Malware (MBAM) to your desktop:http://www.malwarebytes.org/mbam.php * Double-click mbam-setup.exe and follow the prompts to install the program.* Be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.* If an update is found, it will download and install the latest version.* Once the program has loaded, select Perform FULL SCAN, then click Scan.* When the scan is complete, click OK, then Show Results to view the results.* Be sure that everything is checked, and click **Remove Selected.***A restart may be required to finish the clean up process** When completed, a log will open in Notepad. Please save it to a convenient location. The log can also be opened by going to Start > All Programs > Malwarebytes' Anti-Malware > Logs > log-date.txtplease post the MBAM log in reply. Also post a new hjt log after using MBAM.

Read other 1 answers
RELEVANCY SCORE 42

Hi
I just bought a laptop with vista home on it. I turned it on and mostly everything worked right away. Except the internet. I have a wireless network, so I logged into that and it says its working fine. I can turn on internet explorer and the default home page (google) turns on fine. I can search on google, I can go to google images, and I can do anything else google-related. But when I try to go to any other site, it first takes about five minutes to load then says "page cannot be displayed." I searched all over the internet for a solution but I can't find anything. At this point I think I can rule out a hardware issue because this computer is completely new, and I can also rule out the network not working properly because I can actually connect to the internet and do searches, I'm just limited to google.


Any help would be greatly appreciated,
Thanks

Edit: Okay, I tried to transfer a file from my other computer through the network (which the computer says is working fine) and it sees my other computer, I can double click the computer's icon and open up a page that shows me folders like "my documents". However, when I try to select one of the folders it takes a long time to load, then gives me an error message.

This doesn't make any sense to me. It seems like the entire network is not working except for allowing me to use the internet and then only to go onto google.

Anybody have any ideas?

A:Google is the only site I can connect to

I know this was an old thread, but I am having the same problem this user was having: I can load only sites run by Google. Through many searches, I've found other people who described this same problem dating back three years ago, but though it's an old issue, I can't find any fixes for it. Either the user's post goes unanswered (as the previous one seems to be) or people offer all kinds of things to check and try to no avail.

I have three computers. My newer laptop is running Vista Home Premium 32-bit. My desktop also has VHP32, but is not experiencing this problem. I'm on my old laptop now (XP), which also has no problem. I used my newer laptop last night and everything was fine. The sites I visited were the ones I'm often on. I shut down and went to bed. This morning I discovered I could fully access only Google sites -- I found two other sites (nothing to do with Google) that would load halfway (missing most graphics, functions). All three computers use the same router, a Comcast-issued Netgear.

Anyone know what's going on? I hadn't messed with any settings or anything like that.

Read other 20 answers
RELEVANCY SCORE 42

hey everyone!!!

i have this problem in google of me getting redirected to some random website everytime i click a link... I ran macaffee, AVG and malwarebytes anti malware but none can find this 'virus'

I ran a hijackthis log...
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 6:58:50 PM, on 21/09/2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\windows\system32\taskhost.exe
C:\windows\system32\Dwm.exe
C:\windows\Explorer.EXE
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\windows\system32\igfxsrvc.exe
C:\Program Files\TOSHIBA\Utilities\KeNotify.exe
C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe
C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe
C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\TOSHIBA\TECO\TEco.exe
C:\Program Files\TOSHIBA\BulletinBoard\TosNcCore.exe
C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe
C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\P... Read more

A:Google site redirection?

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

Read other 3 answers
RELEVANCY SCORE 41.6

I don't know what to do. Lately, when I open Google and type a search, I get redirected to a place in the UK. I've run virus and malware programs and I've done a system restore. No help.
Initially, I noticed when looking through my installed programs, that I had one that looked strange, namely appbario 16 toolbar 6.15.0.27. I uninstalled and also uninstalled ffdshow & haali media splitter. Then I deleted all Google extensions. I thought I had it done but I still have the problem with the redirects, especially when I type directly in the address bar.
I use windows 7 and Google Chrome 29.0.1547.66 m. I have Toshiba Satellite.

PS: I've heard back from one of your techies who suggested I post here as well.

DDS (Ver_2012-11-05.02) - NTFS_AMD64
Internet Explorer: 10.0.9200.16686 BrowserJavaVersion: 10.25.2
Run by Erika at 11:37:36 on 2013-09-26
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.2.1033.18.6051.3054 [GMT -4:00]
.
AV: AVG AntiVirus Free Edition 2013 *Enabled/Updated* /Adblock Check8
SP: Windows Defender *Disabled/Updated* /Adblock Check7
SP: AVG AntiVirus Free Edition 2013 *Enabled/Updated* /Adblock Check6
.
============== Running Processes ===============
.
C:\PROGRA~2\AVG\AVG2013\avgrsa.exe
C:\Program Files (x86)\AVG\AVG2013\avgcsrva.exe
C:\windows\system32\lsm.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\nvvsvc.exe
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\System32\svchost.exe -k LocalServiceNetw... Read more

A:Google redirects to Unwanted Site

Hello and Welcome to TSF.

If you haven't already, please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription.

Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.

------------------------------------------------------

CCleaner
AVG PC Tuneup

We do not recommend the use of registry cleaners, or the registry cleaner feature of CCleaner. Our colleague miekiemoes has an excellent writeup here

We suggest uninstalling AVG PC Tuneup via Programs and Features in your Control Panel.

------------------------------------------------------

Please uninstall the following via Start->(or My Computer)->Control Panel->Programs->Programs and Features if it still exists:

Search Protect by conduit<<Please read this

Also delete the following Folders if they still exist:

C:\Program Files (x86)\SearchProtect
C:\ProgramData\Search Protection

------------------------------------------------------

Press the Windows "logo" key and "R" key then copy/paste the following single-line command into the Run box and click OK:

cmd /c rd /s /q "C:\Users\The Beast III\AppData\Roaming\SearchProtect"

A DOS window will open and close again, this is normal.

Repeat for the following:

cmd /c rd /s /q &q... Read more

Read other 19 answers
RELEVANCY SCORE 41.6

Whenever i go to google.com or yahoo.com, it directs me to google.mx. I'm located in mexico at the moment but i want to make it show the us version of google and yahoo.


Can someone tell me how to fix this issue? I had fixed this issue a while back but don't recalled what i did.


I also know some sites go to the .mx site but i have no issue with that. But with google etc, i want it to go to the us site.

A:How to show US google site while in another country?

You can use the google (or many other...) plugin(s) from mycroft
Mycroft Project: Search Engine Plugins - Firefox IE Chrome
Mycroft Project: Google Search Engine Plugins - Firefox IE Chrome

Personally I use this
Google (No country redirect) (google.com) by Mycroft Project

Read other 3 answers
RELEVANCY SCORE 41.6

Hi,

i have a problem where i type a search term in google for example, clicking on the search results takes me to a completely different page, but trying it a second time takes me to the correct page, this happens in all search engines ive tried.

I have ran adware SE which found a fixed a few problems, but it still have this search engine problem.
I have attached my hijack this log to see if there is anything in there that needs removing.

thanks

Logfile of HijackThis v1.99.1
Scan saved at 12:24:18, on 25/03/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Norton In... Read more

A:Google need to be visited twice to get the correct site.

Welcome to TSF.

You have picked up the WareOut infection.

Please subscribe to this thread to be notified of fixes as soon as they are posted by our Team. To do this, please click the "Thread Tools" button located in the original thread line and selecting "Subscribe to this Thread".

Before you begin, take a read through these instructions and download the programs that I've advised. Save the below instructions in notepad or wordpad, because you also have to work in safe mode without networking support, so this page wouldn't be available then. You should not have any browsers open during the cleaning process unless otherwise prompted.

If there's anything that you don't understand, ask your question(s) before proceeding with the fixes. You should not have any open browsers when you are carrying out the procedures below.

Please allow yourself a few spare hours. Below are instructions for a virus scan(s) that can take longer then 2 hours.

It is also important you don't miss a step and perform everything in the right order!! .

********************************FOR YOUR INFORMATION*************************

Please do not run Hijackthis from it's current location. Create a permanent directory - C:\Program Files\HiJackThis\
Re-locate all files to the new directory

********************************DOWNLOADS********************************

Please download these additional files/programs. Do not run them unless instructed to do so.
Unle... Read more

Read other 7 answers