Over 1 million tech questions and answers.

Browser redirecting randomly to start page and opening...

Q: Browser redirecting randomly to start page and opening...

Hi,

Please, I need your help. My browsers (IE, FF and Chrome) keep randomly redirecting to start page. If no browsers are active, the default browser opens instead.

Please, see DDS log:

.
DDS (Ver_11-03-05.01) - NTFS_AMD64
Run by Jean at 0:27:37,38 on 13/05/2011
Internet Explorer: 8.0.7600.16385
Microsoft Windows 7 Home Basic 6.1.7600.0.1252.55.1046.18.5941.2987 [GMT -3:00]
.
AV: Kaspersky Internet Security *Enabled/Updated* {56547CC9-C9B2-849D-8FEF-A496150D6A06}
AV: Microsoft Security Essentials *Enabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}
SP: Microsoft Security Essentials *Enabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Kaspersky Internet Security *Enabled/Updated* {ED359D2D-EF88-8B13-B55F-9FE46E8A20BB}
FW: Kaspersky Internet Security *Enabled* {6E6FFDEC-83DD-85C5-A4B0-0DA3EBDE2D7D}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
C:\Program Files (x86)\Hotkey\PowerBiosServer.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\SearchIndexer.exe
C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\SysWOW64\MEGAREG\MEGAREG.EXE
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files (x86)\Hotkey\Hotkey.exe
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files (x86)\Adobe Download Assistant\Adobe Download Assistant.exe
C:\Windows\system32\taskhost.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\IBM\WID7\eclipse.exe
C:\Program Files (x86)\IBM\WID7\jdk\jre\bin\javaw.exe
C:\Users\Jean\Downloads\dds.scr
C:\Windows\system32\conhost.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = about:blank
uDefault_Page_URL = hxxp://nmd.msn.com
mWinlogon: Userinit=userinit.exe
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: IEVkbdBHO Class: {59273ab4-e7d3-40f9-a1a8-6fa9cca1862c} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\ievkbd.dll
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL
BHO: Auxiliar de Conex?o do Windows Live ID: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: Windows Live Messenger Companion Helper: {9fdde16b-836f-4806-ab1f-1455cbeff289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
BHO: Skype Plug-In: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
BHO: Office Document Cache Handler: {b4f3a835-0e21-4959-ba22-42b3008e02ff} - C:\PROGRA~2\MICROS~3\Office14\URLREDIR.DLL
BHO: FilterBHO Class: {e33cf602-d945-461a-83f0-819f76a199f8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll
TB: {32099AAC-C132-4136-9E9A-4E364A424E17} - No File
uRun: [Google Update] "C:\Users\Jean\AppData\Local\Google\Update\GoogleUpdate.exe" /c
uRun: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
uRun: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
mRun: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun: [AVP] "C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe"
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\Hotkey.lnk - C:\Program Files (x86)\Hotkey\Hotkey.exe
mPolicies-explorer: NoActiveDesktop = 1 (0x1)
mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: Adicionar ao Antibanner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\ie_banner_deny.htm
IE: E&xport to Microsoft Excel - C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
IE: Se&nd to OneNote - C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
IE: {0000036B-C524-4050-81A0-243669A86B9F} - {B63DBA5F-523F-4B9C-A43D-65DF1977EAD3} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
IE: {4248FE82-7FCB-46AC-B270-339F08212110} - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll
IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
IE: {CCF151D8-D089-449F-A5A4-D9909053F20F} - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
AppInit_DLLs: C:\PROGRA~2\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~2\KASPER~1\KASPER~1\sbhook.dll
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL
{59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C}
{72853161-30C5-4D22-B7F9-0BBC1D38A37E}
{9030D464-4C02-4ABF-8ECC-5164760863C6}
{B4F3A835-0E21-4959-BA22-42B3008E02FF}
{E33CF602-D945-461A-83F0-819F76A199F8}
{32099AAC-C132-4136-9E9A-4E364A424E17}
mRun-x64: [megareg] C:\windows\syswow64\megareg\megareg.exe
mRun-x64: [IgfxTray] C:\Windows\system32\igfxtray.exe
mRun-x64: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
mRun-x64: [Persistence] C:\Windows\system32\igfxpers.exe
mRun-x64: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
mRun-x64: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
mRun-x64: [BCSSync] "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
mRun-x64: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
AppInit_DLLs-X64: C:\PROGRA~2\KASPER~1\KASPER~1\x64\kloehk.dll,C:\PROGRA~2\KASPER~1\KASPER~1\x64\sbhook64.dll
SEH-X64: {B5A7F190-DDA6-4420-B3BA-52453494E6CD}: Groove GFS Stub Execution Hook
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\Jean\AppData\Roaming\Mozilla\Firefox\Profiles\daa6u9n7.default\
FF - prefs.js: browser.search.selectedEngine - DAEMON Search
FF - prefs.js: browser.startup.homepage - about:home
FF - plugin: C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL
FF - plugin: C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL
FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\4.0.60310.0\npctrlui.dll
FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
FF - plugin: C:\Users\Jean\AppData\Local\Google\Update\1.3.21.53\npGoogleUpdate3.dll
FF - plugin: C:\Windows\system32\Wat\npWatWeb.dll
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
.
============= SERVICES / DRIVERS ===============
.
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;C:\Windows\System32\drivers\dtsoftbus01.sys [2011-4-28 254528]
R1 kl2;kl2;C:\Windows\System32\drivers\kl2.sys [2010-6-9 11864]
R1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;C:\Windows\System32\drivers\klim6.sys [2010-4-22 27736]
R1 MpFilter;Microsoft Malware Protection Driver;C:\Windows\System32\drivers\MpFilter.sys [2009-12-2 188928]
R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\System32\drivers\vwififlt.sys [2009-7-13 59904]
R2 AVP;Servi?o do Kaspersky Anti-Virus;C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe [2010-11-2 365336]
R2 PowerBiosServer;PowerBiosServer;C:\Program Files (x86)\Hotkey\PowerBiosServer.exe [2010-3-3 32256]
R2 UNS;Intel® Management & Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2011-3-16 2314240]
R3 HECIx64;Intel® Management Engine Interface;C:\Windows\System32\drivers\HECIx64.sys [2011-3-16 56344]
R3 Impcd;Impcd;C:\Windows\System32\drivers\Impcd.sys [2011-3-16 158976]
R3 IntcDAud;?udio do v?deo Intel®;C:\Windows\System32\drivers\IntcDAud.sys [2011-3-16 271872]
R3 klmouflt;Kaspersky Lab KLMOUFLT;C:\Windows\System32\drivers\klmouflt.sys [2009-11-2 22544]
R3 MpNWMon;Microsoft Malware Protection Network Driver;C:\Windows\System32\drivers\MpNWMon.sys [2009-12-2 40832]
R3 NisDrv;Microsoft Network Inspection System;C:\Windows\System32\drivers\NisDrvWFP.sys [2010-10-24 72064]
R3 NisSrv;Microsoft Network Inspection;C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe [2010-11-11 282616]
R3 rtl8192se;Realtek Wireless LAN 802.11n PCI-E NIC NT Driver;C:\Windows\System32\drivers\rtl8192se.sys [2011-3-16 1222248]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service;C:\Windows\System32\drivers\vwifimp.sys [2009-7-13 17920]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
S3 fssfltr;fssfltr;C:\Windows\System32\drivers\fssfltr.sys [2011-3-16 48488]
S3 fsssvc;Windows Live Family Safety Service;C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2010-9-23 1493352]
S3 JMCR;JMCR;C:\Windows\System32\drivers\jmcr.sys [2011-3-16 169048]
S3 JME;JMicron Ethernet Adapter NDIS6.20 Driver (Amd64 Bits);C:\Windows\System32\drivers\JME.sys [2011-3-16 127984]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2010-1-21 51445112]
S3 ose64;Office 64 Source Engine;C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-1-9 174440]
S3 osppsvc;Office Software Protection Platform;C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-1-9 4925184]
S3 WatAdminSvc;Servi?o de Tecnologias de Ativa?o do Windows;C:\Windows\System32\Wat\WatAdminSvc.exe [2011-5-1 1255736]
S4 wlcrasvc;Windows Live Mesh remote connections service;C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-9-22 57184]
.
=============== Created Last 30 ================
.
2011-05-13 02:55:07 8802128 ----a-w- C:\PROGRA~3\Microsoft\Microsoft Antimalware\Definition Updates\{0150473A-1D0A-46CF-9973-EABFDC3A3841}\mpengine.dll
2011-05-12 03:20:10 -------- d-----w- C:\Users\Jean\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
2011-05-12 03:20:05 -------- d-----w- C:\Program Files (x86)\Adobe Download Assistant
2011-05-12 01:33:56 -------- d-----w- C:\Users\Jean\.JxBrowser
2011-05-12 01:32:51 -------- d-----w- C:\Program Files (x86)\eviware
2011-05-12 01:15:29 -------- d-----w- C:\JDeveloper
2011-05-12 01:11:44 -------- d-----w- C:\Users\Jean\AppData\Roaming\JDeveloper
2011-05-12 01:11:16 -------- d-----w- C:\bea
2011-05-12 01:08:40 -------- d-----w- C:\Oracle
2011-05-11 17:55:34 -------- d-----w- C:\Windows\SysWow64\RTCOM
2011-05-11 17:53:47 491112 ----a-w- C:\Windows\System32\DTSSymmetryDLL64.dll
2011-05-11 17:51:13 65024 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\ISBEW64.exe
2011-05-11 17:51:13 32768 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\Objectps.dll
2011-05-11 17:51:09 69715 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\ctor.dll
2011-05-11 17:51:09 5632 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\DotNetInstaller.exe
2011-05-11 17:51:09 274432 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iscript.dll
2011-05-11 17:51:09 204800 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iuser.dll
2011-05-11 17:51:08 757760 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iKernel.dll
2011-05-11 17:51:03 200836 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iGdi.dll
2011-05-11 17:51:02 331908 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\setup.dll
2011-05-11 16:02:17 -------- d-----w- C:\WID
2011-05-11 14:50:45 -------- d-----w- C:\Users\Jean\AppData\Roaming\Rational
2011-05-11 14:43:14 109240 ----a-w- C:\Program Files (x86)\Mozilla Firefox\extensions\[email protected]\components\abhelperxpcom.dll
2011-05-11 14:43:11 150200 ----a-w- C:\Program Files (x86)\Mozilla Firefox\extensions\[email protected]\components\kavlinkfilter.dll
2011-05-11 14:40:51 -------- d-----w- C:\Program Files (x86)\Kaspersky Lab
2011-05-11 14:35:45 142336 ----a-w- C:\Windows\System32\poqexec.exe
2011-05-11 14:35:45 123904 ----a-w- C:\Windows\SysWow64\poqexec.exe
2011-05-11 12:54:01 -------- d-----w- C:\PROGRA~3\Kaspersky Lab Setup Files
2011-05-11 05:30:27 3957632 ----a-w- C:\Windows\SysWow64\ntkrnlpa.exe
2011-05-11 05:30:27 3901824 ----a-w- C:\Windows\SysWow64\ntoskrnl.exe
2011-05-11 05:30:26 5509504 ----a-w- C:\Windows\System32\ntoskrnl.exe
2011-05-10 19:40:09 98816 ----a-w- C:\Windows\System32\drivers\usbccgp.sys
2011-05-10 19:40:09 7936 ----a-w- C:\Windows\System32\drivers\usbd.sys
2011-05-10 19:40:09 52224 ----a-w- C:\Windows\System32\drivers\usbehci.sys
2011-05-10 19:40:09 343040 ----a-w- C:\Windows\System32\drivers\usbhub.sys
2011-05-10 19:40:09 324608 ----a-w- C:\Windows\System32\drivers\usbport.sys
2011-05-10 19:40:09 30720 ----a-w- C:\Windows\System32\drivers\usbuhci.sys
2011-05-10 19:40:09 25600 ----a-w- C:\Windows\System32\drivers\usbohci.sys
2011-05-09 19:47:41 -------- d-----w- C:\Users\Jean\PMT
2011-05-09 04:05:58 -------- d-----w- C:\IBM
2011-05-09 03:08:35 -------- d-----w- C:\Users\Jean\AppData\Local\Adobe
2011-05-06 14:36:55 -------- d-----w- C:\Bibliotecas
2011-05-06 14:16:31 -------- d-----w- C:\Users\Jean\AppData\Roaming\SQL Developer
2011-05-06 14:15:53 -------- d-----w- C:\Programas
2011-05-06 14:15:22 -------- d-----w- C:\Users\Jean\AppData\Local\TSVNCache
2011-05-06 13:45:11 -------- d-----w- C:\Users\Jean\AppData\Roaming\TortoiseSVN
2011-05-06 13:44:37 -------- d-----w- C:\clientes
2011-05-06 13:44:07 -------- d-----w- C:\Users\Jean\AppData\Roaming\Subversion
2011-05-06 13:42:30 -------- d-----w- C:\Program Files\TortoiseSVN
2011-05-06 13:42:30 -------- d-----w- C:\Program Files\Common Files\TortoiseOverlays
2011-05-06 13:10:57 -------- d-----w- C:\Users\Jean\.eclipse
2011-05-06 13:06:34 -------- d-----w- C:\Program Files (x86)\CheckPoint
2011-05-06 01:54:38 -------- d-----w- C:\Program Files (x86)\Trend Micro
2011-05-05 03:45:23 -------- d-----w- C:\Users\Jean\updilogs
2011-05-05 03:14:29 -------- d-----w- C:\Users\Jean\AppData\Local\ElevatedDiagnostics
2011-05-05 02:16:59 -------- d-----w- C:\Users\Jean\waslogs
2011-05-05 01:05:29 -------- d-----w- C:\Windows\SysWow64\BestPractices
2011-05-05 01:05:17 -------- d-----w- C:\inetpub
2011-05-05 01:00:30 -------- d-----w- C:\Program Files\Oracle
2011-05-04 23:49:08 -------- d-----w- C:\Program Files (x86)\Emsisoft Anti-Malware
2011-05-03 03:25:51 -------- d-----w- C:\Users\Jean\AppData\Local\Microsoft Games
2011-05-03 02:56:50 -------- d-----w- C:\Program Files\Motorola
2011-05-03 02:02:48 -------- d-----w- C:\Users\Jean\DoctorWeb
2011-05-02 18:55:39 -------- d-----w- C:\Users\Jean\AppData\Roaming\IBM
2011-05-02 18:46:28 -------- d-----w- C:\Users\Jean\AppData\Local\javasharedresources
2011-05-02 18:28:12 -------- d-----w- C:\Program Files (x86)\IBM
2011-05-02 18:25:52 -------- d-----w- C:\Users\Jean\IBM
2011-05-02 18:25:52 -------- d-----w- C:\PROGRA~3\IBM
2011-05-01 08:20:50 -------- d-----w- C:\Windows\SysWow64\Wat
2011-05-01 08:20:49 -------- d-----w- C:\Windows\System32\Wat
2011-05-01 08:06:57 -------- d-----w- C:\Windows\21E247D45E274BEAAA4D19A81203FE2A.TMP
2011-04-30 01:15:43 367104 ----a-w- C:\Windows\System32\wcncsvc.dll
2011-04-30 01:15:43 276992 ----a-w- C:\Windows\SysWow64\wcncsvc.dll
2011-04-30 01:08:50 99176 ----a-w- C:\Windows\SysWow64\PresentationHostProxy.dll
2011-04-30 01:08:50 49472 ----a-w- C:\Windows\SysWow64\netfxperf.dll
2011-04-30 01:08:50 48960 ----a-w- C:\Windows\System32\netfxperf.dll
2011-04-30 01:08:50 444752 ----a-w- C:\Windows\System32\mscoree.dll
2011-04-30 01:08:50 320352 ----a-w- C:\Windows\System32\PresentationHost.exe
2011-04-30 01:08:50 297808 ----a-w- C:\Windows\SysWow64\mscoree.dll
2011-04-30 01:08:50 295264 ----a-w- C:\Windows\SysWow64\PresentationHost.exe
2011-04-30 01:08:50 1942856 ----a-w- C:\Windows\System32\dfshim.dll
2011-04-30 01:08:50 1130824 ----a-w- C:\Windows\SysWow64\dfshim.dll
2011-04-30 01:08:50 109912 ----a-w- C:\Windows\System32\PresentationHostProxy.dll
2011-04-29 03:30:57 78680 ----a-w- C:\Windows\System32\XAPOFX1_4.dll
2011-04-29 03:29:57 72200 ----a-w- C:\Windows\System32\XAPOFX1_1.dll
2011-04-29 03:18:06 -------- d--h--w- C:\Windows\msdownld.tmp
2011-04-29 03:06:44 -------- d-----w- C:\Windows\SysWow64\directx
2011-04-29 03:05:11 -------- d-----w- C:\Program Files (x86)\Telltale Games
2011-04-29 02:58:49 -------- d-----w- C:\Program Files (x86)\Deep Rybka 3 Aquarium 2010
2011-04-29 02:33:51 -------- d-----w- C:\Program Files\Microsoft Synchronization Services
2011-04-29 02:33:16 -------- d-----w- C:\Windows\PCHEALTH
2011-04-29 02:33:16 -------- d-----w- C:\Program Files\Microsoft SQL Server Compact Edition
2011-04-29 02:30:59 -------- d-----w- C:\Program Files (x86)\Microsoft Visual Studio 8
2011-04-29 02:29:40 -------- d-----w- C:\Program Files\Microsoft Analysis Services
2011-04-29 02:29:40 -------- d-----w- C:\Program Files (x86)\Microsoft Analysis Services
2011-04-29 02:29:17 -------- d-----w- C:\Windows\SHELLNEW
2011-04-29 01:54:03 -------- d-----w- C:\PROGRA~3\Kaspersky Lab
2011-04-29 01:49:07 254528 ----a-w- C:\Windows\System32\drivers\dtsoftbus01.sys
2011-04-29 01:48:57 -------- d-----w- C:\Program Files (x86)\DAEMON Tools Toolbar
2011-04-29 01:48:43 -------- d-----w- C:\Program Files (x86)\DAEMON Tools Lite
2011-04-29 01:48:30 -------- d-----w- C:\Users\Jean\AppData\Roaming\DAEMON Tools Lite
2011-04-29 01:48:30 -------- d-----w- C:\PROGRA~3\DAEMON Tools Lite
2011-04-29 01:28:01 -------- d-----w- C:\Compartilhado
2011-04-28 23:32:09 -------- d-----w- C:\PROGRA~3\Skype Extras
2011-04-28 23:10:12 601424 ------w- C:\PROGRA~3\Microsoft\Microsoft Antimalware\Definition Updates\{FE8C1E16-5B26-4921-A6CE-C8234BAC16E1}\gapaengine.dll
2011-04-28 23:07:58 367104 ----a-w- C:\Windows\System32\atmfd.dll
2011-04-28 23:06:58 640896 ----a-w- C:\Windows\System32\winload.efi
2011-04-28 03:57:35 -------- d-----w- C:\Users\Jean\AppData\Local\Microsoft Help
2011-04-28 03:27:19 -------- d-----r- C:\Program Files (x86)\Skype
2011-04-28 03:26:22 -------- d-----w- C:\Temp
2011-04-28 02:56:21 -------- d-----w- C:\Program Files (x86)\Microsoft Security Client
2011-04-28 02:56:09 -------- d-----w- C:\Windows\Temp2E87D90D-2ABD-BE97-D174-0066F53D1C32-Signatures
2011-04-28 02:56:08 -------- d-----w- C:\Users\Jean\AppData\Local\Mozilla
2011-04-28 02:55:41 -------- d-----w- C:\Program Files\Microsoft Security Client
2011-04-28 02:55:18 374664 ----a-w- C:\Windows\System32\drivers\netio.sys
2011-04-28 02:52:47 -------- d-----w- C:\Users\Jean\AppData\Local\Google
2011-04-28 02:52:18 -------- d-----w- C:\Users\Jean\AppData\Local\Deployment
2011-04-28 02:52:18 -------- d-----w- C:\Users\Jean\AppData\Local\Apps
2011-04-28 00:30:07 8802128 ----a-w- C:\PROGRA~3\Microsoft\Microsoft Antimalware\Definition Updates\Updates\mpengine.dll
2011-04-28 00:16:11 8802128 ----a-w- C:\PROGRA~3\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2011-04-28 00:05:07 -------- d-----w- C:\Users\Jean\AppData\Local\VirtualStore
2011-04-28 00:03:58 -------- d-sh--we C:\Program Files\Common Files\Sistema
2011-04-28 00:03:58 -------- d-sh--we C:\Program Files\Arquivos Comuns
2011-04-28 00:03:58 -------- d-sh--we C:\PROGRA~3\Modelos
2011-04-28 00:03:58 -------- d-sh--we C:\PROGRA~3\Menu Iniciar
2011-04-28 00:03:58 -------- d-sh--we C:\PROGRA~3\Documentos
2011-04-28 00:03:58 -------- d-sh--we C:\PROGRA~3\Dados de aplicativos
2011-04-28 00:03:58 -------- d-sh--we C:\Arquivos de Programas
2011-04-28 00:03:58 -------- d-----w- C:\Recovery
2011-04-28 00:03:57 -------- d-sh--we C:\PROGRA~3\Favoritos
.
==================== Find3M ====================
.
2011-05-03 19:33:46 2854504 ----a-w- C:\Windows\System32\drivers\RTKVHD64.sys
2011-05-02 21:03:32 88680 ----a-w- C:\Windows\System32\RCoInst64.dll
2011-05-02 18:28:04 1004544 ----a-w- C:\Windows\System32\RCoRes64.dat
2011-04-20 17:34:30 3049064 ----a-w- C:\Windows\System32\RtkAPO64.dll
2011-04-20 17:34:30 2393192 ----a-w- C:\Windows\System32\RtPgEx64.dll
2011-04-18 21:50:00 2601816 ----a-w- C:\Windows\System32\WavesGUILib.dll
2011-04-18 21:50:00 2238296 ----a-w- C:\Windows\System32\MaxxAudioRealtek.dll
2011-03-15 18:32:20 648808 ----a-w- C:\Windows\System32\RtkApi64.dll
2011-03-12 12:03:46 662528 ----a-w- C:\Windows\System32\XpsPrint.dll
2011-03-12 11:31:58 442880 ----a-w- C:\Windows\SysWow64\XpsPrint.dll
2011-03-11 06:23:13 187264 ----a-w- C:\Windows\System32\drivers\storport.sys
2011-03-11 06:23:06 166272 ----a-w- C:\Windows\System32\drivers\nvstor.sys
2011-03-11 06:23:06 1657216 ----a-w- C:\Windows\System32\drivers\ntfs.sys
2011-03-11 06:23:06 148352 ----a-w- C:\Windows\System32\drivers\nvraid.sys
2011-03-11 06:23:00 410496 ----a-w- C:\Windows\System32\drivers\iaStorV.sys
2011-03-11 06:22:41 107904 ----a-w- C:\Windows\System32\drivers\amdsata.sys
2011-03-11 06:22:40 27008 ----a-w- C:\Windows\System32\drivers\amdxata.sys
2011-03-11 06:19:26 1395712 ----a-w- C:\Windows\System32\mfc42.dll
2011-03-11 06:19:26 1359872 ----a-w- C:\Windows\System32\mfc42u.dll
2011-03-11 06:18:20 2566144 ----a-w- C:\Windows\System32\esent.dll
2011-03-11 06:15:54 96768 ----a-w- C:\Windows\System32\fsutil.exe
2011-03-11 05:40:24 1164288 ----a-w- C:\Windows\SysWow64\mfc42u.dll
2011-03-11 05:40:24 1137664 ----a-w- C:\Windows\SysWow64\mfc42.dll
2011-03-11 05:39:35 1686016 ----a-w- C:\Windows\SysWow64\esent.dll
2011-03-11 05:37:34 74240 ----a-w- C:\Windows\SysWow64\fsutil.exe
2011-03-08 06:14:30 976896 ----a-w- C:\Windows\System32\inetcomm.dll
2011-03-08 05:38:13 740864 ----a-w- C:\Windows\SysWow64\inetcomm.dll
2011-03-07 16:25:18 74072 ----a-w- C:\Windows\System32\R4EEG64A.dll
2011-03-07 16:25:18 426328 ----a-w- C:\Windows\System32\R4EED64A.dll
2011-03-07 16:25:18 3308376 ----a-w- C:\Windows\System32\R4EEP64A.dll
2011-03-07 16:25:18 136024 ----a-w- C:\Windows\System32\R4EEL64A.dll
2011-03-07 16:25:18 118104 ----a-w- C:\Windows\System32\R4EEA64A.dll
2011-03-04 06:17:25 135168 ----a-w- C:\Windows\apppatch\AppPatch64\AcXtrnal.dll
2011-03-04 06:17:24 347648 ----a-w- C:\Windows\apppatch\AppPatch64\AcLayers.dll
2011-03-03 06:17:10 182272 ----a-w- C:\Windows\System32\dnsrslvr.dll
2011-03-03 06:14:38 30208 ----a-w- C:\Windows\System32\dnscacheugc.exe
2011-03-03 05:27:30 28672 ----a-w- C:\Windows\SysWow64\dnscacheugc.exe
2011-03-03 03:58:32 3133440 ----a-w- C:\Windows\System32\win32k.sys
2011-03-02 20:25:02 1242216 ----a-w- C:\Windows\System32\RTCOM64.dll
2011-02-26 06:23:14 2870272 ----a-w- C:\Windows\explorer.exe
2011-02-26 05:33:07 2614784 ----a-w- C:\Windows\SysWow64\explorer.exe
2011-02-25 22:37:00 1284712 ----a-w- C:\Windows\RtlExUpd.dll
2011-02-24 06:30:00 476160 ----a-w- C:\Windows\System32\XpsGdiConverter.dll
2011-02-24 06:29:15 1197056 ----a-w- C:\Windows\System32\wininet.dll
2011-02-24 06:24:57 57856 ----a-w- C:\Windows\System32\licmgr10.dll
2011-02-24 05:32:52 288256 ----a-w- C:\Windows\SysWow64\XpsGdiConverter.dll
2011-02-24 05:32:44 981504 ----a-w- C:\Windows\SysWow64\wininet.dll
2011-02-24 05:30:16 44544 ----a-w- C:\Windows\SysWow64\licmgr10.dll
2011-02-24 05:05:13 482816 ----a-w- C:\Windows\System32\html.iec
2011-02-24 04:24:04 1638912 ----a-w- C:\Windows\System32\mshtml.tlb
2011-02-24 04:23:48 386048 ----a-w- C:\Windows\SysWow64\html.iec
2011-02-24 03:50:26 1638912 ----a-w- C:\Windows\SysWow64\mshtml.tlb
2011-02-23 17:47:58 1222248 ----a-w- C:\Windows\System32\drivers\rtl8192se.sys
2011-02-23 05:16:28 461312 ----a-w- C:\Windows\System32\drivers\srv.sys
2011-02-23 05:16:01 401920 ----a-w- C:\Windows\System32\drivers\srv2.sys
2011-02-23 05:15:50 161792 ----a-w- C:\Windows\System32\drivers\srvnet.sys
2011-02-23 05:15:27 157696 ----a-w- C:\Windows\System32\drivers\mrxsmb.sys
2011-02-23 05:15:14 286720 ----a-w- C:\Windows\System32\drivers\mrxsmb10.sys
2011-02-23 05:15:13 126464 ----a-w- C:\Windows\System32\drivers\mrxsmb20.sys
2011-02-23 05:15:06 90624 ----a-w- C:\Windows\System32\drivers\bowser.sys
2011-02-22 18:52:00 2075712 ----a-w- C:\Windows\System32\FMAPO64.dll
2011-02-19 06:36:13 46080 ----a-w- C:\Windows\System32\atmlib.dll
2011-02-19 05:32:08 34304 ----a-w- C:\Windows\SysWow64\atmlib.dll
2011-02-19 03:37:02 294912 ----a-w- C:\Windows\SysWow64\atmfd.dll
2011-02-18 06:37:05 612352 ----a-w- C:\Windows\System32\vbscript.dll
2011-02-18 06:33:50 31232 ----a-w- C:\Windows\System32\prevhost.exe
2011-02-18 05:36:26 428032 ----a-w- C:\Windows\SysWow64\vbscript.dll
2011-02-18 05:33:29 31232 ----a-w- C:\Windows\SysWow64\prevhost.exe
2011-02-12 06:14:41 267776 ----a-w- C:\Windows\System32\FXSCOVER.exe
.
============= FINISH: 0:29:18,48 ===============
Thanks in advance,
Jean

RELEVANCY SCORE 200
Preferred Solution: Browser redirecting randomly to start page and opening...

I recommend downloading and running DAP. It can help sort out any driver and firmware related issues on your system

It's worked out well for many of us in the past.

You can download it direct from this link http://downloaddap.org. (This link will open the download page of DAP so you can save a copy to your computer.)

A: Browser redirecting randomly to start page and opening...

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will appear Click OKDeFogger may ask you to reboot the machine, if it does - click OKDo not re-enable these drivers until otherwise instructed.Download DDS:Please download DDS by sUBs from one of the links below and save it to your desktop:
Download DDS and save it to your desktop

Link1
Link2
Link3

Please disable any anti-malware program that will block scripts from running before running DDS.

Double-Click on dds.scr and a command window will appear. This is normal.Shortly after two logs will appear:
DDS.txt Attach.txtA window will open instructing you save & post the logsSave the logs to a convenient place such as your desktopCopy the contents of both logs & post in your next replyinformation and logs:In your next post I need the following

.logs from DDSlet me know of any problems you may have hadGringo

Read other 53 answers
RELEVANCY SCORE 66.8

Hi,
I've been having a few problems with my browser redirecting to the google home page. I've just noticed this - so far its only happened when I've tried to access Myspace, which is a site I very rarely use, but it only happens when I'm running OpenVPN. On my plain ISP connection the page loads up OK. Not sure if I have a problem, but this certainly is odd beahviour.

Any help would be much appreciated!
Thanks.

Logs:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:40:42, on 10/05/2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\BATINDICATOR.exe
C:\Program Files (x86)\Cyberlink\Power2Go\CLMLSvc.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe
C:\Users\Steve\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
C:\Program Files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\CNYHKEY.exe
C:\Users\Steve\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bbc.co.uk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.micros... Read more

Read other answers
RELEVANCY SCORE 64.4

Hi. Thank you for your service. My default web browser opens on its own every few seconds. When using any browser (default or not), every few seconds it redirects to my homepage. It has basically made my computer unusable.

Thanks , any help is really appreciated.

Here is my Hijackthis file

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:21:44 PM, on 11/7/2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16450)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Users\Aryeh\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_4_402_287_ActiveX.exe
C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPNOT/1
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - H... Read more

A:Browser redirecting to homepage and opening on its own

Greetings and Welcome to The Forums!!My name is Gringo and I'll be glad to help you with your malware problems.I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of usPlease do not run any tools unless instructed to do so.
We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.
Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.
Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.
A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE: At the top o... Read more

Read other 32 answers
RELEVANCY SCORE 64

Hi,

A couple of days ago when browsing the web, some additional browser windows started opening up without me requesting them. Random sites, and a lot of broken URLs etc. Also when searching in Google, I would click on a link in the SERPS and I would be taken to somewhere else. Once it was to a AskJeeves!?!?

I am running Norton 360 and it has always been kept up to date. I have tried Spyware Doctor, Adaware, S&D, but none of them find anything other than a couple of tracking cookies.

----------------


DDS (Ver_09-10-26.01) - NTFSx86
Run by Gareth at 15:34:13.46 on 10/11/2009
Internet Explorer: 8.0.7600.16385 BrowserJavaVersion: 1.6.0_16
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.44.1033.18.3070.1949 [GMT 0:00]


============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\WUDFHost.exe
C:\Windows\system32\WUDFHost.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files... Read more

A:Web Browser redirecting and opening random windows!

Turns out my son had installed LimeWire on my pc and has been sharing some files. I didnt look what... I just uninstalled Limewire and removed all the files in the download folder.

If anyone can help with this, it would be greatly appreciated. I work from home, but am too concerned to use my PC for any work stuff or banking etc.

It seems the frequesncy of the addtional unrequested browser windows opening is increasing.

Please could you reply just to say that I am in the loop, as I will not post on any other sites or ask for help from anyone until I have heard back!

Thanks again.

Read other 3 answers
RELEVANCY SCORE 63.2

Upon startup, my internet browser (Google Chrome) opens by itself and opens a new tab redirecting it to a russian website "gameloft.name".
The website Has changed over 20 times while this problem has continued. With each change the adds around the body of the site change and the URL changes slightly.
 
My anti-virus (avast) never detected anything, also when the problem first arose I ran Malwarebytes, but it did not find any threats. Today I ran mbar, and did not find any threat's either.
 
Any Help Would be Greatly Appreciated.
 
mbar logs:
---------------------------------------
Malwarebytes Anti-Rootkit BETA 1.09.3.1001
 
© Malwarebytes Corporation 2011-2012
 
OS version: 6.1.7601 Windows 7 Service Pack 1 x64
 
Account is Administrative
 
Internet Explorer version: 8.0.7601.17514
 
File system is: NTFS
Disk drives: C:\ DRIVE_FIXED, E:\ DRIVE_FIXED
CPU speed: 3.199000 GHz
Memory total: 8526327808, free: 4876374016
 
Downloaded database version: v2016.02.24.07
Downloaded database version: v2016.02.17.01
Downloaded database version: v2016.02.22.02
Initializing...
=======================================
Driver version: 0.3.0.4
------------ Kernel report ------------
     02/24/2016 14:30:25
------------ Loaded modules -----------
\SystemRoot\system32\ntoskrnl.exe
\SystemRoot\system32\hal.dll
\SystemRoot\system32\kdcom.dll
\SystemRoot\system32\mcupdate_GenuineIntel.dll
\SystemRoot\system32\PSHED.dll
\SystemRoot\sy... Read more

A:On startup, browser opening new tab and redirecting to Russian site

Greetings Zandaa and to BleepingComputer's Virus/Trojan/Spyware/Malware Removal forum.My name is Oh My! and I am here to help you! Now that we are "friends" please call me Gary.If you would allow me to call you by your first name I would prefer to do that.===================================================Ground Rules:First, I would like to inform you that most of us here at Bleeping Computer offer our expert assistance out of the goodness of our hearts. Please try to match our commitment to you with your patience toward us. If this was easy we would never have met. Please do not run any tools or take any steps other than those I will provide for you while we work on your computer together. I need to be certain about the state of your computer in order to provide appropriate and effective steps for you to take. Most often "well intentioned" (and usually panic driven!) independent efforts can make things much worse for both of us. If at any point you would prefer to take your own steps please let me know, I will not be offended. I would be happy to focus on the many others who are waiting in line for assistance.Please perform all steps in the order they are listed in each set of instructions. Some steps may be a bit complicated. If things are not clear, be sure to stop and let me know. We need to work on this together with confidence.Please copy and paste all logs into your post unless directed otherwise. Please do not re-run any programs I suggest. If you encounter problems... Read more

Read other 17 answers
RELEVANCY SCORE 63.2

So the problem started at September 26. My Default Browser (Chrome) began opening new windows randomly, all of them opened in Google's home page (my default home page) and all the tabs I open also redirect there. Any other browser I use also redirects the tabs to the home page but does not open new windows, only the default one does. I've tried everything, every single program to remove malware and such I can remember (malwarebytes, hitmanpro, zemana, ADWcleaner, you name it, I tried it.) I installed and uninstalled Chrome (the browser where the problem started), re synced it, reset it to factory settings...reset my modem, nothing works and the problems keeps happening. Google Forums haven't given any response that helps so far. Either my Google Chrome is infected or the problem may have reached the BIOS since it persisted after I formated my Hard drive, and changed the hard drive from my laptop and not even that worked as the problem returned. What should I do?
 
The hard drive I had when this started had Windows 7 home premium, i formatted it and reinstalled windows, and the problem came back. I changed for my original hard drive that has windwos 10 pro and the problem is there. So what I think (since I tried another computer on my internet and I didn't sign in my google account and had no problems) is that it's either my google account that is infected or the problem may have reached the Bios. What can I do? I would please appreciate any help you can give me.

Read other answers
RELEVANCY SCORE 62.8

I was recently infected by some virus that MalwareBytes doesn't detect. My system seems fine and clean aside from what is left of a virus that redirects from search engines and other pages while browsing the web. I tried RKill then ComboFix since I've used both before successfully in a similar situation in the past, but CF won't run this time (says "error - win32 only") for some reason on the same system it ran on before (Win XP pro- 32bit). I followed further directions here for using Defogger, DDS & GMER together to see what else could be done to restore things to normal once again. Thanks in advance for your help. [FYI, I needed to split the log since the post was too long] Parts I - IV are labeled, respectively].

Pasted Scan Contents:

.
DDS (Ver_11-03-05.01) - NTFSx86
Run by Administrator at 1:08:18.00 on Sat 03/19/2011
internet explorer: 7.0.5730.11
browserjavaversion: 1.6.0_14
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1023.556 [GMT -4:00]
.
AV: ESET NOD32 antivirus system 2.70 *Enabled/Outdated* 4
FW: ZoneAlarm Firewall *Enabled*
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Bonjour\mDNSRespo... Read more

A:Browser randomly redirecting, ComboFix unsupervised didn't work

PART II PASTE:
.
.
.
SteelWerX Registry Console Tool 2.0
Written by Bobbi Flekman 2006 ©
.
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units
.
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\
ipb.global.registerPageJump( '0159351001', { url: "http://www.bleepingcomputer.com/forums/t/385817/browser-randomly-redirecting-combofix-unsupervised-didnt-work/", stKey: 'st', perPage: 15, totalPages: 2, anchor: '' } );
4
SystemComponent REG_DWORD 0 (0x0)
Installer REG_SZ MSICD
.
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\
ipb.global.registerPageJump( '0159351001', { url: "http://www.bleepingcomputer.com/forums/t/385817/browser-randomly-redirecting-combofix-unsupervised-didnt-work/", stKey: 'st', perPage: 15, totalPages: 2, anchor: '' } );
3\Contains
.
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\
ipb.global.registerPageJump( '0159351001', { url: "http://www.bleepingcomputer.com/forums/t/385817/browser-randomly-redirecting-combofix-unsupervised-didnt-work/", stKey: 'st', perPage: 15, totalPages: 2, anchor: '' } );
2\Contains\Files
c:\WINDOWS\system32e\unicows.dll REG_SZ
c:\WINDOWS\Downloaded Program Filese\PhotoUploader5.ocx REG_SZ
.
HKEY_LOCAL... Read more

Read other 20 answers
RELEVANCY SCORE 62.8

I discovered I had Internet Security 2010 virus. Once detected I installed malwarebytes and spybot search and destroy. Both programs detected and repaired the random window popups that I was getting. So that problem seems to have been resolved. sorry I did not save those logs.However, now I seem to have a problem with my browser in that internet searches using google work, but the search result links don't.In other words, I get redirected to random places (not the places indicated by the search result).I have uninstalled then reinstalled malwarebytes and spybot and they do not report any more problems. The latest software I installed was gmer . I was able to run it and I am providing the log here. It did not indicate any problems however, so I am now stumped what to do next.I have renamed iexplorer.exe, but each time I do a new copy shows up in the program files/internet explorer directory. I seem to have the same problem with the latest version of firefox as well.Please help!I just added the hijackthis log as well.

A:internet security 2010 fixed, but browser keeps redirecting randomly

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. Please include a clear description of the problems you're having, along with any steps you may have performed so far.Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.Even if you have already provided information about your PC, we need a new log to see what has changed since you originally posted your problem.Please download OTL from following mirror:This is THE MirrorSave it to your desktop.Double click on the icon on your desktop.Click the "Scan All Users" checkbox.Push the button.Two reports will open, copy and paste them in a reply here:OTL.txt <-- Will be openedExtra.txt <-- Will be minimizedIn the upper right hand cor... Read more

Read other 7 answers
RELEVANCY SCORE 62.8

When I don't have a broswer selected, my default browser opens, and when the browser is selected, it keeps returning to its home page.
Its been occuring for several days now, and the only way I can stop it is by ending the processes explorer.exe
 
At first I thought it was a malware : http://www.bleepingcomputer.com/forums/t/490041/default-browser-keeps-opening-and-going-to-homepage-even-in-safe-mode/page-2
But it is still persistant after I did a fresh install and deleted everything off my C drive.
I've also unplugged my keyboard and reinstalled the drives, but that hasn't solved the problem either.
 
All I have found out is that it presses keycode 172.
 
Someone please save me from this madness!!

A:default browser keeps opening randomly

Please download MiniToolBox  , save it to your desktop and run it.
 
Checkmark the following checkboxes:
  List last 10 Event Viewer log
  List Installed Programs
  List Users, Partitions and Memory size.
 
Click Go and paste the content into your next post.
 
Also...please Publish a Snapshot using Speccy - http://www.bleepingcomputer.com/forums/topic323892.html/page__p__1797792#entry1797792 , taking care to post the link.  Do not copy/paste data from the report.
 
Louis

Read other 7 answers
RELEVANCY SCORE 62.8

Hi and thanks in advance for any help,

My computer keeps randomly opening new IE windows, sometimes just one, other times 7 or 8 of them, and periodically something will suddenly blast out of the speakers and I have no idea where it is coming from! I have no programs or apps running at the time, yet I will suddenly hear Barry Scott advertising Cillit Bang! It's beyond weird lol

The IE windows don't open with any advertising or go to a suspicious webpage, it simply opens on Google's search page.

The whole system is very sluggish, especially just after startup and I'm sure something is going on that's not quite right, but all scans come up clean.

TSG SysInfo

Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 7 Professional, Service Pack 1, 32 bit
Processor: Intel(R) Pentium(R) CPU G620 @ 2.60GHz, x64 Family 6 Model 42 Stepping 7
Processor Count: 2
RAM: 1953 Mb
Graphics Card: Intel(R) HD Graphics, 784 Mb
Hard Drives: C: Total - 476837 MB, Free - 413438 MB;
Motherboard: ASUSTeK Computer INC., V-P8H61E.
Antivirus: avast! Antivirus, Updated and Enabled
 

A:Randomly opening browser windows

Hello broadmere.

Welcome to Tech Support Guy. I am Marie Curie and will gladly help you with any malware-related problems.

I am currently in training at WhatTheTech and every post of mine will be approved by a teacher. This leads to some delay in the response time. I will return as soon as possible with instructions. Please familiarize yourself with the following ground rules in the meanwhile.
Read my instructions thoroughly, carry out each step in the given order.
Do not make any changes to your system, or run any tools other than those I provided. Do not delete, fix, uninstall, or install anything unless I tell you to.
If you are unsure about anything or if you encounter any problems, please stop and inform me about it.
Stick with me until I tell you that your computer is clean. Absence of symptoms does not mean that your computer is free of malware.
Back up important files before we start.

 

Read other 14 answers
RELEVANCY SCORE 62.8

When I don't have a broswer selected, my default browser opens, and when the browser is selected, it keeps returning to its home page.
Its been occuring for several days now, and the only way I can stop it is by ending the processes explorer.exe
 
At first I thought it was a malware : http://www.bleepingcomputer.com/forums/t/490041/default-browser-keeps-opening-and-going-to-homepage-even-in-safe-mode/page-2
But it is still persistant after I did a fresh install and deleted everything off my C drive.
I've also unplugged my keyboard and reinstalled the drives, but that hasn't solved the problem either.
 
All I have found out is that it presses keycode 172.
 
Someone please save me from this madness!!

A:default browser keeps opening randomly

Seems to be a keyboard problem, I would go into Device Manager...uninstall the keyboard drivers...reboot the system and see if the situation goes away.
 
That failing, I'd try a different keyboard...possibly a stuck key.  The fact that it happens with a fresh install points to a hardware problem, IMO.
 
Please download MiniToolBox  , save it to your desktop and run it.
 
Checkmark the following checkboxes:
  List last 10 Event Viewer log
  List Installed Programs
  List Users, Partitions and Memory size.
 
Click Go and paste the content into your next post.
 
Also...please Publish a Snapshot using Speccy - http://www.bleepingcomputer.com/forums/topic323892.html/page__p__1797792#entry1797792 , taking care to post the link.  Do not copy/paste data from the report.
 
Louis

Read other 1 answers
RELEVANCY SCORE 62.8

can some one please help, my web browser automatically directs me to this site
http://www2.diymov.com/02.html i think its adware but not sure ive run spyware software and anti virus which has shown nothing, please help as this is constantly popping up thanks
 

A:need help my browser is randomly opening to the same web address

Read other 6 answers
RELEVANCY SCORE 62.4

Here is the original post and what is happening to my computer... however, GMER will not run without rebooting my computer which inevitably gets stuck in startup at the xp screen. I am in safe mode with networking currently. I have followed the prep guide and will insert/attach logs below. FYI, I cannot boot up in normal mode anymore for some reason. Ever since scanning with GMER only safe mode works.

<<<<<<<This seems to be flavor of the month so to speak. In fact, it would seem my issue is almost identical to this http://www.bleepingcomputer.com/forums/topic389097.html

That being said, here's my specific scenario.

I recently acquired the XP Anti-Virus 2011 bug. I followed the removal guides and was able to rid of it (I believe it was a Vundo something or other), and ran MB, SuperantiSpyware, Norton Security Suite, WinPatrol, and a Regedit file. I also had to register the wuaut...dll file to reinstate windows automatic updates as this popup never seemed to go away and automatic updates were not in the services list. I also cleaned out all system restore points once I thought I was all clear.

Well... I still am getting the pesky redirection with browser clickable links; chrome and firefox.I have uninstalled both and reinstalled chrome.

Equipment: Desktop connected to wireless router (2 laptops in the house that are unaffected). This desktop serves as the "hub", if you will, as I have an external hard-drive with shared folders connec... Read more

A:Browser redirecting clickable links and opening random tabs

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

Read other 20 answers
RELEVANCY SCORE 62.4

I`m using Firefox and when I search something on Google, I will click a seemingly legitimate link but will be redirected to a malicious site. My browser also keeps opening random tabs to various random and obscure sites. I`m a complete novice when it comes to sorting computers out so hopefully you can help me.

--------------------------------------------------------------------------

DDS (Ver_10-03-17.01) - NTFSx86
Run by Butcher Wing at 18:46:03.48 on 21/04/2010
Internet Explorer: 8.0.6001.18904
Microsoft? Windows Vista? Home Premium 6.0.6002.2.1252.44.1033.18.2038.710 [GMT 1:00]

SP: Windows Defender *disabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\Program Files\AVG\AVG9\avgrsx.exe
C:\Windows\system32\lsm.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwo... Read more

A:Browser Opening Random Tabs and Redirecting Me to Malicious Sites

Howdy there and welcome to TSF Forums

I'm Steve and I will be helping you throughout this fix.

Before beginning the fix, read this post completely. If there's anything that you do not understand, kindly ask your questions before proceeding. It is IMPORTANT that you don't miss a step. Please perform everything in the correct order/sequence.

Vista users please make sure you all run commands with administrator rights (right click icon - run as administrator)

Please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription

Please note that the forum is very busy and if I don't hear from you within three days from this initial posting then the thread will be closed.

We will begin with ComboFix.exe. Please visit this webpage for download links, and instructions for running the tool:

http://www.bleepingcomputer.com/comb...o-use-combofix

Please ensure you install the recovery console if requested

* Ensure you have disabled all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

Please include the C:\ComboFix.txt in your next reply for further review.

Read other 2 answers
RELEVANCY SCORE 62.4

Hi,

Recently I've been having a problem with my computer, such as strange processes running, a fake Steam window opening up, and a browser window opening at random times on Paypal.

This started one day when I was playing a game and it was stuttering a bit, so I opened Task Manager to stop programs that I don't need running. This was when I noticed 3 different instances of a program running called "312.exe", which I closed. Also one called "sweN.exe", which when I ended caused a fake steam login window to close. This fake Steam login window has popped up several times while I have just been browsing the internet, playing games, etc. Also the close and minimize button in the top right hand corner of the window doesn't work, neither do any other buttons except for the typing fields. I found this suspicious, along with the fact that I have Steam installed but I have it not to run at start-up so I shouldn't see that window unless I run it myself. Also I have found that when I leave my laptop running for a while, a random Google Chrome window will pop up with the Paypal page open on it. This is was very suspiscous as I do not have a paypal account. Also random error messages have been popping up, not sure if they're relevant but next time one pops up I will write it down and post it.

I've scanned with Microsoft Security Essentials and Malwarebytes, and they picked up a few things and deleted them but this is still going on. I've do... Read more

Read other answers
RELEVANCY SCORE 62

Recently (yesterday), i had to download a mod for a game i play frequently but the only link working was a russian website. Having no other way to download that mod i choose to trust that website and here i am.
The file i downloaded is legit and working, but without my consent i also downloaded what is think was an adware/malware that has set my home page and bookmarks to mail.ru and some random russian websites.
and also opens my default browser (chrome) randomly with ads.
First thing i did was using Adwcleaner which helped me clean the mail.ru home page / bookmarks etc.. i have also reset my chrome settings.
the only problem left now is my browser opening randomly with ads and its very annoying especially when you are playing games. i have attached my FRST.txt and Addition.txt logs hoping it would speed up the removal process.
 

A:Browser opening randomly (every few minutes) with Ad sites. (only 1 tab)

Hello,
Please download Zemana AntiMalware and save it to your Desktop.

Install the program and once the installation is complete it will start automatically.
Without changing any options, press Scan to begin.
After the short scan is finished, if threats are detected press Next to remove them.
Note: If restart is required to finish the cleaning process, you should click Reboot. If reboot isn't required, please restart your computer manually.​
Open Zemana AntiMalware again.
Click on icon and double click the latest report.
Now click File > Save As and choose your Desktop before pressing Save.
The only left thing is to attach saved report in your next message.

Fix with Farbar Recovery Scan Tool

This fix was created for this user for use on that particular machine.
Running it on another one may cause damage and render the system unstable. ​
Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!
Right-click on icon and select Run as Administrator to start the tool.
(XP users click run after receipt of Windows Security Warning - Open File).
Press the Fix button just once and wait.
If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
When finishes FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.
 

Read other 1 answers
RELEVANCY SCORE 62

I am using Windows 10, but the issue occurred on Windows 7 as well.
My laptop has two graphics adapters in it. One is an AMD Performance adapter the other is an integrated Intel adapter. If I switch to the AMD adapter, in order to play graphically intensive games, my default internet browser continually opens windows to my home page, google.com,  until my RAM is full and the computer slows to a crawl. I've tried uninstalling Google Chrome and Firefox but the issue continues with Internet Explorer. I've tried installing different graphics drivers with no change. I've also formatted and reinstalled windows, as soon as I switch to the AMD adapter the issue arises again. If I am browsing the internet while the AMD adapter is active, it takes me back to the home page automatically.
I tried different anti-virus, malware removal tools, adware removal tools. But nothing helped me to fix this issue.
 
Hoping, I would get a help from this forum.

A:Default internet browser keeps opening randomly

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Please download AdwCleaner by Xplode onto your Desktop.Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click the Scan button and wait for the process to complete.Click the LogFile button and the report will open in Notepad.IMPORTANTIf you click the Clean button all items listed in the report will be removed.If you find some false positive items or programs that you wish to keep, Close the AdwCleaner windows.Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click the Scan button and wait for the process to complete.Check off the element(s) you wish to keep.Click on the Clean button follow the prompts.A log file will automatically open after the scan has finished.Please post the content of that log file with your next answer.You can find the log file at C:\AdwCleanerCx.txt (x is a number).===Download the version of this tool for your operating system.Farbar Recovery Scan Tool (64 bit)Farbar Recovery Scan Tool (32 bit)and save it to a folder on your computer's Desktop.Double-click to run it. When the tool opens click Yes to disclaimer.Press Scan button.It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.The first ti... Read more

Read other 8 answers
RELEVANCY SCORE 62

Default browser and/or windows calculator will open randomly, single or multiple instances. The browser tab I have open will reset to home page, and lastly my speakers will change their volume or mute.
 
Here is a link to my previous post in the "am I infected" section: http://www.bleepingcomputer.com/forums/t/608668/default-browser-calculator-opening-randomly/
 
Attached are both of the FRST logs.
 
 

A:Default browser + calculator opening randomly

Hello Walrusface and Welcome to the BleepingComputer.   
 
My name is Yılmaz and I'll help you with the cleanup of malware from your computer.
Before we move on, please read the following points carefully.
Please complete all steps in the specified order.
Even if tools don't find malware, I want you to post the logfiles anyway.
Please copy and paste the logfiles directly into your posts. Please do not attach them unless you are instructed to do so.
Read the instructions carefully. If you have problems, stop what you  were doing and describe the problems you encountered as precisely as  you can.
Don't install or uninstall software during the cleanup unless you are told to do so.
Ensure your external and/or USB drives are inserted during always the scan.
If you can't answer for the next few days, please let me know. If  you haven't answered within 5 days, I am assuming that you don't need  help anymore and your topic will be closed.
If you have illegal/cracked software, cracks, keygens, etc. on the system, please remove or uninstall them now!
I can not guarantee that we will find and be able to remove all  malware. The cleaning process is not instant. Please continue to review  my answers until I tell you that your computer is clean
Please reply to this thread. Do not start a new topic
As my first language is not English, please do not use slang or idioms. It could be hard for me to understand.
Please open as administrator ... Read more

Read other 21 answers
RELEVANCY SCORE 62

 

Hi ..
 
I have the latest version of 64-bit Chrome v37.0.2062.120 m for my Win 7 Pro 64-bit OS.
 
In the last 2-3 days, extra versions of the Chrome browser have started opening up randomly.
 
I run SUPERAntiSpyware and Malwarebytes in real time protection. 
 - No yellow flags have popped up.
 - I run each under a full scan every 24 hours. Nothing in their logs.
 
I have added no new extensions in the last 2-3 days, Maybe 1-3 weeks ago?
 
I uninstalled/re-installed Chrome, same issue.
 
I searched Google/Bing and closest reported issues were specific to certain website URLs popping up when a tab or new window opened up. Not this issue.
 
The new browser that opens randomly does not contain the 'Set Pages' I established to open when I first open Chrome.
 
The new browser that opens only contains one tab of by default 'X New Tab' extension I have used for a long time with no issues.
 
Ideas? Suggestions? to narrow down, solve this issue are greatly appreciated.
 
Let me know.
 
Thanks.
 
John

A:Google Chrome keeps opening a new browser randomly ..

well, the lack of responses was disheartening
 
I solved issue myself using a 3rd anti-virus, giving the free copy of iObit Malware fighter a use.  It found and deleted ...
 
"IObit Malware Fighter
 
OS: Windows 7
Version: 2.4.1.16
Define Version: 1375
Time Elapsed: 00:28:40
Objects Scanned: 89761
Threats Found: 1
Save Time: 9/20/2014 8:32:42 AM
 
|Name|Type|Description|ID|
Connect DLC 5, REG, HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\NativeMessagingHosts\nmhostct3306061, 2015248"
 
A Bing search found this to be part of the infamous 'Conduit toolbar.'  A separate search of my system turned up nothing but an empty folder so I 'assume' that the other two AntiVirus I use under 24 hour real protection and full scans, SUPERAntiSpyware and Malwarebytes must have caught most of 'Conduit Toolbar' though their logs are incomplete OR iObit Malware Fighter caught a remnant/vestige of 'Conduit Toolbar' that only affected Chrome.

Read other 5 answers
RELEVANCY SCORE 62

I am using Windows 7.
While i am working on other application. My Default explorer keeps opening randomly and it doesnt let me do any work.
If I am in an explorer browsing on websites, it takes me back to the previous page automatically.
I also reformatted using my HP recovery manager which brings it back to factory default but still the issue still exists.
I tried different anti-virus, malware removal tools, adware removal tools. But nothing helped me to fix this issue.
 
Hoping, I would get a help from this forum.
 
Thanks!

A:Default internet browser keeps opening randomly

Hi,
I have even tried erasing the hard disk. But the issue still exists.
 
Please help
 
-Sathya

Read other 49 answers
RELEVANCY SCORE 62

Windows 10, problems are - default browser and/or windows calculator will open randomly, single or multiple instances. The browser tab I have open will reset to home page, and lastly my speakers will change their volume or mute. These things have been happening separately or all at once. So far I've run scans with AVG and then Malwarebytes, but nothing found with either. Fingers crossed I can get help here.

A:Default browser + calculator opening randomly

Welcome aboard   Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2. SecurityCheck may produce some false warning(s), so leave the results reading to me.NOTE 3. If you receive UNSUPPORTED OPERATING SYSTEM! ABORTED! message restart computer and Security Check should run Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeList Restore PointsClick Go and post the result. Please download Malwarebytes Anti-Malware (MBAM) to your desktop.NOTE. If you already have MBAM 2.0 installed scr... Read more

Read other 9 answers
RELEVANCY SCORE 62

Well I have used your service before and greatly appreciate it. I must however ask for your help again. My problem has been going on for about a month or two now. What happens is I will be, usually, playing an MMO called TERA and a firefox window will open up. It will keep opening up new windows on my default homepage. It is not just firefox but whatever my default internet browser is. It originally happened when me and a friend changed services on my computer. Only changing things from automatic to manual as he said there werent things that did not need to be starting up. When this kept happening no matter what I did I did a system restore to an earlier point way before I changed anything. After about two weeks it came back. The second time I didnt do anything but it went away on its own. It has recently come back after about a month of no problems. I cant figure out whats causing this and its driving me nuts. I read on your forums of someone else with a similar issue but he had multiple keyboards and I do not have that. I am on a laptop with only the built in keyboard and a wireless mouse.

A:Default internet browser keeps opening randomly

Hello,Please follow the instructions in ==>This Guide<== starting at step 6. If you cannot complete a step, skip it and continue.Once the proper logs are created, then post them in a reply to this topic by using the Add Reply button.If you can produce at least some of the logs, then please create the post and explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the reply and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.Please note that I am not a member of the Malware Removal Team and will not be assisting you in removing the infection. I'm simply helping you to post the information they need in order to assist you.If HelpBot replies to your topic, PLEASE follow Step One so it will report your topic to the team members.Orange Blossom

Read other 8 answers
RELEVANCY SCORE 61.2

Hey, when I load up a web browser and try to search up something, it returns back to home page, even when I'm on homepage it just reloads. My next problem is only on Google Chrome, and when I load it up, it just spams with tabs and it opens them so fast I can't even exit out of them, when I restarted, it said it was waiting for over 200 Google chrome tabs to close.

At the moment I'm using the in game steam web browser to do my web browser needs.
I also don't think it's malware, because I ran a bunch of anti malware scan from Norton, Malware bytes, and avast but none of them caught any malware.

A:Web browser randomly returns to homepage, and keeps opening new tabs

Hi,

Sorry to hear that. Please try Norton Power eraser (norton.com/npe) and see if that helps.

Praveen
Norton Support.

Read other 2 answers
RELEVANCY SCORE 61.2

Whenever I turn on my laptop. It instantly opens up 7 or more Firefox browsers and if try to close it more will show up. If i go into google chrome or internet explorer it wont let me go anywhere it just refreshes at the homepage. This also happens in safe mode with networking but its not as bad. Weird thing is if im in safe mode and if I turn off my touch pad it doesnt happen anymore.
 
 
 
 
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64 NETWORK
Internet Explorer: 10.0.9200.16660  BrowserJavaVersion: 10.9.2
Run by John at 3:27:25 on 2013-08-24
Microsoft       6.2.9200.0.1252.1.1033.18.5611.4596 [GMT -4:00]
.
AV: AVG Internet Security 2013 *Disabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AV: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: AVG Internet Security 2013 *Disabled/Updated* {B5F5C120-2089-702E-0001-553BB0D5A664}
FW: AVG Internet Security 2013 *Enabled* {36AFA1E1-4CDC-7EF8-11EE-C77C3581ABA2}
.
============== Running Processes ===============
.
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\dwm.exe
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchos... Read more

A:Web Browser randomly opening Virus scanners cant find anything

Edit. Its now opening my browsers even with touch pad off so it might not be related

Read other 10 answers
RELEVANCY SCORE 61.2

I am sure I have a trojan virus and do not know how to get rid of it. Have tried anti virus software and I thought I got rid of it, but still strange behavior. The machine was freezing on start-up. I removed all non-essential programs and that issue seems to have gone away (knock on wood).

Still get web page re-directs so there must be some sort of residue (or the core issue still exists).

Any ideas?
DDS (Ver_09-05-14.01) - NTFSx86
Run by Joanne Kennedy at 22:16:47.67 on 29/05/2009
Internet Explorer: 7.0.5730.11
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.502.209 [GMT -4:00]
============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\WINDOWS\system32\lxdjcoms.exe
C:\WINDOWS\System32\svchost.exe -k imgsvc
C:\WINDOWS\Explorer.EXE
C:\Program Files\Internet Explorer\Iexplore.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Lexmark 1400 Series\lxdjamon.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\igfxtray.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
C:&... Read more

A:Freezing on start up and web page redirecting

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 7 answers
RELEVANCY SCORE 61.2

hi
My IE browser is not opening home page at all, once i click on Internet Icon, it will open a blank page, in the address bar this is the address "C:\WINDOWS\SYSTEM\msblank.html"

please help me

One more problem what i am facing is, I am using broadband connection, till yestarday i did not had any problem, but know my modem keeps on dialing some number, so that, my broadband connection will be terminated with in 1 or 2 minutes.
Even when I am working in MS Office, (i.e, when i not connected to Broadband ) still my modem will keep on dialing,

what may be the problem. I can not download any file (or) Internet pages properly.
 

A:my IE browser is not opening my home page.

You obviously have some malware. Post a HijackThis log, and we'll see if we can get you sorted out.
 

Read other 1 answers
RELEVANCY SCORE 61.2

Hi,
When ever i connect to Broadbad my browser will not at all open my home page (google)
in address bar i see an addres like this " C:\WINDOWS\SYSTEM\msblank.html"
once i see this kind of addrss in my address bar i will get a security warning as
"Do you want to install and run Advanced Browsing Technologies. International Charges Aplly after clicking yes, otherwise press cancel" even if i click no (or) cancel this message keeps on coming.

what should i do. please help me.
 

A:why My IE Browser is not opening my home page.

have a look at the connection settings in IE
so open IE
goto
>tools
>internet options
>connection tab
is it set to never dial a connection
then have a look at lan settings

how do you connect to the internet?

also post your ipconfig

start
run
cmd
ipconfig /all

rightclick in the box
select all
enter
control key + C key - to copy
then reply here and
control key + V to paste
 

Read other 2 answers
RELEVANCY SCORE 61.2

This is my first post, so I apologize if I miss something.
I am running 64bit Windows7. Lately when I open any of my browsers (Firefox, IE, or Chrome) it takes forever to load and sometimes, times out. This happened not to long ago and I restored to a previous date and that helped temporarily. But now I have the slow loading web pages and browsers. It only happens on this computer. My other computers have no problem opening web pages/browser. I do not have them networked together because I have a teenage son who is a viral magnet. This computer is only used by my wife and I, and has so far been virus free. I am thinking this is some malicious software that I cannot detect. I did open an attachment from work that apparently had a worm. But according to the IT department McAfee should have rooted it out.
So far what I have done:
1. Ran complete scan with my McAfee security
2. Installed and ran Microsoft security essentials
3. Installed and ran Adaware
4. Installed and ran Malware
5. Installed and ran CCleaner.
I think I have followed the "First Steps" from TSF.
Any help or comments would be helpful.


DDS (Ver_10-11-01.01) - NTFS_AMD64
Run by Bailey2 at 11:38:48.07 on Tue 11/02/2010
Internet Explorer: 8.0.7600.16385 BrowserJavaVersion: 1.6.0_21
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.6135.4676 [GMT -5:00]


============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system... Read more

A:Slow browser/web page opening

Bump, please.

Read other 1 answers
RELEVANCY SCORE 60.8

I don't really know what's going on with my computer or how to explain into detail... so I'll just say what I've noticed is wrong:My computer takes FOREVER to connect to my wireless. It usually takes me restarting my computer 2 or 3 times to connect (randomly disconnecting as well), but other computers don't seem to have a problem at all with it. When I finally do get connected to the net, my google links keep redirecting me to something completely different.I've run: AVG, Adaware, Advanced SystemCare, and Nod32; but nothing comes up.Sometimes my computer will restart itself at random.And when I try to start it in Safemode it'll show this list of the drivers loading then stop suddenly and restart itself again.Can someone please help me? PLEASE PLEASE >.<Here's my HJT log:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 9:42:38 AM, on 2/25/2010Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\ZoneLabs\vsmon.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\arservice.exeC:\WINDOWS\eHome\ehRecvr.exeC:\WINDOWS\... Read more

A:Computer randomly restarting. Can't start in safemode. Links redirecting...

Welcome to Bleeping Computer Mcskittles,The log shows a DNS changer infection, so most of your initial Internet page requests are sent to a malware server in the Ukraine. Let's get more details and then start some repairs.To keep them from interfering with the repairs, be sure to temporarily disable all antivirus/anti-spyware softwares while these steps are being completed. This can usually be done through right clicking the software's Taskbar icons, or accessing each software through Start - Programs. Download RSIT (random's system information tool) from here to your desktop. Then click on the RSIT.exe to open the RSIT display, and click the Continue button.If necessary allow it to locate or download a copy of HijackThis as needed.Once the scan completes a textbox will open - copy/paste those contents here for review please. The log can also be found at C:\rsit\log.txt.RSIT will also create a second log, info.txt, which will be minimized to your taskbar. Post that here as well please (it will also be stored at C:\rsit\info.txt).You can break logs into parts and use separate posts here when replying and posting the log files, if needed.--------------Also click here and download the installer for Gmer to your desktop, then click that file to run Gmer.Once the opening scan finishes, click on Scan (before scanning, make sure all other running programs are closed and no other actions like a scheduled antivirus scan will occur while this scan compl... Read more

Read other 1 answers
RELEVANCY SCORE 60.8

When I am online browsing I have random tabs that will open to various websites. Nothing comes up when I run AVG, or Spybot. I am currently running Marwarebytes to see if it can find the problem. Here is the Hijack this log file. Any help would be great. Thank you in advanceLogfile of Trend Micro HijackThis v2.0.4Scan saved at 8:57:59 AM, on 6/25/2010Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.17055)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\AVG\AVG9\avgchsvx.exeC:\Program Files\AVG\AVG9\avgrsx.exeC:\Program Files\Lavasoft\Ad-Aware\aawservice.exeC:\Program Files\AVG\AVG9\avgcsrvx.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\Program Files\EMS Free Surfer Companion\fs30.exeC:\Program Files\Hewlett-Packard\Toolbox\StatusClient\StatusClient.exeC:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder\OrderReminder.exeC:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exeC:\Program Files\Google\Google Desktop Search\GoogleDesktop.e... Read more

A:Unknown virus/malware randomly opening tabs in browser

Since I have had no reply I have tried the following. downloaded and scanned with Malwarebytes, Downloaded and ran spyblaster. I have removed skype and google accelerator. Everything has come up empty and I am still having random tabs opening in all browsers and can not search in any search engine.Someone please help me...DougEDIT: Please be patient. There are over 270 unanswered topics in this forum at present at the current average wait time to receive help is 5-6 days. ~BP

Read other 3 answers
RELEVANCY SCORE 60.4

I have a web site that I plan to put onto CD, i.e. use it locally. The site uses activeX controls hence it is no good for me to use Firefox (as far as I know there are no activeX controls for firefox). However since Firefox is my default browser, I was wondering if there was a coding way (C++, JavaScript, anything) to open this particular web page in IE.

I've been attempting to write C++ code to do this. So far I can open IE with:

system("\"\"C:\\Program Files\\Internet Explorer\\iexplore.exe\"\"");

I believe ShellExecute can be used to open web pages via the Default Browser (I haven't found any tags where I can choose a browser).

Anyone have a clue?
 

A:Solved: Opening web page with non-default browser

Read other 6 answers
RELEVANCY SCORE 60.4

Today i ocasionally downloaded some program called springfiles. As soon as i installed it i reallised what is that, uninstalled it and cleaned system with CCleaner. Now every time i open my browser there is one more page opening (http://yourwebing.com/?ssid=*some numbers*). It's happening in all browsers i have exept of Edge (i'm using win10). I have already tried Malewarebytes Anti-Malware and nothing. How can i remove this?

A:Ad page opening on browser startup (Win10)

If you cannot remove it from your homepages, try using Avast! antivirus because it has real time protection and is very good with catching viruses.

Read other 4 answers
RELEVANCY SCORE 60.4

I get the following error in IE9 on launching

The website cannot display the page
HTTP 500
Most likely causes:
? The website is under maintenance.
? The website has a programming error.
What you can try:

Retype the address.Refresh the page.


Go back to the previous page.Go back to the previous page.


I get the following error on Chrome on launching

Error 500: IDL:smgt.juniper.net/sae/SAEException:1.0

It takes about 2-3 minutes before the home page opens up. In the meantime, attempts to refresh shows the same results as given above.

There are no proxy settings that are preventing this afaik. Also, I did a check on any offensive add-ons in IE and could not find any to the best of my knowledge.

Surprisingly, the home page opens up in 2 minutes after startup and I am inclined to think this is the work of some malware.

DDS log attached.

.
DDS (Ver_2011-06-03.01) - NTFSx86
Internet Explorer: 9.0.8112.16421
Run by hp at 23:35:53 on 2011-06-04
Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.3253.2425 [GMT 5.5:30]
.
AV: avast! Antivirus *Enabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Enabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\s... Read more

A:Browser not opening home page on startup

Hi,
I'm nasdaq

Lets try this.

Open Internet Explorer.
1. Click the Tools->Internet Options menu item.
2. Click the General tab.
3. Set Use blank.
4. Click Apply.

Check also this Script debugging:

Open Internet Explorer.
1. Click the Tools->Internet Options menu item.
2. Click the Advanced tab.
Under Browsing:
3. Set "Disable Script Debugging" ( Internet Explorer).
and set "Disable Script Debugging" (others)
4. Click Apply.

Keep me posted.

Read other 7 answers
RELEVANCY SCORE 60.4

im running win xp home with mozilla firefox browser and when i open the browser it opens to a home page i didnt choose and another page thats a porn search engine, i went into my Tools , then options, Main, and selected to change my homepage to default page which is the page i want to load, exit tools , click home, and it goes to the correct page , but when i close the browser and restart it , it starts with the other two pages instead of my default page, can someone help me fix this pls
 

A:browser keeps opening with wrong home page

Hiya and welcome to Tech Support Guy

Are you still having this problem? If so, do the following:

Please download Malwarebytes' Anti-Malware from Here or Here

Double Click mbam-setup.exe to install the application.
Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
If an update is found, it will download and install the latest version.
Once the program has loaded, select "Perform Quick Scan", then click Scan.
The scan may take some time to finish,so please be patient.
When the scan is complete, click OK, then Show Results to view the results.
Make sure that everything is checked, and click Remove Selected.
When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
Copy&Paste the entire report in your next reply.
Extra Note:
If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediatly.


Download and scan with SUPERAntiSpyware Free for Home Users
Double-click SUPERAntiSpyware.exe and use the default settings for installation.
An icon will be created on your desktop. Double-click that icon to launch the program.
If asked to update the program definitions, click &q... Read more

Read other 1 answers
RELEVANCY SCORE 60

Along with pages that stay open for periods of time become "sleepers" and will be hard to click off, move or jump to another page.
Windows XP Home Edition Dell Desktop Dimension Series 2300.
Recent Disc Cleanup
Disk Defrag is showing not needed

Installed Video Card to improve choppy video issue; no result
Upgraded from 512mb of ram to 1GB of ram, no result

Operating with a 24" Flat Screen

This computer just keeps getting slower and cannot figure out why. Lots of apps right now on this computer

Have external 1 Terrabyte hard drive

Pentium 4 - 2.0 Ghz processor
I have a XPS 9000 on order from Dell but I need to get this computer back up to snuff and I'm assuming there's something in the hijack log that might indicate the problem.

Outlook Express real slow to open,

Opening up Add/Remove panel very slow
What's odd is certain sites with pictures/picture dex's are unaffected by the speed to move around the internet, unless the pages are left open for a period of time, like http://caedes.net or other photography sites.

Here's the hijack log:
Logfile of Trend Micro HijackThis v2.0.3 (BETA)
Scan saved at 11:37:57 PM, on 12/16/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\sys... Read more

A:Page Icons slow to Load when Opening Browser

Read other 9 answers
RELEVANCY SCORE 60

Thank you very much for your help. Here is the gist of my problem:

When I open a browser(IE7 Vista SP1), it initially freezes for about 30 seconds before opeining my home page(Google). I can see the progress bar at the bottom of the window just get a little green and then it freezes. Once it lets go and I do my search, it takes me to the results page. However, when I click on one of the items, it very slowly, takes me to an advertisement page. Most of which I have never seen before. If I click on the back button, sometimes it will let me go back, sometimes not. If I can go back and I click on the results again, it then takes me to the correct page. I have not noticed any other ill effects from whatever it is that has infected my computer. Thanks again for your help. I have pasted and attached the 3 files you requested from the programs you asked me to run.

Log.txt

Logfile of random's system information tool 1.04 (written by random/random)
Run by Keefer at 2008-11-07 16:23:32
Microsoft? Windows Vista? Ultimate Service Pack 1
System drive C: has 21 GB (42%) free of 50 GB
Total RAM: 3325 MB (80% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:23:41 PM, on 11/7/2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Fil... Read more

A:[SOLVED] Browser freezes upon opening then goes to an advertisement page

Bump PLEASE!

4 Days old now. I am in a bad way trying to use the internet.

I have an update to my problem. I have apparently somehow disabled part of the hijack. It now no longer takes me to an alternate page but now it completely freezes my browser for several minutes before releasing it to go to the page I requested. Also, I am now required to click twice on links in Google before it will go to them.

Read other 15 answers
RELEVANCY SCORE 60

How do I customise the Firefox 3 Browser to open each time as per Screenshot 3?

At Screenshot 1:
When I was using Internet Explorer 7 as my main Browser, I was able to customise the opening page so that it was 'clean' of all the 'flotsam and jetsam' rubbish that I had no interest in. My Customised Page in IE7 looked like this;

Screenshot 1:



At Screenshot 2:

Now when I open Firefox 3, this is what I get........a page of 'stuff' that I neither need. nor want;

Screenshot 2:
At Screenshot 3:
I have managed to customise and clean up the FF3 page as at Screen-shot 3 below,and it remains like this each time I open the Browser while I stay in session, however, if I log off or close and shut-down, it reverts to display like Screenshot 2, the next time I open up the FF3 Browser.


Screenshot 3:


To keep my FF3 Browser opening page 'clean' as in the above Screenshot, what settings should I apply, to make it appear this way each time I open the Browser.

A:Can't Customise Firefox3 Opening Browser for a 'Clean' Page!

Originally Posted by sassofalco


How do I customise the Firefox 3 Browser to open each time as per Screenshot 3?

At Screenshot 1:
When I was using Internet Explorer 7 as my main Browser, I was able to customise the opening page so that it was 'clean' of all the 'flotsam and jetsam' rubbish that I had no interest in. My Customised Page in IE7 looked like this;

Screenshot 1:



At Screenshot 2:

Now when I open Firefox 3, this is what I get........a page of 'stuff' that I neither need. nor want;

Screenshot 2:
At Screenshot 3:
I have managed to customise and clean up the FF3 page as at Screen-shot 3 below,and it remains like this each time I open the Browser while I stay in session, however, if I log off or close and shut-down, it reverts to display like Screenshot 2, the next time I open up the FF3 Browser.


Screenshot 3:


To keep my FF3 Browser opening page 'clean' as in the above Screenshot, what settings should I apply, to make it appear this way each time I open the Browser.







enabling cookies should do the trick.

Read other 5 answers
RELEVANCY SCORE 59.2

MSN.com had been my default internet browser page. However, a website:
http://www.aconfidenceonline.com/ has hijacked it and now my browser automatically opens to this page when I double click on the Explorer icon. Also, there are several icons on the bottom right of the page, claiming that my computer is infected and I need to buy verious anti-virus and anti-spyware software. I recently installed a premium level Norton product which says my computer is secure. It also won't allow these programs to be downloaded.
 

A:Security website hijacked my default opening browser page

Read other 8 answers
RELEVANCY SCORE 59.2

Hello yall!
 
So, for the past week, whenever I open a browser, a random site opens up, even though my startup page is set to yahoo.com.
Half the time it's safesurfs searching engine, but sometimes its some kind of a survey or an ad etc.
 
I remember it all started when I downloaded a sound kit for FL Studio, so i deleted all I could, but obviously it wasn't enough.
 
What can I do?

A:Random website appears as the startup page when opening any browser

Use some free virus scanner, like Eset online scanner, or Kaspersky security scan....
After removing of viruses, report viruses to current antivirus site or change antivirus program.

Read other 2 answers
RELEVANCY SCORE 58.8

Hello, B.C.
 
My english is not 100% perfect, so I apologize.
 
After looking at how many problems were solved here I wanted to show mine, since yesterday, while not browsing or playing a fullscreen game, my default browser randomly opens, if I am playing a game, it minimizes it which makes it unplayable. And when I am browsing, no matter what browser is, my current tab switch to the browser home page, for example, In opera my home page is the speed dial, while browsing on a website e.j. wikipedia or any other, it changes to the browser home page for no reason, and that happens in all browsers, no matter what the default one is.
 
I do believe this is caused by a malware. I scanned my computer with both avast! Free Antivirus and Windows Defender and found nothing. I deleted opera and made firefox my default browser, it randomly opened constantly as it did with opera. I restored my system to 04/12/12 and the problem was still present (I also rebooted many times), however, as I deleted opera when restoring my system it was still there as my default browser but, when whatever was causing the problem attempted to launch it, it popped up a window telling that the launcher file could not be run, and so that window popped up randomly and it was actually the same thing, as when I deleted the launcher file, it stopped popping up the window (and a browser, because I had no default browser). When clicking the opera icon in my tool bar it opened opera like it was never rem... Read more

A:Default browser randomly opens + browser tabs randomly switch to browser home

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Please download AdwCleaner by Xplode onto your Desktop.Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click the Scan button and wait for the process to complete.Click the Report button and the report will open in Notepad.IMPORTANTIf you click the Clean button all items listed in the report will be removed.If you find some false positive items or programs that you wish to keep, Close the AdwCleaner windows.Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click the Scan button and wait for the process to complete.Check off the element(s) you wish to keep.Click on the Clean button follow the prompts.A log file will automatically open after the scan has finished.Please post the content of that log file with your next answer.You can find the log file at C:\AdwCleaner[Sn].txt (n is a number). Please downloadJunkware Removal Tool to your Desktop.Please close your security software to avoid potential conflicts.Run the tool by double-clicking it. If you are using Windows Vista or 7, right-mouse click it and select Run as administrator.The tool will open and start scanning your system.Please be patient as this can take a while to complete, depending on your system's specifica... Read more

Read other 9 answers
RELEVANCY SCORE 58.8

Have asked on the mozillazine forums and no one appears to have heard of this one. 
 
This is the page link:  http://mplayerdownloader.24trk.com/flashplayer/update/1/?iid=DcMJDcAgDABALyjoQ7-ZIRSKiWXeRy7HfbCMt2F7GnlY9_YN0K2J-2wBAbh5cqSumklR1RmnmS_GBVR5qSQeP2GJ1E3qBw&c=34&key=26100f6c4da083e7b3ec9f0eb0590b2c&t
 
WOT is running and blocks the page from loading.  Suspect it's a phishing site but can get no confirmation of this.
 
Browser opens a brand new instance and not a new tab in an already open browser window.  Instance is weird in that instead of my normal firefox interface I have no access to my bookmarks. 
 
Any clues o ye mighty ones?
 
Thanx a meg for the width,
m

A:browser starts randomly on weird update flash player page

Security Check
§  Download Security Check from here or here and save it to your Desktop.
§  Double-click on SecurityCheck.exe
§  Follow the on-screen instructions.
§  A Notepad document should open automatically called checkup.txt.
§  Please post the content of that document.
 
Farbar Service Scanner
§  Download Farbar Service Scanner.
§  Run it on the computer.
§  Make sure the following options are checked:
o    Internet Services
o    Windows Firewall
o    System Restore
o    Security Center/Action Center
o    Windows Update
o    Windows Defender
o    Other Services
§  Press "Scan".
§  It will create a log (FSS.txt) in the same directory where you run the tool.
§  Please copy and paste the log to your reply.
 
MiniToolBox
§  Download MiniToolBox
§  Run it on the computer.
§  Checkmark following boxes:
§  Report IE Proxy Settings
§  Report FF Proxy Settings
§  List content of Hosts
§  List IP configuration
§  List Winsock Entries
§  List last 10 Event Viewer log
&#... Read more

Read other 5 answers
RELEVANCY SCORE 58.8

Hello,

I am running Windows Vista 32 bit and my start menu Items (all of them) have disappeared as well as my desktop icons and all files and folders in windows explorer seem to be hidden. They are there and when I goto "show hidden files and folders" in folder options of windows explorer they show up with that faded look to them. I can still click on them and access them but something still isn't right.

Also my browser (Internet Explorer 9) is redirecting to strange websites.

Thanks.

.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 9.0.8112.16421
Run by emily at 22:13:07 on 2011-12-18
Microsoft? Windows Vista? Home Premium 6.0.6002.2.1252.2.1033.18.2037.552 [GMT -5:00]
.
AV: AVG Anti-Virus Free Edition 2012 *Enabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
SP: AVG Anti-Virus Free Edition 2012 *Enabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\PROGRA~1\AVG\AVG2012\avgrsx.exe
C:\Program Files\AVG\AVG2012\avgcsrvx.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystem... Read more

A:Start Menu empty and browser redirecting

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything. We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here. To help Bleeping Computer better assist you please perform the following steps:*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/433288 <<< CLICK THIS LINK If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.*************************************************** If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lo... Read more

Read other 48 answers
RELEVANCY SCORE 58.4

Over the past week I've been in the process of reinstalling programs to my computer after having to reinstall WindowsXP. Up until this past Friday everything was running smoothly, and then in the blink of an eye trying to browse web pages has become a frustrating act taking much longer than it should. When running other applications not involving going online, my computer runs completely fine. I suspect spyware is the cause because when I first began reinstalling programs I inadvertantly came across a web page that I know hit me with a load of spyware...all this happening before I reloaded my firewall and antivirus software. Eventually I installed these programs and cleaned out my computer to the point where I could work without worrying about spyware cropping up. I still suspect remnants of spyware remain on my computer which has now caused my browsing online to become a near impossibility. I am only able to ask for your assistance on this web site while running my computer in safe mode.
Sorry for being so wordy..I just wanted to be as descriptive as possible to help you out in determining the correct actions to help alleviate my problem.

Here is my HijackThis Logfile:

Logfile of HijackThis v1.99.1
Scan saved at 8:18:25 PM, on 7/31/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\... Read more

A:Opening up either my IE or Firefox browser results in painfully slow web page loads..

Hi Mark and welcome to TSF.

Download L2MFix from one of these two locations:

http://www.atribune.org/downloads/l2mfix.exe
http://www.downloads.subratam.org/l2mfix.exe

Save the file to your desktop and double click l2mfix.exe. Click the Install button to extract the files and follow the prompts. Then open the newly added l2mfix folder on your desktop. Double click l2mfix.bat and select option #1 for Run Find Log by typing 1 and then pressing Enter. This will scan your computer and it may appear nothing is happening. After a minute or 2, notepad will open with a log. Copy the contents of that log and paste it into this thread.

IMPORTANT: Do NOT run option #2 or any other files in the l2mfix folder until you are asked to do so!

Read other 19 answers
RELEVANCY SCORE 58.4

Start.qone8 page is opening in IE byr default.. How I will get rid of this

A:Start.qone8 page is opening in IE byr default.. How I will get rid of this

Hello vivekkanvi I would like to welcome you to the Malware Removal section of the forum.Around here they call me Gringo and I will be glad to help you with your malware problems.Very Important --> Please read this post completely, I have spent my time to put together somethings for you to keep in mind while I am helping you to make things go easier, faster and smoother for both of us!Please do not run any tools unless instructed to do so.We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the sam... Read more

Read other 3 answers
RELEVANCY SCORE 58

I am posting this for my wife who has a brand new computer. I am not sure what she has installed as far as spyware- and antivirus goes, but it has gotten to the point that it doesn't matter what browsers she uses; sooner or later, regardless of what she is doing, the page will refresh and send her back to the start page. Another tidbit of information is that even when she is not at the computer, her start page (www.google.com) will pop up in a new window. Also, my wife is running Windows Vista Ultimate 32-bit. She's been behind on her Windows-updates. It's weird because last night I was trying to log in to this forum on her computer and her browsers, both IE and Firefox, would send me back to the start page. When I tried to click the back-button, it took me back to the start page again.

We have run Spybot, Ad-Aware and several antivirus runs with Avira and it has not remedied a thing. We did, however, change the start page to a non-search engine and this seems to have cleared the issue up. However, I want to be absolutely sure that we're home free.
DDS (Ver_09-07-30.01) - NTFSx86
Run by Administrator at 14:27:43.17 on Wed 09/09/2009
Internet Explorer: 8.0.6001.18813
Microsoft? Windows Vista? Ultimate 6.0.6002.2.1252.1.1033.18.3326.2101 [GMT -7:00]

SP: Spybot - Search and Destroy *enabled* (Updated) {ED588FAF-1B8F-43B4-ACA8-8E3C85DADBE9}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

============== Running Processes ===============

C:... Read more

A:Web browsers randomly refreshes back to start page.

I'm sorry for bumping, but it has been a while and the problem has returned. Just by typing a two-sentence email, 29 IE windows cropped up. Somebody please help.

Read other 3 answers
RELEVANCY SCORE 56.8

When I click on links from a Google search, it redirects or sometimes opens a new browser window with a blank page from http://results.google-analytics.com/
Super Anti-Spyware does not detect anything. Enclosing my hijackthis.log.
Any help would be appreciated.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:29:50 PM, on 6/21/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\Program Files\AVG\avgchsvx.exe
C:\Program Files\AVG\avgrsx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\AVG\avgcsrvx.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\AVG\avgwdsvc.exe
C:\Program Files\BlueSoleil\BlueSoleilCS.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\dlcxcoms.exe
C:\Program Files\Nero Burning ROM\Nero 8\Nero 8\InCD\InCDsrv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\AVG\avgnsx.exe
C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\Nero Burning ROM\Nero 8\Nero 8\Nero BackItUp\NBService.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\svchost.exe
C:\WIND... Read more

Read other answers