Over 1 million tech questions and answers.

infecting Your Computer - Bing Search Vs. Google Search

Q: infecting Your Computer - Bing Search Vs. Google Search

Those who use Bing and Google to do searches might find this interesting.

http://nakedsecurity.sophos.com/2012/10/05/bing-image-blackhat-seo-poisoning/

---------------------------------------------------------

RELEVANCY SCORE 200
Preferred Solution: infecting Your Computer - Bing Search Vs. Google Search

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

A: infecting Your Computer - Bing Search Vs. Google Search

Good read, Frank

Read other 1 answers
RELEVANCY SCORE 100

The problem is any search website comes up with page can't be found: Google.com, Bing.com, Yahoo.com comes up but when I try a search it does nothing. I have no issues going to any other website, just search websites.

I have a laptop running Windows 7 Home Premium 64 bit with AVG Anti-Virus Free Edition 2011 and no third party firewall.

AVG scan is clean. Malwarebytes scan is clean. Ccleaner has been run. I have reset IE 8 settings to default. I have flushed the DNS. I have run HiJackThis and don't see any problems. I have checked the host file and there are no strange entries.

I need to know what to try next. Any help or direction would be appreciated.

Thank you.

A:Can't Access Search sites: Google, Bing, Yahoo Search

Hello,Please follow the instructions in ==>This Guide<==. If you cannot complete a step, skip it and continue.Once the proper logs are created, then make a NEW TOPIC and post it ==>HERE<== Please include a description of your computer issues and what you have done to resolve them.If you can produce at least some of the logs, then please create the new topic and explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the topic and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.Kindest Regards,SweetTech.

Read other 3 answers
RELEVANCY SCORE 97.6

As of yesterday, I am unable to open a search page on Google or Bing. I've run MalwareBytes (which removed two Trojans), McAfee and AdAware. No other infections have been located. I read somewhere that my "host" file (Windows/System32/Drivers/etc) may have been corrupted and I opened it in NotePad and removed a number of lines of info WAY, WAY below the other data. This did not help. I am running XP.

I am a novice at this and am unable to find any other solutions. Would truly appreciate your help and solution.

I downloaded Hijack This and ran a log, and can post upon request.

Thank you!

A:Google and Bing search suddenly blocked on my computer

I just performed a system restore which solved the problem. I wish I knew what caused it so I can watch out for it in the future.

Thanks for all you do here at Bleeping Computer!

Read other 2 answers
RELEVANCY SCORE 97.2

I have done this several times, but I no longer see Google Search listed at Internet Explorer Gallery

How else can I do it?

A:Replacing Bing search with Google search

One way---

https://tools.google.com/dlpage/tool...en&brand=GGHP&

Read other 14 answers
RELEVANCY SCORE 87.6

Thanks in advance for any help you can give. A few days ago my internet started acting up. When doing a web search, Google would produce search results, but when clicking on any of the results, it would send me back to the Google home page. I noticed too that when I went to put in a search, I did not get a list of topics that google usually gives you when you start to type in a search topic. I also tried Bing and got similar results, except that at Bing, clicking on a search results would either lead me to the “cannot display webpage” window, or it would load a random webpage, often times associated with the University of Phoenix. This morning it loaded a webpage called “Shopica” with the text “Top resources for pheonix [Sic] university,” below which were six links related to colleges. Clicking the BACK button loaded a webpage about migraine headaches, and another click of BACK loaded a webpage selling “StopZILLA” anti-virus software. Again, Google searches redirect back to the Google search page. Now, if I type in any webpage, such as my local news station, without using a search tool (Google etc.), the webpage functions perfectly. So this really seems tied to doing a search. Those are the symptoms. Now, some additional info: Yesterday, when trying to sort this out, a Google search led me to a webpage, presumably by Google, that stated anomalous traffic was coming from my computer, and it wanted me to enter in the human verification word to continue. I did so, and it... Read more

A:Redirects using Google and Bing Search

I forgot to tell you that I did a system restore a few days after the symptoms started, and set it to a restore point a week or so prior to when the symptoms started. The system restore had no affect on the symptoms, problem still remains.
 

Read other 2 answers
RELEVANCY SCORE 87.6

I have tried about 7 methods but none worked.
My list of programs does not include Bing - so I cannot delete it.
I have got just one search engine associated with I E 11 (Google) and set it as Default. However; in that same line of text it says that it is "Not Available".
Anyway; when I select I E; I get MSN combined with Bing.
Please advise me

A:On I E 11 How to Use Google Search Engine instead of Bing

Go to gear icon > manage add-ons > search providers > Find more search providers (at Bottom left) > pick one(or some)

Read other 14 answers
RELEVANCY SCORE 87.6

This is driving me insane. I hate Bing. I have Firefox and until today when I did a search in the search box next to the address bar I would get results from Google. The box says that it is a google search but when I type in a keyword and enter I quickly get the google results and then it is redirected to a list of results from bing. I've tried everything I can think of to stop this. Any suggestions?

A:Google Search Redirecting to Bing

Hello, I moved this to the Am I Infected forum for now.Are you on a router? Are other machines on it,if so are they redirecting?Do you use Firefox?Please follow our Removal Guide here How to remove Google Redirects. You will move to the Automated Removal InstructionsIf it finds something make sure Cure is selectedNext click Continue then Reboot nowA log file should be created on your C: drive named "TDSSKiller.txt" please copy and paste the contents in your next reply.Next run MBAM (MalwareBytes):Please download Malwarebytes Anti-Malware and save it to your desktop.Download Link 1Download Link 2MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.
For instructions with screenshots, please refer to the How to use Malwarebytes' Anti-Malware Guide.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan.If an update is found, the program wi... Read more

Read other 1 answers
RELEVANCY SCORE 87.6

For the last couple days i have been unable to do any searches using the following search engines: Google, Bing or Yahoo. Also I can not access any of my Gmail Email Accounts on this computer.

However every other website i go to will work. Also Google Images will work as well.

I have ran a virus scan, spybot S&D, and Malware bytes and everything comes out clean. Any help you all can give me I would greatly appreciate it.

Thanks,

------------
DDS Log
--------------

.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_21
Run by ARS Server at 8:11:26 on 2011-09-21
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3327.2756 [GMT -5:00]
.
AV: AntiVir Desktop *Enabled/Updated* {AD166499-45F9-482A-A743-FDD3350758C7}
.
============== Running Processes ===============
.
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\HP\ToolBoxFX\bin\HPTLBXFX.exe
C:\Program Files\HP\HP UT\bin\hppusg.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
svchost.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\WINDOWS\System32\svchost.exe -k HPZ12
C... Read more

A:Can not search with Google, Bing, or Yahoo

anyone have any ideas ont his?

Read other 19 answers
RELEVANCY SCORE 87.6

Hello and thank you for advance for the help. Two days ago I had a virus mimicking a Windows 7 antivirus program. This program would provide increasing difficulty with remaining logged in to Windows, and I was eventually forced to do a System Restore. The problem seems to be fixed, except that I now notice I have a problem using search engines. After the search I am able to click on one result to get to the correct website, but any other results I use off the same search are redirected to random "search result" sites. I am forced to right click on the result I want on Google or Bing and open a new tab in order to view legitimate search results. This problem occurs with both Google and Bing using both Internet Explorer and Chrome. Below I have posted the DDS logfile. Once again, thank you for your help:DDS (Ver_10-11-10.01) - NTFSx86 Run by Albert at 16:25:22.32 on Wed 11/17/2010Internet Explorer: 8.0.7600.16385Microsoft Windows 7 Ultimate 6.1.7600.0.1252.1.1033.18.1015.176 [GMT -5:00]============== Running Processes ===============C:\Windows\system32\wininit.exeC:\Windows\system32\lsm.exeC:\Windows\system32\svchost.exe -k DcomLaunchC:\Windows\system32\svchost.exe -k RPCSSC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestrictedC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestrictedC:\Windows\system32\svchost.exe -k netsvcsC:\Windows\s... Read more

A:Google/Bing Search Hijack

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

Read other 5 answers
RELEVANCY SCORE 87.6

I would like to replace Bing search and use Google search when I open the IE app in Windows 8.1. Is this possible?

A:Can I replace Bing with Google search on the IE app?

Tools tab, manage add-ons, search provider, right click google and set as default.

Read other 4 answers
RELEVANCY SCORE 86.4

Google search results being redirected when using IE, but not when using Chrome.

I have tried these fixes without success....

Norton Internet Security 2009
MalwareBytes
SuperAntiSpyware
CCleaner
GooredFix
VundoFix
ComboFix (I can submit log if requested)

I have not yet run HijackThis.

Please help.

Thanks, RGWomack

Read other answers
RELEVANCY SCORE 86.4

LIke many I too am having issues with search engine redirects to other sites. Thanks in advance!

A:Search Engines (Google/Bing) redirects

Hello before we go scanning lets see ,,,,In Chrome it may be the Add ons/Plugins. try disabling them one at a time and see which one was at fault.OR Disable All Extensions ,see if that worked,then you need to go back to one by one to see which ps the culprit.

Read other 7 answers
RELEVANCY SCORE 86.4

GMER locked up my PC twice during file scanning segment. The log attached resulted from a scan with Files unchecked. I am leaving for a 10 day road trip 9/7 and won't have access to the PC so work me in accordingly.

Thanks in advance.
Jay
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:12:32 AM, on 9/6/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17080)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Documents and Settings\All Users\Application Data\EPSON\EPW!3 SSRP\E_S40RP7.EXE
C:\Program Files\Dell Network Assistant\hnm_svc.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
C:\Program Files\Dell Support Center\bin\sprtsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Amazon\Amazon Unbox Video\ADVWindowsClientService.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe... Read more

A:Google, Bing search results re-directed

Read other 8 answers
RELEVANCY SCORE 86.4

A few weeks ago I started noticing the search results from Google would redirect to suspicious websites unrelated to my search terms. I was using Firefox, so I then started using IE and searching via Bing. A few days ago the problem started with Bing as well.

I am running Windows 7 64-bit. I use AVG Free antivirus, and keep the Windows firewall on.

I have run Malwarebytes quick scan, which found and quarantined Trojan.Happili (twice) and Exploit.Drop.9 (also twice) both located in the AppData\Local\Temp\ folder.

Even after removal of these, the problem persists.

A:Search Engine Redirects (Google/Bing)

DownloadTDSSkillerLaunch it.Click on change parameters-Select TDLFS file systemClick on "Scan".Please post the LOG report(log file should be in your C drive) DownloadaswMBRLaunch it, allow it to download latest Avast! virus definitionsClick the "Scan" button to start scan.After scan finishes,click on Save logPost the log results hereDownloadESET online scannerInstall itClick on START,it should download the virus definitionsWhen scan gets completed,click on LIST of found threatsExport the list to desktop,copy the contents of the text file in your reply

Read other 8 answers
RELEVANCY SCORE 86.4

My computer is running Windows 10 Home and it's a 64bit operating system. The only Browser I use is Firefox.
 
Somewhere on Nov. 4 or 5, when trying to access google.com through Firefox, the page would say Connection Untrusted. I'm fairly certain that I also tried to reach google.com through Microsoft Edge and was unable to do so there as well.
 
Anyway, in Firefox it would say "Connection Untrusted"
 
" The certificate is not trusted because the issuer certificate is unknown. The server might not be sending the appropriate intermediate certificates. An additional root certificate may need to be imported."
 
There was a button to click that said 'Get Me Out Of Here.' There was nowhere I could select to make an exception.
 
I have no problems accessing any other site, just google. I tried searching through Firefox support and saw someone with a similar issue. The fix they used didn't work for me, but I found out if I removed the s in https I was able to access google. Also that person was told to check the certificate which I decided to do as well. I can't remember the specifics but it said something like 'DO NOT TRUST' and that it came from fiddler2
 
I apologise if this isn't entirely clear as I was feeling very unwell at the time. I also ran Malwarebytes and Windows Defender. Windows Defender found nothing on a full scan and Malwarebytes found three entries:
 
Files: 3
PUP.Optional.InstallCore, C:\Users\Lady Of Greatness\AppData\Local\Temp... Read more

A:Can't access google, bing or yahoo search.

Welcome aboard   Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2. SecurityCheck may produce some false warning(s), so leave the results reading to me.NOTE 3. If you receive UNSUPPORTED OPERATING SYSTEM! ABORTED! message restart computer and Security Check should run Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeList Restore PointsClick Go and post the result. Please download Malwarebytes Anti-Malware (MBAM) to your desktop.NOTE. If you already have MBAM 2.0 installed scr... Read more

Read other 19 answers
RELEVANCY SCORE 86.4

I have a windows XPsp3 that will not load any web search sites. does not matter what browser the search sites time out. I am able to go to any other site. I am posting this from the PC with the problem.

any help would be great.
sean

log from HiJackThis

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 1:13:06 PM, on 4/11/2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Dell Support Center\bin\sprtsvc.exe
C:\Program Files\NVIDIA ... Read more

A:Google.com, search.yahoo.com, bing.com don't load

Good evening. As HijackThis has not been seriously updated by Trend Micro in some time, it is now no longer considered to be an effective tool for malware removal. You will need to go here, follow steps 6, 7 and 8 and post accordingly into this thread.

Read other 2 answers
RELEVANCY SCORE 86.4

Hello. Thank you in advance for helping me.
I was directed to post in this forum after "Boopme" assisted me in the "Am I infected? What do I Do" posts.
After many scans (Rkill, MBAM, TDSS, etc) I am still getting those frustrating search redirects in Google, Yahoo, Bing, etc in both IE and Firefox.
I reset my Netgear router and changed the default password. I also have a Westell 6100 modem from verizon but it was already protected with a unique username and password.
I originally had the Whitesmoke infection but all is clean now, just the darn search redirects remain.
Attaching log files as per "Boopme".
Thanks again for your help! It is greatly appreciated!
.
DDS (Ver_11-03-05.01) - NTFSx86
Run by Compaq_Administrator at 2:27:36.01 on Sat 04/02/2011
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_20
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3006.2445 [GMT -4:00]
.
AV: Anti-Virus - Verizon Yahoo! Online Protection *Enabled/Updated* {17CFD1EA-56CF-40B5-A06B-BD3A27397C93}
AV: AntiVir Desktop *Enabled/Updated* {AD166499-45F9-482A-A743-FDD3350758C7}
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
svchost.exe
C:\WINDOWS\E... Read more

A:Search redirects in Google, Yahoo, Bing

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you are unable to create a log because your computer cannot start up successfully please provide detailed information about the Windows version you are using: What we in particular need to know is version, edition and if it is a 32bit or a 64bit system. If you are unsure about any of these caracteristics, just let us know and we'll help you figuring it out. Please also tell us if you have your Windows CD/DVD handy.Please include a clear description of the problems you're having, along with any steps you may have performed so far.Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.Even if you have already provided information about your ... Read more

Read other 35 answers
RELEVANCY SCORE 86.4

UPDATE 3/28: Tried a Google and Bing search today, and none of the links appear covered by redirects. Before receiving instruction not to make any changes to my system, I ran another Anti-Malware scan. The results:Memory Modules Infected:c:\Users\Michael\AppData\Local\Temp\ftpgent.dll (Trojan.Agent) -> Delete on reboot.Registry Values Infected:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\PkgMtend (Trojan.Agent) -> Value: PkgMtend -> Quarantined and deleted successfully.Files Infected:c:\Users\Michael\AppData\Local\Temp\ftpgent.dll (Trojan.Agent) -> Delete on rebootI am not sure if this will completely erradicate the problem, logs from DDS and GMER (pre-antimalware removal) below:Hello,As of yesterday when I search using Google and Bing I am redirected to various sites when attempting to follow links. The redirect links affect most, but not all of the search results. I am running Windows Vista Home Premium, Firefox version 3.6.16. I have run Malwarebytes Anti-malware, which found three malicious files yesterday, 1 Trojan.Agent and 2 Trojan.Dropper. I deleted these files and restarted. I have also run a full scan using McAfee, which registered and deleted 3 trojans. I am pretty much a novice at most of this stuff, but I can follow directions well. Any help is greatly appreciated.Regards,Mike DDS log:.DDS (Ver_11-03-05.01) - NTFSx86 Run by Michael at 15:4... Read more

A:Search engine redirect (Google, Bing)

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you are unable to create a log because your computer cannot start up successfully please provide detailed information about the Windows version you are using: What we in particular need to know is version, edition and if it is a 32bit or a 64bit system. If you are unsure about any of these caracteristics, just let us know and we'll help you figuring it out. Please also tell us if you have your Windows CD/DVD handy.Please include a clear description of the problems you're having, along with any steps you may have performed so far.Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.Even if you have already provided information about your ... Read more

Read other 2 answers
RELEVANCY SCORE 86.4

Sometimes when a search result link is clicked a window is displayed with an animated graphic in green or orange that says redirect , then a page opens that is not the page from the link. Other times there is no animated graphic but the page that opens is not the one whose link was clicked on. Sometimes, there is a warning banner at the top of the browser window stating this site is not safe. Navigating back to the search engine and clicking on the same link opens the correct webpage. Some links lead directly to the correct webpage. Have scanned whole computer in normal mode with updated AVG Anti-Virus Free Edition 2012 and updated Malwarebytes Anti-Malware free, niether found any malware. The last malware detected and quaranteened by Malwarebytes on 7-19-12 was Trojan.Happili.
The computer may be running more slowly and the display might flicker every once in a while.

.
DDS (Ver_2011-08-26.01) - FAT32x86
Internet Explorer: 8.0.6001.18702
Run by Arnold at 13:02:18 on 2012-07-28
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.511.256 [GMT -4:00]
.
AV: AVG Anti-Virus Free Edition 2012 *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
FW: ZoneAlarm Free Firewall *Enabled*
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost -k DcomLaunch
SVCHOST.EXE
C:\WINDOWS\System32\svchost.exe -k netsvcs
SVCHOST.EXE
SVCHOST.EXE
C:\WINDOWS\Explorer.EXE
C:\Program Files\CheckPoint\ZAFor... Read more

A:Google and Bing search results redirected in IE8

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps.===Please download ComboFix from one of these locations:Link 1Link 2* IMPORTANT !!! Save ComboFix.exe to your DesktopDisable your Anti-Virus and Anti-Spyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools
Close any open browsers, and all other programs working. Make sure you save your file if working on a document.
Do not install any other programs until this if fixed.[/b]
Double click on ComboFix.exe & follow the prompts.
As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.
Some Rookit infection may damage your boot sector. The Windows Recovery Console may be needed to restore it. Do not bypass... Read more

Read other 50 answers
RELEVANCY SCORE 86.4

Hi,
Everytime I do a search on Bing Or Google or any other search engine I am redirected to other websites when I click on a link that I want to go to. The websites are usually have nothing to do for what I am searching for. I tried the Gmer but my system froze both times after trying.
DDS (Ver_09-09-29.01) - NTFSx86
Run by K & L Norvick Laptop at 8:10:10.32 on Tue 10/05/2010
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1014.479 [GMT -7:00]
AV: Panda Antivirus Pro 2011 *On-access scanning enabled* (Updated) {EEE2D94A-D4C1-421A-AB2C-2CE8FE51747A}
FW: Panda Personal Firewall 2011 *enabled* {7B090DC0-8905-4BAF-8040-FD98A41C8FB8}
============== Running Processes ===============
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\Program Files\Panda Security\Panda Antivirus Pro 2011\TPSrv.exe
svchost.exe
C:\PROGRAM FILES\PANDA SECURITY\PANDA ANTIVIRUS PRO 2011\WebProxy.exe
svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2011\PsCtrls.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2011\PavFnSvr.exe
C:\Program Files\Common File... Read more

Read other answers
RELEVANCY SCORE 86.4

Hi,
When I do a search in IE using Bing or Google and I click on a link, it redirects me to other websites that has nothing to do with what I'm searching for. Thank you in advance.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:04:30 AM, on 10/5/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2011\TPSrv.exe
C:\PROGRAM FILES\PANDA SECURITY\PANDA ANTIVIRUS PRO 2011\WebProxy.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2011\PsCtrls.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2011\PavFnSvr.exe
C:\Program Files\Common Files\Panda Security\PavShld\pavprsrv.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2011\Firewall\PSHOST.EXE
C:\Program Files\Panda Security\Panda Antivirus Pro 2011\PsImSvc.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2011\PskSvc.exe
c:\Program Files\Common Files\Intuit\... Read more

Read other answers
RELEVANCY SCORE 86.4

Hi,
I am getting redirected from Google and Bing seach results page to random unrelated pages.
Avast! is giving a message that there is a rootkit detected on startup at C:\\WINDOWS\system32\drivers\disk.sys but is unable to resolve the issue.
I have access to the XP reinstall disc that came with the computer.
Thank you in advance for your assistance.
Cindy
.
DDS (Ver_11-03-05.01) - NTFSx86
Run by Cindy at 20:50:16.54 on Fri 04/08/2011
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.894.531 [GMT -7:00]
.
AV: avast! Antivirus *Enabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
============== Running Processes ===============
.
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
C:\WINDOWS\system32\Ati2evxx.exe
svchost.exe
svchost.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
c:\Program Files\Zune\ZuneBusEnum.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\stsystra.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\Alwil Software\Avast5\avastUI.exe
... Read more

A:Google and Bing search engine redirect

Hello and welcome. Please follow these guidelines while we work on your PC:Malware removal is a sometimes lengthy and tedious process. Please stick with the thread until I’ve given you the “All clear.” Absence of symptoms does not mean your machine is clean!
Please do not run any scans or install/uninstall any applications without being directed to do so.
Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.
Please subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.

Download ComboFix from one of the following locations:
Link 1
Link 2

VERY IMPORTANT !!! Save ComboFix.exe to your Desktop

* IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this linkDouble click on ComboFix.exe & follow the prompts.
As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a... Read more

Read other 9 answers
RELEVANCY SCORE 86.4

.
DDS (Ver_11-05-19.01) - NTFSx86
Internet Explorer: 8.0.6001.18702
Run by Ken at 10:55:03 on 2011-05-21
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.2036.874 [GMT -5:00]
.
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
C:\WINDOWS\system32\svchost.exe -k netsvcs
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\system32\svchost.exe -k hpdevmgmt
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Norton Security Suite\Engine\5.1.0.29\ccSvcHst.exe
C:\WINDOWS\System32\svchost.exe -k HPZ12
C:\Program Files\Norton Online\Engine\2.1.0.23\ccSvcHst.exe
C:\WINDOWS\System32\svchost.exe -k HPZ12
C:\WINDOWS\system32\tcpsvcs.exe
svchost.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Norton Security Suite\Engine\5.1.0.29\ccSvcHst.exe
C:\Program Files\Norton Online\Engine\2.1.0.23\ccSvcHst.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\Mixer.exe
C:\WINDOWS\system32&... Read more

A:Google/Bing search results keep redirecting.

Hello and welcome to the forums!My secret agent name on the forums is SweetTech (you can call me ST for short), it's a pleasure to meet you. I would be glad to take a look at your log and help you with solving any malware problems.If you have since resolved the issues you were originally experiencing, or have received help elsewhere, please inform me so that this topic can be closed. If you have not, please adhere to the guidelines below and then follow instructions as outlined further below:Logs from malware removal programs (OTL is one of them) can take some time to analyze. I need you to be patient while I analyze any logs you post. Please remember, I am a volunteer, and I do have a life outside of these forums.
Please make sure to carefully read any instruction that I give you. Attention to detail is important! Since I cannot see or directly interact with your computer I am dependent on you to "be my eyes" and provide as much information as you can regarding the current state of your computer.
If you're not sure, or if something unexpected happens, do NOT continue! Stop and ask!
If I instruct you to download a specific tool in which you already have, please delete the copy that you have and re-download the tool. The reason I ask you to do this is because these tools are updated fairly regularly.
Do not do things I do not ask for, such as running a spyware scan on your computer. The one thing that ... Read more

Read other 12 answers
RELEVANCY SCORE 86.4

I tried running Malwarebytes and a few othe malware programs all unsuccessfully removed the problem of being redirect to odd web sites when clicking on a link in a search page. Please help.

.
DDS (Ver_2011-06-23.01) - NTFSx86
Internet Explorer: 8.0.6001.18702
Run by PTPros at 13:59:54 on 2011-08-23
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2003.1020 [GMT -4:00]
.
AV: Microsoft Security Essentials *Disabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}
.
============== Running Processes ===============
.
C:\Program Files\Fingerprint Sensor\AtService.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
svchost.exe
c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
c:\drivers\audio\r213367\stacsv.exe
C:\Program Files\Wave Systems Corp\Trusted Drive Manager\TdmService.exe
svchost.exe
C:\Program Files\Dell\Dell ControlPoint\Connection Manager\SMManager.exe
C:\Program Files\Dell\Dell ControlPoint\DCPButtonSvc.exe
C:\Program Files\Dell\Dell System Manager\DCPSysMgrSvc.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
C:\Program Files\Java\jre7\bin\jqs.exe
C:\WINDOWS\system32\svchost.exe -k ... Read more

A:Keep getting redirected on Search pages Google or Bing

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

Read other 3 answers
RELEVANCY SCORE 86.4

When using IE, searches in google and bing will redirect from the intended link to bogus sites. The problem does not occur with firefox.

I have avast and running a scan did not correct the problem. I also ran ad-aware and that did not correct it either. Thanks in advance for assistance with this issue.

Info as requested in instructions for this forum:
_________________________________________

DDS (Ver_09-12-01.01) - NTFSx86
Run by Amy at 16:52:04.82 on Tue 12/08/2009
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_17
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2038.1082 [GMT -5:00]

AV: avast! antivirus 4.8.1368 [VPS 091205-1] *On-access scanning enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Prog... Read more

A:google/bing redirects search links

Hi and welcome to TSF.

I am currently reviewing your log. Please note that this is under the supervision of an expert analyst, and I will be back with a fix for your problem as soon as possible.

You may wish to subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.

Please be patient with me during this time.

Read other 17 answers
RELEVANCY SCORE 86.4

Picked up a search redirector that I can not get rid of. Malwarebytes does not touch it. Webroot secrue anywhere will temporarily remove it but it keeps coming back when computer is left on over night etc. I can't find a perminate way to remove it. I aparently also some vestage of windows system suite that it would be nice to remove if I could find the few pieces. It does not come up but it would be nice to not have combo fix show that it is there. Webroot had me download a file listed as AntiTdl.exe that is supposed to clean it but does not seem to. I could attach it if it would help.

A:search engine redirection google bing

Hello,Please follow the instructions in ==>This Guide<== starting at step 6. If you cannot complete a step, skip it and continue.Once the proper logs are created, then post them in a reply to this topic by using the Add Reply button.If you can produce at least some of the logs, then please create the post and explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the reply and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.Please note that I am not a member of the Malware Removal Team and will not be assisting you in removing the infection. I'm simply helping you to post the information they need in order to assist you.If HelpBot replies to your topic, PLEASE follow Step One so it will report your topic to the team members.Orange Blossom

Read other 3 answers
RELEVANCY SCORE 86.4

Hello,
After searching on Google or Bing, clicking on a link in the results redirects to sites such as yellowbook.com or get-answers-fast.com. MalwareBytes detected and removed about 50 infected files, but the redirecting is still happening. This occurs on both IE and Firefox. The DDS is pasted below. I have attached ark.txt, and 2 Malwarebytes logs that show what was removed, and a third that shows no infections. Thanks for the help!

===========================================================
DDS LOG
===========================================================

.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 9.0.8112.16421
Run by Teacher at 10:01:02 on 2011-11-27
Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.1918.1153 [GMT -5:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}
SP: Microsoft Security Essentials *Enabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
C:\Windows\system32\Ati2evxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestr... Read more

A:Infected with Google/Bing search redirect

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.Do not run any other tool untill instructed to do so!Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.Run Combofix:You may be asked to install or update the Recovery Console (Win XP Only) if this happens please allow it to do so (you will need to be connected to the internet for this)Before you run Combofix I will need you to turn off any security software you have running, If you do not know how to do this you can find out >here< or >here<Combofix may need to reboot your computer more than once to do its job this is normal.You can download Combofix from one of these links.Link 1Link 2Link 3 1. Close any open browsers or any other programs that are open.2. Close/disable all anti virus and anti malware programs so they do not interfere with the r... Read more

Read other 12 answers
RELEVANCY SCORE 86.4

Avast keeps coming up with mailicous URL Blocked.
The IP addresses it reports as Malware are 64.111.211.158 and 64.11.211.165

I've run just about every malware scanner/remover I can find and still I keep getting redirects and the avast warning. I've tried following the advice in other posts here and have had no success so I am opening up this post in hopes that someone has encountered this.

Here is the DDS.txt
I will append the gmer log later since the last time I tried to run it IT locked up.
.
DDS (Ver_2011-06-23.01) - NTFSx86
Internet Explorer: 8.0.7600.16385
Run by Ali at 17:34:13 on 2011-07-03
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.2812.1026 [GMT -4:00]
.
AV: avast! Antivirus *Enabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Enabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\windows\system32\wininit.exe
C:\windows\system32\lsm.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\system32\atiesrxx.exe
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\system32&... Read more

A:Google/Bing Search Results redirecting

Here are the results of the GMER scan

GMER 1.0.15.15640 - http://www.gmer.net
Rootkit scan 2011-07-03 18:41:14
Windows 6.1.7600 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP1T0L0-1 TOSHIBA_MK3263GSX rev.FG020M
Running: gmer.exe; Driver: C:\Users\Ali\AppData\Local\Temp\kwtdrpow.sys
---- System - GMER 1.0.15 ----

SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwAddBootEntry [0x90A26202]
SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ZwAllocateVirtualMemory [0x910A5CB2]
SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwCreateEvent [0x90A2881C]
SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwCreateEventPair [0x90A28874]
SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwCreateIoCompletion [0x90A2898A]
SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ... Read more

Read other 4 answers
RELEVANCY SCORE 86.4

I had already run combofix and have the log file generated - attaching the file herewith... please help..
thx

A:Cannot upload any search engine - google bing (any)

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you are unable to create a log because your computer cannot start up successfully please provide detailed information about the Windows version you are using: What we in particular need to know is version, edition and if it is a 32bit or a 64bit system. [/b]If you are unsure about any of these caracteristics, just let us know and we'll help you figuring it out. Please also tell us if you have your Windows CD/DVD handy.Please include a clear description of the problems you're having, along with any steps you may have performed so far.Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.Even if you have already provided information about y... Read more

Read other 2 answers
RELEVANCY SCORE 86.4

Hi, I am running:Windows XP ProfessionalVersion 5.1on a Dell Inspiron 1440For the last day or so, I get normal looking search results but, when I click on them, I get taken to some ads after a long delay.I ran Norton, Ad Aware, Malwarebytes, Hijackthis, DDS, MBR,RKU, and defogger I attached all of the logs but, the RKU saved as something else...how do I post that log?I have no idea what to do now. This is exceptionally weirdThanks, Joe

A:Search result links go to ads(Google, Bing, etc)

Welcome to the BleepingComputer Forums. Since it has been a few days since you scanned your computer with HijackThis, we will need a new HijackThis log. If you have not already downloaded Random's System Information Tool (RSIT), please download Random's System Information Tool (RSIT) by random/random which includes a HijackThis log and save it to your desktop. If you have RSIT already on your computer, please run it again. Double click on RSIT.exe to run RSIT. Click Continue at the disclaimer screen. Please post the contents of log.txt. Thank you for your patience.Please see Preparation Guide for use before posting about your potential Malware problem. If you have already posted this log at another forum or if you decide to seek help at another forum, please let us know. There is a shortage of helpers and taking the time of two volunteer helpers means that someone else may not be helped. Please post your HijackThis log as a reply to this thread and not as an attachment. I am always leery of opening attachments so I always request that HijackThis logs are to be posted as a reply to the thread. I do not think that you are attaching anything scary but others may do so. While we are working on your HijackThis log, please: Reply to this thread; do not start another! Do not make any changes on your computer during the cleaning process or download/add programs on your computer unless instructed to do so. Do not run any other... Read more

Read other 2 answers
RELEVANCY SCORE 86.4

This computer was infected but cleaned with Norton Internet Security 2010 quite some time ago. I do not have the logs for those cleanings but today's full scan turned up nothing. Clicking on search results will bring up fake pages. Sometimes going back and clicking the link again will bring up the right page. It happens about 1 in every 4-6 search results.I've scanned with MalwareBytes, SuperAntispyware and Norton and nothing seems to correct this problem. I have followed the instructions on posting here and following is the DDS.txt report:--------------------- cut here----------------------DDS (Ver_09-12-01.01) - NTFSx86 Run by Jim at 12:42:00.75 on Wed 01/06/2010Internet Explorer: 7.0.5730.13Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1022.257 [GMT -8:00]AV: Norton Internet Security *On-access scanning disabled* (Updated) {E10A9785-9598-4754-B552-92431C1C35F8}FW: Norton Internet Security *enabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220}============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcsC:\Program Files\Intel\Wireless\Bin\EvtEng.exeC:\Program Files\Intel\Wireless\Bin\S24EvMon.exeC:\Program Files\Intel\Wireless\Bin\WLKeeper.exesvchost.exesvchost.exeC:\WINDOWS\system32\spoolsv.exec:\program files\common files\logitech ... Read more

A:Google (And Bing) search results are being redirected...

Hello and welcome to Bleeping Computer.My name is km2357 and I will be helping you to remove any infection(s) that you may have.I will be giving you a series of instructions that need to be followed in the order in which I give them to you.If for any reason you do not understand an instruction or are just unsure then please do not guess, simply post back with your questions/concerns and we will go through it again.Please do not start another thread or topic, I will assist you at this thread until we solve your problems.Lastly the fix may take several attempts and my replies may take some time but I will stick with it if you do the same.Sorry for the delay in replying, the forum is very busy. If you still need help, please post a fresh DDS Log

Read other 3 answers
RELEVANCY SCORE 86.4

Hi,

I got a "Internet Security 2010" on Dec 28, 2009. Use AVG, Malwarebytes' Anti-Malware and Ad-Aware (all with the latest update) to clear up the mess. Now, both browser (IE 7 and firefox 3.5) both redirect search results to some bogus web site.

I have run several times using the software mentioned but was not able to find anything.

I've used HijackThis v2.0.2 to produce the following log.

My system Win XP sp3

I've attached the HijackThis log file. Please help!!!!

A:search results redirect (google and bing)

Hi,

Thank you all for posting your suggestions, especially for people working on this site to help others. I saw a post here that ran ComboFix to take care of the browser redirect problem. So, I download it and following the simple instructions. Low and behold, ComboFix was able to detect there was a rootkit running on my computer. After several scan and reboot, my computer is back and no more browser redirect.
I thank you again from the bottom of my heart!!!!

If BleepingComputer.com needs any help, please contact me and I will be more than happy to give my time back to serve the community.

Stephen

Read other 2 answers
RELEVANCY SCORE 86.4

Good morning,
I'm having a problem with a search engine redirect. Most results in google and bing are redirected to an undesireable site. Also, when I open IE and type in an address, a new window opens up with an undesirable redirect. In addition to this, I'm also having the following problems:

-"generic host process for Win32 Services" error message
-"No active mixer devices" error message when I try to adjust audio volume
-generally slow running computer
-restarts frequently needed because software freezes when opening

Below is my dds log as well as an attached zip file with the second dds log and the gmer log. Please let me know what I can do to fix this problem. thanks!!
DDS (Ver_10-12-12.02) - NTFSx86
Run by bdavidson at 10:10:08.95 on Tue 12/28/2010
Internet Explorer: 8.0.6001.18702
============== Running Processes ===============
C:\Program Files\Cisco Systems\SSL VPN Client\agent.exe
C:\Program Files\Cisco\Cisco AnyConnect VPN Client\vpnagent.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Broadcom\ASFIPMon\AsfIpMon.exe
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
C:\win32app\ingr\ipshare\clntutil\bin\pidrpcs.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\lotus\notes\ntmulti.exe
C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
C:\WINDOWS\sy... Read more

A:Search Engine Redirect (google, bing, etc.)

Howdy there and welcome to TSF Forums

I'm Steve and I will be helping you throughout this fix.

Before beginning the fix, read this post completely. If there's anything that you do not understand, kindly ask your questions before proceeding. It is IMPORTANT that you don't miss a step. Please perform everything in the correct order/sequence.

Please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription

Please note that the forum is very busy and if I don't hear from you within three days from this initial posting then the thread will be closed.

We will begin with ComboFix.exe. Please visit this webpage for download links, and instructions for running the tool:

http://www.bleepingcomputer.com/comb...o-use-combofix

* Ensure you have disabled all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

Please include the C:\ComboFix.txt in your next reply for further review.

Read other 11 answers
RELEVANCY SCORE 86.4

I am completely stumped. My wife's laptop acquired this issue and all steps to remove have been unsuccessful:

I modified the hosts file to include: 127.0.0.1 click.findsearchengineresults.com which blocks most redirection. Selecting a google search result now returns:

"http://67.196.0.168/c.php?p=KJchZinb4iU5KERo8yqGaYB8h5fSu7MrEUF_KOkkiVCupcungVwT3SlPVpvJVonDi1H4HhSwY5zBiuYFViBJu3zyTJXRW6SeZ2o1D363uy2UBF-ZS87j6IIEb9-..............................." IP Address varies...
.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 10.4.1
Run by Jill3 at 10:08:52 on 2012-05-26
Microsoft Windows 7 Ultimate 6.1.7601.1.1252.1.1033.18.3062.1740 [GMT -7:00]
.
AV: Symantec Endpoint Protection *Enabled/Updated* {88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Symantec Endpoint Protection *Enabled/Updated* {33A8BBD2-AA01-20A2-213B-0B8EB45B02E8}
FW: Symantec Endpoint Protection *Enabled* {B0F2DB13-C654-2E74-30D4-99C9310F0F2E}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system3... Read more

A:IE Google/Bing search result redirected

Hello and Welcome to Bleeping Computer!!My name is Gringo and I'll be glad to help you with your computer problems.I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of usPlease do not run any tools unless instructed to do so.
We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.
Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.
Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.
A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE: At t... Read more

Read other 5 answers
RELEVANCY SCORE 86.4

I can't search the internet using google, yahoo, or bing. When I enter something is the search box and click Search, nothing happens and all I see is a blank page. I don't get any results or any indication that the search is being processed

I am able to access internet sites if I directly type in the URL or if I use a bookmark.

All of these search engines work fine on another laptop of mine.

I'm on XP SP3 using FireFox 12 and/or IE 8.

I have Webroot anti-virus and Malwarebytes, and after running scans using each, nothing comes up.

I appreciate any ideas.

A:Can't search the internet using google, yahoo, bing, etc.

Same computer as here?
http://www.bleepingcomputer.com/forums/topic452464.html/page__p__2688707__fromsearch__1#entry2688707

Read other 12 answers
RELEVANCY SCORE 85.6

Hiya-hello! Thank you for viewing this topic and any help you may provide me with. : )I'm usually good with computers. But, there are times when I know I'll be needing outside help before I end up reformatting my hard rive to try attain normality. This is one of those times.__I run a Windows XP Home OS. When I run a google/bing search engine, the links provided to nearly always send me to a blank-page site (goingonearth.com) This bugged me quite a bit, so I ran trial-version MalewareBytes Anti-Malware. Some results came up so I removed the detections. But, the main problem persisted. I then ran McAfee Security Scan Plus, it all came back clean. Next, I tried running Microsoft Security Essentials-which I usually always have running as my main virus protection. The window would pop up and close down, the program always inactive on start-up.Searching the net, I came down to going through Windows Task Manager, and shutting down anything that did not look quite right. Doing this I can get MSE to start and run through a complete scan. Everything comes up clean.If I go through Task Manager, I turn off the odd-ball processes I can usually get google/bing link to work correctly. But, I shouldn't have to do this whenever I try to use my computer.Is there anyway I can fix my computer before I go bonkers and decide to time consumingly reformat it?__And again, thank you for any assistance!-catnapgood

A:goingonearth redirection upon using google/bing search engines.

Hello, this removal requires some special tools and technique.We need a deeper look. Please go here....Preparation Guide ,do steps 6 - 9.Create a DDS log and post it in the new topic explained in step 9,which is here Virus, Trojan, Spyware, and Malware Removal Logs and not in this topic,thanks.If Gmer won't run,skip it and move on.Let me know if that went well.

Read other 3 answers
RELEVANCY SCORE 85.6

Hello,

I keep getting redirected when I search something in Google or Bing. After searching something on either search engine, the search results page will load, but once I click on one of the result links it redirects me to something totally differnt. The websites I'm redirected to vary between various websites - often including something called "Mfeed", "Stopzilla" and a few others. I have tried searcing with both internet explorer and firefox with the same results. I am also unable to log onto Google Talk or Skype. When I try to log onto Google Talk I get an error message that says "Could not authenticate server".

I first noticed this off and on a week or so ago but wasnt sure if I was imagining things, since it only happened rarely. Approximately two days ago I recieved a notice that my outlook was signing onto a server without a valid signature, but I clicked "ok" or something (in hindsight, not the smartest idea). Since then, the search engine redirects have been increased significantly and now 100% of the search engine results are redirected.

Since I noticed the infection, and before I logged onto bleeping computer, I ran Malwarebytes Anti-Malware, which found 8 infections and then said it removed them. I also ran SUPERAntiSpyware which found 1 trojan and 993 adware cookies, all of which were removed by the program.

I hope this information is helpful to anyone. If anyone can help me I would greatly, greatly appreciate it... Read more

A:Google/Bing Search Redirect - seems like a hijack problem

Apologies for the improper post - I am just reading about the proper way to post a request for help. I am a noob - apologies. I will post a proper posting as soon as I can run the proper programming. Thank you.

Read other 1 answers
RELEVANCY SCORE 85.6

Google, Yahoo, and Bing search Hyperlink Jacked

I have been doing research and using Google and Yahoo search engines... I never had an issue until a few days ago.... google,Yahoo, and bing links to one web site re-direct to a scam site.

It's not my computer..

I have tried the searches on 5 different computer to include iPad and iphones.... It's all the same. Google has a " warning " on the site now....

However, if I type the web address into the browsers it comes up just fine.

What would cause this issue seeing that it is not my computer(s) and its not the hosting server that the web site is using?

For some reason both Google, Yahoo, and Bing are being re-direct away from the actual site....

It get this "/wevwubhy.ru/links/1.php" and this " sumjecyg.ru/count15.php...

I looked them up and there are known Mal sites...

So what can be done and how can this happen if the Web Server hosting the site is fine.... Because I can type the site address directly into the browsers and it goes to the site I need.... But If I click on the link it goes to the Mal site?????



__________________

A:Google, Yahoo, and Bing search links jacked

Hi there,
my name is Marius and I will be assisting you with your Malware related problems.

Before we move on, please read the following points carefully.
First, read my instructions completely. If there is anything that you do not understand kindly ask before proceeding.
Perform everything in the correct order. Sometimes one step requires the previous one.
If you have any problems while you are follow my instructions, Stop there and tell me the exact nature of your problem.
Do not run any other scans without instruction or Add/ Remove Software unless I tell you to do so. This would change the output of our tools and could be confusing for me.
Post all Logfiles as a reply rather than as an attachment unless I specifically ask you. If you can not post all logfiles in one reply, feel free to use more posts.
If I don't hear from you within 3 days from this initial or any subsequent post, then this thread will be closed.
Stay with me. I will give you some advice about prevention after the cleanup process. Absence of symptoms does not always mean the computer is clean.
My first language is not english. So please do not use slang or idioms. It could be hard for me to read. Thanks for your understanding.

Preparing for the malware removal process

While a description of the trouble you're having is of help, we need more information. A comprehensive set of logs is required to determine the presence of malware.

Please follow our pre-posting process outlined here:

NEW I... Read more

Read other 5 answers
RELEVANCY SCORE 85.6

Hello,

While reading my morning news, I subbled upon one of the local site visits, that apparently was hacked.

It redirected me to a youtube video, and asked me to install various stoftware, at which point I immediatly closed IE.

Apparently not soon enough, as now I can not use either Yahoo, Bing or Google search engines. It simply times out. However, I can brouse Yahoo, but not the others.

Here are the results of the scans;

______________________________________________________________________________________________________________________________
Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows XP Professional, Service Pack 3, 32 bit
Processor: Intel(R) Core(TM)2 Duo CPU T7100 @ 1.80GHz, x86 Family 6 Model 15 Stepping 13
Processor Count: 2
RAM: 1013 Mb
Graphics Card: Mobile Intel(R) 965 Express Chipset Family, 256 Mb
Hard Drives: C: Total - 76285 MB, Free - 9978 MB;
Motherboard: Dell Inc., 0KU184
Antivirus: AVG Anti-Virus Free Edition 2012, Updated: Yes, On-Demand Scanner: Enabled

_____________________________________________________________________________________________________________________________________

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:08:51 PM, on 3/4/2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\PROGRA~1\AVG\AVG2012\avgrsx.exe
C:\Program Files\AVG\AVG2012\avgcsrvx.exe
C:\WINDOWS\s... Read more

Read other answers
RELEVANCY SCORE 85.6

Hi,

After using Spybot, latest version, my wife's computer still has a malware infection which after doing a search and clicking a link, gets redirected to some other site, probably a pay per click site. After searching I found hijackthis and it was recommended to post the log file here for help in determining what entries are suspect. I thought I was fairly knowledgable, but getting into the registry and knowing what is a problem is not my comfort area. Hopefully it is for someone here. This is the log file.

Thanks,
Mark

A:Click links from Google or Bing search get redirected

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

Read other 25 answers
RELEVANCY SCORE 85.6

Hello.

For the past several days whenever I would use google, yahoo, or bing, my search results are redirected through a website called "searchingandclick44.com" and the original search terms are then plugged into several other websites.
I'm not completely sure that this is connected to it, but at the same time this started happening I became unable to use Gmail, as my browser (Both IE and Firefox) started saying "There is a problem with this website's security certificate." The same thing would happen when I used other websites that required the use of Gmail, such as signing into Youtube.
Occasionally when using the search toolbar to the right of my address bar with google, it will state that the 302 has moved and will give me a link.

I have tried to use MalwareBytes, but it will not pick up the problem, even after updating the program.
I tried to use gmer to see if I could find anything, but that didn't work either, because whenever I open it, it says, "C:\Windows\system32\config\system: The system cannot find the file specified." And the only things that can be checked afterwards are Services, Registry, Files, and ADS.

I use Windows 7, IE 8, and Firefox 3.5.11

I'd like to thank you in advance, and I look forward to you're help.
Ivan the Submissive.

A:Search results for Google, Yahoo, and Bing are redirected

Try this:http://www.bleepingcomputer.com/virus-remo...sing-tdsskiller

Read other 1 answers
RELEVANCY SCORE 85.6

Hello,

For some reason I am unable to access the google and bing search engines. Every other website works just great, but I keep getting warnings from Avast Anti-Virus that those sites have mal-ware and are dangerous and will not load. I have tried disabling avast in case the issue was related to the anti-virus but that did not fix the issue.

I have followed the suggested steps and prepared the DDS and Gmer logs as recommended.

Thank you very much in advance for your help!

.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 8.0.6001.18702
Run by Alison Renaud at 0:46:56 on 2012-01-20
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1014.304 [GMT -5:00]
.
AV: avast! Antivirus *Enabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exe
C:\Program Files\DivX\DivX Update\DivXUpdate.exe
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
C:\WI... Read more

A:Google and Bing Search Pages Are Infected & Will not load

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.Do not run any other tool untill instructed to do so!Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.Run Combofix:You may be asked to install or update the Recovery Console (Win XP Only) if this happens please allow it to do so (you will need to be connected to the internet for this)Before you run Combofix I will need you to turn off any security software you have running, If you do not know how to do this you can find out >here< or >here<Combofix may need to reboot your computer more than once to do its job this is normal.You can download Combofix from one of these links.Link 1Link 2Link 3 1. Close any open browsers or any other programs that are open.2. Close/disable all anti virus and anti malware programs so they do not interfere with the r... Read more

Read other 25 answers
RELEVANCY SCORE 85.6

Multiple browsers and multiple search engines,
Search results appear normal, but links (clicked or copied) all begin hxxp://adsense.yahoodbengimesearch.com/...

Clear cache problem resolves temporarily, then recurs after a few searches.

Symantec Antivirus Corporate Edition 10.1.7 defs from Jan4, 2011 finds nothing.

Malwarebytes finds nothing wrong:
Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Database version: 5457

Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.13

1/4/2011 12:09:48 PM
mbam-log-2011-01-04 (12-09-48).txt

Scan type: Full scan (C:\|)
Objects scanned: 161421
Time elapsed: 47 minute(s), 6 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

HJT is this:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 1:41:46 PM, on 1/4/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17091)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WI... Read more

A:Search results hijacked (IE7, Moz 6.15; Google, Yahoo, Bing)

Ran Kaspersky TDSS rootkit and "Cured" Backdoor.Win32.Sinowal.knf

So far effective.
2011/01/05 11:12:15.0234 TDSS rootkit removing tool 2.4.12.0 Dec 16 2010 09:46:46
2011/01/05 11:12:15.0234 ================================================================================
2011/01/05 11:12:15.0234 SystemInfo:
2011/01/05 11:12:15.0234
2011/01/05 11:12:15.0234 OS Version: 5.1.2600 ServicePack: 3.0
2011/01/05 11:12:15.0234 Product type: Workstation
2011/01/05 11:12:15.0234 ComputerName: SVAHS-A-130-TEA
2011/01/05 11:12:15.0234 UserName: User
2011/01/05 11:12:15.0234 Windows directory: C:\WINDOWS
2011/01/05 11:12:15.0234 System windows directory: C:\WINDOWS
2011/01/05 11:12:15.0234 Processor architecture: Intel x86
2011/01/05 11:12:15.0234 Number of processors: 1
2011/01/05 11:12:15.0234 Page size: 0x1000
2011/01/05 11:12:15.0234 Boot type: Normal boot
2011/01/05 11:12:15.0234 ================================================================================
2011/01/05 11:12:15.0390 Initialize success
2011/01/05 11:12:23.0140 ================================================================================
2011/01/05 11:12:23.0140 Scan started
2011/01/05 11:12:23.0140 Mode: Manual;
2011/01/05 11:12:23.0140 ================================================================================
2011/01/05 11:12:24.0156 ACPI (8fd99680a539792a30e97944fdaecf17) C:\WINDOWS\system32\DRIVERS\ACPI.sys
2011/01/05 11:12:24.0234 ACPIEC (98... Read more

Read other 12 answers
RELEVANCY SCORE 85.6

So, I've removed malware countless times from PCs using the free tools and everything.. this is the first one to kick my rear.Running Windows 7 Ultimate 32bit, and tried Malwarebytes, temp deletion, Ccleaner, Ccleaner registry tool, SAS Full scan, Spybot S&D, Hitman Pro, HJT 2.0.4, creating host file from scratch, flush and register DNS, and I even went down to Combofix. Every time I search while running windows in Normal mode, I get a redirect when clicking on a google or bing search link that goes something like this:Search results for camping:REMOVED POTENTIALLY MALICIOUS LINKS..-STIt has even come up with legitimate Target.com product searches or verizon.net pages.After a while it will start working again like normal for a while. Also, this does not happen at all in SMw/N. Thanks a ton for your help!Here are the logs requested:DDS (Ver_10-12-12.02) - NTFSx86 Run by Curt at 2:07:42.52 on Thu 02/24/2011Internet Explorer: 8.0.7600.16385 BrowserJavaVersion: 1.6.0_20Microsoft Windows 7 Ultimate 6.1.7600.0.1252.1.1033.18.2038.1190 [GMT -5:00]SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}============== Running Processes ===============C:\Windows\system32\wininit.exeC:\Windows\system32\lsm.exeC:\Windows\system32\svchost.exe -k DcomLaunchC:\Windows\system32\svchost.exe -k RPCSSC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestrictedC:\Windows\... Read more

A:Firefox/IE Search redirector (Google, Bing tested)

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

Read other 19 answers
RELEVANCY SCORE 85.6

I too am on the "that's not the link I wanted... oh crap" redirection bandwagon and I want off.

I've run Ad-aware, MalwareBites, HitMan Pro 3.5 which have found some things but can't quite get to the root of the problem.

I've downloaded Hijack This and am ready to tackle this SOB. Would anyone be able to help me out with this?

Thanks!

A:Search engine redirects (Google, Yahoo, Bing...)

well, after browsing through other similar threads with similar problems, I tried the TDSS killer and it worked.

I can now search for "USA Rugby" and get USA Rugby, not Illinoismarketplacespamwarehouse.com

thanks!

Read other 2 answers
RELEVANCY SCORE 85.6

A day or two ago I picked up something that redirects the search sites results to ad sites. This happens in IE and Firefox. It seems to happen with the results from google, yahoo and Bing. I havent really tried any other search engines. I have AVG free installed, and the spybot resident. I have run MalwareBytes, Spybot and although they found some tracking cookies and such, have not fixed the issue. I d/l'ed and installed HitMan Pro 3.5 as others have had luck with Rootkits with that, and it did report finding a rootkit in firefox.exe and quarantined it, removing firefox. It runs cleannow too, but the redirection remains.Attached are le logs from the Preperation guide.I really appreciate any help you can give me, thanl you so very much.DDS (Ver_10-03-17.01) - NTFSx86 Run by Philipvw at 17:53:37.68 on Sun 08/15/2010Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_14Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1023.514 [GMT -4:00]AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcssvchost.exeC:\Program Files\AVG\AVG9\avgchsvx.exeC:\Program Files\AVG\AVG9\avgrsx.exesvchost.exeC:\Program Files\AVG\AVG9\avgcsrvx.exeC:\WINDOWS\system32\spoolsv.exesvchost.exeC:&... Read more

A:Google, Yahoo, Bing search results Redirection

Hello , And to the Bleeping Computer Malware Removal Forum. My name is Elise and I'll be glad to help you with your computer problems.I will be working on your malware issues, this may or may not solve other issues you may have with your machine.Please note that whatever repairs we make, are for fixing your computer problems only and by no means should be used on another computer.The cleaning process is not instant. Logs can take some time to research, so please be patient with me. I know that you need your computer working as quickly as possible, and I will work hard to help see that happen. Please reply using the Add/Reply button in the lower right hand corner of your screen. Do not start a new topic. The logs that you post should be pasted directly into the reply. Only attach them if requested or if they do not fit into the post.Unfortunately, if I do not hear back from you within 5 days, I will be forced to close your topic. If you still need help after I have closed your topic, send me or a moderator a personal message with the address of the thread or feel free to create a new one.You may want to keep the link to this topic in your favorites. Alternatively, you can click the button at the top bar of this topic and Track this Topic, where you can choose email notifications. The topics you are tracking are shown here.-----------------------------------------------------------If you have since resolved the original problem you were having, we would appreciate you... Read more

Read other 25 answers