Over 1 million tech questions and answers.

Bing has hijacked my search engine

Q: Bing has hijacked my search engine

I am using firefox and it apears that Bing has hijacked my search engine.  Even if I go back and change it through the options it continues to open a new web page as Bing.  I looked in my program files and I do not see Bong or Google anywhere. I have ran malwarebytes and a spybot and hijack this and can not seem to remove it.  I can not even remove it from the list.  The remove button is grayed out.  Any information is appreciated!

RELEVANCY SCORE 200
Preferred Solution: Bing has hijacked my search engine

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

A: Bing has hijacked my search engine

You might want to refresh your Firefox settings. A few months ago, Firefox changed their default search to Yahoo which uses Bing.
 
 
 
 
https://support.mozilla.org/en-US/kb/refresh-firefox-reset-add-ons-and-settings

Read other 1 answers
RELEVANCY SCORE 77.2

For some reason MS Bing is on a tab on my MS explorier Browser. How does
a preson get rid of MS Bing Search Engine. I use google and I don't plan
on using Bing as a search engine.

Thank you,
 

A:Getting Rid of MS Bing search engine?

Next to Bing search box, click the Down arrow, then select Find More Search Providers. You will then get to a web page where you can select Google as your default search engine.
 

Read other 3 answers
RELEVANCY SCORE 77.2

The Truth About Microsoft's Market Research....

China is clearly the biggest marketing opportunity in the world, with a growing economy and billions of potential customers. Most Chinese speak Mandarin, sort of a universal language that connects all their ethnicities and language groups. They also like Fortune Cookies, don't we all? That's why I was quite surprised, when I opened my latest fortune cookie, and turned it over for the Mandarin lesson:

They must know what they're doing.......right???

A:Bing! Search Engine

You know that just means like...'sickness' in Chinese right?

Read other 2 answers
RELEVANCY SCORE 76.4

I have tried about 7 methods but none worked.
My list of programs does not include Bing - so I cannot delete it.
I have got just one search engine associated with I E 11 (Google) and set it as Default. However; in that same line of text it says that it is "Not Available".
Anyway; when I select I E; I get MSN combined with Bing.
Please advise me

A:On I E 11 How to Use Google Search Engine instead of Bing

Go to gear icon > manage add-ons > search providers > Find more search providers (at Bottom left) > pick one(or some)

Read other 14 answers
RELEVANCY SCORE 76.4

I have been using Bing as the default search engine on my PC for some years. It functions perfectly, and I wanted to be able to use it for searches on my new Samsung Galaxy mobile 'phone as well. But when I went through Chrome/Settings/Search Engine, Bing is shown as "Location is Blocked" ! Can anyone help me to get round this problem? Thanks.
 

A:Bing Search Engine - Blocked

Sttings - search engine - you should see Google Yahoo and Bing and a couple of others - select Bing
tap on that "Location is blocked" which should be in blue lettering
then on the next screen - tap on location access and select allow
 

Read other 3 answers
RELEVANCY SCORE 76.4

Bing has hijacked my opening page & tabs. I cannot seem to kill it. Can some one guide me to get my google search page back on top please.

I'm using chrome. which I know little about compared to FF.

thanks
AaLF

A:An annoyance - Bing search engine

Step 1
Select the "Chrome Menu" icon resembling three horizontal lines and select "Settings."
Step 2
Select "Google" in the "Search" section. If, for some reason, Google does not dislay, click "Manage Search Engines" and select "Google" from the list of available options.
Step 3
Close the "Settings" window and then restart the browser.
Also, make sure that Bing is not set in IE as your 'default' search provider.

Read other 8 answers
RELEVANCY SCORE 75.6

Help! How do I permanently remove bing search engine on my computer? I have tried searching for advice on this and nothing helps: Wikihow says to insert an html (well I can't even identify that) someone else said to locate bing in search engine add-ons (it doesn't even show up) and someone else said to type about.config in the filter bar - where is it?? Nothing is showing up as it should according to these gurus.

I am using Firefox. If I use IE bing stays hidden but I like Firefox and don't want this blasted thing on my computer. Any ideas - thanks in advance. Please use nice simple instructions.

Solved:
Guess what? If you use Firefox, here is a nice simple solution that does not remove bookmarks or files. Open Firefox, select help, troubleshooting issues, refresh Firefox. Select refresh only what I want, Firefox will reset to default. When done close window and reset home page. Easy as. FYI a file named Old Firefox Stuff will appear on your desktop in case you need anything from it. Many thanks to Chris for this info.
 

Read other answers
RELEVANCY SCORE 75.6

Picked up a search redirector that I can not get rid of. Malwarebytes does not touch it. Webroot secrue anywhere will temporarily remove it but it keeps coming back when computer is left on over night etc. I can't find a perminate way to remove it. I aparently also some vestage of windows system suite that it would be nice to remove if I could find the few pieces. It does not come up but it would be nice to not have combo fix show that it is there. Webroot had me download a file listed as AntiTdl.exe that is supposed to clean it but does not seem to. I could attach it if it would help.

A:search engine redirection google bing

Hello,Please follow the instructions in ==>This Guide<== starting at step 6. If you cannot complete a step, skip it and continue.Once the proper logs are created, then post them in a reply to this topic by using the Add Reply button.If you can produce at least some of the logs, then please create the post and explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the reply and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.Please note that I am not a member of the Malware Removal Team and will not be assisting you in removing the infection. I'm simply helping you to post the information they need in order to assist you.If HelpBot replies to your topic, PLEASE follow Step One so it will report your topic to the team members.Orange Blossom

Read other 3 answers
RELEVANCY SCORE 75.6

How to Disable Bing From the Windows 8.1 Search Engine
 

Read other answers
RELEVANCY SCORE 75.6

For the last 24 hours, I have not been able to access my regular Google search engine. Every time I try (and I have tried A LOT) whatever I am looking for takes me to Bing. Once there, I still cannot get to any of the sites.

I have done LOTS of things to correct this, such as:

Searched out help online
Cleaned my cache
Deleted my History
Did system restore (a number of times)
Changed some information in the Hosts file
Searched Google Help for help (problem has occurred a lot - no indication they are concerned)
Upgraded my Google Toolbar
Nothing has worked!

At this point, I am at my wits end!

Please help me.

B~
 

A:Solved: Search Engine Highjacked by Bing

Read other 8 answers
RELEVANCY SCORE 75.6

UPDATE 3/28: Tried a Google and Bing search today, and none of the links appear covered by redirects. Before receiving instruction not to make any changes to my system, I ran another Anti-Malware scan. The results:Memory Modules Infected:c:\Users\Michael\AppData\Local\Temp\ftpgent.dll (Trojan.Agent) -> Delete on reboot.Registry Values Infected:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\PkgMtend (Trojan.Agent) -> Value: PkgMtend -> Quarantined and deleted successfully.Files Infected:c:\Users\Michael\AppData\Local\Temp\ftpgent.dll (Trojan.Agent) -> Delete on rebootI am not sure if this will completely erradicate the problem, logs from DDS and GMER (pre-antimalware removal) below:Hello,As of yesterday when I search using Google and Bing I am redirected to various sites when attempting to follow links. The redirect links affect most, but not all of the search results. I am running Windows Vista Home Premium, Firefox version 3.6.16. I have run Malwarebytes Anti-malware, which found three malicious files yesterday, 1 Trojan.Agent and 2 Trojan.Dropper. I deleted these files and restarted. I have also run a full scan using McAfee, which registered and deleted 3 trojans. I am pretty much a novice at most of this stuff, but I can follow directions well. Any help is greatly appreciated.Regards,Mike DDS log:.DDS (Ver_11-03-05.01) - NTFSx86 Run by Michael at 15:4... Read more

A:Search engine redirect (Google, Bing)

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you are unable to create a log because your computer cannot start up successfully please provide detailed information about the Windows version you are using: What we in particular need to know is version, edition and if it is a 32bit or a 64bit system. If you are unsure about any of these caracteristics, just let us know and we'll help you figuring it out. Please also tell us if you have your Windows CD/DVD handy.Please include a clear description of the problems you're having, along with any steps you may have performed so far.Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.Even if you have already provided information about your ... Read more

Read other 2 answers
RELEVANCY SCORE 75.6

I had already run combofix and have the log file generated - attaching the file herewith... please help..
thx

A:Cannot upload any search engine - google bing (any)

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you are unable to create a log because your computer cannot start up successfully please provide detailed information about the Windows version you are using: What we in particular need to know is version, edition and if it is a 32bit or a 64bit system. [/b]If you are unsure about any of these caracteristics, just let us know and we'll help you figuring it out. Please also tell us if you have your Windows CD/DVD handy.Please include a clear description of the problems you're having, along with any steps you may have performed so far.Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.Even if you have already provided information about y... Read more

Read other 2 answers
RELEVANCY SCORE 75.6

Hi,
I am getting redirected from Google and Bing seach results page to random unrelated pages.
Avast! is giving a message that there is a rootkit detected on startup at C:\\WINDOWS\system32\drivers\disk.sys but is unable to resolve the issue.
I have access to the XP reinstall disc that came with the computer.
Thank you in advance for your assistance.
Cindy
.
DDS (Ver_11-03-05.01) - NTFSx86
Run by Cindy at 20:50:16.54 on Fri 04/08/2011
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.894.531 [GMT -7:00]
.
AV: avast! Antivirus *Enabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
============== Running Processes ===============
.
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
C:\WINDOWS\system32\Ati2evxx.exe
svchost.exe
svchost.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
c:\Program Files\Zune\ZuneBusEnum.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\stsystra.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\Alwil Software\Avast5\avastUI.exe
... Read more

A:Google and Bing search engine redirect

Hello and welcome. Please follow these guidelines while we work on your PC:Malware removal is a sometimes lengthy and tedious process. Please stick with the thread until I’ve given you the “All clear.” Absence of symptoms does not mean your machine is clean!
Please do not run any scans or install/uninstall any applications without being directed to do so.
Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.
Please subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.

Download ComboFix from one of the following locations:
Link 1
Link 2

VERY IMPORTANT !!! Save ComboFix.exe to your Desktop

* IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this linkDouble click on ComboFix.exe & follow the prompts.
As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a... Read more

Read other 9 answers
RELEVANCY SCORE 75.6

Good morning,
I'm having a problem with a search engine redirect. Most results in google and bing are redirected to an undesireable site. Also, when I open IE and type in an address, a new window opens up with an undesirable redirect. In addition to this, I'm also having the following problems:

-"generic host process for Win32 Services" error message
-"No active mixer devices" error message when I try to adjust audio volume
-generally slow running computer
-restarts frequently needed because software freezes when opening

Below is my dds log as well as an attached zip file with the second dds log and the gmer log. Please let me know what I can do to fix this problem. thanks!!
DDS (Ver_10-12-12.02) - NTFSx86
Run by bdavidson at 10:10:08.95 on Tue 12/28/2010
Internet Explorer: 8.0.6001.18702
============== Running Processes ===============
C:\Program Files\Cisco Systems\SSL VPN Client\agent.exe
C:\Program Files\Cisco\Cisco AnyConnect VPN Client\vpnagent.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Broadcom\ASFIPMon\AsfIpMon.exe
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
C:\win32app\ingr\ipshare\clntutil\bin\pidrpcs.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\lotus\notes\ntmulti.exe
C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
C:\WINDOWS\sy... Read more

A:Search Engine Redirect (google, bing, etc.)

Howdy there and welcome to TSF Forums

I'm Steve and I will be helping you throughout this fix.

Before beginning the fix, read this post completely. If there's anything that you do not understand, kindly ask your questions before proceeding. It is IMPORTANT that you don't miss a step. Please perform everything in the correct order/sequence.

Please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription

Please note that the forum is very busy and if I don't hear from you within three days from this initial posting then the thread will be closed.

We will begin with ComboFix.exe. Please visit this webpage for download links, and instructions for running the tool:

http://www.bleepingcomputer.com/comb...o-use-combofix

* Ensure you have disabled all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

Please include the C:\ComboFix.txt in your next reply for further review.

Read other 11 answers
RELEVANCY SCORE 75.6

A few weeks ago I started noticing the search results from Google would redirect to suspicious websites unrelated to my search terms. I was using Firefox, so I then started using IE and searching via Bing. A few days ago the problem started with Bing as well.

I am running Windows 7 64-bit. I use AVG Free antivirus, and keep the Windows firewall on.

I have run Malwarebytes quick scan, which found and quarantined Trojan.Happili (twice) and Exploit.Drop.9 (also twice) both located in the AppData\Local\Temp\ folder.

Even after removal of these, the problem persists.

A:Search Engine Redirects (Google/Bing)

DownloadTDSSkillerLaunch it.Click on change parameters-Select TDLFS file systemClick on "Scan".Please post the LOG report(log file should be in your C drive) DownloadaswMBRLaunch it, allow it to download latest Avast! virus definitionsClick the "Scan" button to start scan.After scan finishes,click on Save logPost the log results hereDownloadESET online scannerInstall itClick on START,it should download the virus definitionsWhen scan gets completed,click on LIST of found threatsExport the list to desktop,copy the contents of the text file in your reply

Read other 8 answers
RELEVANCY SCORE 74.8

Hello,

While reading my morning news, I subbled upon one of the local site visits, that apparently was hacked.

It redirected me to a youtube video, and asked me to install various stoftware, at which point I immediatly closed IE.

Apparently not soon enough, as now I can not use either Yahoo, Bing or Google search engines. It simply times out. However, I can brouse Yahoo, but not the others.

Here are the results of the scans;

______________________________________________________________________________________________________________________________
Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows XP Professional, Service Pack 3, 32 bit
Processor: Intel(R) Core(TM)2 Duo CPU T7100 @ 1.80GHz, x86 Family 6 Model 15 Stepping 13
Processor Count: 2
RAM: 1013 Mb
Graphics Card: Mobile Intel(R) 965 Express Chipset Family, 256 Mb
Hard Drives: C: Total - 76285 MB, Free - 9978 MB;
Motherboard: Dell Inc., 0KU184
Antivirus: AVG Anti-Virus Free Edition 2012, Updated: Yes, On-Demand Scanner: Enabled

_____________________________________________________________________________________________________________________________________

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:08:51 PM, on 3/4/2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\PROGRA~1\AVG\AVG2012\avgrsx.exe
C:\Program Files\AVG\AVG2012\avgcsrvx.exe
C:\WINDOWS\s... Read more

Read other answers
RELEVANCY SCORE 74.8

Hi.
 
I've been working with Jeff over in the Virus, Trojan, Spyware and Malware forum and we've come to a point where he feels that the problem is possibly a hardware software problem of some sort.
 
Until a couple weeks ago, my I.E. search engine was Google and I had no problem opening links.  However, somehow I was hacked and they managed to corrupt my Kasperky Pure 3 program as well as my IoBits Advanced System Care Pro, well still acting as if both were updating and running as they should.  Then I discovered my firewall was down, and the programs were not running according to Windows Security.  From there, I couldn't turn on Windows Firewall or Windows Defender and Windows Update had been shut down.
 
Kaspersky worked with me and we discovered that the program had indeed been corrupted so using another computer and cd which I burned, I installed a new Kaspersky Pure 3 program.  Windows Security now showed Kaspersky as the firewall, virus protection and spyware/malware protection.  I had to turn Windows Update back on.
 
When I turned Windows Update back on, it did some updates to I.E.  I didn't think anything of it as I don't use I.E. except for the very rare occasion.
 
When finalizing our troubleshooting, it was recommended that I check settings in I.E. to be sure they were set properly.  When I opened I.E. all of a sudden it kept trying to redirect from the homepage. I closed the browser, opened it again with... Read more

A:I.E. 11 BING - Can't Open Links or Change Search Engine

Bumping to see if anyone can help me.  Thanks.

Read other 4 answers
RELEVANCY SCORE 74.8

I too am on the "that's not the link I wanted... oh crap" redirection bandwagon and I want off.

I've run Ad-aware, MalwareBites, HitMan Pro 3.5 which have found some things but can't quite get to the root of the problem.

I've downloaded Hijack This and am ready to tackle this SOB. Would anyone be able to help me out with this?

Thanks!

A:Search engine redirects (Google, Yahoo, Bing...)

well, after browsing through other similar threads with similar problems, I tried the TDSS killer and it worked.

I can now search for "USA Rugby" and get USA Rugby, not Illinoismarketplacespamwarehouse.com

thanks!

Read other 2 answers
RELEVANCY SCORE 74

I don't remember the exact day it started, but for the past week or so, I have had issues when I try to click on a search result link from any search engine: Google, Bing, etc. Like so many others in different forums/posts I have read over the past few days, if I cut and paste the shortcut into the address bar and hit Enter, it takes me to the appropriate site. But if I just click on the link, I am redirected to anything from porn to shopping to completely random sites. (There is a green globe before the web address for every site I am redirected to, if that helps at all.) That seems to be the only issue I have currently, although a few days back my firewall turned off on its own. Since then, I have downloaded and run Ad-Aware and Malwarebytes' Anti-Malware software, as well as the (paid version of) Spyware Sweeper and (free version of) AVG Anti-Virus that I already had running on my system (Windows XP). At first, a trojan was found (Trojan.Backdoor.ProgDav) and after two tries, seemingly removed. I also had a Win32/Cryptor virus found and removed and two other viruses I can't recall. I have run full scans using everything I have over the past day (in both safe and regular mode) and nothing has been found. But the redirecting links problem still persists and I am worried that there are worse things happening to my computer behind the scenes that I can't detect with the naked eye. Any help would be appreciated; if I can't figure this out soon, I&#... Read more

A:Search Engine (Google, Bing, etc.) Link Redirect Problems

hello JHWK54ME and to Bleepingcomputer.if I can't figure this out soon, I'm going to have to take my laptop in to a professionalmethinks we're going to put these guys out of business one day Yup. . . you've got a nasty on your machine. We can get rid of it. . . but first, a warning.One or more of the identified infections is a backdoor trojan.This allows hackers to remotely control your computer, steal critical system information and download and execute files.I would counsel you to disconnect this PC from the Internet immediately. If you do any banking or other financial transactions on the PC or if it should contain any other sensitive information, please get to a known clean computer and change all passwords where applicable, and it would be wise to contact those same financial institutions to apprise them of your situation.Though the trojan has been identified and can be killed, because of it's backdoor functionality, your PC is very likely compromised and there is no way to be sure your computer can ever again be trusted. Many experts in the security community believe that once infected with this type of trojan, the best course of action would be a reformat and reinstall of the OS. Please read these for more information:How Do I Handle Possible Identify Theft, Internet Fraud and CC Fraud?When Should I Format, How Should I ReinstallWe can still clean this machine but I can't guarantee that it will be 100% secure afterwards. Let me know what you d... Read more

Read other 38 answers
RELEVANCY SCORE 74

Hi

I am experiencing problems with my Internet Explorer (IE). Whenever I search for a keyword on any search engine (Google/Bing/Yahoo), the main links of the results would redirect to various Ad websites. When I point the mouse over the main link, the status bar of the IE shows a link starting with http://1942.r.google.com... If the link is clicked, another window of IE opens up and redirects to another site. However, if I close that window or press the back key, it will take me to my original window that I initially intended to go to.

I, like any other tech, ran several software in safe mode, such as AVG, Trend Micro Worry Free, Symantec Endpoint Security, Spy-Bot, Ad-Aware, Malware Bytes and more. Even though it cleaned many viruses/spy-wares, it could not fix the redirecting issue. I even checked and removed suspicious registry entries from the system. However, I was unable to get rid of the redirection.

I am including log files that were requested. Please help get rid of this redirection issue. Any help will be greatly appreciated.

Thank You!

========================= DDS.txt =====================================
DDS (Ver_10-12-12.02) - NTFSx86
Run by raf at 21:53:40.07 on Fri 12/17/2010
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_23
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2037.1284 [GMT -5:00]

AV: Microsoft Security Essentials *Disabled/Updated* {BCF43643-A118-4432-AEDE-D861FCBCFCDF}
AV: Trend Micro Security Agent *Disa... Read more

A:search engine redirect virus (Google/Bing/Yahoo)

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

Read other 3 answers
RELEVANCY SCORE 74

Hi

I am experiencing problems with my Internet Explorer (IE). Whenever I search for a keyword on any search engine (Google/Bing/Yahoo), the main links of the results would redirect to various Ad websites. When I point the mouse over the main link, the status bar of the IE shows a link starting with http://1942.r.google.com... If the link is clicked, another window of IE opens up and redirects to another site. However, if I close that window or press the back key, it will take me to my original window that I initially intended to go to.

I, like any other tech, ran several software in safe mode, such as AVG, Trend Micro Worry Free, Symantec Endpoint Security, Spy-Bot, Ad-Aware, Malware Bytes and more. Even though it cleaned many viruses/spy-wares, it could not fix the redirecting issue. I even checked and removed suspicious registry entries from the system. However, I was unable to get rid of the redirection.

I am including log files that were requested. Please help get rid of this redirection issue. Any help will be greatly appreciated.

Thank You!

========================= DDS.txt =====================================
DDS (Ver_10-12-12.02) - NTFSx86
Run by raf at 21:53:40.07 on Fri 12/17/2010
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_23
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2037.1284 [GMT -5:00]

AV: Microsoft Security Essentials *Disabled/Updated* {BCF43643-A118-4432-AEDE-D861FCBCFCDF}
AV: Trend Micro Security... Read more

A:search engine redirect virus (Google/Bing/Yahoo) on IE

Hi and welcome to TSF.

My name is Iain and I will be helping you clean your system.

You may wish to Subscribe to this thread (Thread Tools > Subscribe to this thread) so that you are notified when you receive a reply.

Please read these instructions carefully and then print out or copy this page to Notepad in order to assist you when carrying out the fix. You should not have any open browsers or live internet connections when you are following the procedures below.

Note that the fix may take several posts. Please continue to respond to my instructions until I confirm that your logs are clean. Remember that although your symptoms may vanish, this does NOT mean that your system is clean.

If there is anything you don't understand, please ask BEFORE proceeding with the fixes.

Please ensure that you follow the instructions in the order I have them listed.

Please do not install or uninstall any programmes, or run any other scanners or software, unless I specifically ask you to do so. Also please copy and paste logs into the thread, rather than add them as attachments.


Combofix
We will begin with ComboFix.exe. Please visit this webpage for download links, and instructions for running the tool:

http://www.bleepingcomputer.com/comb...o-use-combofix

Please read all the information carefully! If using Windows XP you should ensure you install the Recovery Console.

You MUST disable your AntiVirus and AntiSpyware applications - please read this thread as a guide. They ... Read more

Read other 10 answers
RELEVANCY SCORE 74

My laptop is a HP dv6000 t2250 1.73GHz 2 GB RAM running windows xp sp3. I have the search engine redirecting problem, but only with ie8 and firefox. I can still use chrome for google, yahoo, etc. The links all work as intended. There is nothing wrong with my computer speed or connection. I decided to look into the problem the other day when I ran the Norton Scan and it found Spyguard 2008 and had it removed from my laptop. Also, I am not sure if this is related to the virus, but whenever I restart my laptop I get the Blue Screen right before it loads the desktop and then it restarts the entire reboot all over again. Usually it only does this once, then it loads properly the second time. However, recently it gave me the blue screen twice and then loaded on the third time. I ran my avast antivirus (full scan last night then a quick scan today) and it moved what it found to the virus chest. I can provide the logs for both scans if needed. I have run TDSS killer and it came back clean. Same thing with Malwarebytes, the results came back clean. I also used CCleaner to clean my computer and clear my registry. I read that an old version of Java contributed to getting the virus/malware so i removed all the old versions on the laptop and then downloaded the newest one. Here is my HijackThis Log. Thank you for your help.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:07:07 PM, on 8/14/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Unable to get Internet Explorer ve... Read more

A:Google/Yahoo/Bing search engine links are being redirected to ads

Read other 16 answers
RELEVANCY SCORE 73.2

I am using a Dell Dimension DIM 4550 with a Pentium4, 2.4GHz, 2.39 GHz 768 RAM running Windows XP Home 2002 Service Pack 3. (I have not updated Windows for over one year because when a Windows update form the last year or so gets installed I cannot get a wireless connection between my Netgear RangeMax Wireless N Gigabit router WNR3500 and Netgear RangeMax Dual Band Wireless-N USB 2.0Adapter WNDA3100-- I have the auto update disabled after figuring out that if I system restored to a point before updates I do not lose wireless connection.)

My problem is that when trying to use the internet, I cannot get passed the search engine page. I use Internet Explorer and Google. I have switched the search engine to Bing and Yahoo and each results in same problem. I also loaded Firefox and tried Google, Bing and Yahoo with Firefox with same bad result.

I use ESET and ran Malwarebytes. I am able to access updates for each. I've run scans with each and have found and removed things a couple of times. I still can't get passed the search engine homepage.

This is what happens when I run a search, go to a favorite or type in a URL. I initially get to the next page but then I get a warning
"ESET NOD 32 Antivirus
Address has been blocked
URL
clkh71yhks66.com/eOGNg6de5asc8hvI2S5Xpeg...
IP
78.47.249.228:80"

Then I get an error message telling me that Internet Explorer has encountered a problem and needs to close. Then I get an error page that says "X we were unable ... Read more

A:Search Engine Redirected and can't get past Google/Bing/Yahoo page

Please read carefully and follow these steps.

Download TDSSKiller and save it to your Desktop.
Extract its contents to your desktop.
Once extracted, open the TDSSKiller folder and doubleclick on TDSSKiller.exe to run the application, then on Start Scan.

If an infected file is detected, the default action will be Cure, click on Continue.

If a suspicious file is detected, the default action will be Skip, click on Continue.

It may ask you to reboot the computer to complete the process. Click on Reboot Now.

If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.
If a reboot is required, the report can also be found in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here.

 

Read other 3 answers
RELEVANCY SCORE 73.2

I'm having problems with Google, Yahoo, and Bing searches directing me to nonrelated sites. This just started yesterday afternoon, probably after trying to download an update to Flash Player HD (?). Also some websites are loading really slow.

I have Windows XP home edition and run IE8.
1st I tried System Restore, but it just stops after I pick a date to restore too.

2nd I downloaded GMER and ran it. It showed 4 areas with possible rootkit problems, but didn't highlight them in red and I couldn't fix them.

3rd I downloaded Sophos Anti-Rootkit software and ran it. The check took 41 minutes and came up with 16 files, but didn't recommend fixing any of those.

4th I downloaded HiJackThis from Trend Micro, Inc. and ran the scan. Trend sent me to this forum for help.

A:Search Engine (Yahoo, Google, and Bing) Redirection to nonrelated sites

Hello and welcome to Bleeping ComputerPlease subscribe to your topic so that you will be notified as soon as I post a reply, instead of you having to check the topic all of the time. This will allow you to get an email notification when I reply.To subscribe, go to your topic, and at the top right hand corner by your first post, click the Options button and then click Track this topic. The bullet the immediate notification bubble. Then press submit.Lets take a look with MalwarebytesPlease download Malwarebytes' Anti-Malware from here:MalwarebytesPlease rename the file BEFORE downloading to zztoy.exe instead of mbam-setup.exeMBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.Double Click zztoy.exe to install the application.* Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.* If an update is found, it will download and install the latest version.* Once the program has loaded, select "Perform Full Scan", then click Scan.* The scan may take some time to finish,so please be patient.* When the scan is complete, click OK, then Show Results to view the results.* Make sure that everything is checked, and click Remove Selected.* When disinfection is completed, a log will open in Notepad and yo... Read more

Read other 38 answers
RELEVANCY SCORE 73.2

On @11/1 i would get redirected to sites that have nothing to do with the search engine result i clicked on. I would need to rerun the search and click on it again to get to it. BACK does not work on the site i'm redirected to, it just sends me to the main page that i'm redirected to.Happens with bot IE and Firefox.I have dwm.exe running from my temp directory and i can't delete it, even in safe mode. Also looks like shell.exe and svchost.exe are running from a wrong directory. Note: I downloaded GMER but the buttons that the instructions say to check are grayed out & uncheckable. Services, Registry & Files & c:/ & ADS are the only ones i'm allowed to check. I did not run it.Here are my logs as per http://www.bleepingcomputer.com/forums/topic34773.html .DDS.txt:DDS (Ver_10-11-03.01) - NTFS_AMD64 Run by John at 4:49:51.15 on Thu 11/04/2010Internet Explorer: 8.0.7600.16385 BrowserJavaVersion: 1.6.0_17Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.2814.1630 [GMT -4:00]============== Running Processes ===============C:\Windows\system32\wininit.exeC:\Windows\system32\lsm.exeC:\Windows\system32\svchost.exe -k DcomLaunchC:\Windows\system32\svchost.exe -k RPCSSC:\Windows\system32\atiesrxx.exeC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestrictedC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestrictedC:\Windows&#... Read more

A:Browser redirect in Search Engine results (Yahoo, Bing, Google)

Moderator - please close this thread.
I followed boopme's 1st post in the below thread and i'm good now.
http://www.bleepingcomputer.com/forums/topic358309.html

THANK YOU!

Read other 2 answers
RELEVANCY SCORE 72.4

Please help! I have been infected by something that redirects me do random sites after I have done a searchs on Google, Yahoo or Bing. The latest redirects have taken me to the following website hxxp://server2.mediajmp.com/surveys/don-index.html?sub=yahoo.comor hxxp://server2.mediajmp.com/surveys/don-index.html?sub=google.comBoth of these links have an audio file asking me to participate in a 30 second survey. I have run Byspot Search & Destroy, PC Tools Spyware Doctor. Adaware & Malwaresbytes Anti Malware and still can not rid this thing. Other sites worth noting which are part of the redirect there are 9 click.php files here are some of the URL'shxxp://64.111.208.43/click.php?re=1&cc=eNoVUs3OqjAUfCATbQuUduECUPlERAFBYHNDC4j8qKCCEB7-amYyyUxOchYz10kkFE0I4GlfKB-r2H4mMAdQ_OkvBxRCRABCVMJTeIbSVjdyXn-q1F4uJ8gTIGaMEiDwOOYZSBCDCUScpISSmP-DNOM4FgSQUkw4FzOJUSQnNMNMRoyyCaJJmFLrXnlW9b6Mir0wGmLUGrevD7-yhfJuKbaSO2LDe-e-jfr6eOwwbt24dcfnuD96_Wc1k9vv20p5FabpGsRD2H0koPKNzs5eoguHRTc8mjxVr59z4dB1mWe3esXtNKt0t6tIK-zOg8w3z-RlVUBk6_Wi1AYr90vzSA6CT1Zdu7iPqNmWffHurdQYj3-qLcB920inRluczuqmf2yybnSawNEeRSll1Ws3vNP4-Iy4FP3lQxU4GCq9mvsZ9e-BWjfrEgkzwxc7sFadYIisp25oPDx_Bh_qoLeiY9kf6pNXBhqbxfygaKi-xeSa6UPirzwxuuyk0NuBgofrw-4un3TlOr5uTXgYxtCTN7PNFcscRqV5qQ-tebLExZ4IWvq4pezQlK5K3MdMSYYn8y7LiZI5QtJcIF9OYIKEzEUwl9Ec_-yEpkRIBLOGHbtZIAqMVxgYbRQ4PdM3ReRKBUOg-17-8O00RhCbZ-cdBepg1lbHfntBIMFJmooES4jiFCBKMlliTGIA41RG_wGSB9Po&cu=54d123a8433ce1b67595029df86bafdf&co=bc2be11daa9a7ffd8567da1141096460&... Read more

A:Search Engine Result Redirect Google, Yahoo & Bing http://r9237242.cn/

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 2 answers
RELEVANCY SCORE 71.2

Hi.In my system tray, I have this annoying speech bubble that keeps appearing. On clicking it off and clicking in anyway on the yellow exclaimation symbol in the system tray, it asks if I want to install SystemDefender. This is what the speech bubble says..."Privacy threats detected!Internet Trojans, Spyware and Adware are malicious applications endagering your computer and producing erratic system behaviour such as advertising popups, freezes and crashes.Click here to fix this problem"Also, RUNDLL32.EXE fails to close properly on shutdown and has to be closed manually by clicking the close now button on the macro.And finally, two macros open on start up when I get to the desk top. The first one says..."RegSvr32LoadLibrary("C:Documents and Settings\All Users\Application Data\lktkvqjg.dll")failed - The specified mode could not be found."The second macro is the same except the file in question is called abijwvab.dllI have performed the required proceedure for using HijackThis, and have in addition ran Registry Mechanic. I'm still having problems, so here is the HijackThis log.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 18:17:18, on 07/10/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16512)Boot mode: NormalRunning processes:C:\WINDOWS.000\System32\smss.exeC:\WINDOWS.000\system32\winlogon.exeC:\WINDOWS.000\system32\services.exeC:\WI... Read more

A:System Tray Hijacked. Ie Search Engine Searches Hijacked

Hello there and welcome to Bleeping Computer's security forum.My name is David, I will be helping you with your log today.Please download VundoFix.exe to your desktopDouble-click VundoFix.exe to run it.Click the Scan for Vundo button.Once it's done scanning, click the Remove Vundo button.You will receive a prompt asking if you want to remove the files, click YESOnce you click yes, your desktop will go blank as it starts removing Vundo.When completed, it will prompt that it will reboot your computer, click OK.Please post the contents of C:\vundofix.txt and a new HiJackThis log in a reply to this thread.Note: It is possible that VundoFix encountered a file it could not remove. VundoFix will run on reboot, simply follow the above instructions starting from "Click the Scan for Vundo button".

Read other 11 answers
RELEVANCY SCORE 70.8

Multiple browsers and multiple search engines,
Search results appear normal, but links (clicked or copied) all begin hxxp://adsense.yahoodbengimesearch.com/...

Clear cache problem resolves temporarily, then recurs after a few searches.

Symantec Antivirus Corporate Edition 10.1.7 defs from Jan4, 2011 finds nothing.

Malwarebytes finds nothing wrong:
Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Database version: 5457

Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.13

1/4/2011 12:09:48 PM
mbam-log-2011-01-04 (12-09-48).txt

Scan type: Full scan (C:\|)
Objects scanned: 161421
Time elapsed: 47 minute(s), 6 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

HJT is this:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 1:41:46 PM, on 1/4/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17091)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WI... Read more

A:Search results hijacked (IE7, Moz 6.15; Google, Yahoo, Bing)

Ran Kaspersky TDSS rootkit and "Cured" Backdoor.Win32.Sinowal.knf

So far effective.
2011/01/05 11:12:15.0234 TDSS rootkit removing tool 2.4.12.0 Dec 16 2010 09:46:46
2011/01/05 11:12:15.0234 ================================================================================
2011/01/05 11:12:15.0234 SystemInfo:
2011/01/05 11:12:15.0234
2011/01/05 11:12:15.0234 OS Version: 5.1.2600 ServicePack: 3.0
2011/01/05 11:12:15.0234 Product type: Workstation
2011/01/05 11:12:15.0234 ComputerName: SVAHS-A-130-TEA
2011/01/05 11:12:15.0234 UserName: User
2011/01/05 11:12:15.0234 Windows directory: C:\WINDOWS
2011/01/05 11:12:15.0234 System windows directory: C:\WINDOWS
2011/01/05 11:12:15.0234 Processor architecture: Intel x86
2011/01/05 11:12:15.0234 Number of processors: 1
2011/01/05 11:12:15.0234 Page size: 0x1000
2011/01/05 11:12:15.0234 Boot type: Normal boot
2011/01/05 11:12:15.0234 ================================================================================
2011/01/05 11:12:15.0390 Initialize success
2011/01/05 11:12:23.0140 ================================================================================
2011/01/05 11:12:23.0140 Scan started
2011/01/05 11:12:23.0140 Mode: Manual;
2011/01/05 11:12:23.0140 ================================================================================
2011/01/05 11:12:24.0156 ACPI (8fd99680a539792a30e97944fdaecf17) C:\WINDOWS\system32\DRIVERS\ACPI.sys
2011/01/05 11:12:24.0234 ACPIEC (98... Read more

Read other 12 answers
RELEVANCY SCORE 67.2

Any search argument we enter returns replies that, when followed, go to hijack destinations instead of what we were searching for. See more info following the hijackthis log:------------------------------------------------------------Logfile of Trend Micro HijackThis v2.0.2Scan saved at 8:37:49 AM, on 10/15/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.5730.0013)Boot mode: NormalRunning processes:C:\WINNT\System32\smss.exeC:\WINNT\system32\winlogon.exeC:\WINNT\system32\services.exeC:\WINNT\system32\lsass.exeC:\WINNT\system32\svchost.exeC:\WINNT\System32\svchost.exeC:\WINNT\system32\spoolsv.exeC:\WINNT\System32\Ati2evxx.exeC:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exeC:\WINNT\Explorer.EXEC:\WINNT\system32\HPZipm12.exeC:\Program Files\Common Files\Lanovation\PrismXL\PRISMXL.SYSC:\WINNT\System32\svchost.exeC:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exeC:\WINNT\system32\ctfmon.exeC:\Program Files\Internet Explorer\IEXPLORE.EXEC:\Program Files\Outlook Express\msimn.exeC:\Program Files\Trend Micro\HijackThis\HijackThis.exeR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/... Read more

A:Search Engine Being Hijacked

Our search engine results are being hijacked and they send us elsewhere (mostly to monstermarketplace.com) There is more info following the hijackthis log:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 5:50:29 PM, on 10/19/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16735)Boot mode: NormalRunning processes:C:\WINNT\System32\smss.exeC:\WINNT\system32\winlogon.exeC:\WINNT\system32\services.exeC:\WINNT\system32\lsass.exeC:\WINNT\system32\svchost.exeC:\WINNT\System32\svchost.exeC:\WINNT\system32\spoolsv.exeC:\WINNT\Explorer.EXEC:\WINNT\System32\Ati2evxx.exeC:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exeC:\WINNT\system32\HPZipm12.exeC:\Program Files\Common Files\Lanovation\PrismXL\PRISMXL.SYSC:\WINNT\System32\svchost.exeC:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exeC:\WINNT\system32\ctfmon.exeC:\Program Files\Internet Explorer\IEXPLORE.EXEC:\WINNT\system32\wuauclt.exeC:\Program Files\Trend Micro\HijackThis\HijackThis.exeR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.search.msn.com/spbasic.htmR0 - HKLM\Software\Microsoft\Internet Explorer\Main,Sta... Read more

Read other 3 answers
RELEVANCY SCORE 67.2

Hi. I think my computer/search engines have been hijacked. Ive been reading similar cases on this site before signing up. On 9/15/2009 I was dong some research on google and yahoo. Google stopped working, so I thought their server or whatever was having issues. I then tried using yahoo. Yahoo let me on and gave me search results. After clicking on search results porn sites started popping up over and over all over my screen as well as various other popups. The sites that popped up are showing in my history, not listing the link, just the name

ODNOIXNIKI.COM :: САМАЯ БОЛЬШАЯ КОЛЛЕКЦИЯ РАЗВРАТНОГО ВИДЕО!

and

YABLONDINKA.COM :: САМАЯ БОЛЬШАЯ КОЛЛЕКЦИЯ РАЗВРАТНОГО ВИДЕО!
Earlier that day Mcafee did pop up saying it found a Trojan and had cleaned it, so I clicked okay.

After experiencing the popups in yahoo I was then unable to use yahoo

Now I'm not able to use the following:
google
yahoo
msn
ask
but can open all other websites
We ran Mcafee and everything showed up clean

Norton cant even function...so there was no trying ... Read more

A:Search engine Hijacked?

Hello and welcome to Bleeping Computer.Please subscribe to your topic so that you will be notified as soon as I post a reply, instead of you having to check the topic all of the time. This will allow you to get an email notification when I reply.To subscribe, go to your topic, and at the top right hand corner by your first post, click the Options button and then click Track this topic. The bullet the immediate notification bubble. Then press submit.Please post your Malwarebytes log. It can be found under the "Logs" tab of the Malwarebytes program.

Read other 13 answers
RELEVANCY SCORE 67.2

Can someone please have a look at my hijack log?My search results from google, yahoo, etc are hijacked by hxxp://triplexfeed.com.I cannot click on links returned from search engines. Any help would be appreciated. ThanksEdit: Moved topic from Windows NT/2000/2003/2008 to the more appropriate forum. Link to deceptive website deactivated to prevent anyone from inadvertently getting infected. Please do not visit that site without adequate protection. ~ Animal

A:Hijacked search engine

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted logs, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Follow th... Read more

Read other 2 answers
RELEVANCY SCORE 67.2

Hi Guys,
Please find below my log from hijack this, can anyone help me!
Logfile of HijackThis v1.99.1
Scan saved at 11:35:33, on 19/02/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\SCardSvr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:... Read more

A:search engine hijacked

Read other 10 answers
RELEVANCY SCORE 67.2

Good morning, this is my first post to a forum like this in years. I am usually very tech savvy and can navigate through other people's threads to solve my problems. However, I am now at the end of the line and cannot resolve the issue on my own.

Here is the problem:
A few days ago, I picked up some stray junk somewhere. I came home and a few random websites were open and there was a message from windows defender.
after that, i ran the some virus scan stuff and did some basic removals.
I have since noticed that my Search engines appear to be hijacked, as the are redirecting my pages when I click on a search result.

So far i have run the following in safe mode and before computer boots:
UnHackme500, Spybot S&D, MalwareBytes, and SUPER Anti Spyware....in that order. Each one picked up some stuff that the previous missed, but none of them solved the issue.

Side note: UnhackMe500 picked up the most junk at first because I ran this right after infection. The problem appeared to be fixed. I could use search engines again. However, I think the hijacker reloaded after I did a shutdown and a restart. Since then, nothing has even been a quick fix.

How, this seems to me like the "go.google.com" virus that I have seen dozens of times in forums, but upon my redirection, I have never come across that particular page in any of the pauses. I have noticed 2 main pages that appear before I get redirected, they are:
--->www.oagehtgrnnoi.com/search.php......
--->www.... Read more

Read other answers
RELEVANCY SCORE 67.2

My Google and Yahoo Search Engines give a verbal description of the sites I searched for but if I click on the the item it takes me to an unrelated link that is generally a site trying to sell me something. In addition to this my machine runs very slow. I use AVG antivirus, Adaware and Spybot and have run housecall but none of these have fixed the problem. Your help would be greatly appreciated.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 1:11:29 AM, on 1/31/2009Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16762)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Lavasoft\Ad-Aware\AAWService.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\PROGRA~1\AVG\AVG8\avgwdsvc.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\WINDOWS\system32\CTsvcCDA.exeC:\Program Files\LeapFrog\LeapFrog Connect\CommandService.exeC: ... Read more

A:Search Engine HiJacked

Hello ruold2Welcome to BleepingComputer ========================Please download DDS and save it to your desktop.Disable any script blocking protection Double click dds.scr to run the tool. When done, DDS.txt will open. Click Yes at the next prompt for Optional Scan. Save both reports to your desktop.---------------------------------------------------Please include the contents of the following in your next reply:DDS.txtAttach.txt. ================Download the GMER Rootkit Scanner. Unzip it to your Desktop.Before scanning, make sure all other running programs are closed and no other actions like a scheduled antivirus scan will occur while the scan is being performed. Do not use your computer for anything else during the scan.Double-click gmer.exe. The program will begin to run.**Caution**These types of scans can produce false positives. Do NOT take any action on any "<--- ROOKIT" entries unless advised!If possible rootkit activity is found, you will be asked if you would like to perform a full scan.Click NOIn the right panel, you will see a bunch of boxes that have been checked ... leave everything checked and ensure the Show all box is un-checked.Now click the Scan button.
Once the scan is complete, you may receive another notice about rootkit activity.Click OK.GMER will produce a log. Click on the [Save..] button, and in the File name area, type in "GMER.txt" Save it where you can easily find it, such as your desktop.Post the contents of GMER.txt i... Read more

Read other 11 answers
RELEVANCY SCORE 67.2

Hi all,

Hope someone can help me. My search engine has been jacked, I have tried all my standard ways of locating this little virant but cannot seem to find it. I have tried hijack this and normally I can locate the little varmint! But not this time. Any advice would be greatly appreciated!

Thanks
 

A:Help!! my search engine has been hijacked!

Read other 8 answers
RELEVANCY SCORE 67.2

HI, I hope somebody can help with this!

The main PC on my work network (only 3 pcs) started acting up last week- slow internet and email access, random pop-ups, internet explorer opening even when not connected. Unfortnately my receptionist kept this to herself until our internet usage limit was exceeded and we could no longer access the internet! (limit is 5GB/month, but we only use internet for emails and occasional surfing). Looks like something bad had been running in the background as the IE history list was massive!
I ran Avast, Malawarebytes, and S+D- these came up with a few viruses and trojans which were all removed. However, whenever I try to open a google search result, several windows open to different websites. I've run the antivirus and anti-spyware again- they are coming up clean!

Any help would be appreciated!

I will post DDS logs etc shortly!

Ok at work now- here are the logs:
DDS (Ver_09-10-26.01) - NTFSx86
Run by Owner at 12:04:18.62 on 14/11/2009
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Professional 5.1.2600.3.1252.44.1033.18.502.202 [GMT 0:00]

AV: avast! antivirus 4.8.1335 [VPS 091112-1] *On-access scanning enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
FW: ZoneAlarm Firewall *enabled* {829BDA32-94B3-44F4-8446-F8FCFF809F8B}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -... Read more

A:search engine hijacked

Just in case it helps, I'll post the logs from avast + MBM:

AVAST:
05/11/2009 11:05:03 SYSTEM 1592 Sign of "Win32:VB-NNB [Trj]" has been found in "C:\Documents and Settings\Owner\weoaje.exe" file.
05/11/2009 11:06:10 SYSTEM 1592 Sign of "Win32:Trojan-gen" has been found in "C:\DOCUME~1\Owner\LOCALS~1\Temp\a.exe" file.
05/11/2009 11:06:51 SYSTEM 1592 Sign of "Win32:Trojan-gen" has been found in "C:\DOCUME~1\Owner\LOCALS~1\Temp\a.exe" file.
06/11/2009 14:03:28 SYSTEM 1860 AAVM - scanning warning: x_AavmCheckFileDirectEx [UNI]: C:\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\V0RISYPU\flash_counter[2].htm (C:\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\V0RISYPU\flash_counter[2].htm) returning error, 0000A413.
06/11/2009 14:40:55 SYSTEM 1860 AAVM - scanning warning: x_AavmCheckFileDirectEx [UNI]: C:\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\9SLKBX6U\flash_counter[3].htm (C:\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\9SLKBX6U\flash_counter[3].htm) returning error, 0000A413.
09/11/2009 14:16:10 SYSTEM 1636 Function setifaceUpdatePackages() has failed. Return code i... Read more

Read other 3 answers
RELEVANCY SCORE 67.2

I have a problem accessing any searches using Google and/or Bing. Whenever I enter an inquiry, I get redirected to either another search page with the key words or sometimes just another similar page with the the key words loosely associated. I use a Dell Dimension 4 with OP Sys MS indows XP Home Edition ver 2002 SP 2. I have been using mostly Mozilla Firefox as my platform (occasionally using MS Explorer). I did read some other posts and did copy a Highjack This file that I have attached....please help! I appreciate your upcoming response!

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 3:10:49 PM, on 7/1/2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\Program Files\AVG\AVG9\avgrsx.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\AVG\AVG9\avgwdsvc.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Motive\McciCMService.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\m... Read more

A:Hijacked Search Engine....Help!

Read other 7 answers
RELEVANCY SCORE 67.2

I haven't had this problem for quite awhile...Something named Starware hijacked my search engine preference...how do i resolve?

I am running Aluria Software as well as a Ad aware.
Any suggestions? as to how to restore?

I am running XP.

TDO
 

A:Search engine hijacked

Hi my name is David

Click here to download HJTsetup.exe
Save HJTsetup.exe to your desktop.

Double click on the HJTsetup.exe icon on your desktop.
By default it will install to C:\Program Files\Hijack This.
Continue to click Next in the setup dialogue boxes until you get to the "Select Addition Tasks" dialogue.
Put a check by Create a desktop icon then click Next again.
Continue to follow the rest of the prompts from there.
At the final dialogue box click Finish and it will launch Hijack This.
Click on the "Do a system scan and save a log file" button. It will scan and then ask you to save the log.
Click Save to save the log file and then the log will open in notepad.
Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
Come back here to this thread and Paste the log in your next reply.
DO NOT have Hijack This fix anything yet. Most of what it finds will be harmless or even required.
 

Read other 1 answers
RELEVANCY SCORE 67.2

HI, I am a newbie to this site.Here is what is happening,when I do a search with my firefox browser using the google tool bar.I get my results ok but when I click on any result the search engine changes.This also happens when I use internet explorer. Here are the results of my hikack this results any help would be apprciated. Thanks Running processes: C:\Windows\system32\taskeng.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\capfsem.exe C:\Program Files\Windows Defender\MSASCui.exe C:\Program Files\CA\CA Internet Security Suite\casc.exe C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\cavrid.exe C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\capfasem.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\Synaptics\SynTP\SynTPStart.exe C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe C:\Windows\System32\igfxtray.exe C:\Windows\System32\hkcmd.exe C:\Windows\System32\igfxpers.exe C:\Windows\system32\igfxsrvc.exe C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spyware\CAPPActiveProtection.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Wi... Read more

A:My search engine is hijacked PLEASE HELP!

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a description of your problem, along with any steps you may have performed so far.Upon completing the steps below a staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.comDDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results, click no to the Optional_ScanFollow the instructions that pop up for posting the results.Close the program window, and delete the program from your desktop.Please note: You may have to disable ... Read more

Read other 2 answers
RELEVANCY SCORE 67.2

When I search in Yahoo or Google, the results are related to my search. However, when I click on a result, it takes me to a completely different URL. I was using AVG and then tried Ad Aware to detect, but neither of these found a problem. I have attached a HijackThis log file. I have reached the limits of what I know and any help is greatly appreciated.
 hijackthis.log   9.18KB
  8 downloads

A:Hijacked search engine

Hi,This this look like the infection you are dealing with?http://miekiemoes.blogspot.com/2008/10/fak...archengine.html

Read other 2 answers
RELEVANCY SCORE 67.2

I have some malicious code hidden somewhere on my computer. I have run MalwareBytes, and Spy-bot S&D. Every time I go to Google, or another internet search engine, I can type in what I want to search for, then when I click search the websites come up, But when I click the link for a website, it will redirect me to to some marketing page. I cannot get to the page that I wanted to get to originally. I would appreciate any help on this topic. I have included a hijack this scan. Thanks.

Ben

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:54:46 AM, on 11/11/2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18975)
Boot mode: Normal

Running processes:
C:\Program Files\Norton 360\Engine\4.3.0.5\ccSvcHst.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Hewlett-Packard\Media\DVD\DVDAgent.exe
C:\Program Files\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe
C:\Program Files\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe
C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCtrl.exe
C:\Program Files\HP\HP Software Update\hpwuSchd... Read more

A:Search Engine is hijacked, IE8

It's been 4 days since I posted and noone has offered any help. How long until I should re-post?+++++++++++++++++++No need to repost. In fact, doing so would delay assistance for you.I know how frustrating it is when your computer isn't working properly. Let me assure you that your topic isn't lost, forgotten, or ignored. We work with hundreds of logs every day, so we have devised a means of seeing only those topics that don't have responses yet. At the moment, we have nearly 300 unanswered topics, the oldest dated Nov. 7, 2010 at 4:20 p.m. Eastern Standard Time in the U.S.A. Your log topic is dated Nov. 11, 2010 at 10:55 a.m. using the same time zone.Our volunteer MRT team members have various levels of expertise and training, so while we try to take the oldest DDS/HJT logs, it is often the skill level of the particular helper and sometimes the operating system that dictates which logs get selected first. Some infections are more complicated than others and require a higher skill level to remove. Without that skill level attempted removal could result in disastrous results. In other instances, the helper may not be familiar with the operating system that you are using, since they use another. In either case, neither of us would want someone to assist you who is not familiar with your issue and attempt to fix it.Please be patient. It may take several days to get a response but your log will be reviewed and answered as soon as possible. I advise checki... Read more

Read other 17 answers
RELEVANCY SCORE 67.2

Like many others here my search engines have been hijacked to redirect search results to non-desired sites. Below is my HJT log, and I would greatly appreciate any assistance on how to proceed. Much sincere thanks in advance!Logfile of Trend Micro HijackThis v2.0.2Scan saved at 10:12:16 AM, on 4/19/2009Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16827)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Intel\Wireless\Bin\EvtEng.exeC:\Program Files\Intel\Wireless\Bin\S24EvMon.exeC:\Program Files\Intel\Wireless\Bin\WLKeeper.exeC:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\Program Files\Java\jre6\bin\jqs.exeC:\Program Files\McAfee\SiteAdvisor\McSACore.exeC:\PROGRA~1\McAfee\MSC\mcmscsvc.exec:\program files\common files\mcafee\mna\mcnasvc.exec:\PROGRA~1\CO... Read more

A:search engine hijacked, HJT log

Hello! My name is Sam and I will be helping you. In order to see what's going on with your computer I will ask for you to post various logs from the tools that we will use to resolve your issue. Please also share with me any information about how your computer is reacting and behaving each step of the way as we work through this process.Please download Malwarebytes Anti-Malware and save it to your desktop.alternate download link 1alternate download link 2Make sure you are connected to the Internet.Double-click on Download_mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan. If an update is found, the program will automatically update itself. Press the OK button to close that box and continue. If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to install.On the Scanner tab:Make sure the "Perform Quick Scan" option is selected.Then click on the Scan button.If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.The scan will begin and "Scan in progress" will show at the top. It may ta... Read more

Read other 23 answers
RELEVANCY SCORE 67.2

Hello Techguy when using Google to search stuff and i click on a link in the resulting list, it takes me to some unrelated site saying I have won a prize or to a dating site or to another search engine. This does not seem to happen to my daughter under her user on the same computer?
While running Malwarebytes Antimalware quickscan, I got a pop up from my AVG Resident shield alert - Filename c:\WINDOWS\system32\nddeapirw.dll Threat Name Trojan horse Generic 21.COHM
Tried to 'Move to vault' said access denied, doing so could damage my computer so I did not proceed. The result of the MBAM scan said No malicious items detected. Then discovered your site so here are the results of the requested scans. I should add that towards the end of the first time I tried to run the GMER scan my computer automatically shut down and restarted so the result was lost. It looked a lot different to the result of the next time i ran GMER which is included here. There were about 50 lines in the original result. Makes me think something nasty may have caused the shutdown to destroy the result? Please help.
Tech Support Guy System Info Utility version 1.0.0.1
OS Version: Microsoft Windows XP Professional, Service Pack 3, 32 bit
Processor: Intel(R) Pentium(R) D CPU 3.40GHz, x86 Family 15 Model 6 Stepping 4
Processor Count: 2
RAM: 1013 Mb
Graphics Card: Intel(R) 82945G Express Chipset Family, 128 Mb
Hard Drives: C: Total - 152625 MB, Free - 139324 MB;
Motherboard: LENOVO, LENOVO, ,
Antivi... Read more

A:Search engine hijacked (1)

Read other 6 answers
RELEVANCY SCORE 67.2

I'm hoping that someone may be able to help me. I accessed a message from a friend's Facebook account and now Google and Bing have been hijacked and I am receiving numerous popups about my PC being infected and to click on the screen to fix my problem. I have pasted the DDS.txt and have included the other two logs as well. GMER does not complete running, so I have named the log from it as "initial.txt" since it is the intitial scan results. I do not have access to the Windows install disc for my machine. It is all bundled together from the OEM. Thanks for any help you can give me.

Here is the DDS.txt:

DDS (Ver_10-03-17.01) - NTFSx86
Run by Owner at 14:37:04.06 on Thu 03/18/2010
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.2046.1469 [GMT -5:00]

AV: Norton AntiVirus *On-access scanning disabled* (Outdated) {B5510F6F-87E1-47F7-A411-360BC453007C}

============== Running Processes ===============

C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\svchost.exe -k captcha
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\system32\svchost.exe -k tapisrvs
C:\WINDOWS\System3... Read more

A:Search Engine Hijacked

Howdy there and welcome to TSF Forums

I'm Steve and I will be helping you throughout this fix.

Before beginning the fix, read this post completely. If there's anything that you do not understand, kindly ask your questions before proceeding. It is IMPORTANT that you don't miss a step. Please perform everything in the correct order/sequence.

Vista users please make sure you all run commands with administrator rights (right click icon - run as administrator)

Please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription

Please note that the forum is very busy and if I don't hear from you within three days from this initial posting then the thread will be closed.

We will begin with ComboFix.exe. Please visit this webpage for download links, and instructions for running the tool:

http://www.bleepingcomputer.com/comb...o-use-combofix

Please ensure you install the recovery console if requested

* Ensure you have disabled all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

Please include the C:\ComboFix.txt in your next reply for further review.

Read other 8 answers
RELEVANCY SCORE 67.2

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

A:search engine hijacked, HELP

Due to the lack of feedback this Topic is closed.

If you need this topic reopened, please request this by sending the moderating team a PM with the address of the thread. This applies only to the original topic starter.

Everyone else please begin a New Topic

Read other 2 answers
RELEVANCY SCORE 67.2

Every time I search in Yahoo or Google or any other search engine and click on a search result, I automatically get redirected to another page through "search-daily" or something like that? Help please!!

Logfile of HijackThis v1.99.1
Scan saved at 9:17:15 AM, on 8/10/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
F:\Program Files\Symantec\Norton Ghost 2003\GhostStartService.exe
C:\Program Files\Intel\Intel Application Accelerator\iaantmon.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\mcshield.exe
C:\Program Files\Network Associates\VirusScan\vstskmgr.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Microsoft SQL Server\MSSQL.2\MSSQL\Binn\sqlservr.exe
C:\Program Files\Microsoft SQL Server\MSSQL.3\OLAP\bin\msmdsrv.exe
C:\Program Files\Common Files\Sogou PXP\p2psvr.exe
C:\Program Files\Microsoft SQL Server\MSSQL.4\Reporting Services\ReportServer\bin\ReportingSe... Read more

A:search engine hijacked

Hello and Welcome. Please subscribe to this thread to get immediate notification of replies as soon as they are posted.

Please read this post completely before begining. If there's anything that you do not understand, kindly ask your questions before proceeding. Ensure that there aren't any opened browsers when you are carrying out the procedures below. Save the following instructions in Notepad as this webpage would not be available when you're carrying out the fix.


* * * * * * ADDITIONAL DOWNLOADS * * * * * * * * * * * * * *


Download & install CleanUp.exe (not recommended for WinXP64) http://www.greyknight17.com/spy/CleanUp4.0.exe

Download Ewido Anti-Malware - http://www.ewido.net/en/download/Install Ewido Anti-Malware
Double-click the icon on Desktop to launch Ewido
You will need to update Ewido to the latest definition files.On the top of the main screen click Shield
Click the word active to change it to inactive
On the top of the main screen click Update.
Then click on Start Update.
If you are having problems with the updater, you can use this link to manually update Ewido
http://download.ewido.net/ewido-sign...ll-current.exeOnce the update has completed select the "Scanner" icon at the top of the screen, then select the "Settings" tab.
Once in the Settings screen click on "Recommended actions" and then select "Quarantine".
Under "Reports"Select "Automatically generate report after every scan&qu... Read more

Read other 10 answers