Over 1 million tech questions and answers.

Occasional redirects while browsing

Q: Occasional redirects while browsing

During a session in IE, the browser will suddenly open another browser window and start to go to an obviously commercial site. The windows will close by itself after a few seconds and I can continue my session. However, it seems there may be something running that shouldn't be there. I'm attaching a hijackthis log. Thanks.

RELEVANCY SCORE 200
Preferred Solution: Occasional redirects while browsing

I recommend downloading and running DAP. It can help sort out any driver and firmware related issues on your system

It's worked out well for many of us in the past.

You can download it direct from this link http://downloaddap.org. (This link will open the download page of DAP so you can save a copy to your computer.)

A: Occasional redirects while browsing

Hello , And to the Bleeping Computer Malware Removal Forum. My name is Elise and I'll be glad to help you with your computer problems.I will be working on your malware issues, this may or may not solve other issues you may have with your machine.Please note that whatever repairs we make, are for fixing your computer problems only and by no means should be used on another computer.The cleaning process is not instant. Logs can take some time to research, so please be patient with me. I know that you need your computer working as quickly as possible, and I will work hard to help see that happen. Please reply using the Add/Reply button in the lower right hand corner of your screen. Do not start a new topic. The logs that you post should be pasted directly into the reply. Only attach them if requested or if they do not fit into the post.Unfortunately, if I do not hear back from you within 5 days, I will be forced to close your topic. If you still need help after I have closed your topic, send me or a moderator a personal message with the address of the thread or feel free to create a new one.You may want to keep the link to this topic in your favorites. Alternatively, you can click the button at the top bar of this topic and Track this Topic, where you can choose email notifications. The topics you are tracking are shown here.-----------------------------------------------------------If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.If you have already posted a log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.We need to see some information about what is happening in your machine. Please perform the following scan:Please download OTL from one of the following mirrors:This is THE MirrorSave it to your desktop.Double click on the icon on your desktop.Click the "Scan All Users" checkbox.Push the button.Two reports will open, copy and paste them in a reply here:OTListIt.txt Will be openedExtra.txt Will be minimizedPlease download GMER from one of the following locations and save it to your desktop:Main MirrorThis version will download a randomly named file (Recommended)Zipped MirrorThis version will download a zip file you will need to extract first. If you use this mirror, please extract the zip file to your desktop.Disconnect from the Internet and close all running programs.Temporarily disable any real-time active protection so your security programs will not conflict with gmer's driver.Double-click on the randomly named GMER file (i.e. n7gmo46c.exe) and allow the gmer.sys driver to load if asked.Note: If you downloaded the zipped version, extract the file to its own folder such as C:\gmer and then double-click on gmer.exe.GMER will open to the Rootkit/Malware tab and perform an automatic quick scan when first run. (do not use the computer while the scan is in progress)If you receive a WARNING!!! about rootkit activity and are asked to fully scan your system...click NO.Now click the Scan button. If you see a rootkit warning window, click OK.When the scan is finished, click the Save... button to save the scan results to your Desktop. Save the file as gmer.log.Click the Copy button and paste the results into your next reply.Exit GMER and re-enable all active protection when done.-- If you encounter any problems, try running GMER in Safe Mode.-------------------------------------------------------------In the meantime please, do NOT install any new programs or update anything unless told to do so while we are fixing your problemIf you still need help, please include the following in your next replyA detailed description of your problemsA new OTL log (don't forget extra.txt)GMER logThanks and again sorry for the delay.

Read other 2 answers
RELEVANCY SCORE 71.6

Hello,I have been lurking bleepingcomputer as a non-member for a while now. I typically am able to find the instructions to fix almost any problem a computer (be it mine or a friends) has from your forum. Now it seems I am unable to find the solution to my specific problem, so I finally signed up as a member! My problem is similar to all these redirect virus issues I have been reading, but slightly different and not quite the same.Here's the problem:Randomly when I am browsing the internet, every now and again a site that I come across (typically while using StumbleUpon [Firefox Add-On]) will redirect to some completely random site. It doesn't appear to follow any pattern, and has redirected to various different websites. The websites I am redirected to are rarely the same website I was redirected to before, the only exception being theclickcheck.com and yellowpages.com, both of these websites I have been redirected to more than once. Additionally, even if I don't have a browser open a pop-up will appear in a new window. If a browser is open, the pop-up window error will occur more frequently it seems(in a separate window, not a separate tab). Also, I noticed each redirect or pop-up goes through google-analytics.com, so this may still be the google redirect virus, but I am unsure.I have had this issue for about a week now, and I have been unable to get the time to really find the problem. I wish to do online banking, bill paying, and the what not but fear that... Read more

A:Random redirects and occasional pop-up while browsing with Firefox (particularly when using Firefox Add-On StumbleUpon)

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.In the upper right hand corner of the topic you will see a button called Options. If you click on this in the drop-down menu you can choose Track this topic. By doing this and then choosing Immediate E-Mail notification and then clicking on Proceed you will be advised when we respond to your topic and facilitate the cleaning of your machine.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The ... Read more

Read other 3 answers
RELEVANCY SCORE 56.8

i've removed this 3 times and it seems to be gone now, but links sometimes redirect me to undesired sites. i dont know what to do. i can include HJT log...

Category: Trojan

Description: This program is dangerous and executes commands from an attacker.

Recommendation: Remove this software immediately.

Microsoft Security Essentials detected programs that may compromise your privacy or damage your computer. You can still access the files that these programs use without removing them (not recommended). To access these files, select the 'Allow' action and click 'Apply actions'. If this option is not available, log on as administrator or ask the local administrator for help.

Items:
file:C:\WINDOWS\system32\drivers\viqosvap.sys

A:occasional redirects

its back again and randomly disables my services such as firewall, ICS, etc. i reboot and all is good except for the redirects and trojan returns.

Read other 2 answers
RELEVANCY SCORE 56.4

Hello, I just bought this laptop and have noticed some issues while browsing the web occasionally:
The text becomes garbage in memory, I'm not sure if this is an issue with the intel or NVidia graphics driver, but I have the following versions:
Windows 10 Home 64 bit
Intel Driver: 20.19.15.4404
Nvidia Driver: 368.81 Release date 7/14/2016

Let me know if anyone else is seeing this and if there is a fix. Worse case is the video ram is overheating / going bad, but I hope this has a software fix as the laptop works fine everywhere else even when gaming

Read other answers
RELEVANCY SCORE 56.4

A small irritating issue I seem to be unable to find an explanation and possible solution.

Background:
The issue occurs at seemingly random intervals. When it occurs, it is the same using any of the household computers and / or browsers (Windows 7 & 8 using IE10 & 11 and Maxthon 3.5.2, Macs with 10.8 Mountain Lion and Safari, OpenSUSE Linux with Firefox) both with wired and wireless connection, clearly indicating that the issue has something to do either with the broadband subscription line or the router rather than an individual browser or computer. This is the reason I am posting here and not at Browsers & Mail section.

Problem description:
Occasionally all web pages open very slowly. It can take up to 10 even 15 seconds for the page to be found, and then again about 10 seconds for the page to open.
Sometimes this can last a day or two, sometimes just an hour. Now since last night everything OK, web and browsers fast. Yesterday when the issue was extremely bad this website took 36 seconds to fully load, now it takes 8 seconds.

VDSL 100 / 20 line, half dedicated to IPTV, computers thus sharing a 50 / 10 line. Router is Belkin AC 1200 DB Wi-Fi Dual-Band AC+ Gigabit.

Notice that when the issue occurs and the opening of various pages takes ages, all speedtests are still showing PINGs under 30 ms, DL over 40 Mbps and UL close to 10 Mbps. Ironically, for instance the Speedtest.net site can take over 40 seconds first to fully load, but then gives totally normal v... Read more

A:Router / subscriber line issue, occasional very slow browsing.

Make sure there isn't a sneaky guy stealing your wireless to torrent japanese tentacle porn or whatever. This article gives various possible ways to check.

Don't feel safe just because you don't see anyone around your home, good directional wireless equipment (or even decently-assembled makeshift one) can easily connect from a km or more from the access point/router/extender/whatever.

Other than that, for me similar stuff is relatively common as I live in a crappy place and my ISP serves a lot of people in my area (being the only one offering DSL), and sometimes there is simply too much traffic for them to handle. Or so they told me when I called them to know why.

Read other 4 answers
RELEVANCY SCORE 56.4

HiMy computer browsers (Chrome, IE, and Firefox) occasionally get redirected to advertising sites. Would you please assist with diagnosing the cause and instructing me on repair?I have followed your Preparation Guide. The DDS.txt log is copied below, and the DDS Attach.txt and GMER Ark.txt files are attached. Defogger indicated nothing needed to be turned off.Additional comments that you might find helpful:- After running GMER but before I pushed the button, I got a "blue screen of death". This had not happened in last six months. I was able to reboot, and I ran GMER again. This time I was quicker and got it saved, but got another blue screen of death. The data on the first blue screen was: Stop: 0x0000 00f4 (0x0000 0003, 0x873a b020, 0x873a b194, 0x805d 1658).- Was I supposed to have closed browsers while running GMER? I didn't ... was that a possible reason for the blue screen?- I have another computer on same home network router that may have a similar problem. Does this type of malware propagate across a network?- I keep Acronis backups of my c drive of each computer (and carefully keep all my data on other drives, so it is no problem to change out the c drive). I normally correct malware problems by going back to the last backup. However, this redirect problem seems to have started slowly without my really being aware of it ... i.e., on this computer, I have already reverted to the last backup, but found that I got redirects with it too! ... then reverted to ... Read more

A:Malware causes occasional redirects

Hi,Welcome to Bleeping Computer. My name is m0le and I will be helping you with your log.Please subscribe to this topic, if you haven't already. You can subscribe by clicking the Options box to the right of your topic title and selecting Track This Topic.Please avoid installing/uninstalling or updating any programs and attempting any unsupervised fixes or scans. This can make helping you impossible.Please reply to this post so I know you are there.The forum is busy and we need to have replies as soon as possible. If I haven't had a reply after 3 days I will bump the topic and if you do not reply by the following day after that then I will close the topic.Once I receive a reply then I will return with your first instructions.Thanks

Read other 43 answers
RELEVANCY SCORE 55.6

I use the word "Occasional", because it's not for ~all~ links, but always the same ones. The Trojan installed an Ask.com toolbar, and insists on disabling Windows Firewall / making Internet Explorer my default browser. Also noticed that one of the svchost programs (the one dealing with internet, apparently) is taking up far more memory than it usually does.

.
DDS (Ver_2011-06-12.02) - NTFSAMD64
Internet Explorer: 8.0.6001.19048 BrowserJavaVersion: 1.6.0_16
Run by Kajiri at 13:56:40 on 2011-06-19
AV: Windows Live OneCare *Enabled/Outdated* {2E6C4BAB-3371-CD46-62DC-0E0A86B42619}
SP: Windows Live OneCare *Enabled/Outdated* {950DAA4F-154B-C2C8-586C-3578FD336CA4}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Windows Live OneCare *Enabled* {1657CA8E-791E-CC1E-4983-A73F78676162}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MsMpEng.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\... Read more

A:Tracur & Occasional Google Redirects

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.Do not run any other tool untill instructed to do so!Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.Run Combofix:You may be asked to install or update the Recovery Console (Win XP Only) if this happens please allow it to do so (you will need to be connected to the internet for this)Before you run Combofix I will need you to turn off any security software you have running, If you do not know how to do this you can find out >here< or >here<Combofix may need to reboot your computer more than once to do its job this is normal.You can download Combofix from one of these links.Link 1Link 2Link 3 1. Close any open browsers or any other programs that are open.2. Close/disable all anti virus and anti malware programs so they do not interfere with the r... Read more

Read other 14 answers
RELEVANCY SCORE 55.6

Hi, thanks for reading!

I picked-up some sort of virus that causes pop-up advertising in the left and right corners of the browser. I am using IE8 and have Pop-ups blocked.

I ran Housecall to try to get rid of it to no avail. I am using Windows 7 Enterprise edition.

I can follow directions well and look forward to getting some help with this issue that has been plaguing me for a couple of months.

Kind regards,
Michael

A:Help please. Virus causes pop-up advertising in IE 8 and occasional redirects

Welcome aboard Download Security Check from HERE, and save it to your Desktop. * Double-click SecurityCheck.exe * Follow the onscreen instructions inside of the black box. * A Notepad document should open automatically called checkup.txt; please post the contents of that document.=============================================================================Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply.====================================================================================Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeClick Go and post the result.=============================================================================Download Malwarebytes' Anti-Malware (aka MBAM): http://www.malwarebytes.org/products/malwarebytes_free to your desktop. * Double-click mbam-setup.exe and follow the prompts to install the program. * At the end, be sure a checkmark is placed next t... Read more

Read other 16 answers
RELEVANCY SCORE 55.6

Occasionally when I click on links I am taken to a page other than the one I clicked on (Browser: Chrome). Also, when browsing many sites an ad in an iphone shaped box pops up on the bottom right corner along with an (x). If I click the (x), then I end up with a box saying "Recommended for you" on the bottom right corner. I am pasting below the DDS.txt file and I have attached the Attach.txt file. I did not run GMER because I have a 64-bit OS.

Thanks for all your help!!

.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_31
Run by Venkat at 23:14:04 on 2012-04-11
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.8140.4675 [GMT -7:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}
SP: Microsoft Security Essentials *Enabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe
C:\Windows\system32\svchost.exe -k RPCSS
c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.... Read more

A:Occasional Browser Redirects, "Recommended for You" ads

Hello and Welcome to Bleeping Computer!!My name is Gringo and I'll be glad to help you with your computer problems. I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of usPlease do not run any tools unless instructed to do so.
We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.
Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.
Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.
A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE:... Read more

Read other 12 answers
RELEVANCY SCORE 55.6

Hello,

Yep, I have been nabbed by that pesky popup (sponsored ads) in the bottom right hand corner of my desktop. A lot of times it looks like a iPhone, but mostly it takes on various shapes and sizes. I used to get redirects as well, but those seem to have faded since running Spybot. Any help is appreciated!

Thanks, Casey

A:Popups on bottom right with occasional redirects

DownloadTDSSkillerLaunch it.Click on change parameters-Select TDLFS file systemClick on "Scan".Please post the LOG report(log file should be in your C drive) Do not change the default options on scan resultsDownloadaswMBRLaunch it, allow it to download latest Avast! virus definitionsClick the "Scan" button to start scan.After scan finishes,click on Save logPost the log results hereDownloadESET online scannerInstall itClick on START,it should download the virus definitionsWhen scan gets completed,click on LIST of found threatsExport the list to desktop,copy the contents of the text file in your reply

Read other 5 answers
RELEVANCY SCORE 55.6

Apparently this has been going on for a while, but it's only been just brought to my attention that this computer's been infected. Symptoms, as far as we've seen, are pop-up windows in the default browser (Opera), redirects from Google links, and on multiple blue screens of death (I've yet to witness this, myself, and couldn't tell you what they say.) at startup, and then being perfectly fine when restarted.

It's a 64 bit computer, so as I understand it, I won't be able to use ComboFix.

In the GMER window, most checkboxes (From System-Libraries on the far right) are grayed out, and unchecked, so the log will be missing those. Sounds like it might be because it's 64 bit, too.

Apparently it's redirected to a clone of the Google page (with an altered URL), that was "something kinda like google.com/pbhpb". No idea how much store can be set in that recollection, though.

Anywho;
DDS (Ver_10-11-05.01) - NTFS_AMD64
Run by Me at 9:56:03.90 on Sat 11/06/2010
Internet Explorer: 8.0.7600.16385 BrowserJavaVersion: 1.6.0_18
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.1790.531 [GMT -7:00]

SP: Spybot - Search and Destroy *enabled* (Outdated) {ED588FAF-1B8F-43B4-ACA8-8E3C85DADBE9}
SP: SUPERAntiSpyware *enabled* (Updated) {222A897C-5018-402e-943F-7E7AC8560DA7}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\sy... Read more

A:Browser redirects, occasional BSoD

Hello , And to the Bleeping Computer Malware Removal Forum. My name is Elise and I'll be glad to help you with your computer problems.I will be working on your malware issues, this may or may not solve other issues you may have with your machine.Please note that whatever repairs we make, are for fixing your computer problems only and by no means should be used on another computer.The cleaning process is not instant. Logs can take some time to research, so please be patient with me. I know that you need your computer working as quickly as possible, and I will work hard to help see that happen. Please reply using the Add/Reply button in the lower right hand corner of your screen. Do not start a new topic. The logs that you post should be pasted directly into the reply. Only attach them if requested or if they do not fit into the post.Unfortunately, if I do not hear back from you within 5 days, I will be forced to close your topic. If you still need help after I have closed your topic, send me or a moderator a personal message with the address of the thread or feel free to create a new one.You may want to keep the link to this topic in your favorites. Alternatively, you can click the button at the top bar of this topic and Track this Topic, where you can choose email notifications. The topics you are tracking are shown here.-----------------------------------------------------------If you have since resolved the original problem you were having, we would appreciate you... Read more

Read other 13 answers
RELEVANCY SCORE 55.2

A couple of weeks ago I was hit by Koobface. I thought I'd removed it all (using Malwarebytes), but either it or something else is still persisting on my system. Two symptoms I'm seeing are redirection of my Google searches (only sometimes, though), and svchost.exe crashing every so often.

HijackThis log:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:06:29 AM, on 1/5/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\ClamWin\bin\ClamTray.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\NETGEAR\WG311v3\wlancfg5.exe
C:\WINDOWS\... Read more

A:Occasional search redirects, and svchost.exe crashes

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

Read other 16 answers
RELEVANCY SCORE 55.2

Hello all! This is what I have. Search engine redirect and on occasion when the link works and sends me to the actual site I searched for I'll get a new tab that opens up showing some kind of security software offer. I've installed everything to get rid of it but nothings worked. Please let me know what to do. Thanks

Wanted to add that Im not getting any error messages of any sort.

Carlos

A:Hello, I've got the search engine redirects with occasional popup as well

Please download Malwarebytes Anti-Malware and save it to your desktop.alternate download link 1alternate download link 2MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan.If an update is found, the program will automatically update itself. Press the OK button to close that box and continue.If you encounter any problems while downloading the definition updates, manually download them from here and just double-click on mbam-rules.exe to install.On the Scanner tab:Make sure the "Perform Quick Scan" option is selected.Then click on the Scan button.If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.When the scan is finished, a message box will say "The... Read more

Read other 1 answers
RELEVANCY SCORE 55.2

Hi guys,

I have read others experiencing similar problems on this forum but didn't want to replicate their solution just in case my problem is different in some way and I end up crashing my PC !

I run a few websites for myself and other clients and around 2 days ago discovered that one of them was redirecting visitors to another page that appeared to be blank but also seemed to be activating some java script. My hosting provider referred me to the htaccess files which had been hijacked and a roll back has now been done. However, ever since I am getting adverts sliding up either on the right bottom corner or left bottom corner as well as an occassional redirect.

Reading other forums there seems to be some similarity with "findgala" and "google-analytics-com" but at present I am finding it impossible to positively identify the culprit.

Here is my HijackThis log file (although I did get a system warning that "your system denied write access to the hosts files")

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 06:43:25, on 29/08/2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe
C:\Program Files (x86)\Panasonic\PHOTOfunSTUDIO 4.0 HD\AutoStartupService.... Read more

A:Annoying ads on bottom corners PLUS occasional redirects

Read other 7 answers
RELEVANCY SCORE 55.2

Hello all! This is what I have. Search engine redirect and on occasion when the link works and sends me to the actual site I searched for I'll get a new tab that opens up showing some kind of security software offer. I've installed everything to get rid of it but nothings worked. Please let me know what to do. Thanks

Carlos

A:Hello, I've got the search engine redirects with occasional popup as well

I'm sorry, I screwed up and posted this twice. Could you please delete this post.

Read other 1 answers
RELEVANCY SCORE 55.2

Hello i have currently experienced this problem and i don't know how to stop it. What happens is sometimes when i am on firefox a random popup comes up. It is not very often but it happens on websites like Google and websites i know that dont have popups. This problems also arose with the popups at the same time and that is sometimes i click a google link it redirects me to a random page. Some of these pages are free malware removal, shopping websites, and sometimes even yellow pages come up. I have experienced this for 2 days and have tried Super AntiSpyware and Malwarebytes with both saying i have no infections. I would appreciate any help as this is starting to irritate me.

A:Occasional Random Popups and Google Redirects

Can you post the logs from the scans performed with Malwarebytes and Super Anti-Spyware?

Read other 2 answers
RELEVANCY SCORE 55.2

Please disregard, sorry.  I got through it on my own, eventually.  This thread can be closed or deleted  (I'd do it, but can't figure out how.)
 
Windows XP machine, running IE8. 
 
I started noticing when entering a Google search in the search box in the upper right corner of IE8, the window immediately closes.  I can search Google by going to www.google.com, but sometimes that results in redirects. 
 
IE8 also closes randomly during other, non-Google activity.
 
I use Symantec Endpoint Protection for A/V (corporate-installed) and the "green dot" on the shield in the tray icon no longer shows up -- just the shield with no dot.  (Presumably SEP is partially disabled.)
 
I have run Malwarebytes Anti-Rootkit - it removed four items - 1 dll file and 3 registry entries, but I still have the issues described above.
I ran Malwarebyes Anti-Malware - it found no threats.
I ran TDSSKiller.exe - it removed one threat, but yet I still have the issues.
 
Any advice on what to try next would be greatly appreciated!

A:IE closes intermittently, occasional Google redirects

Closed per your request.

Read other 1 answers
RELEVANCY SCORE 55.2

I am getting pop-up ads in the bottom right of my browser window and occasional invisible ads in the bottom left. I also receive the rare link redirect. I have updated and ran complete scans with Malware-Bytes, Spybot S&D, and Avast! Anti-virus Free.

A:Pop-up ads in the bottom corners of my browser and occasional redirects

DownloadTDSSkillerLaunch it.Click on change parameters-Select TDLFS file systemClick on "Scan".Please post the LOG report(log file should be in your C drive) Do not change the default options on scan resultsDownloadaswMBRLaunch it, allow it to download latest Avast! virus definitionsClick the "Scan" button to start scan.After scan finishes,click on Save logPost the log results here.If you get crashes in normal mode,run it in safemode with networkingDownloadESET online scannerInstall itClick on START,it should download the virus definitionsWhen scan gets completed,click on LIST of found threatsExport the list to desktop,copy the contents of the text file in your reply

Read other 13 answers
RELEVANCY SCORE 55.2

In the "Am I infected with a redirect virus/trojan?" forum, I posted about how i found myself redirected to 62.122.74.109 when I clicked on a yahoo search result. BoopMe has been looking into this for me and after looking at some logs determined that I should move to this forum.

The link to that discussion is here:

http://www.bleepingcomputer.com/forums/topic431206.html/page__st__15__p__2508586#entry2508586

Boopme asked me for a dds.txt log and also gmer. The gmer was taking forever to run. It did finish overnight. I have included it below. I'm sending the dds.txt via private msg to boopme. I hate posting it here because it (like one of the other logs earlier) shows how much of a mess my computer is and how much junk on it I haven't cleaned up. I'm embarrassed!

Here is the gmer.log:

GMER 1.0.15.15641 - http://www.gmer.net
Rootkit scan 2011-12-15 06:36:07
Windows 5.1.2600 Service Pack 3 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3 TOSHIBA_MK1234GSX rev.AH001D
Running: gmer.exe; Driver: C:\DOCUME~1\regina\LOCALS~1\Temp\uxlyqpod.sys
---- System - GMER 1.0.15 ----

SSDT 8694F440 ZwAlertResumeThread
SSDT 867999F0 ZwAlertThread
SSDT 86F27A70 ... Read more

A:occasional strange yahoo/google redirects

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything. We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here. To help Bleeping Computer better assist you please perform the following steps:*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/432696 <<< CLICK THIS LINK If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.*************************************************** If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lo... Read more

Read other 2 answers
RELEVANCY SCORE 54.4

Hi,

Have been experiencing some problems with my computer. The anti virus programs I've used have recently picked up, and "cured" a variety of trojans - not entirely sure of the names now as this was a few days ago, but I'm fairly sure I saw one of them (Hitman Pro) pick up Sirefef. Have been experiencing a few symptoms of some form of virus. Most obviously, there are iexplore.exe processes being automatically started even though I don't use Internet Explorer, and also using google search results often redirects me to adverts. I'm also fairly sure my computer is running more slowly than usual. Have gone as far as I can with a variety of different malware/antivirus tools (mbam, hitman, superantispyware, mcafee), none of them find anything anymore but issues remain - would appreciate some help.

Thanks in advance

A:iexplore.exe Processes, Slow Computer, Occasional Redirects

DownloadTDSSkillerLaunch it.Click on change parameters-Select TDLFS file systemClick on "Scan".Please post the LOG report(log file should be in your C drive) Do not change the default options on scan resultsDownloadaswMBRLaunch it, allow it to download latest Avast! virus definitionsClick the "Scan" button to start scan.After scan finishes,click on Save logPost the log results hereDownloadESET online scannerInstall itClick on START,it should download the virus definitionsWhen scan gets completed,click on LIST of found threatsExport the list to desktop,copy the contents of the text file in your reply

Read other 6 answers
RELEVANCY SCORE 54.4

Good Afternoon,Over the past week I've noticed a variety of issues on my home computers for which I'm hoping somebody might have advice/solutions. Three laptops: -dual boot Win 7/Jolicloud (Ubuntu-derived OS) -dual boot Windows XP Pro/Ubuntu -Windows 7 64bit -I'm not entirely convinced our two rooted Android phones aren't involved as well. (I know this sounds strange, but the phones have been tethered and networked)Issues include: -interruption of network service -possible virtualization/logging of services -date changes on files -various .Net, .msi, .cab files sitting on C:\ -increased crashes and BSoD -accounts I don't recognize -USB flash drive issues -new browser add-ins (like Complitly) in Chrome -peer networking I didn't setup, etc.If somebody is up to the task, I'd at least like to clean and secure one laptop. If the systems have been exploited, I'd also appreciate advice on how to find out what -- if any information -- has been compromised/transmitted.DDS and GMER were both run following the instructions, I believe..DDS (Ver_2011-08-26.01) - NTFSx86 Internet Explorer: 9.0.8112.16421Run by rawr at 7:05:42 on 2011-12-06Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.2814.1213 [GMT -6:00].AV: Microsoft Security Essentials *Disabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}SP: Microsoft Security Essentials *Disabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831... Read more

A:Possible TDSS infection? Occasional redirects, compromised network, etc.

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything. We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here. To help Bleeping Computer better assist you please perform the following steps:*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/431290 <<< CLICK THIS LINK If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.*************************************************** If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lo... Read more

Read other 2 answers
RELEVANCY SCORE 54.4

Every link i click on in search engines redirects to some random sites and asks me to download some files. Have gotten 2 blue screens since that started happening.

.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 9.0.8112.16421
Run by admin at 8:38:23 on 2011-09-15
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.3892.2250 [GMT -4:00]
.
AV: Microsoft Security Essentials *Disabled/Outdated* {108DAC43-C256-20B7-BB05-914135DA5160}
SP: Microsoft Security Essentials *Disabled/Outdated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\ibmpmsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\WUDFHost.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\... Read more

A:Search engine redirects and occasional blue screen

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.Do not run any other tool untill instructed to do so!Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.Run Combofix:You may be asked to install or update the Recovery Console (Win XP Only) if this happens please allow it to do so (you will need to be connected to the internet for this)Before you run Combofix I will need you to turn off any security software you have running, If you do not know how to do this you can find out >here< or >here<Combofix may need to reboot your computer more than once to do its job this is normal.You can download Combofix from one of these links.Link 1Link 2Link 3 1. Close any open browsers or any other programs that are open.2. Close/disable all anti virus and anti malware programs so they do not interfere with the r... Read more

Read other 3 answers
RELEVANCY SCORE 54.4

When I use Google the search links redirect to other sites about 50% of the time and will go away and return without any obvious reason. I will click on the search result and be taken to a site like informationgetter.com, bcckools.com, "randomnumber".blueseek.com, etc. I am running Windows Vista Ultimate.

I've tried combofix, Avast, AVG, Ad-Aware, IObit, and Malwarebytes in both regular and safe modes. Below is my HJT log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:17:17 AM, on 12/4/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
C:\Program Files\PowerISO\PWRISOVM.EXE
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Apoint\Apoint.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\ACT\Act for Windows\Act.Outlook.Service.exe
C:\Program Files\IObit\IObit Security 360\is360tray.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Windows\System32\regsvr32.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Apoint\ApMsgFwd.exe
C:\Windows\ehome\ehmsas.exe
C... Read more

A:Occasional Redirects to other Sites from Google Search Links

Read other 6 answers
RELEVANCY SCORE 54.4

I started getting some random link redirects in the latest Firefox (with Adblock Plus and NoScript) and Opera browsers to sites like "askthecrew.net" as well as others which I cannot recall. It's occasional and doesn't seem to be website specific. I'm not sure if it's related but not long after noticing the redirects my Windows User Account control settings were reset from never notify to default. I had NOD32 version 4 installed and ran a scan which found malicious java files in the temporary folder. I uninstalled NOD32 and installed the latest version of Kaspersky Internet Security, yet some time later I started getting the same occasional redirects with no malicious files detected in a scan but with at least some of the malicious links blocked by Kaspersky. As an example some of the links appear as xx.xxx.xxx.xxx.com/favicon.ico.

I have run Malwarebytes, TDSSkiller, TFC, aswMBR, and few of the online scan tools with no results.

A:Occasional link redirects to random sites such as "askthecrew.net"

Download Security Check from HERE, and save it to your Desktop. * Double-click SecurityCheck.exe * Follow the onscreen instructions inside of the black box. * A Notepad document should open automatically called checkup.txt; please post the contents of that document.=============================================================================Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply.====================================================================================Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeClick Go and post the result.=============================================================================Download Malwarebytes' Anti-Malware (aka MBAM): http://www.malwarebytes.org/products/malwarebytes_free to your desktop. * Double-click mbam-setup.exe and follow the prompts to install the program. * At the end, be sure a checkmark is placed next to Update Malwar... Read more

Read other 15 answers
RELEVANCY SCORE 54

Hi,

I've been getting frequent redirects with Google and Firefox (the latter has since been removed), new window pop-ups and slowing performance that occasionally ends in a complete freeze-up (unrelated to the current -14C outside). Add to that my desktop icons are sometimes AWOL, and I'm about to get out my slide-rule. I've run Malware, AVG, Glary Utilities and nothing comes up.

I've attached my DDS and GMER logs below. Any thoughts, insight, or suggestions to put the machine out in the -14C are all appreciated.

Thanks,
Edna B.

DDS (Ver_10-12-12.02) - NTFSx86
Run by Heather White at 21:17:35.83 on 23/02/2011
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Professional 5.1.2600.3.1252.2.1033.18.2550.1826 [GMT -8:00]

FW: Norton Internet Worm Protection *Disabled*

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\Program Files\AVG\AVG10\avgwdsvc.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\system32\h... Read more

A:Google redirects, pop ups, occasional icon-free desktop AND freeze-ups

Hello and welcome to the forums!My secret agent name on the forums is SweetTech (you can call me ST for short), it's a pleasure to meet you. I would be glad to take a look at your log and help you with solving any malware problems.If you have since resolved the issues you were originally experiencing, or have received help elsewhere, please inform me so that this topic can be closed. If you have not, please adhere to the guidelines below and then follow instructions as outlined further below:Logs from malware removal programs (OTL is one of them) can take some time to analyze. I need you to be patient while I analyze any logs you post. Please remember, I am a volunteer, and I do have a life outside of these forums.Please make sure to carefully read any instruction that I give you. Attention to detail is important! Since I cannot see or directly interact with your computer I am dependent on you to "be my eyes" and provide as much information as you can regarding the current state of your computer.If you're not sure, or if something unexpected happens, do NOT continue! Stop and ask!In Windows Vista and Windows 7, all tools need to be started by right clicking and selecting Run as Administrator!These instructions have been specifically tailored to your computer and the issues you are experiencing with your computer. It's important to note that these instructions are not suitable for any other computer, even if the issu... Read more

Read other 12 answers
RELEVANCY SCORE 54

I started a topic in the virus/malware section but the problem could not be solved there and was suggested to remake the thread here.

Basically Windows starts up with the WSC disabled, flagged in the Action Centre taskbar icon, when clicked to start it up a popup shows that the "service can't be started". Within Services.msc changing it start up automatically and starting the process turns it on for less than 1 min before disabling itself and when trying to start it again gives an "Error: 1058".

Also have a Google redirect problem which is intermittent - sometimes happens, sometimes not. The programs in the malware/virus forum thread below (or listed below) is what I have tried and failed to pick up any threats and therefore failed to remove any possible virus/malware causing the redirects.

http://www.bleepingcomputer.com/forums/topic447742.html shows what I have tried to fix the problems but to summarise the programs used... FixTDSS, aswMBR, GooredFix, ComboFix, TDSSKiller as well as some general settings within Win 7 - registry edit, services.msc, Locals and User Groups Manager.

As you can see lots of different things have been tried and unhelpful so any extra help would be greatly appreciated in resolving the matter. Thanks in advance.

A:Windows Security Centre cannot be started/Occasional Google redirects

When you attempt to start a service manually, you may receive the following error message: Error 1058: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it. For Windows 7 and Windows Vista, follow these steps:1.Click the Start button, then type Services in the Search box.2.Click Services in the results pane.3.Scroll through the list until you find the service that is stopped or disabled.4.Click the Log On As tab.5.If the service is listed as disabled for your profile, right click the service, then click Properties.6.Click the Startup type dropdown list and choose Automatic, the click Apply, then OK.

Read other 7 answers
RELEVANCY SCORE 50.4

I'm actually cleaning this laptop up for a friend. She had a number of viruses that were found and removed with AVG9, Spybot, and Malwarebytes. It looks like I've got one last piece to get. I'm not sure what is causing it, but, something is redirecting Internet traffic. Gambling sites, web searches, and porn sites appear randomly when I try to visit sites.Here's the Hijackthis log:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 9:22:14 PM, on 12/7/2009Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\AVG\AVG9\avgchsvx.exeC:\Program Files\AVG\AVG9\avgrsx.exeC:\Program Files\AVG\AVG9\avgcsrvx.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\ehome\ehtray.exeC:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exeC:\WINDOWS\system32\RUNDLL32.EXEC:\Program Files\Synaptics\SynTP\SynTPEnh.exeC:\Program Files\HP\QuickPlay\QPService.exeC:\Program Files\Common Files\InstallShield\UpdateService ... Read more

A:Web browsing redirects

Bump.

Read other 3 answers
RELEVANCY SCORE 49.6

Hello all:I have aquired a bit of a problem, similar to Cool Web Search (I think). All of my browsers redirect to shopping sites and will prevent me fom updating all spyware software or even accessing a spyware software site (e.g., Lavasoft.com). I have tried many programs Adaware, Spybot S&D plus many others. I have run out of ideas. Any available help is greatly appreciated.Attached is a log.ThanksDaveLogfile of Trend Micro HijackThis v2.0.2Scan saved at 7:59:39 PM, on 9/28/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16705)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\csrss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Intel\Wireless\Bin\EvtEng.exeC:\Program Files\Intel\Wireless\Bin\S24EvMon.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Lavasoft\Ad-Aware\aawservice.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exeC:\WINDOWS\system32\DVDRAMSV.exeC:&... Read more

A:Web Browsing Redirects (log Posted)

Hello davenict,

Welcome to Bleeping Computer

Sorry about the delay. If you still need help, please post a new HijackThis log to make sure nothing has changed, and I'll be happy to look at it for you.

Thanks,
tea

Read other 2 answers
RELEVANCY SCORE 49.6

This might be one or two problems. If two unrelated probs, will start another thread elsewhere.

Direct number dialup

Cannot open web pages in IE7. Gets to the page, but won't open my google.com setup home page. Fox (3.5.2) opens fine and can browse.


usb pen network
Network connection is fine. Cannot open IE7 (same as above) or Fx to be able to browse the web (This might be a separate subject>>don't know).

Ran a HijackThis log. Found about nine (9) redirects in registry key log (more registry keys with potential probs existed, based on google search).
One example: http://ie.redirect.hp.com/svs/rdr?TY...ion&pf=desktop >>SEE DDS LOG<<

Thanks for the help in advance. Diligent.

P.S. I have also downloaded the combofix exe.

DDS.txt

DDS (Ver_09-07-30.01) - NTFSx86
Run by HP_Owner at 11:15:33.15 on Thu 09/03/2009
Internet Explorer: 6.0.2900.5512 BrowserJavaVersion: 1.6.0_15
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.503.113 [GMT -7:00]

AV: COMODO Antivirus *On-access scanning enabled* (Updated) {043803A5-4F86-4ef7-AFC5-F6E02A79969B}
FW: COMODO Firewall *enabled* {043803A3-4F86-4ef6-AFC5-F6E02A79969B}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
C:\WINDOWS\syst... Read more

Read other answers
RELEVANCY SCORE 49.2

Hi, I have picked up some kind of virus that has been redirecting me web browser the odd sites (often when I use back/forward on browser - but not exclusively sometimes also does it when I just click a googled link)

I have received lots of help on here from quietman7 who went through a number of attempts to resolve this issue for me, unfortuantely to no avail. The thread with the different things we tried is here:

http://www.bleepingcomputer.com/forums/topic364996.html

He explained it looks like a rootkit (no idea?!! lol) that is proving particularly difficult to shift and explained I need to post here and wait for help. I followed the preparation steps and post here the DDS logs for you to check over.

Please bear with me if Im a bit slow or clueless I really will try my best but often the instructions are like a foreign language to me! I apologise in advance!

Thank you in advance for your help - I really am so grateful for any assistance

DDS (Ver_10-12-05.01) - NTFSx86
Run by kyra at 21:20:41.63 on 09/12/2010
Internet Explorer: 8.0.7600.16385
Microsoft Windows 7 Ultimate 6.1.7600.0.1252.44.1033.18.896.402 [GMT 0:00]

SP: SUPERAntiSpyware *disabled* (Updated) {222A897C-5018-402e-943F-7E7AC8560DA7}

============== Running Processes ===============

C:\PROGRA~1\AVG\AVG10\avgchsvx.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
... Read more

A:IE redirects when web browsing please halp a technophobe!

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the ... Read more

Read other 33 answers
RELEVANCY SCORE 49.2

Browsing using google chrome I get redirected to websites like tradeexchange.com randomly and websites telling me to call numbers to clear infection. It may be an hour or may be a few minutes into my browsing I don't know, seems independent of the site I'm currently on.
 
 
 
 
 
 
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:25-08-2015 02
Ran by rshih (administrator) on BOOSBO (25-08-2015 14:20:21)
Running from C:\Users\rshih\Desktop
Loaded Profiles: rshih & Guest &  (Available Profiles: rshih & Guest)
Platform: Windows 8.1 Pro (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(cFos Software GmbH) C:\Program Files\ASRock... Read more

Read other answers
RELEVANCY SCORE 48.8

Hello. I just wanted to give a quick rundown of what issues I am having, as well as note a few problems during the recommended procedure for posting here. First, I did not run GMER as I am running a 64-bit OS. Second, I have been having occasional browser redirects. It does not seem to have any restriction as to where it will happen. From League of Legends forums, to bleeping computer forums, to google searches. It can and does happen at random fairly frequently (maybe once every 10-15 minutes when browsing the internet).

The white box is actually up on my browser screen as I type this post. It will typically only show up on forum type sites from what I have seen. It will say "Recommended for You" and have an 'x' in the upper right corner. When clicked, it just shrinks down to the "Recommended for You" box again.

I have included the dds.txt copy/paste below, as well as attached the attach.txt to this post. You guys are awesome, looking forward to hearing from you.

.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 8.0.7601.17514 BrowserJavaVersion: 1.6.0_30
Run by Matt at 9:14:58 on 2012-04-10
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.4095.2864 [GMT -7:00]
.
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.e... Read more

A:Sirefef Infection, Occasional Browser Redirects, White "Recommended for You" box in bottom right corner of browser.

Also just wanted to clarify the Sirefef infection types as they were listed in previous steps taken for the person assisting me before.

They are:

22:06:30.428 File: C:\Windows\assembly\GAC_32\Desktop.ini **INFECTED** Win32:Sirefef-FQ [Drp]
22:06:32.321 File: C:\Windows\assembly\GAC_64\Desktop.ini **INFECTED** Win32:Sirefef-HO [Rtk]

Read other 32 answers
RELEVANCY SCORE 48.4

Can someone look at this log and give me some advise

Thanks
Smitty

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:34:40 AM, on 11/17/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17091)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\PROGRA~1\AVG\AVG10\avgchsvx.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Brother\ControlCenter3\brccMCtl.exe
C:\Program Files\AVG\AVG10\avgtray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
C:\Program Files\Brother\Brmfcmon\BrMfcmon.exe
C:\Program Files\AVG\AVG10\Identity Protection\agent\bin\avgidsmonitor.exe
C:\Program Files\AVG\AVG10\avgwdsvc.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe
C:\Program Files\AVG\AVG10\avgnsx.exe
C:\Program Files\AVG\AVG10\avgemcx.exe
C:\PROGRA~1\AVG\AVG10\avgrsx.exe
C:\Program Files\AVG\AVG10\avgcsrvx.exe
C:\WINDOWS\System32\mshta.exe
C:\WINDOWS\system32\m... Read more

A:Somethings wrong, Redirects amd slow browsing

Read other 16 answers
RELEVANCY SCORE 48.4

I recently noticed that my browsing (ie, FF) (google won't even connect) was being redirected to random pages. My installed virus scanner has found nothing. So I installed Avast and it found win32:bamital-x on explorer.exe and winlogin.exe. And of course it cannot repair these system files. No other items have been found. Have since disconnected the system from the internet and using a USB drive to pass log files from it.What annoys me is that I am typically uber-safe when browsing. Sucks to be me.GMER keeps locking up on me. I will post it when I have it if this is important.

A:Infected with Win32:BAMITAL-X/browsing redirects

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.In the upper right hand corner of the topic you will see a button called Options. If you click on this in the drop-down menu you can choose Track this topic. By doing this and then choosing Immediate E-Mail notification and then clicking on Proceed you will be advised when we respond to your topic and facilitate the cleaning of your machine.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.Double click DeFogger to run the tool. The ap... Read more

Read other 37 answers
RELEVANCY SCORE 48.4

Hi, my name is Jacob and Google on all accounts on my computer keeps redirecting. I have tried many things, Setting proxy settings to not use a proxy server, Malwarebytes anti-Malware, Sunbelt Vipre, CCleaner, TDSSKiller, I even flushed my DNS Caches but nothing worked, google keeps redirecting and the proxy settings keep going back to using a proxy server.
Here are my logs
DDS (Ver_2011-07-14.01) - NTFS_x86
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_26
Run by jacob admin at 0:06:36 on 2011-07-14
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3327.2520 [GMT -4:00]
.
AV: Sunbelt VIPRE *Enabled/Outdated* {964FCE60-0B18-4D30-ADD6-EB178909041C}
.
============== Running Processes ================
.
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Phantombility\Phantom CD\pcdservice.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\Program Files\Sunbelt Software\VIPRE\SBAMSvc.exe
C:\Program Files\Sunbelt Software\VIPRE\SBPIMSvc.exe
C:\Program Files\Secunia\PSI\PSIA.exe
C:\... Read more

A:Have TDSS and Google redirects, occasional popup (probably associated with the TDSS)

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

Read other 18 answers
RELEVANCY SCORE 48

I have a new computer with windows 8.1 and whenever I click on anything on my home page, a new tab opens trying to get me to download software.  Sometimes it is difficult to close the new tab because it keeps redirecting to other new tabs.  It is probably my fault that this is happening because when it first happened, the new tab page looked like a valid link to software that my computer needed so I clicked and it downloaded software that I found out later I did not want or need.  Now I can't seem to stop the constant redirects and new tabs from opening.  Any help would be appreciated.

A:constant redirects and new tabs opening when browsing internet

Welcome aboard   Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2. SecurityCheck may produce some false warning(s), so leave the results reading to me.NOTE 3. If you receive UNSUPPORTED OPERATING SYSTEM! ABORTED! message restart computer and Security Check should run Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeList Restore PointsClick Go and post the result. Please download Malwarebytes Anti-Malware to your desktop.NOTE. If you already have MBAM 2.0 installed scroll dow... Read more

Read other 11 answers
RELEVANCY SCORE 47.6

Okay, so most times when I do a search on Google, the results I click redirect me to things like Bestofyoutube.Mevio.com, or Satan.IsYourFriend.com, and stuff like that. What's more, even if I'm not browsing, I get these popups any time I'm connected to the Internet. I also hear the Windows Asterisk chime randomly, with nothing appearing in my browsing history or anything. This sounds like it might be something in the background happening. I also get lone Message Boxes from time to time without any page, the kind that usually come from popup ad pages. As though the page had loaded somewhere in the background, but the Message Box still came up. This smells like a rootkit.I first noticed this problem the morning of March 27th. Tried to fix it, the things I tried never ran to completion. TDSS Killer won't even pop up. MalwareBytes worked, but I don't think it's strong enough to fix it. Tried ComboFix, but that too wouldn't run to completion. It ran far enough to confirm my suspicions that I am infected with Rootkit.ZeroAccess. But after a while, it freezes up and does nothing for hours.It also said that the Zero Access Rootkit was embedded directly in the TCP/IP stack. Is there any going back from there? I heard Bleeping Computer was able to fix this same kind of problem before, with a Zero Access Rootkit embedded in the TCP/IP stack.Anyway, perhaps because of this rootkit, I couldn't run DDS to completion, so I don't have that log. GMER would... Read more

A:Getting random popups and search redirects even when I'm not browsing. Probably Rootkit.ZeroAccess.

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything. We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here. To help Bleeping Computer better assist you please perform the following steps:*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/448426 <<< CLICK THIS LINK If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.*************************************************** If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lo... Read more

Read other answers
RELEVANCY SCORE 43.2

Hi folks,

Thought I may need to start a new thread, I noticed other threads have similar issues to what I'm seeing and didn't want to confuse by re-posting in the same thread.

I have Windows 7 Enterprise and just started having many random windows blue screens. I think it started as soon as I tried to run a trainer for a game Company of Heroes, since McAfee said it was a trojan and I tried to restore it after seeing online by other folks that the file was legit.

Anyway, since then I think, i started to see many BSoDs, not always the same BSoD message and they would occur during normal windows usage, a few times in Safe mode with networking. But most of the time, usually within 5 to 30min of running normally.

Anyways, I ran the McAfee virusscan and it found a few viruses, also ran spybot and malware bytes, and Stinger. I ran them from safe mode and was able to clean out the affected files.

I still see fewer BSoDs, but mainly now my google chrome browser won't work. I've tried uninstall/reinstall and every time I load it, it never works. sometimes freezes and I have to do a hard power off/on on my laptop. I have a lenovo w510.

Other problems is that my windows randomly freezes. Also, so far I can use Internet Explorer and Firefox, not able to install Opera. But when using Firefox or IE, i sometimes get random redirects.

I have ran hijackthis and can provide the log file. I can also provide the windows minidump files.

Please help! I greatly appreciate... Read more

A:Windows 7 - malware, random BSoDs, browsing redirects, random freezes

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

Read other 3 answers
RELEVANCY SCORE 34.8

Hi:

My computer is brand new out of the box couple days ago. Bought it because my other machine was atacked by malware. I did not download anything from old machine onto new. I did go to my aol email account and signed in. Imediately after this new machine is redirecting google searches, randomly, and also seems to redirect the second I try to sign on to my aol email.

Here are my highjackthis logs. Please advise and help!
The highjackthis scan also says: 'YOUR SYSTEM DENIED ACCESS TO THE WRITE FILE". Wants me to do something about this myself.
I am a newbie and know nothing.

Thank you,

A

A:Search Redirects, Random redirects, AOL email sign on highjack

Hello , And to the Bleeping Computer Malware Removal Forum. My name is Elise and I'll be glad to help you with your computer problems.I will be working on your malware issues, this may or may not solve other issues you may have with your machine.Please note that whatever repairs we make, are for fixing your computer problems only and by no means should be used on another computer.The cleaning process is not instant. Logs can take some time to research, so please be patient with me. I know that you need your computer working as quickly as possible, and I will work hard to help see that happen. Please reply using the Add/Reply button in the lower right hand corner of your screen. Do not start a new topic. The logs that you post should be pasted directly into the reply. Only attach them if requested or if they do not fit into the post.Unfortunately, if I do not hear back from you within 5 days, I will be forced to close your topic. If you still need help after I have closed your topic, send me or a moderator a personal message with the address of the thread or feel free to create a new one.You may want to keep the link to this topic in your favorites. Alternatively, you can click the button at the top bar of this topic and Track this Topic, where you can choose email notifications. The topics you are tracking are shown here.-----------------------------------------------------------If you have since resolved the original problem you were having, we would appreciate you... Read more

Read other 2 answers
RELEVANCY SCORE 34.4

I am hoping someone can help.I stupidly clicked to install some codec to get a video to run and then it asked me to install freshplay. either or both messed up the computer. Now, I cannot get IE7 to load (it flashes on the screen for a second then closes) and Google's Chrome browser will redirect after a few seconds of getting to the webpage I want. I assume there is some DNS problem too since Orb is not able to connect, I tried to install and run AVG and it can't connect to update (Malwarebytes can't connect to update either, but I installed the most current version from another computer) and Spybot won't run at all either after a successful install. I also just noticed my clock in the lower right hand corner has been set to 24 hour time rather than 12 hour time...Here was my first Malwarebytes run:Malwarebytes' Anti-Malware 1.34Database version: 1749Windows 5.1.2600 Service Pack 32/13/2009 9:10:40 PMmbam-log-2009-02-13 (21-10-40).txtScan type: Full Scan (C:\|)Objects scanned: 174278Time elapsed: 31 minute(s), 50 second(s)Memory Processes Infected: 0Memory Modules Infected: 0Registry Keys Infected: 0Registry Values Infected: 0Registry Data Items Infected: 4Folders Infected: 1Files Infected: 3Memory Processes Infected:(No malicious items detected)Memory Modules Infected:(No malicious items detected)Registry Keys Infected:(No malicious items detected)Registry Values Infected:(No malicious items detected)Registry Data Items Infected:HKEY_LOCAL_MACHINE\SYSTEM\Curr... Read more

A:freshplay/dns redirects-can't run IE7, Chrome redirects, can't load AV updates

Please delete, problem solved

Read other 2 answers
RELEVANCY SCORE 33.6

Any Google result sends me off to anti-virus software sites (probably fake). In addition when I try an access a security site like TrendMicro or BleepingComputer this also sends me off to these anti-virus (fake) sites. Here is the HiJack 2.0.2 log (hope I'm doing this correctly)Logfile of Trend Micro HijackThis v2.0.2Scan saved at 6:10:59 PM, on 1/27/2009Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exeC:\WINDOWS\system32\inetsrv\inetinfo.exeC:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXEC:\Program Files\Trend Micro\Internet Security\SfCtlCom.exeC:\Program Files\Java\jre1.6.0_05\bin\jusched.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\stsystra.exeC:\Program Files\Del... Read more

A:Google Redirects and Security Site Redirects

Hello, OverSixtyToo to BleepingComputer.comMy name is Billy O'Neal and I will be helping you. (Billy or Bill is fine, if you like.)Please give me some time to look over your computer's log(s).Please take note of the following:In the meantime, please refrain from making any changes to your computer.Also, even if things appear to be running better, there is no guarantee that everything is finished. Please continue to check this forum post in order to ensure we get your system completely clean. We do not want to clean you part-way up, only to have the system re-infect itself. If you do not understand any step(s) provided, please do not hesitate to ask before continuing. I would much rather clarify instructions or explain them differently than have something important broken.Finally, please reply using the button in the lower left hand corner of your screen.We need to run a Scan with DDSPlease download DDS, and save it to your desktop, from one of the following mirrors:This is a mirrorThis is another mirrorDisable any type of "Script Blockers" or "Script Protection" installed on your system.Double click on your desktop.If prompted by any script blocking tools, please allow any actions taken by DDS.Two reports will open. Please reply with the generated reports:DDS.txt <-- Copy and paste into your next postAttach.txt <-- Attach to your next postWe need to scan for Rootkits with GMERPlease download GMER from one of the following mirrors:This is the Primar... Read more

Read other 2 answers
RELEVANCY SCORE 33.6

Hi,

Here's the symptoms that I'm seeing need some help.

1)Using Internet Explorer - Enter a URL and instead of going to the site it's redirected
2)Google Search - Clicking on Suggested Links the Browser will redirect
Noted Redirect Sites: happili.com, mevioe.com and flyrry.com and other unwanted sites.
3)No Longer able to connect to windowsupdate.microsoft.com or access the windows update site directly from www.microsoft.com

Ran Malwarebytes with latest definintions comes up clean
Ran Ad-Aware with latest Definintions comes up clean
Running AVG scans reports clean

Note: In the Following Requested Logs you may notice the process Teamviewer I'm Aware that this is a Remote Control Software as Me (The person posting this) is helping a friend who lives to far away to actually work directly from their PC. Wanted to point this out.

Before Running hijackthis, DDS and GMER I disabled the AVG processes so that the Antivirus Engine wouldn't interfer with these scans.

Requested Logs

####### DDS ##########
.
DDS (Ver_11-03-05.01) - NTFSx86
Run by Jen at 23:58:43.82 on Fri 03/04/2011
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1022.530 [GMT -5:00]
.
AV: AVG Anti-Virus Free *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
AV: Lavasoft Ad-Watch Live! Anti-Virus *Disabled/Updated* {A1C4F2E0-7FDE-4917-AFAE-013EFC3EDE33}
AV: Internet Antivirus 2011 *Enabled/Updated* {DD66DA46-1A1C-43D7-B787-8D5FA72... Read more

A:Browser Redirects, Google Search Redirects

Hello and welcome to the forums!My secret agent name on the forums is SweetTech (you can call me ST for short), it's a pleasure to meet you. I would be glad to take a look at your log and help you with solving any malware problems.If you have since resolved the issues you were originally experiencing, or have received help elsewhere, please inform me so that this topic can be closed. If you have not, please adhere to the guidelines below and then follow instructions as outlined further below:Logs from malware removal programs (OTL is one of them) can take some time to analyze. I need you to be patient while I analyze any logs you post. Please remember, I am a volunteer, and I do have a life outside of these forums.Please make sure to carefully read any instruction that I give you. Attention to detail is important! Since I cannot see or directly interact with your computer I am dependent on you to "be my eyes" and provide as much information as you can regarding the current state of your computer.If you're not sure, or if something unexpected happens, do NOT continue! Stop and ask!In Windows Vista and Windows 7, all tools need to be started by right clicking and selecting Run as Administrator!These instructions have been specifically tailored to your computer and the issues you are experiencing with your computer. It's important to note that these instructions are not suitable for any other computer, even if the issu... Read more

Read other 18 answers
RELEVANCY SCORE 33.6

Okay,For the past 4 days I have been trying to get rid of malware that redirects my searches. It redirects searches links from google, yahoo, ding, etc. It may also be turning off my MacAfee when MacAfee updates at night. I have done all steps to cleaning this up as according to several forums I have seen posted. I'm running on an older hp that I have upgraded with more RAM, etc over the years. I run on XP. I need to try to keep this computer running for the next 6 months until I'm done with school, then I'm tossing this an buying new. Here is what I have done:updated Javaupdated Adoberun CC cleanerturned off real time scan on MacAfeerun malbytes anti-malware scanrun super anti-spy warerun hijack thisI just finished a full scan of MacAfee and it comes up clean.This is the last log from hijack this. Is there still something in here I should delete?Please help.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 4:05:41 PM, on 1/1/2010Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\csrss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS&#... Read more

A:search engine redirects, website redirects

Hi,Sorry for delayed response. Forums have been really busy. If you still need help with this do following, please.Download DDS and save it to your desktop from here or here or here.Disable any script blocker, and then double click dds.scr to run the tool. When done, DDS will open two (2) logs: DDS.txt Attach.txtSave both reports to your desktop. Post them back to your topic.Download GMER here by clicking download exe -button and then saving it your desktop:Double-click .exe that you downloadedClick rootkit-tab and then scan.Don't check
Show All
box while scanning in progress!When scanning is ready, click Copy.This copies log to clipboardPost log in your reply.

Read other 2 answers
RELEVANCY SCORE 33.6

Lately I have been suffering occasional hic-ups while playing games. At first it didn't annoy me so much but in Battlefield 2142 I constantly get thrown of servers when enduring such hic-up.

The problem is that while playing a game (NFS:MW, CSS, BF2142, WOW, ..) the pc suddenly freezes and the sound constantly repeats itself. This usually goes on for about 30seconds (roughly guessed). The funny thing is, this only happens once during the entire game. I never know when my pc will freeze for 30seconds, but once it's over it doesn't come back unless I shut the game down and start it up again or when I play another game.

Things I've tested:
- I have installed different drivers but the problem still occurs
- My DirectX is fully up to date
- I cleaned my entire computer (meaning I removed the dust inside of it)
- Cleaned my harddrives (as in remove useless crap and broken registery keys), and also defragmented my main harddrive

My system is as follows:
Processor: AMD Athlon 64 3500+ Venice (S939, 2.2GHz, 512KB, 400MHz Bus, 67W, Boxed)

CPU-Cooling: Zalman CNPS7700-Cu

Motherboard: Asus A8N-E, nForce 4 Ultra (Sound, LAN, SATA-RAID)

Ram: 2*512MB Kingston Valueram CL3

Graphics card: AOpen GeForce 7800 GT 256MB DDR3 256b (PCI-e, 2x DVI-I) Aeolus 7800GT-DVD256

Hard-drives:
- Western Digital Caviar SE16 WD2500KS, 250GB (7200rpm, SATA II, 16MB)
- Western Digital Caviar RE WD1600SD, 160GB (7200rpm, SATA, 8MB)
- Maxtor DiamondMax 10, 160GB (... Read more

A:Occasional hic-ups

Google and get memtest and test your ram for at least 8 passes!!!!

Get speedfan from the downloads section and use it to monitor things for a while!!!!

It could also be caused bu malware so i recommend you read this - http://www.techspot.com/vb/topic50981.html - and follow the instructions carefully!!!!


Hopefully something in that lot will help!!!!
 

Read other 4 answers
RELEVANCY SCORE 33.6

Hello and a big thanks for being here. I seem to have a problem with an occasional pop up which advertises similar subject matter to either what I'm searching/viewing or Googling. The text at the top left of the window says "Ads served by Adssite".I've updated and ran, Adware 2007, A-squared,AVG virus and spyware, spybot which found various things and fixed them, then ran Trend micro Housecall and Stinger which didn't find anything. I'd be grateful for someone to look at my HJT log and for some advice.Thank you in advance.....Logfile of Trend Micro HijackThis v2.0.2Scan saved at 12:50:26 PM, on 10/19/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16544)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\ZoneLabs\vsmon.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\a-squared Free\a2service.exeC:\Program Files\Common Files\Autodata Limited Shared\Service\ADCDLicSvc.exeC:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exeC:\PROGRA~1\Gris... Read more

A:Occasional Pop Up

Hello again, I've edited this because I thought the problem was resolved and asked for the topic to be closed, I jumped the gun a bit as the pop up is still there, I've posted a new HJT Log..Logfile of Trend Micro HijackThis v2.0.2Scan saved at 4:02:47 PM, on 10/21/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16544)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\ZoneLabs\vsmon.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\a-squared Free\a2service.exeC:\Program Files\Common Files\Autodata Limited Shared\Service\ADCDLicSvc.exeC:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exeC:\Program Files\Common Files\LightScribe\LSSrvc.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\wscntfy.exeC:\WINDOWS\System32\hkcm... Read more

Read other 17 answers
RELEVANCY SCORE 33.2

After receiving the upgrade pack from HP
i installed it immediately
i was vary happy for the first few days because windows 7 definitely works better on my laptop
however after two weeks i discovered a problem
whenever i press shut down, restart (any options that involve logging out"
there is a 25% chance that the log off process takes more than 7 minutes or longer
and everytime i have to press the power button in order to shut down the laptop
my computer is the compaq pavillion cq 61
core 2 duo T6400 2.00GHZ
4.0GB ddr2 ram
nvidia geforce 103m
sorry for my bad english/grammar
i am not a native speaker

A:occasional log out problem

  
Quote: Originally Posted by noobish noob


After receiving the upgrade pack from HP
i installed it immediately
i was vary happy for the first few days because windows 7 definitely works better on my laptop
however after two weeks i discovered a problem
whenever i press shut down, restart (any options that involve logging out"
there is a 25% chance that the log off process takes more than 7 minutes or longer
and everytime i have to press the power button in order to shut down the laptop
my computer is the compaq pavillion cq 61
core 2 duo T6400 2.00GHZ
4.0GB ddr2 ram
nvidia geforce 103m
sorry for my bad english/grammar
i am not a native speaker


Can you check the event viewer and see if any events at logoff are throwing critical errors?

Start->Type in "Event Viewer"->Look for criticals

Read other 2 answers