Over 1 million tech questions and answers.

Sponsored links in Google with Firefox [Moved]

Q: Sponsored links in Google with Firefox [Moved]

Hi
In response to Dan's (dtae) posting entitled "sponsored links" on left in Firefox" I too have just got this infuriating problem.
The sponsored links on the left are not solely Google related nor it would seem solely Firefox related!!!
In Firefox the left links are present in a Google or Yahoo search.
They are not present when using IE or Safari.
However, they are also NOT present in Firefox when using the Google related search 'Locate Me'.
I have also run 'CustomizeGoogle' in Firefox and this does not touch these particular links.
I have run various malware scans and nothing has been thrown up. Nor has my constantly running PCGuard found anything!
I will keep an eye on Dan's posting and hope the above info will help.

BB

RELEVANCY SCORE 200
Preferred Solution: Sponsored links in Google with Firefox [Moved]

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

A: Sponsored links in Google with Firefox [Moved]

As no logs have been posted, I am shifting this topic from the specialized HiJack This forum to the Am I Infected forum.==>PLEASE DO NOT NOW POST LOGS<== unless a log is specifically requested.

Read other 1 answers
RELEVANCY SCORE 98

Hey everybody, this is my first post. I would really appreciate any help! So basically in Firefox i have sponsored links on the side of the my google and wikipedia pages, and also, when i first start my computer up, there my programs won't run. I start aim and my buddy list is blank. I start Firefox and it opens up but it's a blank white screen and i have to hold the power button down to restart the computer, and then it seems to work the next time i start it up. But i still have the sponsored link problem. Also, every once in a while i get the message "windows must now restart because the DCOM server process launcher service terminated unexpectedly" and my computer counts down from about 50 seconds and restarts. Anyways, I would appreciate any help! I think websites like this with people who want to actually HELP with computers are a great thing.
DDS (Ver_09-03-16.01) - NTFSx86
Run by Me at 18:20:44.92 on Sun 04/12/2009
Internet Explorer: 8.0.6001.18372
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.2046.1075 [GMT -4:00]

AV: PC-cillin Internet Security - Virus Protection *On-access scanning enabled* (Updated)
FW: PC-cillin Internet Security - Firewall *disabled*

============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
C:\WINDOWS\system32\svchost -k rpcss
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOW... Read more

A:Sponsored Links in Firefox on Google/Wiki and Programs don't run properly

Welcome to the BleepingComputer Forums. Since it has been a few days since you scanned your computer with HijackThis, we will need a new HijackThis log. If you have not already downloaded Random's System Information Tool (RSIT), please download Random's System Information Tool (RSIT) by random/random which includes a HijackThis log and save it to your desktop. If you have RSIT already on your computer, please run it again. Double click on RSIT.exe to run RSIT. Click Continue at the disclaimer screen. Please post the contents of log.txt. Thank you for your patience.Please see Preparation Guide for use before posting about your potential Malware problem. If you have already posted this log at another forum or if you decide to seek help at another forum, please let us know. There is a shortage of helpers and taking the time of two volunteer helpers means that someone else may not be helped. Please post your HijackThis log as a reply to this thread and not as an attachment. I am always leery of opening attachments so I always request that HijackThis logs are to be posted as a reply to the thread. I do not think that you are attaching anything scary but others may do so. While we are working on your HijackThis log, please: Reply to this thread; do not start another! Do not make any changes on your computer during the cleaning process or download/add programs on your computer unless instructed to do so. Do not run any other tool until ... Read more

Read other 22 answers
RELEVANCY SCORE 93.2

Hi, I'm having a problem wherein my browser either fails to link to sites (mostly) or my search results will send me to pages of sponsored links. I'm running XP and this first started happening with Internet Explorer.

I got some message (sorry I can't quote it verbatim) telling me I could be infected with something. I immediately started running my Ad-Aware, SpyBot, CCleaner. They all said they found potentially dangerous things and took care of them, or so I thought.

Pressed for time, I just started using Firefox, which worked for a while, but it would eventally do the same thing. So, I'd run the programs again, and start all over again.

Today, I have time to finally try to post a Hijack This log. I started following the directions and, using Internet Explorer, cannot get to the site to download DDS. It says "cannot display the page". Running a connection check turns up no problems. I tried Firefox, and it's giving me a message that Firefox is already running--which it isn't.

I've now re-started my computer for about the 10th time today and need some advice. Please, oh generous and knowledgable people, help me... Thanks.

P.S. I also find that Internet Explorer can't get to my email (Comcast) or some other sites I frequent, unless I go into the history and find the page. When I click that, it works.

A:links redirect to "cannot display" or sponsored links pages/ Moved

As no logs have been posted, I am shifting this topic from the specialized HiJack This forum to the Am I Infected forum.PLEASE DO NOT NOW POST LOGS unless a log is specifically requested.Do you have access to another computer that is clean?Orange Blossom

Read other 3 answers
RELEVANCY SCORE 86.8

Hi, can anyone please help me with this problem. Some links from within websites often just won't open, a new page appears but it remains blank and in the bottom left hand corner it says "Done". This also happens quite a lot with sponsored links in Google too, they just don't open.

After reading some previous posts, I have tried disabling Add-Ons to no avail. I also read one entry where somebody posted a HJT log and from that, was helped by one of you good people, could I possibly do the same?

Thanks.
 

A:Solved: Firefox links / sponsored links don't always open

Read other 16 answers
RELEVANCY SCORE 83.6

Whilst Firefox is very clever and helps stupid people not accidentally click on sponsored links, sometimes I would quite like to click on one, but can't.

So, speaking of stupid people, what do I have to disable to allow things like googleadservices?

It may be some other software I have preventing me from doing so, but I can click on it in IE.
 

A:Solved: Firefox and sponsored links

Read other 12 answers
RELEVANCY SCORE 83.6

Hello,I ran a file I shouldn't have and now appear to be infected with a stubborn piece of malware. I have run AVG, Spybot Search and Destroy, TrendMicro Onlinve Virus Scanner, Maleware Bytes and one or two other programs. They have detected a few problems and removed them.In internet explorer and firefox (but not chrome) I have been getting a "sponsored links" frame on the left side of my google searches. In IE I was able to disable one of the addins/plugins which fixed the problem. The problem persists in firefox. When I click on a link from the actual search results in google the left side "sponsored links" frame temporarily disappears and then link appears normally. I have tried disabling all addins in Firefox, uninstalling and reinstalling firefox and everything else I can think of. I have searched various forums for a solution without any luck.Any suggestions?hijackthis log is below.Thanks,Dan Logfile of Trend Micro HijackThis v2.0.2Scan saved at 7:32:55 AM, on 05/18/09Platform: Windows Vista SP1 (WinNT 6.00.1905)MSIE: Internet Explorer v7.00 (7.00.6001.18226)Boot mode: NormalRunning processes:C:\Windows\system32\Dwm.exeC:\Windows\Explorer.EXEC:\Windows\system32\taskeng.exeC:\PROGRA~1\Maxtor\MANAGE~1\OneTouch.exeC:\Program Files\DellTPad\Apoint.exeC:\Program Files\Dell\MediaDirect\PCMService.exeC:\Windows\system32\igfxsrvc.exeC:\Program ... Read more

A:"sponsored links" on left in Firefox

Hi Dan,Please visit this webpage for download links, and instructions for running ComboFix tool:http://www.bleepingcomputer.com/combofix/how-to-use-combofixPlease ensure you read this guide carefully first.Please continue as follows:Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix, link
Remember to re-enable them afterwards.

Click Yes to allow ComboFix to continue scanning for malware.When the tool is finished, it will produce a report for you. Please include the following reports for further review, and so we may continue cleansing the system:C:\ComboFix.txtNew HijackThis log.A word of warning: Neither I nor sUBs are responsible for any damage you may have caused your machine by running ComboFix. This tool is not a toy and not for everyday use.

Read other 3 answers
RELEVANCY SCORE 81.2

I had a serious problem with this. I was finding the google sponsored links were appearing on the left hand side of my search results. I used mozilla safe mode and disabled all add ons including googlepedia. then they started appearing on both sides of my search results. It took me hours if research just to figure out it was not a google initiative and that it was malware. My Norton antivirus couldn't pick it up, the free scan at trend micro house call that took 4 hours to do couldn't pick it up. I was just about to give up when I discovered combofix.I then downloaded combofix from: http://www.bleepingcomputer.com/combofix/h...combofix#forumsand followed the directions. It worked like a charm. I noticed a new folder on my c drive called Qoobox. I know this has the quarantined items in it but I want to know if it's ok to delete this folder?Bleepingcomputer asked me to post my log from combofix so here it is:AV: Norton Internet Security *On-access scanning disabled* (Updated)FW: Norton Internet Security *disabled* * Created a new restore point.((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))).c:\program files\Mozilla Firefox\components\ywoqsyuwtuoglivq.dll.((((((((((((((((((((((((( Files Created from 2009-02-24 to 2009-03-24 ))))))))))))))))))))))))))))))).2009-03-24 13:40 . 2009-03-24 01:18 102,664 --a------ c:\windows\system32\drivers\tmcomm.sys2009-03-24 01:18 . 200... Read more

A:Google Sponsored links on left side

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.comDDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Follow the instructio... Read more

Read other 2 answers
RELEVANCY SCORE 71.2

I get a "page cannot be displayed" most of the time when I try to go to a sponsored link after a Google search. The sites usually include "pagead" after www.google.com... I have a custom Hosts file, which I've modified before to fix a similar problem, but not this time. Any thoughts?
 

Read other answers
RELEVANCY SCORE 71.2

Hi I have Windows XP and yesterday I know I downloaded something that infected my computer. I was trying to download a game from Limewire, and after I unzipped the file, I suddenly was getting pop-ups and annoying internet sites. Now when I start up my computer, I receive a message that reads "error loading c:\windows\system32\sprt_ads.dll"
I first noticed I had a problem when I went to google.com and saw a strange new area of the page. Usually when google.com loads a search, there are "sponsored links" on the right hand side of the page. Now there are "sponsored links" on the left hand side, too... but the ones on the left are obviously not from google, but some other bad source.
I downloaded Hijack This and here is my log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 5:27:19 PM, on 1/27/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\Program Files\Comm... Read more

A:Suspicious pop-ups and Google "sponsored links"

Hi and welcome
Go here: http://www.bleepingcomputer.com/combofix/how-to-use-combofix
Follow the instructions to run Combofix.
Then post the results here.
 

Read other 1 answers
RELEVANCY SCORE 66.4

Hello, I'm new here and I need help with a problem I've been having for a week or so. When I click on links in google, I am redirected to other links like overclick.com and others. I greatly appreciate it if someone can help me with this problem. Thank you in advance.

A:Google Redirecting links [Moved]

As no logs have been posted, I am shifting this topic from the specialized HiJack This forum to the Am I Infected forum. I shall also close the topic that does have a log to avoid confusion.==>PLEASE DO NOT NOW POST LOGS<== unless a log is specifically requested.

Read other 15 answers
RELEVANCY SCORE 66.4

Hi,

Last week I was infected with the KoobFace Virus after clicking a malicious link in Facebook. My Avast virus security program picked it up and removed a portion of it. I believe another portion of the virus was removed by Malwarebytes. A Malwarebytes scan now shows a clean machine. However, I am still being redirected to random sites when clicking on a link in a google search result. Also, google maps is not working properly.

My Avast program is up for renewal, but when I try to go to their website IE times-out. I am also unable to go to other virus security websites. Maybe due to the virus?

You guys were a tremendous help to me earlier in the year when I had a problem with another machine. I hope you can help me out with the problem as well. Thanks in advance!

A:Google links redirect [Moved]

As no logs have been posted, I am shifting this topic from the specialized HiJack This forum to the Am I Infected forum.==>PLEASE DO NOT NOW POST LOGS<== unless a log is specifically requested.

Read other 1 answers
RELEVANCY SCORE 66

Here is it, I dont know what is wrong! PLEASE HELP!

Logfile of HijackThis v1.98.2
Scan saved at 11:42:58 PM, on 1/30/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
C:\Program Files\Lexmark X74-X75\lxbbbmgr.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Lexmark X74-X75\lxbbbmon.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\WINDOWS\System32\svchost.exe
C:\Progra... Read more

A:HELP, pop ups, and sponsored links?

You are using an outdated version of Hijack This. Please delete your current version and download HijackThis. Double-click on the file you just downloaded. Click on the "Unzip" button to install. It will by default install to the directory - C:\PROGRAM FILES\HIJACKTHIS\

Please print out or copy this page to Notepad. Make sure to work through the fixes in the exact order it is mentioned below. If there's anything that you don't understand, ask your question(s) before proceeding with the fixes. You should 'not' have any open browsers when you are following the procedures below.

Before attacking an adware/spyware problem with hijackthis make sure you have already run the following tools. Download and update the databases on each program before running. Ad-Aware? SE Personal Edition
*Note* For Ad-AwareSE also install the VX2 Addon Cleaner To run this tool once Adaware is updated click on Add-ons in the lefthand column. Select VX2 Cleaner V2.0 and click Run Tool. Click "OK" , then, if something is found, click "Clean" as in the directions given. Click "Close", and exit Ad-Aware.
Spybot Search & Destroy
CWShredder

Download Ewido Security SuiteInstall Ewido Security Suite
When installing, under "Additional Options" uncheck..Install background guard
Install scan via context menu

Double-click the icon on Desktop to launch Ewido
You will need to update Ewido to the latest definition files.On the left hand side... Read more

Read other 11 answers
RELEVANCY SCORE 66

Hi
Im trying to block google sponsored links ads

I added in my hostfile
127.0.0.1 pagead.googlesyndication.com
127.0.0.1 pagead2.googlesyndication.com
and in Kaspersky i added in blacklist
*.googlesyndication.com/*show_ads.js
imageads*.googleadservices.com
but no success
And in IE im using Adblock Pro

So if sombody can help me out to get rid of these google sponsored links ads that would be great help for me....

A:Sponsored links ads

hello

try this

http://userscripts.org/scripts/show/3478

Read other 4 answers
RELEVANCY SCORE 65.2

Recently I have started getting keyword popups. I have scanned with Spybot, AdAware, and Avast. Found some problems and corrected but the popups continue as do the green sponsored links. I use google toolbar with popup blocker but no help. Win Messaging is defeated as well. Here is hijackthis logLogfile of HijackThis v1.99.1Scan saved at 8:35:16 AM, on 10/25/2005Platform: Windows 2000 SP4 (WinNT 5.00.2195)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Running processes:C:\WINNT\System32\smss.exeC:\WINNT\system32\winlogon.exeC:\WINNT\system32\services.exeC:\WINNT\system32\lsass.exeC:\WINNT\system32\svchost.exeC:\WINNT\system32\spoolsv.exeC:\Program Files\Alwil Software\Avast4\aswUpdSv.exeC:\Program Files\Alwil Software\Avast4\ashServ.exeC:\WINNT\System32\svchost.exeC:\WINNT\system32\hidserv.exeC:\WINNT\system32\nvsvc32.exeC:\WINNT\system32\regsvc.exeC:\WINNT\system32\MSTask.exeC:\WINNT\System32\WBEM\WinMgmt.exeC:\WINNT\system32\MsPMSPSv.exeC:\WINNT\system32\svchost.exeC:\Program Files\Predixis\MusicMagic Mixer\mDNSResponder.exeC:\WINNT\Explorer.EXEC:\Program Files\Alwil Software\Avast4\ashWebSv.exeC:\Program Files\Alwil Software\Avast4\ashMaiSv.exeC:\... Read more

A:Sponsored Links And Searchpopups

Hello,

I will be handling your log to help you get cleaned up. Please give me some time to look it over and I will get back to you as soon as possible.

Read other 5 answers
RELEVANCY SCORE 65.2

Hi,

I am in a dilemma here in trying to get all these sponsored links appearing at my web browsers. Seem that everywhere i surf there is this green sponsored link embedded in the sentences. How do I solve this. Thanks.

A:Sponsored links Invasion

Hi madmal This forum is for HijackThis logs so lets get your log in here.Download Hijackthis:http://www.spywareinfo.com/~merijn/files/hijackthis.ziphttp://computercops.biz/downloads-cat-14.htmlIf you cannot reach either site it is available from my signature.You need to put HijackThis into its own folder. It makes backups and they need to be kept all in one place.Click My Computer, then C:\In the menu bar, File->New->Folder.That will create a folder named New Folder, which you can rename to "HJT". Now you have C:\HJT\ folder. Put your hijackthis.exe there.Run HijackThis,Click "Scan" - When the scan finishes click "Save Log" My Documents will open up.Click Save. Now Notepad will open up. Copy and paste all of that text into your reply.

Read other 1 answers
RELEVANCY SCORE 65.2

I have a perplexing problem with my browsers (IE7 and Firefox). Clicking most (>50%) of the sponsored links on any search I do results in "Internet Explorer can display this page". When this happens, I notice that the URL address box does NOT contain anything remotely connected with the company, but starts with the address of the search engine followed by a huge amount of nonsensical garbage. Total address length can be up to 2500 characters. If I right check the properties of the link, it, too, shows nothing related to the company (e.g., what is supposed to be a JCPenney.com link does not have jcpenney anywhere in the address) and the initial part of the link is the search engine's address (e.g., google.com/ + a huge amount of garbage).

This happens whether I use IE7 or Firefox, and whether I use Google, Ask.com, Live Search or any other search engine. I am using Windows firewall. Have tried turning it off. Have tried disabling my AV software, have scanned the drive for spy ware using SystemSuite and Ad-aware, and have SpyBlaster installed. Also scanned for viruses/worms. All spy and AV pattern files are up to date. Nothing shows up.

I have tried resetting my cable modem. I have tried deleting all temporary file and cookies. I have restored the Advanced settings in IE7 and restored the security setting to the default (Medium High). None of this changed this strange behavior.

The most puzzling part of this is that SOME sponsored links and virtually all n... Read more

A:Sponsored Links Not Working

Read other 10 answers
RELEVANCY SCORE 65.2

To beginwith I admit trying to download some free software. Now this is the situation - I keep getting this annoying pop-ups, and then they come on there is an "aurora" icon in the task bar, and at the same time, suddenly I get words in regular webpages to appear in green and underlined and they link to a sponsored link. I never used HJT before, just dled it now, I hope this is helpful:

Logfile of HijackThis v1.99.1
Scan saved at 9:54:54 AM, on 06-May-05
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\WFXSVC.EXE
C:\Program Files\WinFax\WFXMOD32.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe
C:\Program Files\Ahead\InCD\InCD.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb05.exe
C:\Program Files\Common Files\Logitech\QCDriver2\LVCOMS.EXE
C:\Program Files\Logitech\ImageStudio\LogiTray.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\rundll32.exe
C:\PROGRA~1\WinFax\WFXSWTCH.exe
C:\WINDOWS\system32\wfxsnt40.exe
C:\Program Files\Java\j... Read more

A:Aurora Pop-ups and sponsored links

hi, welcome to TSG.

run the uninstaller to remove aurora

http://www.mypctuneup.com/evaluate.php
Or go to www.mypctuneup.com and click on free uninstall tool and follow the steps.

Make a new folder in C:\ and call it Hijack this, and Save hijack this to
this folder so that it runs properly and can make back ups. Click scan,
then save the log and post it here so we can take a look at it for you.
go to this site and download these tools and once you get both
adaware and spybot, update both of them.

Set adaware to do a full system scan and deselect, "search for neglible risk entries".
Click next to start the scan.Delete everything adaware finds.

reboot and now run spybot

Spybot: Search and destroy.

Delete what spybot finds marked in red. After updating spybot hit the
immunize button.

reboot again
With CWshredder close all browsers and programmes and select the FIX button.
Go here and download Microsoft Antispyware Beta. First in the top menu click
File then Check for updates to download the definitons updates.

After updating look in the right side of the main window under "Run Quick
Scan Now" and click Spyware scan options. In that window put a tick by Run a
full system scan and then put a check by all three options below that then
click Run Scan now.

When the scan is finished, let it fix anything that it finds (have it
quarantine the items that have that option rather than delete just in case.
It is a beta program and there may be fal... Read more

Read other 1 answers
RELEVANCY SCORE 65.2

HELLO TO ALL!!!!! OK..i know NOTHING about copmputers expect I am about to chuck this into the trash. I have read the other posts about this and know that I need to run a program and post the results in here and hopefully someone can help me!!!! We will see...Thanks to all in advance....Logfile of HijackThis v1.99.1Scan saved at 10:05:34 PM, on 2/3/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\csrss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\System32\S24EvMon.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Network Monitor\netmon.exeC:\WINDOWS\System32\RegSrvc.exeC:\Program Files\Spyware Doctor\sdhelp.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\wdfmgr.exeC:\WINDOWS\System32\alg.exeC:\WINDOWS\system32\ZCfgSvc.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\System32\1XConfig.exeC:\WINDOWS\AGRSMM... Read more

A:Green Sponsored Links

HijackThis is being run from a temporary folder; this means that any backups it creates as a result of fixes made with it will be lost. Please create a new folder for it and place the program into that new folder.Make sure that you have no browser windows open as this could prevent the fix from working properly. Open HijackThis, scan and when complete, remove the following entries by checking the box to the left and clicking 'fixed checked': R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://red.clientapps.yahoo.com/customize/...//www.yahoo.comR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\about.htmO2 - BHO: bitlocker - {01EB5130-FC0C-4d75-B9CE-4801B1B854F5} - C:\WINDOWS\system32\nsmEE.dllExit HijackThis when done. Reboot, rescan with HijackThis and post a new log here.

Read other 2 answers
RELEVANCY SCORE 64.4

Somehow my computer has gotten the whole zippy lookup thing. One of my virus scans said that trojans were detected and I suppose that they were removed b/c nothing has shown up on manually started scans since then. I was using defender pro as my anti virus program and just started using McAfee today. It is not detecting anything either. I run Ad-aware daily.

Also, I am all of a sudden getting pop ups for anti spyware programs and every page that I go to has random words made into links (and of course not legitimate links). Is this being caused by zippy-lookup too? I can try to run hijack this like suggested for another user, but I will wait for instructions before I do anything. So far, I still have access to the internet, but things are very annoying.

Thanks!!
 

A:zippy lookup, pop ups, sponsored links, etc.

Here is a copy of the hijackthis log. I notice some zippy lookup stuff. PLEASE HELP!!!


C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Dell\Media Experience\PCMService.exe
C:\Program Files\MUSICMATCH\Musicmatch Jukebox\mmtask.exe
C:\Program Files\Dell AIO Printer A920\dlbkbmon.exe
c:\Program Files\Dell\Support\Alert\bin\NotifyAlert.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\PROGRA~1\McAfee\SPAMKI~1\MskAgent.exe
c:\progra~1\mcafee.com\vso\mcvsescn.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Program Files\Sprint Virtual Assistant\bin\mpbtn.exe
c:\progra~1\mcafee.com\vso\mcvsftsn.exe
C:\WINDOWS\System32\svchost.exe
c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\DOCUME~1\Tiffany\LOCALS~1\Temp\Temporary Directory 1 for hijackthis.zip\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://zippy-lookup.com/sidesearch.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://zippy-lookup.com/sidesearch.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://zippy-lookup.com/sidesearch.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page ... Read more

Read other 2 answers
RELEVANCY SCORE 64.4

i have xp with i.e 8 and sp3 installed.a couple of days ago i noticed that when on web pages i was getting a sponsored links column opening on the left hand side of the screen.after a few searches i discovered that if i clicked on view then explorer bars then unchecked search panel this column went away but every time i clicked on another page it reapeared and search panel was checked again.this seems to show when on e-bay and also google it shows with sponsored links on the left as well as the links which always seem standard on the right..does anybody know how i can stop this sponsored link from opening on the left hand side of my screen.....
 

A:sponsored links on left of page

You might have installed some new software that has installed this add-on in IE. Open Tools->Manage Add-ons->Enable or Disable Add-ons. You have to find which add-on is causing this. You can disable it directly if you know its name otherwise disable all of them and enable them again but one-by-one and check for the result.

If you know which new installed software could have caused it, you could probably be able to uninstall the add-on or the complete software from Add/Remove programs to fix the problem.
 

Read other 1 answers
RELEVANCY SCORE 64.4

Hello,

Is it possible to disable in some way 'Sponsored Links': http://img268.imageshack.us/img268/6458/sponsoredlinks.png ?

Regards,
 

A:Solved: How to disable 'Sponsored Links' ?

Read other 12 answers
RELEVANCY SCORE 64.4

Random words keep appearing as links on any website I visit, and when I hover over them it says "best [random word]". I'm not sure what is causing it. I need help trying to remove this. It's very frustrating and a little unsettling when I accidentally click on one of those words and a weird page appears. Thanks in advance for your help.
---------

Logfile of HijackThis v1.99.1
Scan saved at 4:33:04 PM, on 5/2/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\Program Files\Alias\Maya6.5\docs\wrapper.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\Tablet.exe
C:\Program Files\Alias\Maya6.5\docs\jre\bin\java.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\PROGRA~1\McAfee\SPAMKI~1\MSKAgent.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Dell Support\DSAgnt.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Claudia\My Documents\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myw... Read more

A:Solved: Sponsored links on websites

Hi claudiatk, Welcome to TSG!!

Run HJT again and put a check in the following:

R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - (no file)
O2 - BHO: ohb - {999A06FF-10EF-4A29-8640-69E99882C26B} - C:\WINDOWS\system32\nskF.dll
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O16 - DPF: {2253F320-AB68-4A07-917D-4F12D8884A06} (ChainCast VMR Client Proxy) - http://www.streamaudio.com/download/ccpm_0237.cab
O16 - DPF: {ED2E4BB5-60EA-4624-9DE2-998E441C699B} (OpenSiteInstall.opensite_install) - http://www.zuvio.com/OpenSiteInstall.CAB

Close all applications and browser windows before you click "fix checked".

Download AdAware SE Personal: http://www.lavasoftusa.com/support/download/

Install the program and launch it.

On the bottom right-hand corner of the main window click on Check for updates now then click Connect and download the latest reference files.

In the main window: Click Start and under Select a scan Mode tick Perform full system scan.

Deselect Search for negligible risk entries.

To start the scan, click the Next button.

When the scan is finished mark everything for removal and get rid of it. (Right-click the window and choose select all from the drop down menu and then click Next)

Reboot and post another log.
 

Read other 3 answers
RELEVANCY SCORE 64.4

Are these genuine?
They appear with a click in the body of a thread and are of the same size and style as a posting. Example: Hewlett Packard Quadro GeForce FX 1500.
I'm asking because this is the first time I've seen them and I had a really weird detection of Trojan Horse Generic ZSR by both AVG and AdAware last night. Since then my drives have been purged and written over with saved clean disk images and AVG and Adaware have repeatedly shown them as clean.
 

A:Sponsored Links in Tech Guy Forums

I was wondering the same thing. I have never seen these before.
 

Read other 3 answers
RELEVANCY SCORE 64.4

This is very odd. All of a sudden, many of the google adword ads that are on various sites, don't display for me. Instead I get
Failed to Connect
Firefox can't establish a connection to the server at a.tribalfusion.com.
Though the site seems valid, the browser was unable to establish a connection.

Also, on many, but not all, adwords ads on the google search engine give me a blank page of a google transition URL instead of taking me to the desired site.

I can't figure what is going on. It also occurs on my Google Chrome browser and IE.

Here is a link to a page where the ad does not display. Its the ad to the right in the message box.
message board post

My daughter got a couple of Trojans while messing around with My Space but my AVG got rid of them and they aren't showing up on subsequent scans but aside from that, I can't imagine what I might have done to cause this weirdness. Any thoughts?

XP 64 PRO
AMD Athelon 64X2 Dual Core processor 5000+
 

A:Ads won't display and can't access sponsored links

Read other 7 answers
RELEVANCY SCORE 64.4

Help We have that zippylookup in our computer and are not educated enough in computer lingo to understand how to remove this zippy file from our computer
 

A:zippy lookup, pop ups, sponsored links, etc.

Read other 9 answers
RELEVANCY SCORE 64.4

Hi, I've been having problems for the past week when using Google to redirect me to the desired website. I've been sent to many random websites as opposed to the one I want. This is happening on both IE and Firefox. Yahoo search engine works fine so I've been using it lately. Also, many times my computer will momentarily freeze when trying to close pop up screens. Only way I can close them is by "end task" in the task manager screen.
I've have downloaded Malwarebytes but it will not open for me. I've also used Ad-Aware/Windows Defender/AVG but nothing has fixed the problem. Any help would be greatly appreciated.
Thanks in advance.

Dave

A:Google Redirect (Hijack) Links and slow computer [Moved]

As no logs have been posted, I am shifting this topic from the specialized HiJack This forum to the Am I Infected forum.==>PLEASE DO NOT NOW POST LOGS<== unless a log is specifically requested.

Read other 5 answers
RELEVANCY SCORE 64

Hi There,

I have a popup problem and and also on my browser i see green links that say "sponsored link" when I hover over them. I have used Spybot, CWShredder and CCleaner but the green links are still there.

Could someone help?
My HJT Log is:

Logfile of HijackThis v1.99.1
Scan saved at 20:36:02, on 25/09/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Ideazon\Zboard Software\Driver\ZboardTray.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Trend Micro\Tmas\Tmas.exe
C:\Program Files\Ideazon\Zboard Software\Driver\Zboard.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\James\Local Settings\Temporary Internet Files\Content.IE5\JB3C859O\hijackthis_sfx[1].exe
C:\Program Files\HijackThis\HijackThis.exe

R0 - H... Read more

A:Solved: Green Sponsored Links (HJT Log Added)

Read other 9 answers
RELEVANCY SCORE 63.2

Windows 2K Pro.
Issue #
1. Only one of many yahoo! ID's I have doesn't display correctly (it's like many options are missing and the email body text displays into the left colored margin. Nor does my folder list appear any more. Only one email ID is affected whereas all my others are fine.
2. Words on every page of this yahoo! ID's email are links. When mouse is held over linked word, toolbar note appears: "sponsored link".

I've run hijack, adaware, and spybot but I think I must not have done it in the right sequence since all I did was erase my cookies.

EDIT: AAACK! Just noticed some words on this site, in thread titles, are also sponsored links! (where's the bugeye icon?!)

So far nothing more nefarious has surfaced but I definitely want to clean up.

Thanks for your help.
 

Read other answers
RELEVANCY SCORE 63.2

Hello,

Do you know some good free web email account without sponsored links ? All of the most popular (gmail, hotmail, yahoo) have them.

Regards,
 

A:Solved: Some free web email account without sponsored links

Read other 16 answers
RELEVANCY SCORE 63.2

While viewing Google search engine, sponsored links appear on the left side of the screen. Please review the log:

DDS (Ver_09-03-16.01) - NTFSx86
Run by Rob Brown at 2:09:57.89 on Thu 04/16/2009
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.511.97 [GMT -4:00]
============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\trade... Read more

A:Infected with the Left Side Sponsored Links virus

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.comDDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the resul... Read more

Read other 2 answers
RELEVANCY SCORE 61.6

Dear BleepingComputer folk,
 
My laptop is running Firefox 40.0.3 under Windows 8.1 (64-bit).
 
The Problem
 
Two nights ago my browser (then Firefox 40.0.2) started opening some webpages extremely slowly, simply refusing to open others and producing a "This document has been moved here" message for others (see below screenshot - the link would appear to go to whatever I searched for, but I never clicked it). 
 
These various problems were affecting familiar websites that I have bookmarked and regularly open, such as Facebook.  This seemed to be in some way related to the cache, as it was not affecting new URLs that I had not visited previously during that browsing session. 
 
SCREENSHOT #1 - result of attempt to visit https://mail.riseup.net via browser bookmark:
Spoiler


 

 
 
 
In addition, when using Google Toolbar (but not https://www.google.co.uk/ , which appeared fully functional) to search for anything I would receive the same: "This document has been moved here", but with an additional "302 Moved" message. 
 
SCREENSHOT #2 - result of attempt to search for http://www.facebook.com/ via Google Toolbar:
Spoiler


 

 
 
 
Attempting to access attachments in gmail also produced a similar message (I don't have a screenshot of this, but I believe the message there again differed slightly, saying that the document was "temporarily" moved).  This is what I encoun... Read more

A:FIrefox "302 moved" error and Google "This document has been moved here" error

Let's run some checks...  Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2. SecurityCheck may produce some false warning(s), so leave the results reading to me.NOTE 3. If you receive UNSUPPORTED OPERATING SYSTEM! ABORTED! message restart computer and Security Check should run Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeList Restore PointsClick Go and post the result. Please download Malwarebytes Anti-Malware (MBAM) to your desktop.NOTE. If you already have MBAM 2.0 inst... Read more

Read other 0 answers
RELEVANCY SCORE 60

After doing a google search in either Internet Explorer or Firefox, when I click on the result links, I get redirected to some advertisement, and other website that I have no interest in, and not the link of the search.
Very frustrating. DDS.txt contents are below:
DDS (Ver_09-03-16.01) - NTFSx86
Run by Raj at 21:47:20.05 on Mon 03/16/2009
Internet Explorer: 7.0.6001.18000 BrowserJavaVersion: 1.6.0_05
Microsoft? Windows Vista? Home Premium 6.0.6001.1.1252.1.1033.18.2037.1096 [GMT -7:00]

AV: Avira AntiVir PersonalEdition *On-access scanning enabled* (Updated)
AV: Norton Internet Security *On-access scanning disabled* (Updated)
FW: Norton Internet Security *disabled*

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Cla... Read more

A:Google links hijacked in both IE and firefox

Hello deolrsd,Sorry about the delay. If you still need help, please post a new HijackThis log to make sure nothing has changed, and I'll be happy to look at it for you.Please do this:1. Download HijackThis? here:http://www.trendsecure.com/portal/en-US/th.../hijackthis.php2. Click 'Do a System Scan and Save log'.The HJT log will open in notepad.Thanks,tea

Read other 2 answers
RELEVANCY SCORE 60

Basic problem, i've had random pop-ups, programs crashing and the main noticable problem is when i click a link in google it re-direct to offering products based on my search, example being techsupportforum it redirects me to Buy Spyware Removal bla bla bla.

I ran spybot & avira but it still happening so heres the Hijack Log, hope you can help !

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:32:11, on 12/08/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
C:\Program Files\Hotspot Shield\bin\openvpnas.exe
C:\Program Files\Hotspot Shield\HssWPR\hsssrv.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\Program Files\CyberLink\Shared files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\D-Tools\daemon.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\oodtray.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\... Read more

A:Firefox Google Links Re-directing

Hello

We no longer use HijackThis as our initial analysis tool.

We want all our members to perform the steps outlined in the link I'll give you below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

---------------------------------------------------------------------------------------------

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

Read other 1 answers
RELEVANCY SCORE 60

Hello:Hopefully I am posting correctly and someone can help.When using Firefox - Google search, the links redirect me to ads.When I copy and paste the web address, it works fine.I don't seem to have a problem when using Internet Explorer.I use McAfee as my main anti-virus.I also recently begun using MalWareBytes.Neither locates a virus when I do a current scan.I think that I am still able to update McAfee & Malware and use Windows Update.Below is my Hijack log, as I've seen suggested on other sites.Thanks in advance!---------------------------------------------------------------------------------Logfile of Trend Micro HijackThis v2.0.2Scan saved at 8:28:18 PM, on 4/9/2009Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16791)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Windows Defender\MsMpEng.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Intel\Wireless\Bin\EvtEng.exeC:\Program Files\Intel\Wireless\Bin\S24EvMon.exeC:\Program Files\Intel\Wireless\Bin\WLKeeper.exeC:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeC:\WINDOW... Read more

A:Firefox Google Links Redirect to Ads

Hello! My name is Sam and I will be helping you. In order to see what's going on with your computer I may ask for you to post various logs from the tools that we will use to resolve your issue. Please also share with me any information about how your computer is reacting and behaving each step of the way as we work through this process.We need to create an OTListIt2 ReportPlease download OTListIt2 from hereSave it to your desktop.Double click on the icon on your desktop.Click the "Scan All Users" checkbox.Push the "Run Scan" button.The scan should take just a few minutes.Copy the log that opens up and paste it back here in your next reply.

Read other 8 answers
RELEVANCY SCORE 60

Hello guys,

My browser has also been redirecting itself to many different URLs all at once when I try to click on a googled link.This is occurring in both Firefox and Internet Explorer.

I've ran several different scans, Spybot S&D, Kaspersky, and Malwarebytes. Malwarebytes returned no search results, Spybot found something called Waldac.cn trojans, that was quarantined and removed - Kaspersky also found some virus/trojan that was quarantined.

Below is my HijackThis log, thank you so much for taking the time to help! It is truly appreciated.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:59:57 PM, on 11/1/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16876)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\avp.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\ScanSoft\OmniPageSE\opware32.exe
C:\Program Files\iTunes\iTunesHelper.e... Read more

A:All google links being redirected in both Firefox and IE

Read other 16 answers
RELEVANCY SCORE 60

I have somekind of malware attack going on.

Clicking on a google search result I am being redirected to other search directories/engines.

I need assistance, please!

DDS report
RootRepeal report
HJT all below.


DDS (Ver_09-10-26.01) - NTFSx86
Run by Dan at 23:20:36.59 on Tue 11/03/2009
Internet Explorer: 7.0.5730.13
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.2047.1338 [GMT -8:00]
============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\WINDOWS\system32\rundll32.exe
svchost.exe
C:\WINDOWS\ATKKBService.exe
C:\Program Files\MioNet\MioNetManager.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\MioNet\jvm\bin\MioNet.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
C:\Program Files\MioNet\jvm\bin\MioNet.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\SUPERAntiSpyware\superantispyware .exe
C:\DOCUME~1\Dan\LOCALS~1\Temp\RoboForm\RoboTaskBarIcon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Dan\Local Settings\Temporary Internet Files\Content.IE5\YP9SGY1E\dds[1].pif

============== Pseudo HJT Report ===============

uSearchMigratedDefaultURL = hxxp://in... Read more

A:google links being redirected in both Firefox and IE

Google links are being redirected when selected. This is occurring in both IE and Firefox.
I have run Spybot Search & Destroy, Malwarebytes, Superantispyware, Avast, Avira Antivir

In spite of all the various things they have found and corrected the problem persists with Google results being redirected when selected.

In addition with all the clean up, my IE does not run anymore. It opens, starts then closed due to some error it encounters.

Thanks in advance.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:51:12 PM, on 11/6/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\WINDOWS\ATKKBService.exe
C:\Program Files\MioNet\MioNetManager.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\MioNet\jvm\bin\MioNet.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Skype\Plugin M... Read more

Read other 1 answers
RELEVANCY SCORE 60

Whenever I click a link in google it diverts to other sites, mostly video type or ebay. I have run spyware removal and it still happens. Please help DDS (Ver_09-03-16.01) - NTFSx86 Run by mistique at 16:32:53.32 on 22/04/2009Internet Explorer: 7.0.6001.18000Microsoft? Windows Vista? Home Premium 6.0.6001.1.1252.44.1033.18.1015.283 [GMT 1:00]============== Running Processes ===============C:\Windows\system32\wininit.exeC:\Windows\system32\lsm.exeC:\Windows\system32\svchost.exe -k DcomLaunchC:\Windows\system32\svchost.exe -k rpcssC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestrictedC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestrictedC:\Windows\system32\svchost.exe -k netsvcsC:\Windows\system32\SLsvc.exeC:\Windows\system32\svchost.exe -k LocalServiceC:\Windows\system32\svchost.exe -k NetworkServiceC:\Program Files\ATK Hotkey\ASLDRSrv.exeC:\Program Files\Lavasoft\Ad-Aware\AAWService.exeC:\Windows\System32\spoolsv.exeC:\Windows\system32\svchost.exe -k LocalServiceNoNetworkC:\Windows\system32\Dwm.exeC:\Windows\system32\taskeng.exeC:\Windows\Explorer.EXEC:\Windows\system32\taskeng.exeC:\Windows\System32\igfxpers.exeC:\Windows\system32\igfxsrvc.exeC:\Program... Read more

A:Google links diverting in firefox

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.comDDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the resul... Read more

Read other 2 answers
RELEVANCY SCORE 60

Hi I noticed that recently, sometimes when I click a link in google search results, google prevents me from being redirected to hxxp://c.ppcxml.net a site which google says is a reported attack site. I ran a full scan in Malwarebytes Anti-Malware and it reported that I had 0 infections. I also ran DDS and Hijackthis. I will post all the logs if needed. Any help is greatly appreciated.

DDS (Ver_09-12-01.01) - NTFSx86
Run by Brandon at 18:33:35.20 on Sat 12/26/2009
Internet Explorer: 8.0.6001.18865 BrowserJavaVersion: 1.6.0_15
Microsoft? Windows Vista? Home Premium 6.0.6002.2.1252.1.1033.18.2046.914 [GMT -5:00]

SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.... Read more

A:Firefox google links redirecting

Hello! My name is Sam and I will be helping you. In order to see what's going on with your computer I will ask for you to post various logs from the tools that we will use to resolve your issue. Please also share with me any information about how your computer is reacting and behaving each step of the way as we work through this process.We need to create an OTL ReportPlease download OTL from hereSave it to your desktop.Double click on the icon on your desktop.Click the "Scan All Users" checkbox.Under the Custom Scan box paste this in

netsvcs
%SYSTEMDRIVE%\*.exe
/md5start
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
sceclt.dll
ntelogon.dll
logevent.dll
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
/md5stop
%systemroot%\*. /mp /s
CREATERESTOREPOINT


Click the "Quick Scan" button.The scan should take just a few minutes.Please copy and paste both logs back here in your next reply.=============The next log will show us any hidden files that are present.Download GMER from here:Unzip it to the desktop.Open the program and click on the Rootkit tab.Make sure all the boxes on the right of the screen are checked, EXCEPT for ?Show All?.Click on Scan.When the scan has run click Copy and paste the results (if any) into this thread.

Read other 12 answers
RELEVANCY SCORE 60

Hi all,first time on these forums. Seeking assistance by one of the guru's here.I keep having Google links hijacked in Firefox. I have tried lots of spyware removals, including Malwarebytes'.Here is my HijcakThis log.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 9:54:56 PM, on 22/10/2009Platform: Windows Vista SP2 (WinNT 6.00.1906)MSIE: Internet Explorer v8.00 (8.00.6001.18828)Boot mode: NormalRunning processes:C:\Program Files (x86)\SlySoft\AnyDVD\AnyDVDtray.exeC:\Program Files\WinFast\WFDTV\WFWIZ.exeC:\Program Files (x86)\uTorrent\uTorrent.exeC:\Windows\SysWOW64\rundll32.exeC:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exeC:\Program Files (x86)\SUPERAntiSpyware\SUPERAntiSpyware.exeC:\Program Files (x86)\MagicDisc\MagicDisc.exeC:\Program Files (x86)\AVG\AVG8\avgtray.exeC:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exeC:\Program Files\WinFast\WFDTV\DTVSchdl.exeC:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exeC:\Program Files (x86)\QuickTime\QTTask.exeC:\Program Files (x86)\SOUNDGRAPH\iMON\iMON.exeC:\Program Files (x86)\Java\jre6\bin\jusched.exeC:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exeC:\Program Fi... Read more

A:Google links hijacked in Firefox

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. Please include a clear description of the problems you're having, along with any steps you may have performed so far.Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.Even if you have already provided information about your PC, we need a new log to see what has changed since you originally posted your problem.Please download OTL from following mirror:This is THE MirrorSave it to your desktop.Double click on the icon on your desktop.Click the "Scan All Users" checkbox.Push the button.Two reports will open, copy and paste them in a reply here:OTL.txt <-- Will be openedExtra.txt <-- Will be minimizedIn the upper right hand corner ... Read more

Read other 41 answers
RELEVANCY SCORE 60

I'm having a problem with Google search results in Firefox being hijacked. When I click a link, instead of going to the search result it will go to a different page. This does not happen all the time, it seems to be random. AV and Malwarebytes scans come up clean. Here is the DDS scan:

DDS (Ver_10-03-17.01) - NTFSx86
Run by Kyle at 9:13:50.33 on Thu 07/22/2010
Internet Explorer: 8.0.6001.18928 BrowserJavaVersion: 1.6.0_18
Microsoft? Windows Vista? Home Premium 6.0.6002.2.1252.1.1033.18.2939.1005 [GMT -4:00]

SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

============== Running Processes ===============

C:\WINDOWS\SYSTEM32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\Protector Suite\upeksvr.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Windows\system32\ASTS... Read more

A:Firefox Google Links Hijacked

Hi

Please do the following:

Please download MBRCheck.exe to your desktop.Be sure to disable your security programs
Double click on the file to run it (Vista and Windows 7 users will have to confirm the UAC prompt)
A window will open on your desktop
if an unknown bootcode is found you will have further options available to you, at this time press N then press Enter twice.
If nothing unusual is found just press Enter
A .txt file named MBRCheck_mm.dd.yy_hh.mm.ss should appear on your desktop.
Please post the contents of that file.


NEXT

Download Combofix from either of the links below, and save it to your desktop.

Link 1
Link 2



**Note: It is important that it is saved directly to your desktop**

--------------------------------------------------------------------
IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here
--------------------------------------------------------------------

Double click on ComboFix.exe & follow the prompts.When finished, it will produce a report for you.
Please post the C:\ComboFix.txt for further review.

Read other 2 answers
RELEVANCY SCORE 60

Hi,

Not sure what I have done, but just found that my google search results keep being redirected to some places.
This seemed to happen only on Firefox which is my default browser. Internet Explorer, however, seems not to be affected.

I have followed the steps in the preparation guide. I am running a 64bit windows7 so the GMER part is skipped.

The following is the DDS log. Please find the Attached.txt in the attachment.

Looking forward to your reply. Thanks a lot!

.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_23
Run by Infosis at 1:19:21 on 2011-10-14
Microsoft Windows 7 Professional 6.1.7601.1.950.886.1033.18.3894.2135 [GMT -4:00]
.
AV: Trend Micro Titanium *Enabled/Updated* {68F968AC-2AA0-091D-848C-803E83E35902}
SP: Trend Micro Titanium *Enabled/Updated* {D3988948-0C9A-0693-BE3C-BB4CF86413BF}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\System32\DriverStore\FileRepository\... Read more

A:Google links redirected in Firefox

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.Do not run any other tool untill instructed to do so!Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.Run Combofix:You may be asked to install or update the Recovery Console (Win XP Only) if this happens please allow it to do so (you will need to be connected to the internet for this)Before you run Combofix I will need you to turn off any security software you have running, If you do not know how to do this you can find out >here< or >here<Combofix may need to reboot your computer more than once to do its job this is normal.You can download Combofix from one of these links.Link 1Link 2Link 3 1. Close any open browsers or any other programs that are open.2. Close/disable all anti virus and anti malware programs so they do not interfere with the r... Read more

Read other 11 answers
RELEVANCY SCORE 60

Hello all!

I've used the advice in these forums several times, and the info has helped me to successfully clean a pc or two (THANK YOU!), but now I find myself having to personally request help.

SYMPTOM: Sometimes when I click a google search result link, the browser is redirected to an unrelated page. It's obviously some sort of adware, as the rogue pages are always trying to sell something, but until today they were otherwise harmless. Now, however, I'm getting redirected to pages that are trying to further infect my comp (unsuccessfully, i believe, as my security software pops up to alert me to the threats).

I'm pretty sure it's only google's links that are affected, but I'm not completely positive on that point. If I click the google link again, it works, and I'm taken to the page I wanted.

MEASURES TAKEN: I've ran CCleaner, Super Anti-spyware (paid version), Malwarebyte's Anti-malware, Avast Antivir and combofix (just to be safe). I've ran all of these things several times, making sure they were all updated to the latest definitions/database/version. Also, the HOSTS file only contains: 127.0.0.1 localhost. I'm also running outpost firewall 2009. I've removed, then re-installed firefox, yet the problem persists.

Here's my DDS Log:
DDS (Ver_09-05-14.01) - NTFSx86
Run by HP_Administrator at 2:01:38.09 on Sat 05/30/2009
Internet Explorer: 7.0.5730.11 BrowserJavaVersion: 1.6.0_13
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1022.369... Read more

A:Google Links Redirect in Firefox

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 3 answers
RELEVANCY SCORE 60

Google links are often redirected in firefox, though it doesn't happen every time.

Thanks for any help!

Here is my HJT log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:22:59 AM, on 10/16/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\Mcshield.exe
C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Hp\HP Software ... Read more

Read other answers
RELEVANCY SCORE 59.6

I see that there are other people experiencing hijacks of Google search results using Firefox. I noticed this problem arise after running a series of fixes including COMBOFIX.http://www.bleepingcomputer.com/forums/ind...=firefox+hijackI followed one of the threads there and ran OTL.exe and TDSKiller.exe. Apparently, not all situations are the same since my Google links are still going somewhere else.Please advise.

A:Google search links are getting hijacked on Firefox

Hello,Please follow the instructions in ==>This Guide<== starting at Step 6.Once the proper logs are created, then make a NEW TOPIC and post it ==>HERE<== Please include a description of your computer issues and what you have done to resolve them.If you can produce at least some of the logs, then please create the new topic and explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the topic and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.Orange Blossom

Read other 1 answers
RELEVANCY SCORE 59.6

Hello! My computer also seems to be infected with ????? that causes redirects and slowdown. I've tried different anti-virus programs but no virus
was found...
DDS (Ver_09-06-26.01) - NTFSx86
Run by Frank at 9:03:47,50 on 01.07.2009
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_13
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1031.18.767.389 [GMT 2:00]
============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Programme\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\taskswitch.exe
C:\Programme\Synaptics\SynTP\SynTPLpr.exe
C:\Programme\DAEMON Tools\daemon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programme\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Programme\ProcessTamer\ProcessTamerTray.exe
svchost.exe
C:\Programme\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
C:\Programme\Gemeinsame Dateien\InterVideo\RegMgr\iviRegMgr.exe
C:\Programme\Java\jre6\bin\jqs.exe
C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32 ... Read more

A:Google links redirected; Firefox slow

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 2 answers
RELEVANCY SCORE 59.6

After searching for something via Google(This only happens on Firefox. I've been using Chrome in the mean time.), some of the links get redirected to other spam sites. I have Microsoft Security Essentials and it catches nothing. I've also ran Spybot a couple of times and didn't find anything either. Other than the redirecting, my computer seems slow lately and I fear I have some very unpleasant malware. I was going to install and run ComboFix but it says in the instructions not to do so without help. If anyone would help me with this I would be very grateful.Here is a screen shot I snagged as I was being rerouted to another site: http://i.imgur.com/k1JIV.png

A:Firefox: Google search links redirected.

Please follow these instructions: How to remove Google Redirects or the TDSS, TDL3, Alureon rootkit using TDSSKillerDouble-click on TDSSKiller.exe to run the tool for known TDSS variants.
Vista/Windows 7 users right-click and select Run As Administrator.When the program opens, click the Start Scan button.If malicious objects are found, they will show in the Scan results - Select action for found objects and offer three options.Ensure Cure is selected, then click Continue > Reboot now to finish the cleaning process. <- Important!!
Note: If 'Suspicious' objects are detected, you will be given the option to Skip or Quarantine. Skip will be the default selection.A log file named TDSSKiller_version_date_time_log.txt will be created and saved to the root directory (usually Local Disk C:).Copy and paste the contents of that file in your next reply.-- For any files detected as 'Suspicious' (except those identified as Forged to be cured after reboot) get a second opinion by submitting to Jotti's virusscan or VirusTotal. In the "File to upload & scan" box, browse to the location of the suspicious file and submit (upload) it for scanning/analysis.

Read other 10 answers