Over 1 million tech questions and answers.

Google redirect and randomly opening Internet Explorer (I dont even HAVE internet explorer!)

Q: Google redirect and randomly opening Internet Explorer (I dont even HAVE internet explorer!)

Google has been redirecting, google images will only load a certain number of images and internet explorer opens randomly, when I do not even have it installed or use it. Also, phantom music/ads/speaking play when no programs or windows are open. I have run rkill, MalwareBytes and TDSS killer with no infected files being found. And that's where the extent of my knowledge runs out! You guys have helped me fix everything else, but now I finally need to post as I cannot finx this one based on other advice.
Much appreciated,
Cheers.

RELEVANCY SCORE 200
Preferred Solution: Google redirect and randomly opening Internet Explorer (I dont even HAVE internet explorer!)

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

A: Google redirect and randomly opening Internet Explorer (I dont even HAVE internet explorer!)

Hello,Please follow the instructions in ==>This Guide<== starting at step 6. If you cannot complete a step, skip it and continue.Once the proper logs are created, then post them in a reply to this topic by using the Add Reply button.If you can produce at least some of the logs, then please create the post and explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the reply and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.Please note that I am not a member of the Malware Removal Team and will not be assisting you in removing the infection. I'm simply helping you to post the information they need in order to assist you.If HelpBot replies to your topic, PLEASE follow Step One so it will report your topic to the team members.Orange Blossom

Read other 23 answers
RELEVANCY SCORE 114

I have tried the AVG computer scan and it doesnt seem to be removing it.

The internet explorer opens up by itself only when another internet explorer webpage is open and I get more and more internet explorer webpages opening up - a new webpage opens up every few seconds. When the internet explorer opens by itself it opens to my homepage.

With regards to the redirection from google search pages - I often get the page being redirected to a webpage that has a blue curly d as an icon on the address bar. Another icon I have also seen is some sort of green sphere with squares drawn inside. I have recently been getting redirected to www.ebay.co.uk.

I also get some audio adverts playing in the background - I assume its a hidden internet explorer webpage.

My DDS report is given below

=================================================
DDS (Ver_09-12-01.01) - NTFSx86
Run by Anwar at 12:14:37.01 on 05/12/2009
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Professional 5.1.2600.3.1252.44.1033.18.1022.242 [GMT 0:00]

AV: AVG Internet Security *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
FW: AVG Firewall *enabled* {8decf618-9569-4340-b34a-d78d28969b66}

============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
C:\Program Files\AVG\AVG9\avg... Read more

A:Internet explorer keeps opening up by itself & google search links redirect me to random webpages

Hello royale_sufi Welcome to the BC HijackThis Log and Analysis forum. I will be assisting you in cleaning up your system.I ask that you refrain from running tools other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.In the upper right hand corner of the topic you will see a button called Options. If you click on this in the drop-down menu you can choose Track this topic. By doing this and then choosing Immediate E-Mail notification and then clicking on Proceed you will be advised when we respond the your topic and facilitate the cleaning of your machine.After 5 days if a topic is not replied to we assume it has been abandoned and it is closed.Download GMER Rootkit Scanner from here to your desktop. Double click the exe file. If it gives you a warning about rootkit activity and asks if you want to run scan...click on NO, then use the following settings for a more complete scan.

Click the image to enlarge it
In the right panel, you will see several boxes that have been checked. Uncheck the following ... Sections IAT/EAT Drives/Partition other than Systemdrive (typically C:\) Show All (don't miss this one) Then click the Scan button & wait for it to finish. Once done click on the [Save..] button, and in the File name area, type in "Gmer.txt" or it will sav... Read more

Read other 25 answers
RELEVANCY SCORE 105.6

Hi there. A few days ago, I found that when I turned my computer on and started surfing the net (using google chrome) internet explorer would always open up at random times with the message, 'internet explorer cannot open display the web page' and the web address is 'javascript:clickRefresh()'. Is it possible that I have some kind of spyware/malware of some sort?

Also, this may be unrelated but this morning the moment I opened up Google chrome my monitor developed a bluish tint. Would this have anything to do with internet explorer randomly opening? Any help would be greatly appreciated.

Here is my hijack this log. Thank you.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:31:21 AM, on 4/08/2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18928)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Users\HP_ADM~1\AppData\Local\Temp\Zrw.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\WerCon.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Windows\VM_STI.EXE
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\X3watch\x3watch.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\... Read more

A:Internet explorer keeps opening up randomly.

Read other 6 answers
RELEVANCY SCORE 105.6

This started suddenly after a windows update had been installed, etc. Currently I'm running Win 10.
I use Chrome browser normally, sometimes Firefox. I will open the browser and begin surfing and suddenly, IE will open itself to random websites. I have no idea why or how to stop it. I have searched through the tools section on IE to see if I can find a reason, to no avail. I've googled the problem and found no suitable response.
Can anyone help me? It's so annoying and frustrating.

Lisa
 

Read other answers
RELEVANCY SCORE 105.6

Hello all,

This is the almost the same post I put up in the ?Web Browsing?? forum about a week ago, and after carrying out most of the suggested virus scans I?m still having problems. A few weeks ago my internet explorer started randomly opening to my homepage and, if I was already browsing, it would redirect me to my homepage as well as opening up to 40-odd other windows and occasionally tabs. More often than not these pages are almost impossible to close down and more will take their place when they do, this happens to the point where everything freezes and I have to force it to shutdown. I'm running Internet Explorer 7, Avast4 and Zonealarm alongside Spyware Blaster. I have scanned with Spybot, Ad-aware, Malwarebytes and others. All have shown nothing. I understand that this may be hardware as I do have a quick launch key for the internet but as far as i know this wouldn't cause the browser to return to the homepage....or would it? In anycase when I tried this key, even pressing it a dozen or so times, the pages were a lot easier to close down than when even only 6 pages open at random.

Just after the original post I installed Google Toolbar, getting rid of the old one (MSN I think) I was still using, for almost a week there were no problems. Then yesterday the problem flared up again as bad as ever.

Any help would be very much appreciated.
Leeford

DDS (Ver_09-01-19.01) - NTFSx86
Run by Ben at 23:40:48.56 on 26/01/2009
Internet Explorer: 7.0.5730.11
Microsoft Windo... Read more

A:Internet Explorer randomly opening

Hi Leeford,Welcome to Bleeping Computer. My name is m0le and I will be helping you with your log. We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help.Please avoid changing anything on your computer (ie, downloading software) or taking unsupervised steps to remove any malware as this can make helping you much more difficult.So give me some time to go through your log and, in the meantime, let me know if you have already solved the issues or no longer need my help.Thanks.

Read other 13 answers
RELEVANCY SCORE 105.6

When i am using firefox it opens up randomly!!

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:12:52 PM, on 11/14/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16915)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\CTSvcCDA.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Creative\News\NewsUpd.EXE
C:\Program Files\Creative\ShareDLL\CtNotify.exe
C:\WINDOWS\RTHDCPL.EXE
C:\PROGRA~1\Yahoo!\browser\ybrwicon.exe
C:\Program Files\2Wire\2PortalMon.exe
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\WINDOWS\vVX3000.exe
C:\PROGRA~1\Yahoo!\browser\ycommon.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Creative\ShareDLL\MediaDet.E... Read more

A:Internet Explorer keeps opening up randomly!!

Hello and Welcome to TSF.

We no longer use HijackThis as our initial analysis tool.

We want all our members to perform the steps outlined in the link I'll give you below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

---------------------------------------------------------------------------------------------

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

Read other 1 answers
RELEVANCY SCORE 105.6

Plzz help::;
my internet explorer opening randomly .... this is due to virus or else???
I use avast, kaspersky, avg, nod 32, McAfee (all latest version ) but neither can detect that virus while avg detect that its location is in "temp" folder but cant' delete it....
I format my whole PC several times with different boot disk but after format as soon as home screen appears , internet explorer again opening randomly......
now what to do???????Dds
DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 8.0.7601.17514 BrowserJavaVersion: 10.17.2
Run by 4u at 21:35:53 on 2013-08-05
Microsoft Windows 7 Ultimate 6.1.7601.1.1252.1.1033.18.3488.2767 [GMT 5.5:30]
.
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ================
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\System32\spoolsv.exe
C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
C:\ProgramData\ChgService.exe
C:\Program Files\PANDORA.TV\PanService\PandoraService.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Program Files\PANDORA.TV\PanService\PanProcess.exe
C:\Program Files\HT\SystemA\svconn.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\HooTech\NetMeter\HooNetMeter.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Google\Update\1.3.21.15... Read more

A:internet explorer opening randomly

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Search and delete the AdWare, PUP (Potentially Unwanted Program) installed on your computer.Please download AdwCleaner by Xplode onto your Desktop.Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click on Delete tab follow the prompts.A log file will automatically open after the scan has finished.Please post the content of that log file with your next answer.You can find the log file at C:\AdwCleaner[Rn].txt (n is a number).=== Please downloadJunkware Removal Tool to your Desktop.Please close your security software to avoid potential conflicts.Run the tool by double-clicking it. If you are using Windows Vista or 7, right-mouse click it and select Run as administrator.The tool will open and start scanning your system.Please be patient as this can take a while to complete, depending on your system's specifications.On completion, a log (JRT.txt) is saved to your Desktop and will automatically open.Please post the contents of JRT.txt into your reply.===Please download ComboFix from any of the links below, and save it to your desktop. For information regarding this download, please visit this web page: TurorialLink 1Link 2IMPORTANT !!! Save ComboFix.exe to your Desktop1. Close any open browsers.2. Close/disable all ... Read more

Read other 2 answers
RELEVANCY SCORE 105.6

Plzz help::;
my internet explorer opening randomly .... this is due to virus or else???
I use avast, kaspersky, avg, nod 32, McAfee (all latest version ) but neither can detect that virus while avg detect that its location is in "temp" folder but cant' delete it....
I format my whole PC several times with different boot disk but after format as soon as home screen appears , internet explorer again opening randomly......
now what to do???????

A:internet explorer opening randomly

Plz help i was so upset for a month then i heard about this site...

Read other 19 answers
RELEVANCY SCORE 104.4

HiI am having a problem with internet explorer which has suddenly started opening windows containing ads for debts or anti-virus progs etc. I even get them when using firefox. They load on top of what I am looking at already and sometimes look up my browser.I have AVG running and use windows firewall as well as a netgear router. I have done a complete up to date system virus scan as well as using spybot and adaware. I have also just used mcafe stinger as instructed in your guidelines.My hijack log is posted below. I hope I am up to following any instructions as I have not done any dabbling with registry entries before.Thanks for any advice.Logfile of HijackThis v1.99.1Scan saved at 10:57:42, on 18/04/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16414)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exeC:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\Explorer.EXEC:\PROGRA~1\... Read more

A:Internet Explorer Windows Opening Randomly

Welcome to the BleepingComputer HijackThis Logs and Analysis forum zulasmum Please go to: C:\Program Files\HijackThis\HijackThis.exeRight click on Hijackthis.exe and select 'Rename', rename it to abc.batDouble click on abc.bat(which is still Hijackthis.exe),post that log into your next reply please.

Read other 11 answers
RELEVANCY SCORE 104.4

Recently I've noticed that theres constantly at least one, but often multiple instances of iexplore.exe running under SYSTEM. Whenever I try to end these processes, they reopen within a few seconds. Periodically, an Internet Explorer window will open a random webpage (I've specifically noticed it opening dragon naturally speaking pages). Also, not sure if it's related, but my wave sound level keeps being muted randomly, regardless of if I'm listening to music or not.

I'm currently running Windows XP SP3 and IE8. I'm using Avast Internet Security as my antivirus, and am running the protection module from MBAM as well, which constantly blocks access to 94.75.229.139. I've run full scans with MBAM, Rogue Remover, CWShredder, Spybot, Avast (boot time scan), Panda Cloud, ESET Online (which turned up several trojans, though I believe these were false positives and their removal did not remedy the issue), and cleaned my temporary files with ccleaner, yet most of those programs turned up nothing at all, and the problem continues. My system also randomly reboots and a message shows up upon login saying that the system has recovered from a serious error, though I am unsure if that is related to the other problem.

I'd appreciate any help I can get on finding and fixing whatever is causing this.

Thanks!

Read other answers
RELEVANCY SCORE 104.4

Hi,

I have a Windows XP Professional SP 3 running Internet Explorer 8.

Recently, IE8 has started to open randomly - I cannot see these windows, only in the task manager. It then starts to play snippets of ads. I can terminate via task manager but is very annoying.

I have SuperAntiSpyware, Malwarebytes Antimalware and have had AVG Anti-virus running. AVG detected a Tojan horse FakeAV_s.CK which was removed on 18/06/2012.

SuperAntiSpyware detected : Trojan.Agent/Gen-Nullo[Short]
C:\SYSTEM VOLUME INFORMATION\_RESTORE{7BF85892-5719-4F59-B362-B648D216FF15}\RP1814\A0187712.EXE

which was removed as well.

I have had no results (except for cookie trackers) in any other scans.

Can somebody provide some guidance on what to do?

Thanks,

John

A:Internet Explorer 8 - randomly opening and playing ads?

The infected folder from SuperAntiSpyware that he indicates, is in a system restore point.C:\SYSTEM VOLUME INFORMATION\_RESTORE « System restore point.Run a scan With MBAM:Update Malwarebytes' Anti-Malware (aka MBAM), then select Perform quick scan, then click Scan.When the scan is complete, click OK, then Show Results to view the results.Be sure that everything is checked, and click Remove Selected.When completed, a log will open in Notepad.Post the log back here.Be sure to restart the computer.The log can also be found here:C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txtOr at C:\Program Files\Malwarebytes' Anti-Malware\Logs\log-date.txt

Read other 7 answers
RELEVANCY SCORE 104.4

Plzz help::;
my internet explorer opening randomly
As i told do
MiniToolBox by Farbar Version: 13-07-2013
Ran by 4u (administrator) on 04-08-2013 at 10:08:49
Running from "C:\Users\4u\Desktop"
Microsoft Windows 7 Ultimate Service Pack 1 (X86)
Boot Mode: Normal
***************************************************************************
========================= Flush DNS: ===================================
Windows IP Configuration
Successfully flushed the DNS Resolver Cache.
========================= IE Proxy Settings: ==============================
Proxy is not enabled.
No Proxy Server is set.
"Reset IE Proxy Settings": IE Proxy Settings were reset.
========================= FF Proxy Settings: ==============================
"Reset FF Proxy Settings": Firefox Proxy settings were reset.
========================= Hosts content: =================================
========================= IP Configuration: ================================
# ----------------------------------
# IPv4 Configuration
# ----------------------------------
pushd interface ipv4
reset
set global icmpredirects=enabled
add address name="ethernet_6" address=192.168.56.1 mask=255.255.255.0
popd
# End of IPv4 configuration
Windows IP Configuration
Host Name . . . . . . . . . . . . : 4u-PC
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
Tunnel adapter Teredo Tunneling Pseudo-Interface:
Media State . .... Read more

A:Plzz help::;my internet explorer opening randomly

Please follow instructions at post 14 here.http://www.bleepingcomputer.com/forums/t/503196/internet-explorer-opening-randomly/#entry3120776

Read other 1 answers
RELEVANCY SCORE 103.6

Hi Guys,

Basically since about 3 days ago IE opens 3 times on startup every time, even in safe mode (It is not in startup menu that i could see). Further more it randomly opens throughout the day, sometimes up to 7 times!

If i open IE it always opens multiple windows, yesterday i DL'd Skype and Chrome, both of these work when I first boot, but after that they "Not Responding" and then if I try to open them it just instantly says "Not Responding Windows is searching for a solution"

I'm not sure if these factors are related or not, but would appreciate some help to at least fix the IE issue,
Bit of background, I have run MalWare AntiBytes (Upto date) and Super Anti Spyware (Uptodate) both found a couple of things, and removed, but nothing major.

Since then I have reinstalled Java, removing all old version (Not sure why, but Ive been meaning to do it for a while)

.
DDS (Ver_11-03-05.01) - NTFSx86
Run by Will at 8:23:36.62 on 16/04/2011
Internet Explorer: 8.0.6001.19048
Microsoft? Windows Vista? Home Premium 6.0.6001.1.1252.44.1033.18.3069.1524 [GMT 1:00]
.
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k rpcss
C... Read more

A:Internet Explorer Randomly Opening, new programs not working

Hello Moonyboy99 ! Welcome to BleepingComputer Forums! My name is Georgi and and I will be helping you with your computer problems. Before we begin, please note the following:I will working be on your Malware issues, this may or may not, solve other issues you have with your machine.The logs can take some time to research, so please be patient with me.Stay with the topic until I tell you that your system is clean. Missing symptoms does not mean that everything is okay.Instructions that I give are for your system only!Please do not run any tools until requested ! The reason for this is so I know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.Please perform all steps in the order received. If you can't understand something don't hesitate to ask.Again I would like to remind you to make no further changes to your computer unless I direct you to do so. I will not help you if you do not follow my instructions.IMPORTANT NOTE I am afraid that you may have a file infector on board which is never good.This would involve a full reformat as the only way to cure it.However, I would like to confirm my suspicions first.Since we are going to use a USB flash drive to transport files and logs back and forth we should disinfect the both computers to avoid re-infection.Please download Flash_Disinfector.exe by sUBs and save it to your desktop.Double-click Flash_Disinfector.exe to run it and follow a... Read more

Read other 18 answers
RELEVANCY SCORE 102.4

I haven't used IE in ages, but still it opens in Task Manager without opening any windows and just freezes everything. The only way I can type this is by keeping the Task Manager open and frequently closing iexplore.exe. PLEASE HELP ME!Logfile of HijackThis v1.99.1Scan saved at 12:41:22 AM, on 10/1/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\System32\CTsvcCDA.EXEC:\WINDOWS\System32\DRIVERS\dcfssvc.exeC:\WINDOWS\System32\nvsvc32.exeC:\Program Files\M-Audio Ozone\Install\Ozinst.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\System32\MsPMSPSv.exeC:\WINDOWS\system32\devldr32.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exeC:\Program Files\Java\jre1.5.0_01\bin\jusched.exeC:\WINDOWS\System32\DeltTray.exeC:\Program Files\DAEMON Tools\daemon.exeC:\WINDOWS\system32\hldrrr.exeC:\Program Files\Hewlett-Packard\Digital Imaging&... Read more

A:Internet Explorer Randomly Opening In Task Manager And Freezing Everything

Hi and welcome to Bleeping Computer! My name is Sam and I will be helping you. Please download FixWareout from one of these sites:http://downloads.subratam.org/Fixwareout.exehttp://www.bleepingcomputer.com/files/lonny/Fixwareout.exeSave it to your desktop and run it. Click Next, then Install, make sure "Run fixit" is checked and click Finish.The fix will begin; follow the prompts. You will be asked to reboot your computer; please do so. Your system may take longer than usual to load; this is normal.Finally, please post the contents of the logfile C:\fixwareout\report.txt, along with a new HijackThis log into this topic.

Read other 2 answers
RELEVANCY SCORE 101.2

i m using windows xp . suddenly the internet explorer has stopped opening the google search site. All other ites are opening. Can anyone hel-p. I have used hitman-pro , malwarebytes antimalware pro , ESET online scan ......and avast . still not solved the problem . google not opening i9n ie-8.
 

Read other answers
RELEVANCY SCORE 100.8

Hi

I have viruses affecting my browsers (internet explorer and firefox) but think they may be caused by seperate viruses.

Internet explorer randomly opens up on its own with spammy websites/ads
Firefox also redirects to other pages that the ones click on sometimes. Also got fake virus warning sites showing.

I have run malwarebytes and removed anything that was detected but the problems persist.

Also when i try to check firewall i get the message "due to an unidentified problem windows cannot display windows firewall settings"

A:internet explorer opens randomly to ads and firefox redirect

Greetings and Welcome to The Forums!!My name is Gringo and I'll be glad to help you with your malware problems.I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of usPlease do not run any tools unless instructed to do so.
We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.
Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.
Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.
A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE: At the top o... Read more

Read other 3 answers
RELEVANCY SCORE 98.4

YOU GUYS ROCK!!!! Looking at two seperate challenges. Google Redirect and Pop-up window at startup that states nothing more than UpgradeNetFrameWork with Microsoft in the titlebar. I am running Mcafee Total Protection and have run Hitman Pro 3.5. I have read a similar thread but am following your guidance not to proceed without guidance. Please find the attached logs that you requested and thank you in advance for the assist.

AATW

A:Internet Explorer Redirect from Google

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

Read other 11 answers
RELEVANCY SCORE 98.4

Hello,

I am having an issue with google search results being redirected in internet explorer 8. When trying to access nytimes.com my browser referenced ip 66.230.188.67 and then redirected to search results for a random topic. Please let me know if you need an HJT log. If this is responded to after 5:30pm eastern I will have to post the logs tomorrow.

Regards,
awk

A:Internet Explorer google redirect

Hello,Please follow the instructions in ==>This Guide<==. If you cannot complete a step, skip it and continue.Once the proper logs are created, then make a NEW TOPIC and post it ==>HERE<== Please include a description of your computer issues and what you have done to resolve them.If you can produce at least some of the logs, then please create the new topic and explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the topic and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.Orange Blossom

Read other 1 answers
RELEVANCY SCORE 98.4

I had AV Security Suite and went thru the process to remove it, now i get random internet explorer pop-ups and redirects when i click on link...i updated and ran malwarebytes earlier today and i got a pop-up talking about a backdoor trojan virus...it said it removed it but i still get the pop-ups and redirects. I think i have al the info below to start...this is the first time i have used this site and your help is much appreciated, thank you.DDS.txtDDS (Ver_10-03-17.01) - NTFSx86 Run by Frank Gutierrez at 17:44:42.85 on Sat 07/24/2010Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_17Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1023.450 [GMT -5:00]AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcssvchost.exesvchost.exeC:\WINDOWS\system32\devldr32.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\brsvc01a.exeC:\WINDOWS\system32\LEXBCES.EXEC:\WINDOWS\system32\brss01a.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\LEXPPS.EXEC:\PROGRA~1\AVG\AVG8\avgtray.exeC:\Program Files\Java\jre6\bin\jusched.exeC:\Program Files\Common Files\Real\Update_OB\realsched.exeC: ... Read more

A:Internet explorer 8 and Google Redirect

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.In the upper right hand corner of the topic you will see a button called Options. If you click on this in the drop-down menu you can choose Track this topic. By doing this and then choosing Immediate E-Mail notification and then clicking on Proceed you will be advised when we respond to your topic and facilitate the cleaning of your machine.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.Double click DeFogger to run the tool. The ap... Read more

Read other 5 answers
RELEVANCY SCORE 98.4

Hi,

I've been getting Google redirects to different websites (such as infomash) since yesterday. My computer is running XP Professional, and I ran Malwarebytes yesterday and didn't find anything. This morning a fake scanner (Live Security Platinum) started running, so I shutdown the computer, rebooted and then ran Malwarebyte again. This time it found 9 infected files and removed them. Malwarebytes now shows it's clean again, but I'm still getting redirects.

This afternoon I ran SecurityCheck, but it didn't create a log file and diplayed an error that said "The procedure entry point MigrateWinsockConfiguration could not be located in the dynamic link library MSWSOCK.dll".

I also ran Farbar Service Scanner, MiniToolBox, and aswMBR. The logs for these are shown below.

Can you please help me?

Thanks!

__________________________________________________________________
Farbar Service Scanner Version: 19-06-2012 01
Ran by Shawn (administrator) on 19-06-2012 at 16:47:18
Running from "C:\Documents and Settings\Shawn\Desktop"
Microsoft Windows XP Professional Service Pack 3 (X86)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo IP is accessible.
Yahoo.com is accessible.
Windows Firewall:
=============

Firewall Disabled... Read more

A:Google redirect with Internet Explorer

Welcome, let do a couple more things here.Go to Start ... Run and type in cmdA dos Window will appear.Type in the dos window: netsh winsock resetClick on the enter key.Reboot your system to complete the process.Please follow our Removal Guide here Remove Live Security Platinum .After reading how the malware is misleading you ...You will move to the Automated Removal InstructionsAfter you completed that, post your scan log here,let me know how things are.The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.Copy and paste the contents of that report in your next reply. Be sure to post the complete log to include the top portion which shows MBAM's database version and your operating system.Please download TDSSKiller.zip and and extract it.Run TDSSKiller.exe. Click Start scan.When it is finished the utility outputs a list of detected objects with description.
The utility automatically selects an action (Cure or Delete) for malicious objects.
The utility prompts the user to select an action to apply to suspicious objects (Skip, by default). Let the options as it is and click ContinueLet reboot if needed and tell me if the tool needed a reboot.Click on Report and post the contents of the text file that will open.

Note: By default, the utility outputs the log into system disk (it is usually the disk with installed operating system, C:\) root folder. The Log has a name like: TDSSKiller.Version_Date_Time_log.txt.If TDSSKiller does not run, try ... Read more

Read other 3 answers
RELEVANCY SCORE 98.4

My google search results are being redirected to other sites when I click on them. I have tried malwarebytes, tdsskiller.exe, and superantispyware pro, but nothing has of yet had any effect on the problem. Can anyone offer a little help? Thanks.

A:Google redirect using internet explorer

Did they find and remove anything?Is this XP or another?Are you on a router? Are there other machines on it and do they redirect?Are you running Firefox or IE?Your HOSTS file may be infected. Reset the HOSTS fileAs this infection also changes your Windows HOSTS file, we want to replace this file with the default version for your operating system. Some types of malware will alter the HOSTS file as part of its infection. Please follow the instructions provided in How do I reset the hosts file back to the default?To reset the hosts file automatically,go HERE click the button. Then just follow the prompts in the Fix it wizard.ORClick Run in the File Download dialog box or save MicrosoftFixit50267.msi to your Desktop and double-click on it to run. Then just follow the promots in the Fix it wizard.

Read other 3 answers
RELEVANCY SCORE 98

EDIT: MOVED to Virus,Trojan and Malware Removal Logs ~~boopmeI have a system whose computer had some malware on it. Malwarebytes in conjunction with Security Essentials did eventually clean up the machine, however now when the user searches for objects in Internet Explorer 9 it will sometimes mess with the URL's that show up in the search results. What I mean is that I can search in Google for Cats. The search comes up with s list of results and you have the hyperlinks listed that you can click on to go to the website listed. Sometimes the hyperlinks work fine, other times the hyperlinks are hijacked and redirect you to bogus search/advertisement sites. This is getting to be a bigger problem as latelt I have cleaned up several family members computers with similar issues and I would prefer not to have to reload from scratch if possible.The steps I have done to try and stop this Hijack scenario.Ran Combofix to make sure rootkits were not present it comes up clean now.Flushed DNSReset IE several timesDeleted NIC from Device manager so it can reload drivers and stack.recreated users profile, still happens even on a brand new user account.Disabled all add ons in Internet Explorer.Ran Hijack this, and have included the logs in case that helps.Anything you can help me to get this new problem eradicated would be great.Thanks DaveLogfile of Trend Micro HijackThis v2.0.4Scan saved at 8:52:51 AM, on 5/7/2012Platform: Windows 7 SP1 (WinNT 6.00.3505)MSIE: Internet Explorer v9.00... Read more

A:Internet Explorer 9 Google Search results are randomly hijacked

Hello Dave and welcome at Bleeping Computer!Please download DDS and save it to your desktop.Disable any script blocking protection.Double click dds.com to run the tool..When done, DDS will open two logs (DDS.txt and Attach.txt).Save both reports to your desktop.Please include the contents of DDS.txt in your next reply.Download the GMER Rootkit Scanner. Unzip it to your Desktop.Before scanning, make sure all other running programs are closed and no other actions like a scheduled antivirus scan will occur while the scan is being performed. Do not use your computer for anything else during the scan. Double click GMER.exe.
If it gives you a warning about rootkit activity and asks if you want to run a full scan...click on NO, then use the following settings for a more complete scan.. In the right panel, you will see several boxes that have been checked. Ensure the following are UNCHECKED ... IAT/EAT Drives/Partition other than Systemdrive (typically C:\) Show All (don't miss this one)

Click the image to enlarge it Then click the Scan button & wait for it to finish. Once done click on the [Save..] button, and in the File name area, type in "ark.txt" Save the log where you can easily find it, such as your desktop.**Caution**Rootkit scans often produce false positives. Do NOT take any action on any "<--- ROOKIT" entries Please copy and paste the report into your Post.If GMER hangs up or causes your PC to crash, just skip that step and post ... Read more

Read other 16 answers
RELEVANCY SCORE 98

I am a new member. I have Qv06 opening as my browser on Google Chrome and Internet Explorer. I have tried many methods to delete it, and was directed here by someone from another site who said that they got rid of Qv06 using ADWCleaner and then scanning with True Junk Removal Tool.     
 
Is this what I should do, and in the meantime, how dangerous is Qv06?
 
Thank you!

A:Qv06 opening as my browser on Google Chrome and Internet Explorer

Welcome aboard   Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2 SecurityCheck may produce some false warning(s), so leave the results reading to me. Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeClick Go and post the result. Download Malwarebytes' Anti-Malware (aka MBAM): http://www.malwarebytes.org/products/malwarebytes_free to your desktop.* Double-click mbam-setup.exe and follow the prompts to install the program.* At the end, be sure a checkmark is placed next to Update Malwareby... Read more

Read other 7 answers
RELEVANCY SCORE 97.6

Hi,I was recently infected with the Windows Repair bug and fixed (maybe its still there) it via one of the posts on the sites. So I'm thinking I might have had a couple of other infections that were dormant for a while or Malwarebytes or Symantec never noticed.After fixing that, I noticed Google Chrome stopped working. When I started googling in Firefox and IE i noticed the page would redirect. And then an the "Internet Explorer Script Error" with the URL pointing to apparent spam urls "http;//celebrity-gossip.net/ashley-tisdale..." as an example. So I updated and ran Malwarebytes AM, Symantec & Microsoft Defender to see what they would. Symantec found an bloodhound virus in an archived drive. And i cleaned whatever Malwarebytes found, forgot now since its been a 4 days.I've tried the TDDSkiller.exe and that wouldnt launch. I tried renaming it too, but nothing.I found another thread and tried cleaning with SuperAntiSpyware and Hitman.I don't remember the correct order I've ran these, but followed according to the threads, including safed mode, internet off, etc...Anyways, any help is appreciated. here is the log:.DDS (Ver_11-03-05.01) - NTFSx86 Run by Mikael at 21:35:05.37 on Thu 04/07/2011Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_24Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2047.902 [GMT -7:00].AV: Symantec AntiVirus Corporate Edition *Enabled/Updated* {FB06448E-52B8-493A-90F3-E43226D3305C}.===========... Read more

A:Google Redirect & Internet Explorer Script Error & Google Chrome not working

Hello and welcome to the forums!My secret agent name on the forums is SweetTech (you can call me ST for short), it's a pleasure to meet you. I would be glad to take a look at your log and help you with solving any malware problems.If you have since resolved the issues you were originally experiencing, or have received help elsewhere, please inform me so that this topic can be closed. If you have not, please adhere to the guidelines below and then follow instructions as outlined further below:Logs from malware removal programs (OTL is one of them) can take some time to analyze. I need you to be patient while I analyze any logs you post. Please remember, I am a volunteer, and I do have a life outside of these forums.
Please make sure to carefully read any instruction that I give you. Attention to detail is important! Since I cannot see or directly interact with your computer I am dependent on you to "be my eyes" and provide as much information as you can regarding the current state of your computer.
If you're not sure, or if something unexpected happens, do NOT continue! Stop and ask!
In Windows Vista and Windows 7, all tools need to be started by right clicking and selecting Run as Administrator!
Do not do things I do not ask for, such as running a spyware scan on your computer. The one thing that you should always do, is to make sure sure that your anti-virus definitions are up-to-date!
Please do not use the Attachme... Read more

Read other answers
RELEVANCY SCORE 97.2

I'm using Windows XP sp2. When I do a Google search on Internet Explorer 8, then click a link from one of the results, I get redirected to a sales ad. When I use Firefox 6, no problems at all. (Now, as of 5 minutes ago, Firefox too is redirecting.) This problem just started happening today. Also, there is a hidden temp file on my desktop with a nonsensical name. It keeps reappearing. A couple of months ago this pc was infected with a fake antivirus program. I only had access to the run box but with the help of my laptop, I was able to run some antimalware programs and fix it. I've tried running SuperAntiSpyware, Avira, and a slew of other suggested programs to fix the redirector but it hasn't helped.

The requested files are shown and attached. Thank you in advance for your assistance.

.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_20
Run by Administrator at 22:56:59 on 2011-09-05
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1014.359 [GMT -7:00]
.
AV: AntiVir Desktop *Enabled/Updated* {AD166499-45F9-482A-A743-FDD3350758C7}
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
svchost.exe
C:\Program Files\SUPERAntiSpyware\SASCORE.... Read more

A:Google redirect affecting Internet Explorer

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.Do not run any other tool untill instructed to do so!Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.Run Combofix:You may be asked to install or update the Recovery Console (Win XP Only) if this happens please allow it to do so (you will need to be connected to the internet for this)Before you run Combofix I will need you to turn off any security software you have running, If you do not know how to do this you can find out >here< or >here<Combofix may need to reboot your computer more than once to do its job this is normal.You can download Combofix from one of these links.Link 1Link 2Link 3 1. Close any open browsers or any other programs that are open.2. Close/disable all anti virus and anti malware programs so they do not interfere with the r... Read more

Read other 30 answers
RELEVANCY SCORE 97.2

Hi wondering if anyone can help, evertime I do a search in Google and click on one of the results, Internet Explorer takes me to some other randon page, typicaly some form of adevertising. I have run AVG, Super AntiSpyware and MalwareBytes as detailed in the 8 Steps to Remove Malware with no success. I have run Hijack This and posted the results below.

Would appreciate any suggestions. Many thanks. Jon

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:22:14, on 17/12/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\Program Files\AVG\AVG9\avgrsx.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\RTHDCPL.EXE
C:\PROGRA~1\AVG\AVG9\avgtray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DNA\btdna.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\AVG\AVG9\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\j... Read more

Read other answers
RELEVANCY SCORE 97.2

Hi there.

I'm having an issue with Google redirecting my searches as well as Internet Explorer running in the background. I was infected with Windows Recovery malware and executed the steps listed on this website to remove it. That did away with most of the problems, but I still encounter the following things:

- A "script error" for Internet Explorer, even though I don't have it running. The one I most recently received said: "Error: Object doesn't support this property or method" and came from the domain "www.gossipcenter.com"

- Mysterious advertisement sounds (no doubt coming from the invisible iExplore) popping up at random intervals

- As mentioned, searches made on Google inexplicably redirect me about 40% of the time

As far as I know these are the only issues. Your help would be greatly appreciated!

.
DDS (Ver_11-03-05.01) - NTFSx86
Run by Inga at 12:36:34.50 on Sun 04/24/2011
Internet Explorer: 7.0.6002.18005 BrowserJavaVersion: 1.6.0_22
Microsoft? Windows Vista? Ultimate 6.0.6002.2.1252.1.1033.18.3325.1257 [GMT -5:00]
.
AV: Norton 360 *Disabled/Outdated* {88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855}
AV: AVG Anti-Virus 2011 *Enabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
SP: AVG Anti-Virus 2011 *Enabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Norton 360 *Disabled/Outdated* {33A8BBD2-AA01-20A2-213B-0B8EB45B02E8}
FW: Norton 3... Read more

A:Google Redirect and Internet Explorer running

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

Read other 16 answers
RELEVANCY SCORE 97.2

Hello. I have Symantec Antivirus and use Malwarebytes' Anti-Malware occasionally for random virus checks.
I started having problems with my computer running XP Professional yesterday after clicking on a link from youtube. Since then, I've been getting annoying pop ups on Internet Explorer, even though I never use IE and usually use Firefox. Then I started noticing that some of the Google searches I was doing were redirecting me to different pages. I've used MBAM to try to rid myself of this problem, but after it told me to reboot to remove remaining threats, I had the popup problem once again.

Please help!!

This is my DDS log.
DDS (Ver_10-12-12.01) - NTFSx86
Run by phrst4 at 18:46:20.50 on Sat 12/11/2010
Internet Explorer: 6.0.2900.2180 BrowserJavaVersion: 1.6.0_20
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1023.279 [GMT -5:00]

AV: Symantec AntiVirus Corporate Edition *Enabled/Outdated* {FB06448E-52B8-493A-90F3-E43226D3305C}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\Program Files\NetMotion Client\messerv.exe
C:\Program Files\Intel\WiFi\bin\S24EvMon.exe
svchost.exe
svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files... Read more

A:Spontaneous Internet Explorer Pop Ups + Google Redirect

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review your topic and do their best to resolve your issues.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Follow the instructions that pop up for postin... Read more

Read other 19 answers
RELEVANCY SCORE 97.2

Hello,

In the last week or so most of the times I search anything on google using Firefox or Internet Explorer I get redirected to other websites. I tried running malware software but they can't seem to find any infected file. Could you please help me?

Thanks in advance,
Matt

A:Google redirect with Firefox and Internet Explorer

Hi mc2013,Please follow these instructions in the link below and post the requested logs in your reply to this thread. I'll look them over and help you stop the redirects.Preparation Guide For Use Before Using Malware Removal Tools and Requesting Help-etavares

Read other 2 answers
RELEVANCY SCORE 97.2

I am having trouble with malware that I can't get rid of. I have run super antispyware, Malwarebytes Antimalware, and Spybot Search and Destroy both in regular mode and safe mode. There were several malware agents and one trojan removed but now when I google search in Firefox it will display the search sites but when you click on the link it just shows a blank page with the address in the toolbar. If you highlight and refresh the toolbar address the link will open fine. In IE it will not open the pages at all. Attached is the Hijack this log. Any help is appreciated.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:04:39 AM, on 10/9/2011
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe
C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe
C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Windows\AsScrPro.exe
C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Users\Mike\Downloads\HijackThis.exe
C... Read more

A:Internet Explorer inoperable and Google Redirect

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything. We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here. To help Bleeping Computer better assist you please perform the following steps:*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/422621 <<< CLICK THIS LINK If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.*************************************************** If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lo... Read more

Read other 16 answers
RELEVANCY SCORE 97.2

Recently, everytime I click on a Google link or Yahoo link, I get redirected to another site not related to the website wanting to visit. However, if I type the link directly, it doesn't redirect me. I searched that many call it VX2, but the solutions don't seem to help me or the files listed aren't there. I am running Internet Explorer 7 (newest) on my Windows XP laptop.

I am running a scan through etrust at the moment, but it never popped up and said I had a trojan or virus.

Thanks in Advance.
 

A:Internet Explorer redirect ad links with Google

Ok. After many scans, I didn't find a thing. Not sure about the hijack log I did last night and this morning. I also did a pest scan through etrust, but nothing was found except tracking cookies which I deleted through Internet Explorer in Tools.

U3 McAfee Anti-Virus
U3 McAfee Anti-Virus
Last scanning date and time: 01/07/09 22:56:15

Total scan summary: Total files: 284675
Possibly infected files: 0
Cleaned files: 0
Deleted files: 0
Moved files: 0

Memory scan complete: Total files: 17
Clean: 17
Possibly infected files: 0
Cleaned files: 0

Scan of drive C:\*.* complete: Total files: 284632
Clean: 282857
Possibly infected files: 0
Cleaned files: 0
Non-critical error(s): 2

Drive not ready D:\

Scan of drive E:\*.* complete: Total files: 26
Clean: 26
Possibly infected files: 0
Cleaned files: 0 Click to expand...


From etrust Virus Scanner:
File Status Infection Name Infected Object Infection Type Detection Method Engine C:\WINDOWS\Temp\hsperfdata_SYSTEM\596 Can not determine if file is infected or not. Open Error None None Vet C:\WINDOWS\system32\config\system.LOG Can not determine if file is infected or not. Open Error None None Vet C:\WINDOWS\system32\config\system Can not determine if file is infected or not. Open Error None None Vet C:\WINDOWS\system32\config\software.LOG Can not determine if file is infected or not. Open Error None None Vet C:\WINDOWS\system32\config\software Can not determine if file is infected or not. Open Er... Read more

Read other 1 answers
RELEVANCY SCORE 97.2

Hi,

I am new to this forum therefore sorry if i do anything incorrect.

I think I may have the google redirect virus. When using Internet Explorer, every time I do a search from google then try to click on the link it redirects me to a different page. Also, Spybot, Malwarebytes, Ad-Aware and Kaspersky online virus scan will not load and run to try and diagnose this problem.

I have used google in Foxfire and it also re-directs.

What do I need to do?

Please help.

Thanks in advance.

A:Internet explorer/ Google redirect virus

Welcome to BC-------------------------The process of cleaning your computer may require you to temporarily disable some security programs. If you are using SpyBot Search and Destroy, please refer to Note 2 at the bottom of this page.Please download Malwarebytes Anti-Malware and save it to your desktop.alternate download link 1alternate download link 2Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan.If an update is found, the program will automatically update itself.Press the OK button to close that box and continue.If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to install.On the Scanner tab:Make sure the "Perform Quick Scan" option is selected.Then click on the Scan button.If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button. The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Re... Read more

Read other 3 answers
RELEVANCY SCORE 96.4

As of yesterday, all search engines I have used redirect me to inappropriate or undesired sites while idled. Norton Antivirus didn't detect the problem, and I am not well versed in computers and technology. Can someone please tell me what I should do? I need some advice from an expert. Thank you so much!

-Holly

A:Google and Yahoo redirect through Internet explorer and Firefox

Hello HollyAnne1988, Welcome to TSF.

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html
After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one will be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

Read other 1 answers
RELEVANCY SCORE 96.4

All links in google are rediricting me to other sites. I cannot delete any of my temporary internet files. I have microsoft security essentials and it says everything is fine along with malware bytes. I followed the step by step insturctions in this Post.DDS.TXT.DDS (Ver_11-03-05.01) - NTFSx86 Run by Andy at 12:47:29.69 on Sun 05/15/2011Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_23Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2047.1271 [GMT -5:00].AV: Microsoft Security Essentials *Enabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}.============== Running Processes ===============.C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exec:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exeC:\WINDOWS\System32\svchost.exe -k netsvcssvchost.exesvchost.exesvchost.exeC:\Program Files\ASoft\AutoExitWHS\AEClientSvc.exeC:\Program Files\Juniper Networks\Common Files\dsNcService.exeC:\Program Files\Hewlett-Packard\HP MediaSmart Server\MSSConnectorService.exeC:\WINDOWS\system32\svchost.exe -k HPServiceC:\Program Files\Java\jre6\bin\jqs.exeC:\Program Files\LogMeIn\x86\LMIGuardianSvc.exeC:\Program Files\LogMeIn\x86\RaMaint.exeC:\Program Files\LogMeIn\x86\LogMeIn.exeC:\Program Files\Hewlett-Packard\HP MediaSmart Server�... Read more

A:Google Redirect and Internet Explorer Script Errors

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

Read other 47 answers
RELEVANCY SCORE 96.4

I was directed here by the advisor who was helping me with my issue. Original post here: http://www.bleepingcomputer.com/forums/topic402872.html

I had a virus and keep having random IE processes pop up, sometimes hidden and playing random ad noises. I also have a Google redirect virus which redirects my search results when I use Google.

So far I've run Malwarebytes, SuperAntiSpyware, GMER, and DDS. I will post the logs in the following posts. Thank you!

Malwarebytes log:

Malwarebytes' Anti-Malware 1.51.0.1200
www.malwarebytes.org

Database version: 6851

Windows 6.0.6001 Service Pack 1 (Safe Mode)
Internet Explorer 7.0.6001.18000

6/13/2011 9:43:14 PM
mbam-log-2011-06-13 (21-43-14).txt

Scan type: Full scan (C:\|D:\|)
Objects scanned: 389124
Time elapsed: 1 hour(s), 3 minute(s), 33 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
c:\Windows\System32\config\systemprofile\AppData\Local\haglwv.exe (Trojan.FakeAV) -> Quarantined an... Read more

A:Random Internet Explorer Ads and Google Redirect Virus

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

Read other 15 answers
RELEVANCY SCORE 96.4

I can usually fix my own computer problems, but this one has pretty much got me beat. I've tried running Goored Fix, no luck with that one. To start off, I will post my HiJackThis logs.I do not use any antivirus, because I usually stick to the same sites and can usually remove malware, etc by myself when/if it happens.The problem: Sometimes when I do google searches and I click the results, I will randomly get redirected to sites, sales pages, etc.. seems like referral commissions. Internet is slower in general.Internet explorer randomly crashes, even though I never use it.As you can see in my logs, I attempted to install Malwarebytes but it did not work.QUOTELogfile of Trend Micro HijackThis v2.0.2Scan saved at 1:53:02 AM, on 16/01/2010Platform: Windows Vista SP1 (WinNT 6.00.1905)MSIE: Internet Explorer v8.00 (8.00.6001.18865)Boot mode: NormalRunning processes:C:\Windows\system32\taskeng.exeC:\Windows\system32\Dwm.exeC:\Windows\Explorer.EXEC:\Windows\RtHDVCpl.exeC:\Windows\notepad.exeC:\Windows\system32\ctfmon.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\Mozilla Firefox\firefox.exeC:\Windows\system32\SearchProtocolHost.exeC:\Windows\system32\SearchFilterHost.exeC:\Program Files\Skype\Toolbars\Shared\SkypeNames.exeC:\Users\Mitch\Downloads\HijackThis.exeR1 - HKCU\Softwa... Read more

A:Google redirect / Internet explorer random crashes.

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 2 answers
RELEVANCY SCORE 96.4

hello.. i am infected with a hijacker that redirects internet explorer to all sorts of sites including btcar.com and other when clicking on a google search result. for example, when doing a search for "stuff", a get results like stuff.com (stuff magazines homepage). when clicking on the search result however, i get sent to many weird, silly and stupid websites. when i do a search using opera or firefox browsers this problem doesn't happen. i did a safe mode scan with symantec anti virus, ad-aware, and spybot but that did not fix the problem. I did an online system scam with "spynomore.com" website, maybe a mistake and it found several entries which i don't know what i can do with. such as a "hidden file" kdcfy.exe, located in c:\windows\system32. also a registry entry of the same file name.Logfile of HijackThis v1.99.1Scan saved at 5:01:54 PM, on 4/30/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16414)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\csrss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\... Read more

A:Internet Explorer / Google Redirect To Btcar, Others.. Kd?.exe Hijacker?

Howdy burke91,Welcome to BleepingComputer. No infection jumping out in the log posted, but your description and the file you did find gives us a hint on some next best steps to do. Let's do them.First, please disable SpyBot's TeaTimer, as this will interfere with repairs.1) Run Spybot-S&D2) Go to the Mode menu, and make sure "Advanced Mode" is selected3) On the left hand side, choose Tools -> Resident4) Uncheck "Resident TeaTimer" and OK any prompts5) Restart your computer.You can re-enable TeaTimer once your system is clean.Then your log shows you have two antivirus softwares loaded there, which will cause conflicts and slowdowns. You should choose between Norton and BitDefender8, depending on which one works for you and considerations like recent payments and registrations, then uninstall the other.----------------------------------Download ComboFix.exe from here to your desktop, and click the downloaded file to run the repair.When the command window opens, select 1 (and Enter). Allow the scan to run. When completed a text window will appear - please copy/paste the contents back here. This log can also be found at C:\ComboFix.txt.A caution - do not touch your mouse/keyboard until the scan has completed. The scan will temporarily disable your desktop, and if interrupted may leave your desktop disabled. If this occurs, please reboot to restore the desktop.----------------------------------Go here and download the free version of SUPERAntiSpywar... Read more

Read other 11 answers
RELEVANCY SCORE 96.4

Scour redirect virus in Google via Internet Explorer
Redirects me to http://63.209.69.107/see.php?
I have tried lots of things to resolve this but it has been persistent
Using Norton 360/spybot all the time and have not had a serious problem in years until now.
Attached:
1. HijackThis log.
2. dds.txt
3. attach.txt
4. ark.txt (crashed blue screen of death twice, finally run in safe mode with networking).
5. sysinfo
==================
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:17:32 PM, on 1/10/2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16457)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Norton 360\Engine\5.2.2.3\ccSvcHst.exe
C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE
C:\Program Files (x86)\Dell DataSafe Local Backup\COMPONENTS\SCHEDULER\STSERVICE.EXE
C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe
C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe
C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files (x86)\Cyberlink\PowerDVD9\PDVD9Serv.exe
C:\Program Files (x86)\Cyberlink\Shared files\brs.exe
C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe
C:\Program Files (x86)\Sensible Vision\Fast Access\FATrayMon.exe
C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
C:\Program Files (x86)\Sendori\... Read more

A:Scour redirect virus in Google via Internet Explorer

Read other 16 answers
RELEVANCY SCORE 95.2

first time posting, I hope I get everything right:

windows vista computer:

I am having problems with google redirecting searches on Firefox 3.6.15 but not IE. It seems that webpages are loading slower than normal. Thank you for helping.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:07:44 PM, on 3/16/2011
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.19019)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Apoint\Apoint.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\System32\hkcmd.exe
C:\Program Files\Adobe\Acrobat 8.0\Acrobat\acrotray.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\Apoint\ApMsgFwd.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\NewTech Infosystems\Backup Now EZ\BackupNowEZtray.exe
C:\Program Files\Sony\VAIO Update 3\VAIOUpdt.exe
C:\Program Files\Sony\Wireless Switch Setting Utility\Switcher.exe
C:\Program Files\Global Graphics\gDoc\DocCreatorClient.exe
C:\Program Files\Sony\VAIO Camera Utility\VCUServe.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Apoint\Apntex.exe
C:\Win... Read more

A:Firefox/google redirect virus not affecting internet explorer

Read other 6 answers
RELEVANCY SCORE 95.2

When I have an open connection to the internet, pop-ups for Internet Explorer Script Error continually surface. On occasion, an Adobe Flash Installation Warning message will pop-up, asking whether I want to install the thing. While using Firefox and searching on Google, I am redirected to ad sites instead of the links I click on the results page...using a sites address in the address bar is not a problem.

Any help getting my system back to "normal" would be sincerely appreciated.

ddthound

.
DDS (Ver_11-03-05.01) - NTFSx86
Run by Katy at 18:19:00.15 on Fri 05/06/2011
Internet Explorer: 6.0.2900.5512 BrowserJavaVersion: 1.6.0_20
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1014.216 [GMT -7:00]
.
AV: McAfee VirusScan *Disabled/Updated* {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}
AV: ESET Smart Security 4.2 *Disabled/Updated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
FW: ESET Personal firewall *Disabled*
FW: *Disabled*
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\Pro... Read more

A:Adware, Internet Explorer Script Error Pop-Ups, Google Redirect

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

Read other 12 answers
RELEVANCY SCORE 95.2

Hey everyone, new user to this forum. Whenever I search for something using google or yahoo on firefox or IE, the links that show up on the search page redirect me to an incorrect page. I've seen this topic come up before, and I tried some of the suggestions, to no avail. Please help. This is the log I received from hijackthis

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:34:11 PM, on 9/3/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\ibmpmsvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\TpShocks.exe
C:\PROGRA~1\ThinkPad\PkgMgr\HOTKEY\TPHKMGR.exe
C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe
C:\Program Files\ThinkPad\PkgMgr\HOTKEY\TPONSCR.exe
C:\Program Files\ThinkPad\PkgMgr\HOTKEY_1\TpScrex.exe
C:\Program Files\IBM\Messages By IBM\ibmmessages.exe
C:\IBMTOOLS\UTILS\ibmprc.exe
C:\... Read more

A:Google/search Engine redirect using firefox and internet explorer

not to be annoying but just wanted to bump this thread up... seems like there's a bunch of other people with the same problem as me... if you guys are currently working on the problem then i'm sorry for being a nuisance.. just want to get this issue resolved. thanks again in advance!

Read other 1 answers
RELEVANCY SCORE 95.2

Hello,

I've been having an issue with a redirects when clicking on links from google searches. I am also having an issue with Internet Explorer showing as active and using large amounts of memory when I open my task manager. When I close the instances (there are 2 at a time) they reopen almost immediately. I've run Malwarebytes and have found nothing.

A:Google redirect and Internet Explorer open in task manager

Greetings and Welcome to The Forums!!My name is Gringo and I'll be glad to help you with your malware problems.I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of usPlease do not run any tools unless instructed to do so.
We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.
Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.
Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.
A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE: At the top o... Read more

Read other 18 answers
RELEVANCY SCORE 95.2

My computer has been infected for a few days now with the google redirect virus i tried hit-man pro like others suggested and it still persists.I would like to try combo fix based on others reviews,but I am unfamiliar with its use.Can someone with experience please help me get rid of this virus.Thanks

I have recently tried Malwarebytes by Anti-Malware and that seemed to remove several harmful trogans.Google search was able to work quickly after that,but then reverted back to being redirected to STARFEED website. Please help.

A:Google redirect problems please help effects firefox and internet explorer

Hello,Please follow the instructions in ==>This Guide<== starting at step 6. If you cannot complete a step, skip it and continue.Once the proper logs are created, then post them in a reply to this topic by using the Add Reply button.If you can produce at least some of the logs, then please create the post and explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the reply and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.Please note that I am not a member of the Malware Removal Team and will not be assisting you in removing the infection. I'm simply helping you to post the information they need in order to assist you.If HelpBot replies to your topic, PLEASE follow Step One so it will report your topic to the team members.Orange Blossom

Read other 3 answers
RELEVANCY SCORE 94.4

My pc is so slow that it takes ages to play a song in wmp11...etc etc.
Ive used tools like ad-aware and registry mechanic, tune up utilities, etc etc. But still no improvement. It used to be just fine, until I installed some pay-for-viewing add program. I have uninstalled it since then, but the slowness remains. And the processor is hogged, at the highest level, even though i killed many a startup processes.
Heres the hijacklog:

Logfile of HijackThis v1.99.1
Scan saved at 7:43:49 PM, on 9/28/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\LClock\LClock.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\DAP\DAP.EXE
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Google\GoogleToolbarNotifier\1.0.720.3640\GoogleToolbarNotifier.exe
C:\Program Files\Analog Devices\ADSL USB MODEM\dslmon.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Opera\Opera.exe
C:\Program Files\Windows Media Player\wmplaye... Read more

A:Solved: PC too slow, internet explorer crashes randomly, explorer service quits

Read other 16 answers
RELEVANCY SCORE 94.4

There was a similar problem with someone a few days ago but it was never resolved.

I just removed "Windows Recovery" virus using direction I found on this site. But I still have the following 3 problems. 1: Random audio starts playing. They are the same few clips over and over. 2: When on google and I click on search results I get redirected to various sites. Many of them mention Mevio. 3: Get Internet Explorer Error Boxes which state "An error has occurred in the script on this page". These error messgaes seem to go along with the random audio that has been playing. I have deleted all temporary internet files and all other Temp files but it hasn't helped.

I have DDS.txt, Attach.txt and Rootkit unhooker logs that I can post here.

Also, this might be related. My entire user drive has disappeared, my Word docs, pictures, music etc. But through my recent documents tab on windows and on Microsoft Word, clicking on recent projects, I can still access them. Which makes me think they aren't completely deleted. Any ideas?

Thanks for your help

A:Bookit Infection: Google redirect/Internet Explorer script error

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.Do not run any other tool untill instructed to do so!Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.I would like to get a better look at your system, please do the following so I can get some more detailed logs.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will appear Click OKDeFogger may ask you to reboot the machine, if it does - click OKDo not re-enable these drivers until otherwise instructed.IMPORTANT! If you receive an error message while running DeFogger, please post the log defogger_disable which will appear on your desktop.Download DDS:Please dow... Read more

Read other 3 answers
RELEVANCY SCORE 93.2

I can't seem to shake this one...I also had a fake windows security program as well that I removed, but nothing I try seems to fix my problem. I have tried running Malwarebytes and i get no files to remove.

A:Google Redirect Virus, Internet explorer script error and random music...help!

Please follow the instructions in ==>This Guide<==. If you cannot complete a step, skip it and continue.Then post your DDS and GMER logs as a reply to this topic. Once you have done that I will remove my reply and consolidate the posts so that you retain your correct place in the queue.If you can produce at least some of the logs, then please explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the reply and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.

Read other 2 answers