Over 1 million tech questions and answers.

IE and Firefox Redirecting URL / IE and Firefox Not Loading

Q: IE and Firefox Redirecting URL / IE and Firefox Not Loading

I am having a major issue here. 50% of the time when I attempt to open IE or Firefox the process will show as loaded in task manager but program will not load resulting in me having to open taskmgr and ending the process only to try to launch it again. When the browsers do load the majority of the time when I attempt to visit a url via a search from google or yahoo I get redirected to some random website. This has been going on for about a week now and is quite frustrating. Having tried to fix the problem for countless hours I have decided to turn to the professionals here. Listed below are the DDS and ATTACH logs.

Also, I do use Daemon tools as well as bittorrent but for the purpose of this I have uninstalled both. I am also running Win7 64-bit so I was unable to run GMER. Thanks in advance.
DDS (Ver_10-11-10.01) - NTFS_AMD64
Run by Ben at 17:42:20.26 on Sun 11/14/2010
Internet Explorer: 8.0.7600.16385 BrowserJavaVersion: 1.6.0_22
Microsoft Windows 7 Ultimate 6.1.7600.0.1252.1.1033.18.4095.2725 [GMT -5:00]

AV: Antivirus *On-access scanning enabled* (Outdated) {28e00e3b-806e-4533-925c-f4c3d79514b9}
SP: Spybot - Search and Destroy *enabled* (Outdated) {ED588FAF-1B8F-43B4-ACA8-8E3C85DADBE9}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\atieclxx.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe
C:\Windows\system32\svchost.exe -k bthsvcs
C:\ASUS.SYS\config\DVMExportService.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\reader_sl.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Orb Networks\Orb\bin\Orblauncher.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Program Files (x86)\Orb Networks\Orb\bin\Orb.exe
C:\Windows\system32\sppsvc.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\taskhost.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\vssvc.exe
C:\Windows\System32\svchost.exe -k swprv
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Users\Ben\Downloads\dds.scr
C:\Windows\system32\conhost.exe

============== Pseudo HJT Report ===============

BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL
BHO: {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - No File
BHO: Office Document Cache Handler: {b4f3a835-0e21-4959-ba22-42b3008e02ff} - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
TB: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
TB: {32099AAC-C132-4136-9E9A-4E364A424E17} - No File
uRun: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
mRun: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
mRun: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
mPolicies-explorer: NoActiveDesktop = 1 (0x1)
mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
mPolicies-system: ConsentPromptBehaviorAdmin = 0 (0x0)
mPolicies-system: EnableInstallerDetection = 0 (0x0)
mPolicies-system: EnableSecureUIAPaths = 0 (0x0)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
mPolicies-system: PromptOnSecureDesktop = 0 (0x0)
IE: E&xport to Microsoft Excel
IE: Google Sidewiki...
IE: Se&nd to OneNote
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL
BHO-X64: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL
BHO-X64: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~3\Office14\URLREDIR.DLL
BHO-X64: URLRedirectionBHO - No File
BHO-X64: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
TB-X64: DAEMON Tools Toolbar: {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll
TB-X64: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
mRun-x64: [XboxStat] "C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe" silentrun
mRun-x64: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
STS-X64: Windows DreamScene: {E31004D1-A431-41B8-826F-E902F9D95C81} - %SystemRoot%\System32\DreamScene.dll
SEH-X64: Groove GFS Stub Execution Hook: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL

================= FIREFOX ===================

FF - ProfilePath - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\8fc8q5zs.default\
FF - prefs.js: browser.search.selectedEngine - DAEMON Search
FF - prefs.js: browser.startup.homepage - www.yahoo.com
FF - prefs.js: network.proxy.type - 0
FF - component: C:\Program Files (x86)\Mozilla Firefox\extensions\[email protected]\components\kavlinkfilter.dll
FF - plugin: C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL
FF - plugin: C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL
FF - plugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: C:\Users\Ben\AppData\Local\Google\Update\1.2.183.39\npGoogleOneClick8.dll
FF - plugin: C:\Users\Ben\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
FF - plugin: C:\Users\Ben\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
FF - HiddenExtension: Java Console: No Registry Reference - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}

---- FIREFOX POLICIES ----
C:\Program Files (x86)\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true);
C:\Program Files (x86)\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--fiqz9s", true); // Traditional
C:\Program Files (x86)\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--fiqs8s", true); // Simplified
C:\Program Files (x86)\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--j6w193g", true);
C:\Program Files (x86)\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
C:\Program Files (x86)\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4a87g", true);
C:\Program Files (x86)\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbqly7c0a67fbc", true);
C:\Program Files (x86)\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbqly7cvafr", true);
C:\Program Files (x86)\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--kpry57d", true); // Traditional
C:\Program Files (x86)\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--kprw13d", true); // Simplified

============= SERVICES / DRIVERS ===============

R0 BtHidBus;Bluetooth HID Bus Service;C:\Windows\System32\drivers\BtHidBus.sys [2009-9-24 23304]
R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\System32\drivers\vwififlt.sys [2009-7-13 59904]
R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\System32\atiesrxx.exe [2009-11-24 202752]
R2 AsSysCtrlService;ASUS System Control Service;C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe [2010-1-9 90112]
R2 DvmMDES;DeviceVM Meta Data Export Service;C:\ASUS.SYS\config\DVMExportService.exe [2009-4-10 294912]
R2 SBSDWSCService;SBSD Security Center Service;C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2010-8-6 1153368]
R3 ManyCam;ManyCam Virtual Webcam, WDM Video Capture Driver;C:\Windows\System32\drivers\ManyCam_x64.sys [2008-3-13 27136]
R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2009-6-10 187392]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
S3 androidusb;ADB Interface Driver;C:\Windows\System32\drivers\androidusb.sys [2009-9-4 31744]
S3 AODDriver;AODDriver;C:\Program Files (x86)\AMD\OverDrive\amd64\AODDriver.sys [2009-10-22 21048]
S3 btnetBUs;Bluetooth PAN Bus Service;C:\Windows\System32\drivers\btnetBus.sys [2009-9-24 27776]
S3 ENTECH64;ENTECH64;C:\Windows\System32\drivers\Entech64.sys [2010-1-10 12744]
S3 epmntdrv;epmntdrv;C:\Windows\System32\epmntdrv.sys [2010-9-10 16776]
S3 EuGdiDrv;EuGdiDrv;C:\Windows\System32\EuGdiDrv.sys [2010-9-10 9096]
S3 IvtBtBUs;IVT Bluetooth Bus Service;C:\Windows\System32\drivers\IvtBtBus.sys [2009-8-26 30344]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2010-1-21 30963576]
S3 netr28ux;RT2870 USB Extensible Wireless LAN Card Driver;C:\Windows\System32\drivers\netr28ux.sys [2009-5-25 966144]
S3 netr7364;RT73 USB Wireless LAN Card Driver for Vista;C:\Windows\System32\drivers\netr7364.sys [2009-6-10 707072]
S3 osppsvc;Office Software Protection Platform;C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-1-9 4925184]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service;C:\Windows\System32\drivers\vwifimp.sys [2009-7-13 17920]
S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2010-4-19 1255736]
S4 AODService;AODService;C:\Program Files (x86)\AMD\OverDrive\AODAssist.exe [2009-10-22 136544]

=============== Created Last 30 ================

2010-11-13 06:46:18 -------- d-----w- C:\DFU
2010-11-13 04:57:13 -------- d-----w- C:\Users\Ben\AppData\Local\Activision
2010-11-13 04:57:00 77656 ----a-w- C:\Windows\System32\XAPOFX1_5.dll
2010-11-13 04:57:00 74072 ----a-w- C:\Windows\SysWow64\XAPOFX1_5.dll
2010-11-13 04:57:00 527192 ----a-w- C:\Windows\SysWow64\XAudio2_7.dll
2010-11-13 04:57:00 518488 ----a-w- C:\Windows\System32\XAudio2_7.dll
2010-11-13 04:57:00 239960 ----a-w- C:\Windows\SysWow64\xactengine3_7.dll
2010-11-13 04:57:00 176984 ----a-w- C:\Windows\System32\xactengine3_7.dll
2010-11-13 04:44:26 -------- d-----w- C:\Program Files (x86)\Activision
2010-11-12 16:28:53 8006480 ----a-w- C:\PROGRA~3\Microsoft\Windows Defender\Definition Updates\{F06909D8-24F3-4B71-A22F-DA7F5789AB93}\mpengine.dll
2010-11-12 04:20:27 -------- d-----w- C:\Users\Ben\DoctorWeb
2010-11-12 01:14:44 -------- d-----w- C:\Users\Ben\AppData\Roaming\com.id.travelocityDesktopApplication.945EA8FFAD8503D7A99EBC64831F957F5157DD31.1
2010-11-12 01:14:23 -------- d-----w- C:\Users\Ben\AppData\Local\Adobe
2010-11-10 23:29:14 472808 ----a-w- C:\Windows\SysWow64\deployJava1.dll
2010-11-10 23:29:14 472808 ----a-w- C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll
2010-11-10 23:17:55 521448 ----a-w- C:\Windows\System32\deployJava1.dll
2010-11-10 23:10:43 -------- d-----w- C:\Users\Ben\AppData\Local\Apple
2010-11-09 00:00:12 -------- d-----w- C:\Program Files (x86)\DAEMON Tools Toolbar
2010-11-08 05:37:36 -------- d-----w- C:\Users\Ben\AppData\Roaming\AVG10
2010-11-08 05:35:29 -------- d--h--w- C:\PROGRA~3\Common Files
2010-11-08 05:32:57 -------- d-----w- C:\PROGRA~3\AVG10
2010-11-08 05:31:58 -------- d-----w- C:\Program Files (x86)\AVG
2010-11-06 04:59:02 150200 ----a-w- C:\Program Files (x86)\Mozilla Firefox\extensions\[email protected]\components\kavlinkfilter.dll
2010-11-02 15:44:35 961024 ----a-w- C:\Windows\System32\CPFilters.dll
2010-11-02 15:44:35 641536 ----a-w- C:\Windows\SysWow64\CPFilters.dll
2010-11-02 15:44:35 552960 ----a-w- C:\Windows\System32\msdri.dll
2010-11-02 15:44:35 288256 ----a-w- C:\Windows\System32\MSNP.ax
2010-11-02 15:44:35 258560 ----a-w- C:\Windows\System32\mpg2splt.ax
2010-11-02 15:44:35 204288 ----a-w- C:\Windows\SysWow64\MSNP.ax
2010-11-02 15:44:35 199680 ----a-w- C:\Windows\SysWow64\mpg2splt.ax
2010-11-02 15:44:23 27008 ----a-w- C:\Windows\System32\drivers\Diskdump.sys
2010-10-26 21:53:08 -------- d-----w- C:\PROGRA~3\SUPERAntiSpyware.com
2010-10-25 17:54:39 -------- d-----w- C:\Program Files (x86)\GridinSoft Trojan Killer
2010-10-25 17:50:36 -------- d-----w- C:\PROGRA~3\pIeDj01200
2010-10-25 17:08:18 -------- d-----w- C:\Program Files (x86)\CDYNE

==================== Find3M ====================

2010-10-19 15:41:44 270720 ------w- C:\Windows\System32\MpSigStub.exe
2010-09-11 0929 506368 ----a-w- C:\Windows\SysWow64\msxml.dll
2010-09-10 05:35:44 135168 ----a-w- C:\Windows\apppatch\AppPatch64\AcXtrnal.dll
2010-09-10 05:35:43 347648 ----a-w- C:\Windows\apppatch\AppPatch64\AcLayers.dll
2010-09-08 16:17:46 94208 ----a-w- C:\Windows\SysWow64\QuickTimeVR.qtx
2010-09-08 16:17:46 69632 ----a-w- C:\Windows\SysWow64\QuickTime.qts
2010-09-08 05:36:17 1192960 ----a-w- C:\Windows\System32\wininet.dll
2010-09-08 05:34:34 57856 ----a-w- C:\Windows\System32\licmgr10.dll
2010-09-08 04:30:04 978432 ----a-w- C:\Windows\SysWow64\wininet.dll
2010-09-08 04:28:15 44544 ----a-w- C:\Windows\SysWow64\licmgr10.dll
2010-09-08 04:16:38 482816 ----a-w- C:\Windows\System32\html.iec
2010-09-08 03:35:30 1638912 ----a-w- C:\Windows\System32\mshtml.tlb
2010-09-08 03:22:31 386048 ----a-w- C:\Windows\SysWow64\html.iec
2010-09-08 02:48:16 1638912 ----a-w- C:\Windows\SysWow64\mshtml.tlb
2010-09-01 05:12:09 12625920 ----a-w- C:\Windows\System32\wmploc.DLL
2010-09-01 04:23:49 12625408 ----a-w- C:\Windows\SysWow64\wmploc.DLL
2010-09-01 02:58:34 3123712 ----a-w- C:\Windows\System32\win32k.sys
2010-08-31 04:32:30 954752 ----a-w- C:\Windows\SysWow64\mfc40.dll
2010-08-31 04:32:30 954288 ----a-w- C:\Windows\SysWow64\mfc40u.dll
2010-08-27 06:14:02 236032 ----a-w- C:\Windows\System32\srvsvc.dll
2010-08-27 05:46:48 9728 ----a-w- C:\Windows\SysWow64\sscore.dll
2010-08-27 03:38:04 463360 ----a-w- C:\Windows\System32\drivers\srv.sys
2010-08-27 03:37:48 402944 ----a-w- C:\Windows\System32\drivers\srv2.sys
2010-08-27 03:37:26 161792 ----a-w- C:\Windows\System32\drivers\srvnet.sys
2010-08-26 05:27:28 148992 ----a-w- C:\Windows\System32\t2embed.dll
2010-08-26 04:39:58 109056 ----a-w- C:\Windows\SysWow64\t2embed.dll
2010-08-21 06:38:47 1024512 ----a-w- C:\Windows\System32\wmpmde.dll
2010-08-21 06:36:49 340992 ----a-w- C:\Windows\System32\schannel.dll
2010-08-21 06:31:06 633856 ----a-w- C:\Windows\System32\comctl32.dll
2010-08-21 06:29:47 558592 ----a-w- C:\Windows\System32\spoolsv.exe
2010-08-21 05:36:33 738816 ----a-w- C:\Windows\SysWow64\wmpmde.dll
2010-08-21 05:36:24 224256 ----a-w- C:\Windows\SysWow64\schannel.dll
2010-08-21 05:33:24 530432 ----a-w- C:\Windows\SysWow64\comctl32.dll

============= FINISH: 17:43:21.31 ===============

RELEVANCY SCORE 200
Preferred Solution: IE and Firefox Redirecting URL / IE and Firefox Not Loading

I recommend downloading and running DAP. It can help sort out any driver and firmware related issues on your system

It's worked out well for many of us in the past.

You can download it direct from this link http://downloaddap.org. (This link will open the download page of DAP so you can save a copy to your computer.)

A: IE and Firefox Redirecting URL / IE and Firefox Not Loading

Hi,

Welcome to TSF.

Sorry for the delay in getting to your thread.

I am K27 and will be assisting with any Malware issues that you have

Please subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.


If you still require assistance, please post a fresh set of DDS logs.

Thanks.

Read other 19 answers
RELEVANCY SCORE 82.4

Google keeps redirecting my searches, I think it has something to do with (goingonearth.com) and then redirects my search to yellow pages or something irrelevant. Also every time I load any site on firefox, the browser freezes for about 5-7 seconds then loads the site. That also happens when I press the start button, it takes about 3 seconds to open the start menu.Here is my DDS log:.DDS (Ver_11-03-05.01) - NTFS_AMD64 Run by Sagar at 21:50:39.75 on Sat 03/26/2011Internet Explorer: 8.0.7600.16385 BrowserJavaVersion: 1.6.0_23Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.3828.1860 [GMT -4:00].SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}.============== Running Processes ===============.C:\windows\system32\wininit.exeC:\windows\system32\lsm.exeC:\windows\system32\svchost.exe -k DcomLaunchC:\windows\system32\nvvsvc.exeC:\windows\system32\svchost.exe -k RPCSSC:\Program Files\BitDefender\BitDefender 2011\vsserv.exeC:\windows\System32\svchost.exe -k LocalServiceNetworkRestrictedC:\windows\System32\svchost.exe -k LocalSystemNetworkRestrictedC:\windows\system32\svchost.exe -k netsvcsC:\windows\system32\svchost.exe -k LocalServiceC:\Program Files (x86)\EgisTec BioExcess\EgisService.exeC:\windows\system32\nvvsvc.exeC:\Program Files (x86)\EgisTec Po... Read more

A:Google keeps redirecting and firefox lags when loading any websites

Hi Sagar Patel, and welcome to Bleeping Computer.Firstly,Please launch Malwarebytes' Anti-Malware, click the Update tab, and then Check for Updates. Then choose the Scanner tab and select "Perform Quick Scan", then click Scan.The scan may take some time to finish,so please be patient.When the scan is complete, click OK, then Show Results to view the results.Make sure that everything is checked, and click Remove Selected.When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.Copy&Paste the entire report in your next reply.Secondly,Download OTL.exe by OldTimer to your Desktop.Close all windows and double click OTL.exe.In the "Custom Scans/Fixes" window (under the light green bar) paste the following in bold:

netsvcs
drivers32
%SYSTEMDRIVE%\*.*
%systemroot%\*. /mp /s
CREATERESTOREPOINT
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs

Click Run Scan and let the program run uninterrupted.When the scan completes, it will open two Notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL. Post both logs in this thread.You may need to use two posts to get it all.

Read other 61 answers
RELEVANCY SCORE 65.2

My firefox inexplicably stopped working properly recently. There are certain webpages that fail to load whatsoever (espn.com, for instance), and there are other webpages that load extremely slowly (somethingawful.com, for instance). Both of these websites work fine on IE.

I have uninstalled and reinstalled firefox but that didn't cure the situation. I have Symantec antivirus and it is always running. I don't usually download any sort of file that should put my computer in jeopardy, but I cannot figure out why it's running so poorly recently.

I hope I'm attaching all of the correct files:


Oh, also, file attachments don't work in Firefox or IE.



Deckard's System Scanner v20071014.68
Run by jp on 2008-03-04 16:53:44
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Successfully created a Deckard's System Scanner Restore Point.


-- Last 5 Restore Point(s) --
47: 2008-03-04 22:53:50 UTC - RP345 - Deckard's System Scanner Restore Point
46: 2008-03-04 22:18:36 UTC - RP344 - Software Distribution Service 3.0
45: 2008-03-02 17:10:50 UTC - RP343 - System Checkpoint
44: 2008-02-26 23:24:13 UTC - RP342 - System Checkpoint
43: 2008-02-23 07:27:17 UTC - RP341 - Software Distribution Service 3.0


-- First Restore Point --
1: 2007-12-09 02:12:29 UTC - RP299 - System Checkpoint


Backed up registry hives.
P... Read more

A:Firefox is not loading certain webpages or is loading them very slowly, IE loads them

Can anyone help me out?

Read other 5 answers
RELEVANCY SCORE 63.6

Hi all,

This just started happening today. Anytime I go to any site...I get redirected to another random site. I have tried uninstall and reinstalling and still it has the same effect. I have use Avast and Malwarebytes and still the problem has not been fixed.
Any help would be GREATLY appreciated!

Darkwater

A:Firefox redirecting

DownloadTDSSkillerLaunch it.Click on change parameters-Select TDLFS file systemClick on "Scan".Please post the LOG report(log file should be in your C drive) Please download GMER from here(doesnot work on 64 bit OS)http://www2.gmer.net/download.phpTemporarily disable any real-time active protection so your security programs will not conflict with gmer's driver.GMER will open to the Rootkit/Malware tab and perform an automatic Full Scan when first run. (do not use the computer while the scan is in progress)If you receive a WARNING!!! about rootkit activity and are asked to fully scan your system...click NO.Now click the Scan button. If you see a rootkit warning window, click OK.When the scan is finished, click the Save... button to save the scan results to your Desktop. Save the file as gmer.log.Click the Copy button and paste the results into your next reply. DownloadaswMBRLaunch it, allow it to download latest Avast! virus definitionsClick the "Scan" button to start scan.After scan finishes,click on Save logPost the log results here

Read other 9 answers
RELEVANCY SCORE 63.6

I have both IE 6 and Firefox 2 installed on my PC. Firefox is the default browser (as well as my browser of choice). However, there are certain times that I NEED to use IE to look at a web page.

PROBLEM: When I type a URL in IE 6 it automatically opens the web page in Firefox. The only thing that I can do with Internet Explorer is open it. I can't visit any websites. If I type the URL into IE (or use a bookmark), it automatically opens the site in Firefox.

This just started happening a few weeks ago and I can't think of any changes that I've made to my PC that would cause this to happen.

Any suggestions?

P.S. I don't want to upgrade to IE 7

Thanks!

A:IE 6 redirecting to Firefox - help!

I'm new here so take anything I say with a grain of salt. That much having been said, I've used Firefox for sometime now and have had very little trouble. When I specifically need to use IE (Grr!!) I go in and temporarily change the default browser from Firefox to IE. Believe, I don't leave it that way for long. You might want to have a word processing program (ex: Open Office) minimized in the tray at the bottom to copy/paste url's on so as not to loose them while you make the default changes.

You can't hurt your computer by making these temporary changes I suggested and it might just solve your problem.

Read other 2 answers
RELEVANCY SCORE 63.6

I have both IE 6 and Firefox 2 installed on my PC. Firefox is the default browser (as well as my browser of choice). However, there are certain times that I NEED to use IE to look at a web page.

PROBLEM: When I type a URL in IE 6 it automatically opens the web page in Firefox. The only thing that I can do with Internet Explorer is open it. I can't visit any websites. If I type the URL into IE (or use a bookmark), it automatically opens the site in Firefox.

This just started happening a few weeks ago and I can't think of any changes that I've made to my PC that would cause this to happen.

Any suggestions?

P.S. I don't want to upgrade to IE 7

Thanks!
 

A:IE 6 redirecting to Firefox

I had the same problem as you did and had to figure up a solution on my own. I couldn't find a solution anywhere else. It's not refined and I don't know if it will work for you or not.

First, you might want to try seeing if you can make IE your default web browser and then resetting it back to Firefox. Go into internet options(IE) and under programs tab put a check mark to have it check for default then restart IE and tell it you want it to be your default. After, go back into Firefox options and under the main tab and click on check now and restore it back as the default.

The above steps didn't work for me because IE wasn't checking to see if it was default even after the checkmark. So, if this didn't work, open up a windows explorer window(like my computer). Go into tools and the folder options and click on the file types tab. In the (NONE) under extensions scroll down to and highlight under File Types: URL:Hypertext Transfer Protocol and click on advanced. Then highlight open and click on edit. Note: You may want to record the values in the fields before making any changes in case you end up needing to restore this for whatever reason. I made the following changes in the "Editing action for type:" window:

Application used to perform this action: "C:\Program Files\Internet Explorer\iexplore.exe" -nohome

^^^^ NOTE: Be sure to remember to use the directory and location of your iexplore.exe as it may not be the same

Use... Read more

Read other 3 answers
RELEVANCY SCORE 63.6

Redirecting to sites like google-analytics.com, kennyross.com, truecar.com
Firefox version: 34.0.5
Malwarebytes: finds nothing
 *some online forums I found on the topic talk about hosts file, mine was modified on 12/9/14 (not by me) and now it is a "text document" versus a "file" and has after the #s:
127.0.0.1       localhost
::1                 localhost
*other solutions included add-ons that blocked google-analytics.com, but that was only blocking the annoyance and not fixing the problom.
Thank you for your help

A:Firefox Redirecting

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/559838 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

Read other 32 answers
RELEVANCY SCORE 63.6

My system is Windows XP and If been getting pop ups, redirect to website and intermittent sound adds over my headset. I've ran ESET NOD 32 but it hasn't found anything. I also can't add volume control on my toolbar. I run Hijack here is the results

Logfile of HijackThis v1.99.1
Scan saved at 7:48:59 PM, on 6/22/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIACA.EXE
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Blinkx\blinkx.exe
C:\Program Files\NCSoft\Launcher\NCLauncher.exe
C:\Program Files\Broderbund\Mavis Beacon Teaches Typing 15\minimavis.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\libusbd-nt.exe... Read more

A:redirecting firefox

Download TDSSKiller and save it to your Desktop.
Extract the file and run it.
Once completed it will create a log in your C:\ drive
Please post the contents of that log

 

Read other 1 answers
RELEVANCY SCORE 63.6

When i try to click on Google result .. Firefox is redirecting to some other site.
Is it a virus problem?
I've attached the DDS.txt and Attach.zip to this post plz help me .. i don't know what to do.....

A:Firefox Redirecting

When i click some google search results.. it is redirecting to some anti-virus scan site..
the link is http://your-antivrus-scan11.com/scn1...EyNi42MQIMMAkM
Is it harmful??
PLZ help me..

Read other 4 answers
RELEVANCY SCORE 63.6

Hey Guys, for a few weeks now I've been living with a redirect mostly while accessing Facebook and Ebay. At first I was redirected to freelotto and now smileycentral. It seems it starts with lwken.com......something something and then takes me to smileycentral, a simple backclick takes me back.Win XP SP3Latest FirefoxLatest AVGI've run Hijackthis:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 19:54:56, on 12/17/2009Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\AVG\AVG9\avgchsvx.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\AVG\AVG9\avgrsx.exeC:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exeC:\Program Files\AVG\AVG9\avgcsrvx.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\Program Files\AVG\AVG9\avgwdsvc.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\WINDOWS\eHome\ehRecvr.exeC:\WINDOWS\eHome\ehSched.exeC:\Program Files\Canon\IJPLM\IJPL... Read more

A:Redirecting in Firefox

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below I will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Follow the instructions... Read more

Read other 2 answers
RELEVANCY SCORE 63.6

I have both IE 6 and Firefox 2 installed on my PC. Firefox is the default browser (as well as my browser of choice). However, there are certain times that I NEED to use IE to look at a web page.

PROBLEM: When I type a URL in IE 6 it automatically opens the web page in Firefox. The only thing that I can do with Internet Explorer is open it. I can't visit any websites. If I type the URL into IE (or use a bookmark), it automatically opens the site in Firefox.

This just started happening a few weeks ago and I can't think of any changes that I've made to my PC that would cause this to happen.

Any suggestions?

P.S. I don't want to upgrade to IE 7

Thanks!

A:IE 6 redirecting to Firefox - help!

Uninstall Firefox and I'm sure that will fix it, I have the same problem and can't fix it. You should copy and paste this problem into the Firefox forum for help. I'm really sorry that I cant fix this one you should look for extensions for firefox.. maybe one of them will fix it

Read other 3 answers
RELEVANCY SCORE 63.6

Started having problems with both Firefox 3.0.16 and IE7 redirecting to random sites a week or so ago. It doesn't always do it but it is typically to generic search sites, but sometimes they mimic an antivirus type window directing that you are infected and to click here to remove it. Not really sure what to do until I ran accross your great site. This computer is our home desktop and gets fairly neglected when it comes to routine maintenance. Looks like I might be paying for that now. Looking to clean it up and do a thorough service on it.

In the post is my DDS Report per the prep guide with the attach.txt and ark.txt from RootRepeal zipped and attached.

Thanks for your time and any help you can provide.

Craig

DDS (Ver_09-12-01.01) - NTFSx86
Run by Craig & Bobbi at 23:57:53.27 on Tue 01/05/2010
Internet Explorer: 7.0.6001.18000 BrowserJavaVersion: 1.6.0_03
Microsoft? Windows Vista? Home Basic 6.0.6001.1.1252.1.1033.18.1012.295 [GMT 1:00]

AV: Symantec Endpoint Protection *On-access scanning disabled* (Updated) {FB06448E-52B8-493A-90F3-E43226D3305C}
SP: Symantec Endpoint Protection *disabled* (Updated) {6C85A515-B91D-4D2B-AF18-40984A4A8493}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
FW: PC-cillin Internet Security - Firewall *disabled* {3E790E9E-6A5D-4303-A7F9-185EC20F3EB6}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Win... Read more

A:Redirecting in Firefox and IE7

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. Please include a clear description of the problems you're having, along with any steps you may have performed so far.Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.Even if you have already provided information about your PC, we need a new log to see what has changed since you originally posted your problem.Please download OTL from following mirror:This is THE MirrorSave it to your desktop.Double click on the icon on your desktop.Click the "Scan All Users" checkbox.Push the button.Two reports will open, copy and paste them in a reply here:OTL.txt <-- Will be openedExtra.txt <-- Will be minimizedIn the upper right hand corner ... Read more

Read other 28 answers
RELEVANCY SCORE 63.6

Hi all,
I have a firefox redirecting issue that has become a major threat. Narenxp (bless this man!) has been helping me fix the problem till we ran into a snag where He doesnt have the tools to rid the malware.

Here's the link to forum before:
http://www.bleepingcomputer.com/forums/topic442353.html/page__p__2594408__fromsearch__1#entry2594408

If anyone can be of help, I would be forever greatful.

Thank you in advance,
Darkwater

A:Firefox redirecting

Hello Mr Darkwater and welcome to BC.

Please read the preparation guide: http://www.bleepingcomputer.com/forums/topic34773.html
Post the required logs when ready and we will begin from there. Thank you.

Read other 28 answers
RELEVANCY SCORE 63.6

Hi there! I've been having a problem with Firefox (and IE, for that matter) redirecting typed in and linked websites to shopping and other search sites. I ran AVG, and always have Symantec Endpoint Protection 11 on. As I was researching I also ran Goored and SDfix. I am having trouble getting DDS Tool to download, and my RootRepeal report is running now, but I wanted to get this up here and started.Here's the HiJackThis log:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 3:51:36 PM, on 11/17/2009Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16876)Boot mode: NormalRunning processes:C:WINDOWSSystem32smss.exeC:WINDOWSsystem32winlogon.exeC:WINDOWSsystem32services.exeC:WINDOWSsystem32lsass.exeC:WINDOWSsystem32Ati2evxx.exeC:WINDOWSsystem32svchost.exeC:WINDOWSSystem32svchost.exeC:Program FilesAVGAVG9avgchsvx.exeC:Program FilesSymantecSymantec Endpoint ProtectionSmc.exeC:Program FilesAVGAVG9avgrsx.exeC:Program FilesAVGAVG9avgcsrvx.exeC:Program FilesCommon FilesSymantec SharedccSvcHst.exeC:WINDOWSsystem32spoolsv.exeC:Program FilesAVGAVG9avgwdsvc.exeC:Program FilesWIDCOMMBluetooth Softwarebinbtwdins.exeC:WINDOWSsystem32Ati2evxx.exeC:Program FilesPure Digital TechnologiesFlipShareFlipShareService.exeC:WINDOWSExplorer.EXEC:Program FilesAVGAVG9avgnsx.exeC:Program FilesJavajre6binjqs.exeC:Program FilesCommon FilesLogiShrdLVCOMSERLVComSer.exeC:Program FilesCommon FilesLogiShrdLVMVFMLVPrcSrv.exeC:WINDOWSSystem32svchost.exeC:WINDOWSSystem32sv... Read more

A:Firefox redirecting

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. Please include a clear description of the problems you're having, along with any steps you may have performed so far.Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.Even if you have already provided information about your PC, we need a new log to see what has changed since you originally posted your problem.Please download OTL from following mirror:This is THE MirrorSave it to your desktop.Double click on the icon on your desktop.Click the "Scan All Users" checkbox.Push the button.Two reports will open, copy and paste them in a reply here:OTL.txt <-- Will be openedExtra.txt <-- Will be minimizedIn the upper right hand corner ... Read more

Read other 10 answers
RELEVANCY SCORE 63.6

Hello! Having issues with Firefox randomly redirecting/opening new tabs. Often times after a Google search, other times as soon as I run Firefox. Spybot and MBAM scans came up clean. Any suggestions?

A:Firefox redirecting

Hello and welcome. Is this XP or another Operating System?? Reboot into Safe Mode with Networking How to enter safe mode(XP/Vista)Using the F8 MethodRestart your computer. When the machine first starts again it will generally list some equipment that is installed in your machine, amount of memory, hard drives installed etc. At this point you should gently tap the F8 key repeatedly until you are presented with a Windows XP Advanced Options menu. Select the option for Safe Mode with Networking using the arrow keys. Then press enter on your keyboard to boot into Safe Mode. >>>> Download this file and doubleclick on it to run it. Allow the information to be merged with the registry.RKill....Download and Run RKillPlease download RKill by Grinler from one of the 4 links below and save it to your desktop.

Link 1
Link 2
Link 3
Link 4

Before we begin, you should disable your anti-malware softwares you have installed so they do not interfere RKill running as some anti-malware softwares detect RKill as malicious. Please refer to this page if you are not sure how.
Double-click on Rkill on your desktop to run it. (If you are using Windows Vista, please right-click on it and select Run As Administrator)
A black screen will appear and then disappear. Please do not worry, that is normal. This means that the tool has been successfully executed.
If nothing happens or if the tool does not run, please let me know in your next replyDo not reboot your computer aft... Read more

Read other 5 answers
RELEVANCY SCORE 63.6

been at this for 2 days now. when i do a search in firefox in yahoo or google or whatever , when i click on the resultsit redirects me to something else. the addy in the address bar says march-find, ran combo fix over and over again, nothing... crickets... please help me!! its driving me crazy!

dds file attached.

A:redirecting in firefox

Hi bradystjames,Welcome back to the BleepingComputer forums.We apologize for the delay in responding to your request for assistance. Every one of our team members is a volunteer and unfortunately, there are often just not enough to keep up with demand. Thank you so much for your patience.If your issue has been resolved or you have received help elsewhere, please post a reply here and let us know so that we can close this thread.If you still need assistance, my name is SpotCheckBilly (SCB for short) and I will be happy to help you.===Very Important===The instructions in this thread have been specifically designed for THIS USER'S MACHINE ONLY . You should not use these instructions to clean your machine. Doing so could cause irreparable damage to your machine. If you need assistance, please start your own thread.=================A few things which will make our fix go more smoothly.Please >> DO NOT<< run any scans/tools or other fixes unless I ask you to.Please DO NOT install any software while we are working.Please Do not skip any steps. With some infections skipping a step can be disastrous.If there is something you don't understand or or are unsure of -- please stop and take a moment to ask about it. If you are running P2P filesharing program(s). My recommendation is you uninstall it/them.Remove any cracked/pirated software. I will immediately stop helping you if I discover any.The most important thing to remember is to be patient. Very seldom can we rem... Read more

Read other 1 answers
RELEVANCY SCORE 63.6

DDS (Ver_10-03-17.01) - NTFSx86 Run by Administrator at 17:14:01.62 on Fri 09/10/2010Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_17Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3582.2777 [GMT -5:00]============== Running Processes ===============C:\WINDOWS\system32\nvsvc32.exeC:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcssvchost.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\Program Files\Java\jre6\bin\jqs.exeC:\WINDOWS\system32\PnkBstrA.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\svchost.exe -k imgsvcC:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exeC:\WINDOWS\system32\wuauclt.exeC:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exeC:\WINDOWS\system32\rundll32.exeC:\Program Files\Common Files\Pure Networks Shared\Platform\nmctxth.exeC:\Program Files\Linksys\Linksys Wireless Manager\LinksysWirelessManager.exeC:\Program Files\Common Files\Real\Update_OB\realsched.exeC:\Program Files\iTunes\iTunesHelper.exeC:\WINDOWS\syste... Read more

A:Redirecting in Firefox

Hello and welcome to Bleeping Computer.My name is km2357 and I will be helping you to remove any infection(s) that you may have.I will be giving you a series of instructions that need to be followed in the order in which I give them to you.If for any reason you do not understand an instruction or are just unsure then please do not guess, simply post back with your questions/concerns and we will go through it again.Please do not start another thread or topic, I will assist you at this thread until we solve your problems.Lastly the fix may take several attempts and my replies may take some time but I will stick with it if you do the same.Sorry for the delay in replying, the forum is very busy. If you still need help, please do the following:1. Rerun DDS and post the fresh DDS and Attach.txt logs in your next post/reply.2. Download and Run GmerPlease download gmer.zip from Gmer and save it to your desktop.***Please close any open programs ***Double-click gmer.exe. The program will begin to run.**Caution**These types of scans can produce false positives. Do NOT take any action on any "<--- ROOTKIT" entries unless advised by a trained Security AnalystIf possible rootkit activity is found, you will be asked if you would like to perform a full scan. Click No. If you do not receive notice about possible rootkit activity remain on the Rootkit/Malware tab & make sure that the 'Sections' button is ticked and the 'Show All' button is unticked. Click t... Read more

Read other 89 answers
RELEVANCY SCORE 63.6

My browsers(Firefos and IE) keep redirecting almost every website. Any suggestions? I have a Hijack this log below. I did Spybot,AVG,and Malaware and they haven't fixed the problems. I keep getting error messages in relation to the hosts file as well.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 17:30:51, on 11/27/2010Platform: Windows Vista SP1 (WinNT 6.00.1905)MSIE: Internet Explorer v7.00 (7.00.6001.18527)Boot mode: NormalRunning processes:C:\Windows\system32\taskeng.exeC:\Windows\system32\Dwm.exeC:\Windows\Explorer.EXEC:\Windows\RtHDVCpl.exeC:\Windows\System32\hkcmd.exeC:\Windows\System32\igfxpers.exeC:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exeC:\Program Files\AVG\AVG10\avgtray.exeC:\Program Files\Adobe\Acrobat 7.0\Distillr\acrotray.exeC:\Windows\ehome\ehtray.exeC:\Windows\system32\igfxsrvc.exeC:\Users\cp\AppData\Roaming\SanDisk\Sansa Updater\SansaDispatch.exeC:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exeC:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ArcCon.acC:\Windows\ehome\ehmsas.exeC:\Program Files\AVG\AVG10\Identity Protection\agent\bin\avgidsmonitor.exeC:\Program Files\... Read more

A:Both Firefox and IE keep redirecting

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

Read other 11 answers
RELEVANCY SCORE 63.6

everytime i go to msn.com, it always redirects me to msn thailand, i'm not even in thailand or know thai or have any connections at all with thailand. how do i stop this?

A:Firefox MSN keeps redirecting

Did you check your home page settings? In Firefox you can set your home page in Tools > Options > Main.

If you set your home page and it reverts to Thailand you're browser has probably been hijacked. I'd recommend you visit the Virus/Trojan/Spyware Help forum here.

Read other 2 answers
RELEVANCY SCORE 63.6

Hi all hope someone can help i have the problem where my browsers are getting redirected i have done the usual spybot/ malwarebytes but still getting the same problemHope someone can helpLogfile of Trend Micro HijackThis v2.0.2Scan saved at 19:07:08, on 10/12/2009Platform: Unknown Windows (WinNT 6.01.3504)MSIE: Internet Explorer v8.00 (8.00.7600.16385)Boot mode: NormalRunning processes:C:\Windows\system32\taskhost.exeC:\Windows\system32\Dwm.exeC:\Windows\Explorer.EXEC:\Program Files\O2 Assistant\bin\sprtcmd.exeC:\Program Files\Common Files\PC Tools\sMonitor\SSDMonitor.exeC:\Program Files\Java\jre6\bin\jusched.exeC:\Program Files\AVG\AVG8\avgtray.exeC:\Program Files\Windows Live\Messenger\msnmsgr.exeC:\Program Files\Registry Mechanic\RMTray.exeC:\Program Files\TomTom HOME 2\TomTomHOMERunner.exeC:\Program Files\Windows Live\Contacts\wlcomm.exeC:\Program Files\Mozilla Firefox\firefox.exeC:\Program Files\Windows Live\Mail\wlmail.exeC:\Windows\system32\SearchFilterHost.exeC:\Program Files\Trend Micro\HijackThis\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896R0 - HKCU\Software\Microsoft\Internet Explorer�... Read more

A:Firefox and ie redirecting

Hi,My name is Extremeboy (or EB for short), and I will be helping you with your log.We apologize for the delay of response. If you still require assistance we would like to see the current condition of your system so please post a new set of DDS Logs as well as a RootRepeal log and a description of any remaining problems or symptoms you may still have please.If for any reason you did not post a DDS log or RootRepeal log please refer to this page and in step #6 and Step #7 for further instructions on downloading and running DDS & RootRepeal. If you have any problems just let me know in your next reply or simply post a Hijackthis log.For your next reply I would like to see:-The DDS logs---DDS.txt and Attach logs-RootRepeal logs-Description of any remaining problems you may still have.Thanks again and we apologize for the delay.With Regards,Extremeboy

Read other 2 answers
RELEVANCY SCORE 63.6

hello everyone. I have ran just about everything program i can find and they all find nothing. Firefox. IE and Opera all get redirected to silly sites like walmart or info search sites, can anyone help me before I pull out what little hair i left lol
thanks
sue

Read other answers
RELEVANCY SCORE 63.6

Hi, apologies to post for what is probably nothing.  I have tried everything - adware, TSSKiller, SpyBot, MalWareBytes, HitMan etc but can't get rid of a problem.  When I open firefox is spawns adware links and randomly intercepts clicks too.
 
I have AVG anti virus and am very safe with what I download so have no idea how I got this.
 
Thank you for any help you can give me!
 
 
Here are my FRST logs:
 
 
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 10-07-2016 01
Ran by Monk (administrator) on MONKUS (13-07-2016 10:44:45)
Running from C:\Users\Phill\Downloads
Loaded Profiles: UpdatusUser & Monk (Available Profiles: UpdatusUser & Monk)
Platform: Windows 10 Home Version 1511 (X64) Language: English (United Kingdom)
Internet Explorer Version 11 (Default browser: Edge)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
() C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Program Files\Hewlett-Packard\SimplePass\cachesrvr.exe
(Softex Inc.) C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe
(NVIDIA Corporation) C:\Program Files... Read more

Read other answers
RELEVANCY SCORE 63.6

Hi all,

I am having the redirecting issue also. Meaning that sometimes when I click a link after doing a search I get redirected to some random site instead of the link I initially clicked on. I have used Superantispyware, Webroot Spysweeper and anti-virus, spybot S&D, Malwarebytes, and finally removed webroot from my system and installed avast pro. Avast found some malware and move it to the chest. That seems to have made my system run faster and more stable than before however the redirecting issue is still present. I also can not boot the computer into safe-mode, when ever I try, I get to the mups.sys portion an the system just restarts itself. I have read though the forums about this issue and tried to follow some of the steps that where suggested to other folks as it pertains to my system. I downloaded OTL to desktop as well as GMER.exe and ATF-Cleaner. I was able to run OTL and ATF but GMER locks my system up to the point that only GMER will run and complete but no controls are able to be used including the ability to save the GMER log file at the end of the scan.

A:Ie8 and firefox redirecting

As no logs have been posted, I am shifting this topic from the specialized HiJack This forum to the Am I Infected forum.==>PLEASE DO NOT NOW POST LOGS<== unless a log is specifically requested.

Read other 21 answers
RELEVANCY SCORE 63.6

OK a few days ago my gf was on mininova.org and spyware invaded the computer and would start fake scans with pop-ups. I booted to safe mode and ran avg to rid the problem. Well the pop-ups have stopped but when I use IE7 or firefox to type in a website or do a search then another window opens redirecting me to another website such as....shopzilla, bluemoutain and others. I installed spybot but that wont run. Ran vunddofix but it didnt find anything. I tried running combo fix but it wont open up. As a side note, check disk will not run also (the computer kept giving me the blue screen of death until I did some tweaking so now the computer boots up fine...system wise)......so any ideas?

A:IE7 and firefox redirecting

Please download GooredFix by jpshortstuff and save it to your Desktop:Download Mirror #1Download Mirror #2Double-click Goored.exe to run it.A DOS like window will open.Select option 2. Fix Goored by typing 2 and pressing Enter. Make sure all instances of Firefox are closed at this point.Type y at the prompt and press Enter again.Notepad will open with a log called Goored.txt.Please post the contents of Goored.txt in your next reply (a copy of the log will also be saved to your desktop).Note: If you receive a message saying that GooredFix needs your system to be restarted, please close all applications and reboot your system. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you when usiing GooredFix. Please temporarily disable such programs or permit them to allow the changes. Click this link to see a list of programs that should be disabled.Please download Malwarebytes Anti-Malware (v1.34) and save it to your desktop.alternate download link 1alternate download link 2If you have a previous version of MBAM, remove it via Add/Remove Programs and download a fresh copy.Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Fini... Read more

Read other 1 answers
RELEVANCY SCORE 63.6

Getting a few little problems coming up, I've seen a couple recent posts from members with the same symptoms -- google searches not bringing users to the right page, random pop-ups, etc. I did a full scan with Kaspersky 2009 and it thought everything was just dandy except for a couple of updates for Adobe, which it finds every time no matter how current Adobe is.Also, RootRepeal doesn't like me and gets up to the 'Manifests' folder and sits there for a looong time. So I've only got the other two logs to post here ...DDS (Ver_09-12-01.01) - NTFSx86 Run by Colin at 15:16:05.81 on 16/01/2010Internet Explorer: 7.0.6002.18005 BrowserJavaVersion: 1.6.0_15Microsoft? Windows Vista? Home Premium 6.0.6002.2.1252.2.1033.18.2047.838 [GMT -8:00]SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}============== Running Processes ===============C:\Windows\system32\wininit.exeC:\Windows\system32\lsm.exeC:\Windows\system32\svchost.exe -k DcomLaunchC:\Windows\system32\nvvsvc.exeC:\Windows\system32\svchost.exe -k rpcssC:\Windows\System32\svchost.exe -k secsvcsC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestrictedC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestrictedC:\Windows\system32\svchost.exe -k netsvcsC:\Windows\system32\SLsvc.exeC:\Windows\system32\svchost.ex... Read more

A:Redirecting Firefox, Pop-ups

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. Please include a clear description of the problems you're having, along with any steps you may have performed so far.Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.Even if you have already provided information about your PC, we need a new log to see what has changed since you originally posted your problem.[We need to create an OTL ReportPlease download OTL from one of the following mirrors:This is THE MirrorSave it to your desktop.Double click on the icon on your desktop.Click the "Scan All Users" checkbox.In the custom scan box paste the following:CODEnetsvcsmsconfigsafebootminimalsafebootnetworkactivexdrivers32%systemroot%&#... Read more

Read other 2 answers
RELEVANCY SCORE 63.6

Hello! Both of my internet browers are redirecting me to other pages. This started happening 3 days ago. I ran spybot and avast. Spybot found some things so I fixed them through their fix button. But this has not fixed the redirecting. I see some other people are having the same problems but I didn't know if I should follow the same steps or if each redirect required something different. I am running Windows 7 and appreciate any help you can give!!!

Thank you!!

Read other answers
RELEVANCY SCORE 63.6

I've been having issues with Firefox redirecting to other websites. I don't seem to have the issue with IE. Can you please help?

I've ran DDS and tried to run GMER however when running GMER it kept crashing and getting the blue screen.

.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_22
Run by Reggie at 12:47:04 on 2011-10-12
Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.3062.1051 [GMT -7:00]
.
AV: avast! Antivirus *Enabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Enabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\SYSTEM32\WISPTIS.EXE
C:\Windows\system32\svchost.exe -k NetworkService
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\Program Files\Protector Suite QL\upeksvr.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe
C:\Program Files\Common Fil... Read more

A:Firefox Keeps Redirecting

Hello and Welcome to TSF.

Please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription.

Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.

------------------------------------------------------

Did you edit your DDS.txt log? There is a gap in the Firefox Policies section.

------------------------------------------------------

I need to see a gmer log in order to help you.

Download GMER Rootkit Scanner from here and Save it to your Desktop. Double-click gmer.exe to run it. If asked to allow gmer.sys driver to load, please consent.
First, gmer will run a short, initial scan.
If it gives you a warning about rootkit activity and asks if you want to run scan...click on NO.

Click the image to enlarge it
In the right panel, you will see several boxes that have been checked. Ensure the following are UNCHECKED ...IAT/EAT
Drives/Partition other than Systemdrive (typically C:\)
Show All (don't miss this one)

Then click the Scan button & wait for it to finish.
Once done click on the [Save..] button, and in the File name area, type in "Gmer.txt" or it will save as a .log file which cannot be uploaded to your post.
Save it where you can easily find it, such as your desktop, and attach it to your next reply.
... Read more

Read other 19 answers
RELEVANCY SCORE 63.6

Hi~ I was redirected here because I need help in removing a malware. For the past few days now my firefox has been redirecting me to a site called 9newstoday and other ad sites too. (and I think Chrome too but I'm not sure since I don't use it often) I figured it was some kind of virus so I tried using Malwarebytes and SuperAntispyware but it didn't do anything. Also whenever I use Malwarebytes to scan my laptop, a virus called pup.bitminer shows everytime and I can't seem to delete it.

Here is my first topic post: http://www.bleepingcomputer.com/forums/topic439894.html/page__gopid__2571257#entry2571257

I have the DDS Log but couldn't create the GMER log because I'm running a 64-bit version.

Please help me remove it~ Thanks in advance! :D

.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_27
Run by kana at 21:27:32 on 2012-01-25
Microsoft Windows 7 Home Premium 6.1.7601.1.932.81.1033.18.2812.1457 [GMT -5:00]
.
AV: Norton Internet Security *Disabled/Outdated* {88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Norton Internet Security *Disabled/Updated* {33A8BBD2-AA01-20A2-213B-0B8EB45B02E8}
FW: Norton Internet Security *Disabled* {B0F2DB13-C654-2E74-30D4-99C9310F0F2E}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows... Read more

A:Firefox redirecting.

Hello Dreakle, Welcome to Bleeping Computer.
My name is fireman4it and I will be helping you with your Malware problem.

Please take note of some guidelines for this fix:
Refrain from making any changes to your computer including installing/uninstall programs, deleting files, modifying the registry, and running scanners or tools.
If you do not understand any step(s) provided, please do not hesitate to ask before continuing.
Even if things appear to be better, it might not mean we are finished. Please continue to follow my instructions and reply back until I give you the "all clean".
In the upper right hand corner of the topic you will see a button called Watch Topic.I suggest you click it and select Immediate E-Mail notification and click on Proceed. This way you will be advised when we respond to your topic and facilitate the cleaning of your machine.

Finally, please reply using the ADD REPLY button in the lower right hand corner of your screen. Do not start a new topic. The logs that you post should be pasted directly into the reply, unless they do not fit into the post.1.Please download the TDSS Rootkit Removing Tool (TDSSKiller.exe) and save it to your Desktop. <-Important!!!Double-click on TDSSKiller.exe to run the tool for known TDSS variants.
Vista/Windows 7 users right-click and select Run As Administrator.If TDSSKiller does not run, try renaming it. To do this, right-click on TDSSKiller.exe, select Rename and give it a ... Read more

Read other 8 answers
RELEVANCY SCORE 63.6

Caught something a few days ago and ran AVG (full scan), Malwarebytes Anti-Malware (full scan yesterday, quick scan today), Spybot Search & Destroy, and SUPERAntiSpyware. Problem still persists though.

Here's the HJT log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:56:07 PM, on 12/3/2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v7.00 (7.00.6002.18005)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\RtHDVCpl.exe
C:\Windows\WindowsMobile\wmdc.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\DNA\btdna.exe
C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\AVG\AVG9\avgtray.exe
C:\Program Files\AVG\AVG9\Identity Protection\agent\bin\avgidsmonitor.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbam.... Read more

Read other answers
RELEVANCY SCORE 63.6

Good day all, I made a purchase from a website and it tried to redirect me to the paypal website to pay but it hung up on the redirection page. i guess its just a setting to change on the FF browser but i am not sure where to go. I changed browsers and used the IE browser and i had no problem. just wondering if someone might steer me in the right direction to set FF.
 

A:Redirecting with FireFox

Most likely it was just a temporary glitch with paypal or the site you were purchasing from. Did you try it again after a minute with Firefox?
 

Read other 2 answers
RELEVANCY SCORE 63.6

my redirecting is getting worse. i also have another topic pertaining to this and other problems(http://www.bleepingcomputer.com/forums/topic331679.html) any help would be greatly appreciated. sorry for being clutter but i dont know the wait time and its getting worse.

A:redirecting in firefox

Hello,I know how frustrating it is when your computer isn't working properly. Let me assure you that your topic isn't lost, forgotten, or ignored. We work with hundreds of logs every day, so we have devised a means of seeing only those topics that don't have responses yet. At the moment, we have over 300 unanswered topics, the oldest dated July 11, 2010 at 6:15 pm Eastern Daylight Savings time in the U.S.A. Your log topic here: http://www.bleepingcomputer.com/forums/t/331679/problems-with-redirecting-and-firewall-shutting-off/ is dated July 14 at 2:42 PM using the same time zone.Our volunteer MRT team members have various levels of expertise and training, so while we try to take the oldest DDS/HJT logs, it is often the skill level of the particular helper and sometimes the operating system that dictates which logs get selected first. Some infections are more complicated than others and require a higher skill level to remove. Without that skill level attempted removal could result in disastrous results. In other instances, the helper may not be familiar with the operating system that you are using, since they use another. In either case, neither of us would want someone to assist you who is not familiar with your issue and attempt to fix it.Please be patient. It may take several days to get a response but your log will be reviewed and answered as soon as possible. I advise checking your topic once a day for responses as the e-mail notification system is unreliable.Orange ... Read more

Read other 1 answers
RELEVANCY SCORE 63.6

This morning, I started experiencing the problem where Firefox & IE are redirecting me to unwanted sites. The URL I want to go to contains a huge string of alphanumeric characters before the actual URL. My PC is running Windows XP, SP2, IE 6, Firefox 3.5, and is up to date with Microsoft updates. I ran Symantec and MalwareBytes, but neither picked up anything. Can someone help or let me know where to begin troubleshooting?

A:Firefox & IE redirecting

Next run ATF and SAS:Note: On Vista, "Windows Temp" is disabled. To empty "Windows Temp" ATF-Cleaner must be "Run as an Administrator".From your regular user account..Download Attribune's ATF Cleaner and then SUPERAntiSpyware, Free Home Edition Save both to desktop ..DO NOT run yet.Open SUPER from icon and install and Update itUnder Scanner Options make sure the following are checked (leave all others unchecked):Close browsers before scanning.Scan for tracking cookies.Terminate memory threats before quarantining.Click the "Close" button to leave the control center screen and exit the program. DO NOT run yet.Now reboot into Safe Mode: How to enter safe mode(XP)Using the F8 MethodRestart your computer. When the machine first starts again it will generally list some equipment that is installed in your machine, amount of memory, hard drives installed etc. At this point you should gently tap the F8 key repeatedly until you are presented with a Windows XP Advanced Options menu. Select the option for Safe Mode using the arrow keys. Then press enter on your keyboard to boot into Safe Mode. Double-click ATF-Cleaner.exe to run the program.Under Main "Select Files to Delete" choose: Select All.Click the Empty Selected button.If you use Firefox or Opera browser click that browser at the top and choose: Select AllClick the Empty Selected button.If you would like to keep your saved passwords, please click No at the prompt.Click Exit on... Read more

Read other 2 answers
RELEVANCY SCORE 63.6

When I click on a link in using firefox I am being redirected to some random scams. I have attached a hijackthis report, any help is appreciated.

Thanks in advance.

A:Firefox redirecting to ads

Hi,Please do the following:Please download DDS from either of these linksLINK 1 LINK 2and save it to your desktop.Disable any script blocking protection Double click dds to run the tool. When done, two DDS.txt's will open. Save both reports to your desktop.---------------------------------------------------Please include the contents of the following in your next reply:DDS.txtAttach.txt. NEXTDownload GMER Rootkit Scanner from here to your desktop. It will be a randomly named executable. Double click the exe file. If it gives you a warning about rootkit activity and asks if you want to run scan...click on NO, then use the following settings for a more complete scan.
Click the image to enlarge it
In the right panel, you will see several boxes that have been checked. Ensure the following are unchecked IAT/EAT Drives/Partition other than Systemdrive (typically C:\) Show All (don't miss this one) Then click the Scan button & wait for it to finish. Once done click on the [Save..] button, and in the File name area, type in "Gmer.txt" or it will save as a .log file which cannot be uploaded to your post.
Save it where you can easily find it, such as your desktop, and attach it in reply.**Caution**Rootkit scans often produce false positives. Do NOT take any action on any "<--- ROOKIT" entries

Read other 8 answers
RELEVANCY SCORE 63.6

When ever I open up a browser I get redirected to UK.MSN.com rather than my normal MSN homepage (I'm in the United States). I haven't traveled with my laptop and it just started doing this yesterday.

I've tried to re-save MSN as my homepage but it doesn't work and I still get redirected to the United Kingdom MSN page.

Could some please help me figure out what is going on? Has my computer been hijacked? Any help would be greatly appreciated. BTW, in case you couldn't tell, I'm a relative newby to computers so please be nice THANKS in advance!
 

A:Please Help- IE & Firefox Redirecting to UK.MSN

Here is the information from Hijack This Please note that I got a message about the inability of Hijack This to access 'Host' information when doing the scan. I don't know if it impacts anything.

HIJACK THIS

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 2:25:18 PM, on 2/16/2011
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.19019)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\DigitalPersona\Bin\DpAgent.exe
c:\PROGRA~2\mcafee.com\agent\mcagent.exe
C:\Program Files (x86)\Steam\steam.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files (x86)\AVG\AVG9\avgtray.exe
C:\Program Files (x86)\MSN Toolbar\Platform\4.0.0379.0\mswinext.exe
C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
C:\Program Files (x86)\Java\jre1.6.0_04\bin\jusched.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files (x86)\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files (x86)\Internet Explorer\IELowutil.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10l_ActiveX.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files ... Read more

Read other 3 answers
RELEVANCY SCORE 63.6

Hi folks,

Seems like my laptop got hit by some nasty crap that's redirecting both IE and Firefox to spam sites. I forgot which site I went to but my anti-virus lit up big time but said it deleted them all. However now what happens is when I do a search in google for something and then I click on the link from search results it redirects me somewhere else

I ran Malwarebytes Anti-Malware and it found one infection which got deleted
I also ran Antivirus scan and didn't find anything
Ran GMER, didn't find anything

Here are the logs from ComboFix and HijackThis
Thanks

EDIT: It wouldn't let me post here from my laptop and I had to go to another PC

ComboFix:

ComboFix 10-04-05.06 - mxfilipo 04/06/2010 14:01:11.1.1 - x86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1535.707 [GMT -3:00]
Running from: c:\documents and settings\mxfilipo\Desktop\ComboFix.exe
AV: McAfee VirusScan Enterprise *On-access scanning disabled* (Updated) {918A2B0B-2C60-4016-A4AB-E868DEABF7F0}
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\recycler\S-1-5-21-1203752577-1241443622-2225589205-500
c:\recycler\S-1-5-21-1862811806-3962937336-1497286466-500
c:\recycler\S-1-5-21-572454927-3277439761-1653462319-500
c:\recycler\S-1-5-21-72185382-2121258603-1256799619-500
c:\recycler\S-1-5-21-839522115-412668190-725345543-500
c:\windows\Downloaded Program Files\x64
c:\windows\Downloaded Program Files\x64\racodec.ax
c:\... Read more

Read other answers
RELEVANCY SCORE 63.6

I know the laptop hasn't enough memory but somewhere my son had to pick up malware. first it was loading internet explorer in the task manager when it was not even being used as a browser. I worked on it a bit and it doesn't seem to be doing that but it is still redirecting pages in firefox. It is a Gateway dual processorT2450 with 1gb and running Vista Home Premium
I have the DDS logs but when I ran the GMER first it gave error message (LoadDriver(c:\Users\AppData\Local\Temp\pxlcypow.sys") error 0xC000010E: An instance of the service is already running when I clicked okay it went right to a scan and then at end there was nothing to save a box popped up with ( GMER hasn't found any system modification)Also there were only 5 things checked when I installed Services,Registry, Files,Ads, c:

so I am including the dds file and I did a hijackthis log and will post that also.
thanks

DDS:
.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_13
Run by LLS at 22:49:36 on 2011-12-01
Microsoft? Windows Vista? Home Premium 6.0.6002.2.1252.1.1033.18.1013.99 [GMT -6:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}
SP: Microsoft Security Essentials *Enabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\... Read more

A:firefox redirecting

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.Do not run any other tool untill instructed to do so!Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.Run Combofix:You may be asked to install or update the Recovery Console (Win XP Only) if this happens please allow it to do so (you will need to be connected to the internet for this)Before you run Combofix I will need you to turn off any security software you have running, If you do not know how to do this you can find out >here< or >here<Combofix may need to reboot your computer more than once to do its job this is normal.You can download Combofix from one of these links.Link 1Link 2Link 3 1. Close any open browsers or any other programs that are open.2. Close/disable all anti virus and anti malware programs so they do not interfere with the r... Read more

Read other 35 answers
RELEVANCY SCORE 63.6

Whenever I click on a link after using Google 5/10 times I am redirected to some bullbleep site. I've had this problem before, not sure if I should just refollow the advice in the old thread I made about 4 months ago or not.

A:FireFox Redirecting

Can you check if IE is redirected as well?

Read other 42 answers
RELEVANCY SCORE 63.6

(Please note this is being posted not by user, but by the user's avid computer-user friend)
Her computer, just recently scanned and cleaned of viruses, will now redirect IE and Firefox searches to random sites. It doesn't seem to happen when www.google.com searches are ran directly from the site and not a search toolbar, but it happens every time from the search bar. consumer reports, monstermarketplace, daykick...etc. I've ran MBAM to no result, cleared Temporary Internet files (in several locations) and done a few Disk Cleanups. She's running XP SP3 and I'm helping over Teamviewer 5.

I am attaching a log from hijack this as I've never used the program before.
Thank you.
 

A:IE and Firefox redirecting

I made a mistake in posting. Instead of attaching, I will simply C&P the info.
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:56:10 AM, on 6/22/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\Program Files\AVG\AVG9\avgrsx.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\HP DigitalMedia Archive\DMAScheduler.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\RTHDCPL.EXE
C:\HP\KBD\KBD.EXE
C:\PROGRA~1\AVG\AVG9\avgtray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\arservice.exe
C:\Program Files\AVG\AVG9\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\Program Files\AVG\AVG9\avgnsx.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
C:\Program Files\Flip Video... Read more

Read other 2 answers
RELEVANCY SCORE 63.6

Hello, My Firefox v18 browser is redirecting every 20 times or so. Guess I could try uninstalling Firefox and all traces of it,
but I would like to just get rid of the problem and save the installation. Any help appreciated. Frank
This is an XP pro laptop sp3/all updates.

A:Firefox redirecting sometimes

DownloadTDSSkillerLaunch it.Click on change parameters-Select TDLFS file systemClick on "Scan".Please post the LOG report(log file should be in your C drive) Do not change the default options on scan resultsDownloadaswMBRLaunch it, allow it to download latest Avast! virus definitionsClick the "Scan" button to start scan.After scan finishes,click on Save logPost the log results here.If you get crashes in normal mode,run it in safemode with networkingDownloadESET online scannerInstall itClick on START,it should download the virus definitionsWhen scan gets completed,click on LIST of found threatsExport the list to desktop,copy the contents of the text file in your reply

Read other 22 answers
RELEVANCY SCORE 63.6

I have been recently running into issues with searches while running Firefox 16.0.2. I have not experienced this issue in IE. Every few clicks on a search result redirects to various bogus websites, such as http://63.209.69.107 (mostly), http://butterflysearch.net, etc.

I am currently running Windows 7 Home Premium SP1 64 bit. While I am an IT professional, my only work with PCs is at home . Any help you cam provide will be appreciated!

Ron

A:Firefox redirecting

Greetings and Welcome to The Forums!!My name is Gringo and I'll be glad to help you with your malware problems.I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of usPlease do not run any tools unless instructed to do so.
We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.
Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.
Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.
A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE: At the t... Read more

Read other 26 answers
RELEVANCY SCORE 63.6

I've had this problem for a few weeks now and just began researching today (we really only use this computer for the kids to play games), but I'm tired of them yelling at me to fix it!! I hope you don't frown on this, but I read many posts having the same problem and I installed hijackthis and ran the report already since that seems to be the first step that everyone is told to do. Can someone please tell me where to go from here??? Thanks. Here are the results:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:52:31 PM, on 12/16/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\iS3\Anti-Spyware\SZServer.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe
C:\Program Files\Lexmark 3600-4600 Series\ezprint.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\agrsmsvc.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program F... Read more

A:Firefox and IE keep redirecting me...help please!

Read other 6 answers
RELEVANCY SCORE 62.8

i use firefox and have done for years now. i hate internet explorer so dont say use explorer.
but!
i posted a question on yahoo answers: http://answers.yahoo.com/question/in...8055712AAeNhD9

there is a malawarebytes anti-malware log on there and somebody replied to post on here with a HijackThis log so i downloaded scanned and heres the log. please help :(



Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:04:48, on 08/02/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Acer Arcade Deluxe\Play Movie\PMVService.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Acer\Empowering Technology\eAudio\eAudio.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Windows Media Player\wmpns... Read more

Read other answers
RELEVANCY SCORE 62.8

When I click on results from a google/yahoo etc search, I get redirected first to a pleasewaitsearch.com domain, then to a random site. Sometimes the sites are benign sites (like Sears.com) and others are malicious. My computer has also been repeatedly infected with less invasive trojans/backdoors which I have been keeping at bay with regular searches by multiple anti-malware programs.I have already disabled my CD emulators via Defogger, and my logs are attached. Thanks in advance for any help you can offer me. DDS (Ver_10-03-17.01) - NTFSx86 Run by Stu at 18:54:57.26 on Tue 08/24/2010Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_17Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.2046.1177 [GMT -7:00]AV: Microsoft Security Essentials *On-access scanning enabled* (Updated) {BCF43643-A118-4432-AEDE-D861FCBCFCDF}============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exec:\Program Files\Microsoft Security Essentials\MsMpEng.exeC:\WINDOWS\System32\svchost.exe -k netsvcssvchost.exesvchost.exeC:\WINDOWS\system32\spoolsv.exesvchost.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\WINDOWS\system32\svchost.exe -k HPServiceC:\Program Files\Java\jre6\bin\jqs.exeC:\WINDOWS\System32\nvsvc32.exeC:\WINDOWS\System32\svc... Read more

A:Google/Firefox Redirecting

Hello , And to the Bleeping Computer Malware Removal Forum. My name is Elise and I'll be glad to help you with your computer problems.I will be working on your malware issues, this may or may not solve other issues you may have with your machine.Please note that whatever repairs we make, are for fixing your computer problems only and by no means should be used on another computer.The cleaning process is not instant. Logs can take some time to research, so please be patient with me. I know that you need your computer working as quickly as possible, and I will work hard to help see that happen. Please reply using the Add/Reply button in the lower right hand corner of your screen. Do not start a new topic. The logs that you post should be pasted directly into the reply. Only attach them if requested or if they do not fit into the post.Unfortunately, if I do not hear back from you within 5 days, I will be forced to close your topic. If you still need help after I have closed your topic, send me or a moderator a personal message with the address of the thread or feel free to create a new one.You may want to keep the link to this topic in your favorites. Alternatively, you can click the button at the top bar of this topic and Track this Topic, where you can choose email notifications. The topics you are tracking are shown here.-----------------------------------------------------------If you have since resolved the original problem you were having, we would appreciate you... Read more

Read other 25 answers
RELEVANCY SCORE 62.8

Redirection is occurring on both browsers, especially after a Google search, but not every link is redirected. It's sort of random but results in a pretty much randomly redirected page. Here's an example: searching Google for "free avg" returns lots of legitimate links, but at random, one of the links went to "http://search.us.b00kmarks.com/view.php?q=free+avg&f=5". Sometimes almost every link is redirected, and other times for a while, they work almost normally. Occasionally and seemingly at random, BSOD occurs, records log, says it's checking for the problem, but doesn't say what...A bit of history: computer, Dell Inspiron laptop, was brought to me with black screen on attempted bootup. After a system restore from F8 boot menu, all seemed well, but owner then reported redirecting links (I hadn't checked for that). So I ran Spybot S&D, cleaned many items. Ran AdAware, cleaned many more, but then the browsers wouldn't launch at all. Another system restore brought them back. Existing McAffee program reported zero problems. Deleted that and installed AVG free. All systems showed ok. Microsoft Defender shows no problems. Then ran Malware Bytes Anti-Malware, it found lots of problems and reported fixed, but still the redirect problem exists. One other oddity, the Boot Manager started showing up at boot, with options for Windows Setup and Windows 7, defaulting to 3 seconds for Setup. I did change that to default to Win7, 0 second... Read more

A:Browsers redirecting, IE9 & Firefox 3.6

It may be a simple matter, but finding it eludes me. How do I find where my post has been moved? Searching so far just leads back to this original post.

This is posted under "Windows 7 > Security > Am I infected? What do I do?" and has no logs posted, so I thought for sure this would be appropriate. What did I miss?

Read other 4 answers
RELEVANCY SCORE 62.8

Hi,

This has been an ongoing problem that I can't seem to resolve on my own. Any help would be greatly appreciated. Here are the problems:

When I click a link on a Google search result in Firefox, the link redirects me to various ad sites. If I visit certain sites, Firefox will crash on me. Also, I have McAfee but when McAfee installed it's latest update, I haven't been able to turn on real time scanning. I'll click "turn on" and it will turn on for about 2 seconds and then turn back off again.

I'm running Windows XP and I have Malwarebytes Anti-Malware, SuperAntiSpyware Free Edition, Spybot Seach & Destroy, TFC, ERUNT, SysRestorePoint, Hippo Update Checker, and now dds installed. I've run multiple scans on everything and my programs are for the most part updated and nothing seems to help.

Here is my HiJackThis log:

Logfile of Trend Micro HijackThis v2.0.3 (BETA)
Scan saved at 1:06:43 AM, on 4/1/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\PRISMSVR.EXE
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\W... Read more

A:Firefox keeps redirecting/crashing...

Read other 16 answers
RELEVANCY SCORE 62.8

Redirects to random pages, especially from Google searches, going to other search sites or antivirus offers, and seems worst when searching for antivirus and malware removal programs. Occasionally seems to work nearly normally, other times nearly everything is redirected. At this time using Firefox, because launching IE9 resulted in a BSOD (IRQL_NOT_LESS_OR_EQUAL), although IE usually works.

DDS.txt follows:
DDS (Ver_10-12-05.01) - NTFS_AMD64
Run by Michelles at 20:20:49.60 on Wed 12/08/2010
Internet Explorer: 9.0.7930.16406
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.4056.2615 [GMT -6:00]

SP: Spybot - Search and Destroy *disabled* (Updated) {ED588FAF-1B8F-43B4-ACA8-8E3C85DADBE9}

============== Running Processes ===============

C:\PROGRA~2\AVG\AVG10\avgchsva.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_afc3018f8cfedd20\STacSV64.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Program Files\Dell\DellDock\DockLogin.e... Read more

A:Browsers redirecting, IE9 & Firefox 3.6

Following instructions for another thread like mine, the redirection seems to be entirely fixed. Thanks for the very helpful info in that thread!

Read other 2 answers