Over 1 million tech questions and answers.

redirect from Firefox using Bing search only

Q: redirect from Firefox using Bing search only

Within days I have been getting redirects to sales sites when I use Bing on Firefox. Does not occur with Google, nor on IE with Bing or Google, nor on aol with Bing or Google. Only redirects when using Bing on Firefox. I have read some previous posts and have downloaded the couple things it says to start, but did not want to go any further without your approval. Here is the first from RKUnhookerLE which says I'm clear. At anyone's say so I can run the next thing but wanted to make sure I wasn't missing anything. Thank you for your time looking at this for me.
RkU Version: 3.8.388.590, Type LE (SR2)
==============================================
OS Name: Windows XP
Version 5.1.2600 (Service Pack 3)
Number of processors #1
==============================================
>Drivers
==============================================
0xBF0C4000 C:\WINDOWS\System32\ati3duag.dll 2519040 bytes (ATI Technologies Inc. , ati3duag.dll)
0x804D7000 C:\WINDOWS\system32\ntkrnlpa.exe 2069376 bytes (Microsoft Corporation, NT Kernel & System)
0x804D7000 PnpManager 2069376 bytes
0x804D7000 RAW 2069376 bytes
0x804D7000 WMIxWDM 2069376 bytes
0xBF800000 Win32k 1855488 bytes
0xBF800000 C:\WINDOWS\System32\win32k.sys 1855488 bytes (Microsoft Corporation, Multi-User Win32 Driver)
0xF633D000 C:\WINDOWS\system32\DRIVERS\ati2mtag.sys 1470464 bytes (ATI Technologies Inc., ATI Radeon WindowsNT Miniport Driver)
0xBF32B000 C:\WINDOWS\System32\ativvaxx.dll 1105920 bytes (ATI Technologies Inc. , Radeon Video Acceleration Universal Driver)
0xF601F000 C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys 1036288 bytes (Conexant Systems, Inc., HSF_DP driver)
0xF5F6F000 C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys 720896 bytes (Conexant Systems, Inc., HSF_CNXT driver)
0xF621F000 C:\WINDOWS\system32\DRIVERS\bcmwl5.sys 606208 bytes (Broadcom Corporation, Broadcom 802.11 Network Adapter wireless driver)
0xF7381000 Ntfs.sys 577536 bytes (Microsoft Corporation, NT File System Driver)
0xED960000 C:\WINDOWS\system32\DRIVERS\mrxsmb.sys 458752 bytes (Microsoft Corporation, Windows NT SMB Minirdr)
0xF5E89000 C:\WINDOWS\system32\DRIVERS\update.sys 385024 bytes (Microsoft Corporation, Update Driver)
0xEDA6C000 C:\WINDOWS\system32\DRIVERS\tcpip.sys 364544 bytes (Microsoft Corporation, TCP/IP Protocol Driver)
0xEB03A000 C:\WINDOWS\system32\DRIVERS\srv.sys 360448 bytes (Microsoft Corporation, Server driver)
0xF6179000 C:\WINDOWS\system32\drivers\camc6hal.sys 352256 bytes (Conexant Systems Inc., Conexant AmcHal Driver)
0xBF439000 C:\WINDOWS\System32\ATMFD.DLL 290816 bytes (Adobe Systems Incorporated, Windows NT OpenType/Type 1 Font Driver)
0xBF012000 C:\WINDOWS\System32\ati2dvag.dll 270336 bytes (ATI Technologies Inc., ATI Radeon WindowsNT Display Driver)
0xEB15A000 C:\WINDOWS\System32\Drivers\HTTP.sys 266240 bytes (Microsoft Corporation, HTTP Protocol Stack)
0xBF054000 C:\WINDOWS\System32\ati2cqag.dll 237568 bytes (ATI Technologies Inc., Central Memory Manager / Queue Server Module)
0xF611C000 C:\WINDOWS\system32\DRIVERS\HSFHWATI.sys 233472 bytes (Conexant Systems, Inc., HSFHWATI WDM driver)
0xBF08E000 C:\WINDOWS\System32\atikvmag.dll 221184 bytes (ATI Technologies Inc., Virtual Command And Memory Manager)
0xED92D000 C:\WINDOWS\system32\drivers\mfehidk.sys 208896 bytes (McAfee, Inc., Host Intrusion Detection Link Driver)
0xF5F17000 C:\WINDOWS\system32\DRIVERS\rdpdr.sys 196608 bytes (Microsoft Corporation, Microsoft RDP Device redirector)
0xF62B3000 C:\WINDOWS\system32\DRIVERS\SynTP.sys 192512 bytes (Synaptics, Inc., Synaptics Touchpad Driver)
0xF74E3000 ACPI.sys 188416 bytes (Microsoft Corporation, ACPI Driver for NT)
0xF5E5B000 C:\WINDOWS\system32\DRIVERS\MarvinBus.sys 188416 bytes (Pinnacle Systems GmbH, Pinnacle Marvin Discrete Bus Enumerator)
0xEB37B000 C:\WINDOWS\system32\DRIVERS\mrxdav.sys 184320 bytes (Microsoft Corporation, Windows NT WebDav Minirdr)
0xF7354000 NDIS.sys 184320 bytes (Microsoft Corporation, NDIS 5.1 wrapper driver)
0xBA0E2000 C:\WINDOWS\system32\drivers\kmixer.sys 176128 bytes (Microsoft Corporation, Kernel Mode Audio Mixer)
0xED9D0000 C:\WINDOWS\system32\DRIVERS\rdbss.sys 176128 bytes (Microsoft Corporation, Redirected Drive Buffering SubSystem Driver)
0xEDA1D000 C:\WINDOWS\system32\DRIVERS\netbt.sys 163840 bytes (Microsoft Corporation, MBT Transport driver)
0xF61F7000 C:\WINDOWS\system32\drivers\tifm21.sys 163840 bytes (Texas Instruments, tifm21.sys)
0xEDA45000 C:\WINDOWS\System32\Drivers\Mpfp.sys 159744 bytes (McAfee, Inc., McAfee Personal Firewall Plus Driver)
0xF746F000 dmio.sys 155648 bytes (Microsoft Corp., Veritas Software, NT Disk Manager I/O Driver)
0xED907000 C:\WINDOWS\system32\DRIVERS\ipnat.sys 155648 bytes (Microsoft Corporation, IP Network Address Translator)
0xED8BB000 C:\WINDOWS\System32\Drivers\Fastfat.SYS 147456 bytes (Microsoft Corporation, Fast FAT File System Driver)
0xF6155000 C:\WINDOWS\system32\drivers\portcls.sys 147456 bytes (Microsoft Corporation, Port Class (Class Driver for Port/Miniport Devices))
0xF6305000 C:\WINDOWS\system32\DRIVERS\USBPORT.SYS 147456 bytes (Microsoft Corporation, USB 1.1 & 2.0 Port Driver)
0xF62E2000 C:\WINDOWS\system32\DRIVERS\ks.sys 143360 bytes (Microsoft Corporation, Kernel CSA Library)
0xBA69D000 C:\WINDOWS\System32\Drivers\RDPWD.SYS 143360 bytes (Microsoft Corporation, RDP Terminal Stack Driver (US/Canada Only, Not for Export))
0xED9FB000 C:\WINDOWS\System32\drivers\afd.sys 139264 bytes (Microsoft Corporation, Ancillary Function Driver for WinSock)
0x806D1000 ACPI_HAL 131840 bytes
0x806D1000 C:\WINDOWS\system32\hal.dll 131840 bytes (Microsoft Corporation, Hardware Abstraction Layer DLL)
0xF7437000 fltmgr.sys 131072 bytes (Microsoft Corporation, Microsoft Filesystem Filter Manager)
0xF7495000 ftdisk.sys 126976 bytes (Microsoft Corporation, FT Disk Driver)
0xF74B4000 pcmcia.sys 122880 bytes (Microsoft Corporation, PCMCIA Bus Driver)
0xF733A000 Mup.sys 106496 bytes (Microsoft Corporation, Multiple UNC Provider driver)
0xF7457000 atapi.sys 98304 bytes (Microsoft Corporation, IDE/ATAPI Port Driver)
0xED8A3000 C:\WINDOWS\System32\Drivers\dump_atapi.sys 98304 bytes
0xF5EFF000 C:\WINDOWS\system32\DRIVERS\mcdbus.sys 98304 bytes (MagicISO, Inc., MagicISO SCSI Host Controller)
0xF5EE7000 C:\WINDOWS\system32\DRIVERS\SCSIPORT.SYS 98304 bytes (Microsoft Corporation, SCSI Port Driver)
0xF740E000 KSecDD.sys 94208 bytes (Microsoft Corporation, Kernel Security Support Provider Interface)
0xF5F58000 C:\WINDOWS\system32\DRIVERS\ndiswan.sys 94208 bytes (Microsoft Corporation, MS PPP Framing Driver (Strong Encryption))
0xEB3F6000 C:\WINDOWS\system32\drivers\wdmaud.sys 86016 bytes (Microsoft Corporation, MMSYSTEM Wave/Midi API mapper)
0xF61CF000 C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys 81920 bytes (Realtek Semiconductor Corporation , Realtek 10/100/1000 NDIS 5.1 Driver )
0xF61E3000 C:\WINDOWS\system32\DRIVERS\sdbus.sys 81920 bytes (Microsoft Corporation, SecureDigital Bus Driver)
0xF6329000 C:\WINDOWS\system32\DRIVERS\VIDEOPRT.SYS 81920 bytes (Microsoft Corporation, Video Port Driver)
0xEDAC5000 C:\WINDOWS\system32\DRIVERS\ipsec.sys 77824 bytes (Microsoft Corporation, IPSec Driver)
0xBF000000 C:\WINDOWS\System32\drivers\dxg.sys 73728 bytes (Microsoft Corporation, DirectX Graphics Driver)
0xF69DB000 C:\WINDOWS\system32\drivers\mfeavfk.sys 73728 bytes (McAfee, Inc., Anti-Virus File System Filter Driver)
0xF7425000 sr.sys 73728 bytes (Microsoft Corporation, System Restore Filesystem Filter Driver)
0xF74D2000 pci.sys 69632 bytes (Microsoft Corporation, NT Plug and Play PCI Enumerator)
0xF5F47000 C:\WINDOWS\system32\DRIVERS\psched.sys 69632 bytes (Microsoft Corporation, MS QoS Packet Scheduler)
0xF7005000 C:\WINDOWS\System32\Drivers\Cdfs.SYS 65536 bytes (Microsoft Corporation, CD-ROM File System Driver)
0xF7862000 C:\WINDOWS\system32\DRIVERS\cdrom.sys 65536 bytes (Microsoft Corporation, SCSI CD-ROM Driver)
0xF76B2000 C:\WINDOWS\system32\DRIVERS\nic1394.sys 65536 bytes (Microsoft Corporation, IEEE1394 Ndis Miniport and Call Manager)
0xF7682000 ohci1394.sys 65536 bytes (Microsoft Corporation, 1394 OpenHCI Port Driver)
0xF7672000 Serial.sys 65536 bytes (Microsoft Corporation, Serial Device Driver)
0xF7762000 C:\WINDOWS\system32\DRIVERS\arp1394.sys 61440 bytes (Microsoft Corporation, IP/1394 Arp Client)
0xF65DC000 C:\WINDOWS\system32\drivers\drmk.sys 61440 bytes (Microsoft Corporation, Microsoft Kernel DRM Descrambler Filter)
0xF7872000 C:\WINDOWS\system32\DRIVERS\redbook.sys 61440 bytes (Microsoft Corporation, Redbook Audio Filter Driver)
0xEB6EB000 C:\WINDOWS\system32\drivers\sysaudio.sys 61440 bytes (Microsoft Corporation, System Audio WDM Filter)
0xF76C2000 C:\WINDOWS\system32\DRIVERS\usbhub.sys 61440 bytes (Microsoft Corporation, Default Hub Driver for USB)
0xF7692000 C:\WINDOWS\system32\DRIVERS\1394BUS.SYS 57344 bytes (Microsoft Corporation, 1394 Bus Device Driver)
0xF7842000 C:\WINDOWS\system32\DRIVERS\AmdK8.sys 57344 bytes (Advanced Micro Devices, AMD Processor Driver)
0xF7652000 C:\WINDOWS\system32\DRIVERS\CLASSPNP.SYS 53248 bytes (Microsoft Corporation, SCSI Class System Dll)
0xF7882000 C:\WINDOWS\system32\DRIVERS\i8042prt.sys 53248 bytes (Microsoft Corporation, i8042 Port Driver)
0xF65CC000 C:\WINDOWS\system32\DRIVERS\rasl2tp.sys 53248 bytes (Microsoft Corporation, RAS L2TP mini-port/call-manager driver)
0xF7632000 VolSnap.sys 53248 bytes (Microsoft Corporation, Volume Shadow Copy Driver)
0xF65AC000 C:\WINDOWS\system32\DRIVERS\raspptp.sys 49152 bytes (Microsoft Corporation, Peer-to-Peer Tunneling Protocol)
0xF7742000 C:\WINDOWS\System32\Drivers\Fips.SYS 45056 bytes (Microsoft Corporation, FIPS Crypto Driver)
0xF7852000 C:\WINDOWS\system32\DRIVERS\imapi.sys 45056 bytes (Microsoft Corporation, IMAPI Kernel Driver)
0xF7622000 MountMgr.sys 45056 bytes (Microsoft Corporation, Mount Manager)
0xF65BC000 C:\WINDOWS\system32\DRIVERS\raspppoe.sys 45056 bytes (Microsoft Corporation, RAS PPPoE mini-port/call-manager driver)
0xF65EC000 C:\WINDOWS\system32\drivers\camc6aud.sys 40960 bytes (Conexant Systems Inc., Conexant WDM AC97 Audio Driver)
0xF7612000 isapnp.sys 40960 bytes (Microsoft Corporation, PNP ISA Bus Driver)
0xF657C000 C:\WINDOWS\System32\Drivers\NDProxy.SYS 40960 bytes (Microsoft Corporation, NDIS Proxy)
0xF7662000 PxHelp20.sys 40960 bytes (Sonic Solutions, Px Engine Device Driver for Windows 2000/XP)
0xF658C000 C:\WINDOWS\system32\DRIVERS\termdd.sys 40960 bytes (Microsoft Corporation, Terminal Server Driver)
0xF7642000 disk.sys 36864 bytes (Microsoft Corporation, PnP Disk Driver)
0xF7772000 C:\WINDOWS\system32\DRIVERS\HIDCLASS.SYS 36864 bytes (Microsoft Corporation, Hid Class Library)
0xF7712000 C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys 36864 bytes (Microsoft Corporation, IP FILTER DRIVER)
0xF67F3000 C:\WINDOWS\system32\drivers\mfesmfk.sys 36864 bytes (McAfee, Inc., System Monitor Filter Driver)
0xF659C000 C:\WINDOWS\system32\DRIVERS\msgpc.sys 36864 bytes (Microsoft Corporation, MS General Packet Classifier)
0xF7722000 C:\WINDOWS\system32\DRIVERS\netbios.sys 36864 bytes (Microsoft Corporation, NetBIOS interface driver)
0xBA10D000 C:\WINDOWS\System32\Drivers\Normandy.SYS 36864 bytes (RKU Driver)
0xF7752000 C:\WINDOWS\system32\DRIVERS\wanarp.sys 36864 bytes (Microsoft Corporation, MS Remote Access and Routing ARP Driver)
0xF7992000 C:\WINDOWS\System32\Drivers\Modem.SYS 32768 bytes (Microsoft Corporation, Modem Device Driver)
0xF7A0A000 C:\WINDOWS\System32\Drivers\Npfs.SYS 32768 bytes (Microsoft Corporation, NPFS Driver)
0xF797A000 C:\WINDOWS\system32\DRIVERS\usbehci.sys 32768 bytes (Microsoft Corporation, EHCI eUSB Miniport Driver)
0xF7A12000 C:\WINDOWS\system32\DRIVERS\HIDPARSE.SYS 28672 bytes (Microsoft Corporation, Hid Parsing Library)
0xF7912000 C:\WINDOWS\system32\drivers\mfebopk.sys 28672 bytes (McAfee, Inc., Buffer Overflow Protection Driver)
0xF7892000 C:\WINDOWS\system32\DRIVERS\PCIIDEX.SYS 28672 bytes (Microsoft Corporation, PCI IDE Bus Driver Extension)
0xF7982000 C:\WINDOWS\system32\DRIVERS\kbdclass.sys 24576 bytes (Microsoft Corporation, Keyboard Class Driver)
0xF798A000 C:\WINDOWS\system32\DRIVERS\mouclass.sys 24576 bytes (Microsoft Corporation, Mouse Class Driver)
0xF78E2000 C:\WINDOWS\System32\Drivers\TDTCP.SYS 24576 bytes (Microsoft Corporation, TCP Transport Driver)
0xF79FA000 C:\WINDOWS\System32\drivers\vga.sys 24576 bytes (Microsoft Corporation, VGA/Super VGA Video Driver)
0xF79B2000 C:\WINDOWS\system32\DRIVERS\wanatw4.sys 24576 bytes (America Online, Inc., Wan Miniport (ATW))
0xF7A02000 C:\WINDOWS\System32\Drivers\Msfs.SYS 20480 bytes (Microsoft Corporation, Mailslot driver)
0xF789A000 PartMgr.sys 20480 bytes (Microsoft Corporation, Partition Manager)
0xF79A2000 C:\WINDOWS\system32\DRIVERS\ptilink.sys 20480 bytes (Parallel Technologies, Inc., Parallel Technologies DirectParallel IO Library)
0xF79AA000 C:\WINDOWS\system32\DRIVERS\raspti.sys 20480 bytes (Microsoft Corporation, PTI DirectParallel® mini-port/call-manager driver)
0xF799A000 C:\WINDOWS\system32\DRIVERS\TDI.SYS 20480 bytes (Microsoft Corporation, TDI Wrapper)
0xF7972000 C:\WINDOWS\system32\DRIVERS\usbohci.sys 20480 bytes (Microsoft Corporation, OHCI USB Miniport Driver)
0xF78C2000 C:\WINDOWS\System32\watchdog.sys 20480 bytes (Microsoft Corporation, Watchdog Driver)
0xF7A2A000 C:\WINDOWS\system32\DRIVERS\BATTC.SYS 16384 bytes (Microsoft Corporation, Battery Class Driver)
0xF7AEE000 C:\WINDOWS\System32\Drivers\cdrbsdrv.SYS 16384 bytes (B.H.A Corporation, CD-ROM Filter Driver for Windows2000/xp)
0xF7AF6000 C:\WINDOWS\system32\DRIVERS\CmBatt.sys 16384 bytes (Microsoft Corporation, Control Method Battery Driver)
0xF72FD000 C:\WINDOWS\system32\DRIVERS\mssmbios.sys 16384 bytes (Microsoft Corporation, System Management BIOS Driver)
0xEB68B000 C:\WINDOWS\system32\DRIVERS\ndisuio.sys 16384 bytes (Microsoft Corporation, NDIS User mode I/O Driver)
0xF7AE6000 C:\WINDOWS\system32\drivers\pclepci.sys 16384 bytes (Pinnacle Systems GmbH, PCLEPCI)
0xF7A2E000 ACPIEC.sys 12288 bytes (Microsoft Corporation, ACPI Embedded Controller Driver)
0xF7A22000 C:\WINDOWS\system32\BOOTVID.dll 12288 bytes (Microsoft Corporation, VGA Boot Driver)
0xF7A26000 compbatt.sys 12288 bytes (Microsoft Corporation, Composite Battery Driver)
0xF5E1F000 C:\WINDOWS\System32\drivers\Dxapi.sys 12288 bytes (Microsoft Corporation, DirectX API Driver)
0xF5E47000 C:\WINDOWS\system32\DRIVERS\hidusb.sys 12288 bytes (Microsoft Corporation, USB Miniport Driver for Input Devices)
0xEB022000 C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys 12288 bytes (Conexant, Diagnostic Interface DRIVER)
0xF5E43000 C:\WINDOWS\system32\DRIVERS\mouhid.sys 12288 bytes (Microsoft Corporation, HID Mouse Filter Driver)
0xF7AFA000 C:\WINDOWS\system32\DRIVERS\ndistapi.sys 12288 bytes (Microsoft Corporation, NDIS 3.0 connection wrapper driver)
0xF7ACE000 C:\WINDOWS\system32\DRIVERS\rasacd.sys 12288 bytes (Microsoft Corporation, RAS Automatic Connection Driver)
0xF7AEA000 C:\WINDOWS\system32\DRIVERS\wmiacpi.sys 12288 bytes (Microsoft Corporation, Windows Management Interface for ACPI)
0xF7AD2000 C:\WINDOWS\System32\drivers\ws2ifsl.sys 12288 bytes (Microsoft Corporation, Winsock2 IFS Layer)
0xF7B1A000 aliide.sys 8192 bytes (Acer Laboratories Inc., ALi mini IDE Driver)
0xF7B62000 C:\WINDOWS\System32\Drivers\Beep.SYS 8192 bytes (Microsoft Corporation, BEEP Driver)
0xF7B1C000 dmload.sys 8192 bytes (Microsoft Corp., Veritas Software., NT Disk Manager Startup Driver)
0xF7B76000 C:\WINDOWS\System32\Drivers\dump_WMILIB.SYS 8192 bytes
0xF7B6A000 C:\WINDOWS\system32\drivers\EABFiltr.sys 8192 bytes (Hewlett-Packard Development Company, L.P., QLB PS/2 Keyboard filter driver)
0xF7B60000 C:\WINDOWS\System32\Drivers\Fs_Rec.SYS 8192 bytes (Microsoft Corporation, File System Recognizer Driver)
0xF7B16000 intelide.sys 8192 bytes (Microsoft Corporation, Intel PCI IDE Driver)
0xF7B12000 C:\WINDOWS\system32\KDCOM.DLL 8192 bytes (Microsoft Corporation, Kernel Debugger HW Extension DLL)
0xF7B64000 C:\WINDOWS\System32\Drivers\mnmdd.SYS 8192 bytes (Microsoft Corporation, Frame buffer simulator)
0xF7B66000 C:\WINDOWS\System32\DRIVERS\RDPCDD.sys 8192 bytes (Microsoft Corporation, RDP Miniport)
0xF7B4C000 C:\WINDOWS\system32\DRIVERS\swenum.sys 8192 bytes (Microsoft Corporation, Plug and Play Software Device Enumerator)
0xF7B4A000 C:\WINDOWS\system32\DRIVERS\USBD.SYS 8192 bytes (Microsoft Corporation, Universal Serial Bus Driver)
0xF7B18000 viaide.sys 8192 bytes (Microsoft Corporation, Generic PCI IDE Bus Driver)
0xF7B14000 C:\WINDOWS\system32\DRIVERS\WMILIB.SYS 8192 bytes (Microsoft Corporation, WMILIB WMI support library Dll)
0xF7D5E000 C:\WINDOWS\system32\DRIVERS\audstub.sys 4096 bytes (Microsoft Corporation, AudStub Driver)
0xF7C14000 C:\WINDOWS\System32\drivers\dxgthk.sys 4096 bytes (Microsoft Corporation, DirectX Graphics Driver Thunk)
0xF7C9E000 C:\WINDOWS\System32\Drivers\Null.SYS 4096 bytes (Microsoft Corporation, NULL Driver)
0xF7BDB000 C:\WINDOWS\system32\DRIVERS\OPRGHDLR.SYS 4096 bytes (Microsoft Corporation, ACPI Operation Registration Driver)
0xF7BDA000 pciide.sys 4096 bytes (Microsoft Corporation, Generic PCI IDE Bus Driver)
==============================================
>Stealth
==============================================
Nothing detected

RELEVANCY SCORE 200
Preferred Solution: redirect from Firefox using Bing search only

I recommend downloading and running DAP. It can help sort out any driver and firmware related issues on your system

It's worked out well for many of us in the past.

You can download it direct from this link http://downloaddap.org. (This link will open the download page of DAP so you can save a copy to your computer.)

A: redirect from Firefox using Bing search only

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you are unable to create a log because your computer cannot start up successfully please provide detailed information about the Windows version you are using: What we in particular need to know is version, edition and if it is a 32bit or a 64bit system. If you are unsure about any of these caracteristics, just let us know and we'll help you figuring it out. Please also tell us if you have your Windows CD/DVD handy.Please include a clear description of the problems you're having, along with any steps you may have performed so far.Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.Even if you have already provided information about your PC, we need a new log to see what has changed since you originally posted your problem.We need to create an OTL ReportPlease download OTL from one of the following mirrors:This is THE MirrorSave it to your desktop.Double click on the icon on your desktop.Click the "Scan All Users" checkbox.In the custom scan box paste the following:

msconfig
safebootminimal
activex
drivers32
netsvcs
%SYSTEMDRIVE%\*.exe
/md5start
explorer.exe
winlogon.exe
wininit.exe
hlp.dat
/md5stopPush the button.Two reports will open, copy and paste them in a reply here:OTL.txt <-- Will be openedExtra.txt<--Will be minimizedIn the upper right hand corner of the topic you will see a button called Watch Topic.I suggest you click it and select Immediate E-Mail notification and click on Proceed. This way you will be advised when we respond to your topic and facilitate the cleaning of your machine.After 5 days if a topic is not replied to we assume it has been abandoned and it is closed.regards myrti

Read other 8 answers
RELEVANCY SCORE 72.8

You know where it says www.techspot.com. Yes it has taken it over. There is no bing addon, extension or remove program. I followed a few guides I found googling and they only work until I restart FF. My old search engine was Google in the address bar.
 

A:Bing has taken over as my default search address bar in Firefox, search provider

In the address bar where it says your search program. Drop down the menu there. You should be able to switch it back to Google
 

Read other 24 answers
RELEVANCY SCORE 70.8

Hi all, my computer appears to be infected with a redirect virus. When I perform a search on Bing and click a link my browser gets redirected to a site I didn't choose. I'm operating Windows Vista with Microsoft Security Essentials. I ran Malwarebytes and AdAware and neither program found anything. Below is my DDS log and I've attached the Attach and GMER logs as requested. If you need any other info please ask. Thank you!
.
DDS (Ver_11-03-05.01) - NTFSx86
Run by office depot at 14:10:43.35 on Tue 04/12/2011
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_24
Microsoft? Windows Vista? Home Premium 6.0.6002.2.1252.1.1033.18.1917.668 [GMT -5:00]
.
AV: Lavasoft Ad-Watch Live! Anti-Virus *Enabled/Updated* {9FF26384-70D4-CE6B-3ECB-E759A6A40116}
AV: Microsoft Security Essentials *Enabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}
SP: Microsoft Security Essentials *Enabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Lavasoft Ad-Watch Live! *Enabled/Updated* {24938260-56EE-C1E5-047B-DC2BDD234BAB}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
C:\Windows\system32\svchost.exe -k rp... Read more

A:Bing search redirect

Hello and welcome to the forums!My secret agent name on the forums is SweetTech (you can call me ST for short), it's a pleasure to meet you. I am very sorry for the delay in responding, but as you can see we are at the moment being flooded with logs which, when paired with the never-ending shortage of helpers, resulted in the delayed responding to your thread.I would be glad to take a look at your log and help you with solving any malware problems.If you have since resolved the issues you were originally experiencing, or have received help elsewhere, please inform me so that this topic can be closed. If you have not, please adhere to the guidelines below and then follow instructions as outlined further below:Logs from malware removal programs (OTL is one of them) can take some time to analyze. I need you to be patient while I analyze any logs you post. Please remember, I am a volunteer, and I do have a life outside of these forums.
Please make sure to carefully read any instruction that I give you. Attention to detail is important! Since I cannot see or directly interact with your computer I am dependent on you to "be my eyes" and provide as much information as you can regarding the current state of your computer.
If you're not sure, or if something unexpected happens, do NOT continue! Stop and ask!
In Windows Vista and Windows 7, all tools need to be started by right clicking and selecting Run as Administrator!
Do not d... Read more

Read other 28 answers
RELEVANCY SCORE 70

I've searched this problem all over the internet and I've tried all of the solutions I have been able to find, but to no avail. I am running Windows 7 Home Premium.Bing has become the default search in my address bar - it should be Google. The Problem is not in the search bar in the top right - it is in the Address Bar.I have gone to about:config and changed the keyword.url to GOOGLE it will then work - but when I close Firefox and reopen it the address bar search goes right back to Bing.Then I went into Control Panel>Network and Internet>Manage browser add-ons>manage add-ons>Search Providers> and removed Bing - and made Google the default....None of this worked. I ended up here and tried the few steps included on that thread before it left me to creating my own regarding this situation.I am attaching copies of a minitoolbox scan and dds scan (both files) - hopefully these help you help me.I am going crazy because of this. I don't like change and just want Google back - please help me fix this!I will not download or delete anything in the meantime... thank you to anyone that tries to help me.

A:Firefox Redirect to Bing (Malware?)

I was able to get google back as my keyword search. If someone could still tell me if something is wrong because i'm not sure what caused this to happen.Solution to that issue: about:config> keyword.url there was an extra one called community.tool something or other - changed that to default and it deleted. From there I closed firefox and reopened and changed it to http://www.google.com/search?ie=UTF-8&oe=utf-8&q= and it worked. Hopefully this helps anyone else experiencing this issue.

Read other 31 answers
RELEVANCY SCORE 70

I started encountering redirects from Bing search results. This does not occur very time, but about 50% of the time. Then I've started experiencing various svchost consuming all CPU after about 10 minutes of a reboot causing everything to freeze up. The PC also reboots every so often for no reason. Here is the DDS information:

DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 9.0.8112.16476
Run by John at 20:24:06 on 2013-05-04
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.5619.3367 [GMT -5:00]
.
AV: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* /SlimCut 2
SP: Windows Defender *Disabled/Updated* /SlimCut 1
SP: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* /SlimCut 0
FW: McAfee Firewall *Enabled* START Hide Column 9
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\atieclxx.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files ... Read more

A:Bing Search Results Redirect

Hello, and welcome to TSF. Please subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.

My name is patndoris. I will be glad to take a look at your log and help you with solving any malware problems. It will be very helpful if you follow these guidelines:Malware logs are often lengthy and can take a lot of time to research and interpret. Please be patient while I review your logs.
Please note that there is no "Quick Fix" to modern malware infections and we may need to use several different approaches to get your system clean.
Please make sure to carefully read any instruction that I give you. If you're not sure, or if something unexpected happens, do NOT continue! Stop and ask!
Please follow my instructions carefully and in the order they are posted. You may also find it helpful to print out the instructions you receive.
Please do not run any scans or install/uninstall any applications or delete anything without being directed to do so.
Remember, absence of symptoms does not mean the infection is all gone. Please stick with me till you're given the "all clear".
Please do not use the Attachment feature for any log file. Do a Copy/Paste of the entire contents of the log file and submit it inside your post.
Please reply within 3 days. If I do not hear back from you in that time fra... Read more

Read other 19 answers
RELEVANCY SCORE 70

Hi - I have been trying to get rid of this thing myself by looking and copying the steps in various threads and finally decided that it is beyond my capabilities to do myself. I used Malwarebytes Antimalware and AdAware to try to delete it but was unsuccessful. I have Symantec Antivirus on my computer but it did not catch it. In all cases, the various programs did find something to remove and I thought it would take care of it, but it did not.

I may have some other virus as well but I am not sure as the Norton Antivirus no longer reports anything. However, things are still running slow and the machine locks up from time to time.

At any rate, thanks in advance for the help - I am so glad that you folks are out there to help people like me.
Here is my DDS.txt file.

.
DDS (Ver_11-03-05.01) - NTFSx86
Run by Poki at 19:58:49.51 on Fri 03/04/2011
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_21
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1015.105 [GMT -8:00]
.
AV: *Disabled/Outdated* {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}
AV: Symantec AntiVirus Corporate Edition *Enabled/Updated* {FB06448E-52B8-493A-90F3-E43226D3305C}
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
s... Read more

A:Bing search redirect virus + others ?

Hello and welcome to the forums!My secret agent name on the forums is SweetTech (you can call me ST for short), it's a pleasure to meet you. I would be glad to take a look at your log and help you with solving any malware problems.If you have since resolved the issues you were originally experiencing, or have received help elsewhere, please inform me so that this topic can be closed. If you have not, please adhere to the guidelines below and then follow instructions as outlined further below:Logs from malware removal programs (OTL is one of them) can take some time to analyze. I need you to be patient while I analyze any logs you post. Please remember, I am a volunteer, and I do have a life outside of these forums.Please make sure to carefully read any instruction that I give you. Attention to detail is important! Since I cannot see or directly interact with your computer I am dependent on you to "be my eyes" and provide as much information as you can regarding the current state of your computer.If you're not sure, or if something unexpected happens, do NOT continue! Stop and ask!In Windows Vista and Windows 7, all tools need to be started by right clicking and selecting Run as Administrator!These instructions have been specifically tailored to your computer and the issues you are experiencing with your computer. It's important to note that these instructions are not suitable for any other computer, even if the issu... Read more

Read other 14 answers
RELEVANCY SCORE 69.2

Hello. I seem to be infected with some sort of redirect virus. A second or two after performing a Google search, all of the listed links have been modified to something like: http://www.google.com/go?8024257

And when I click one of them, I get redirected to a different spam site each time. I get the exact same behavior with Bing. With Yahoo, it doesn't show any results at all and instead suggests that I may be infected with a virus. Also, I get the same behavior with Firefox and Internet Explorer.

While trying to run DDS and GMER, I get several "crash" error messages (cscript.exe, notepad.exe, mspaint.exe, etc.). I am attaching some screenshots.

When I tried to run GMER, I got several "access denied" messages and when it finally opened, several options were grayed out (see screenshot). So I was unable to run the tool (it just popped up more "access denied" messages and then said "no modifications were found").

The DDS log is below and the "attach.txt" file is attached. Thanks in advanced!

---------------

.
DDS (Ver_2011-06-23.01) - NTFSx86
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_20
Run by simon at 8:28:22 on 2011-07-01
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.2046.1166 [GMT -7:00]
.
AV: Symantec AntiVirus Corporate Edition *Enabled/Updated* {FB06448E-52B8-493A-90F3-E43226D3305C}
.
============== Running Processes ===============
.
C:\WINDOWS\system32&... Read more

A:Redirect virus - Google and Bing, Firefox and IE

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

Read other 4 answers
RELEVANCY SCORE 69.2

I am like many others on here having problems with redirecting. I actually had this problem a few months ago and resolved the problem with deleting some application(?) folders. I am not sure what or where they were. I really wish I would have bookmarked that page with the directions. At any rate, I am getting redirects with not only Firefox but with IE as well which didn't happen last time. The other difference is that I am not getting redirected directly after going to the google/yahoo/bing etc. page but after I've searched and clicked on a link it will redirect me. I've done a full scan with McAfee and Malwarebytes. Here is my log from Malwarebytes:

Malwarebytes' Anti-Malware 1.45
www.malwarebytes.org

Database version: 4009

Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.13

8/7/2010 4:32:04 PM
mbam-log-2010-08-07 (16-32-04).txt

Scan type: Full scan (C:\|)
Objects scanned: 337161
Time elapsed: 2 hour(s), 58 minute(s), 49 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)
... Read more

A:Google/Yahoo/Bing etc Redirect in Firefox and IE

Few new things....

IE works, Firefox does not.

I just scanned my computer again and found a registry file infected:
Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.13

8/9/2010 3:17:41 AM
mbam-log-2010-08-09 (03-17-41).txt

Scan type: Quick scan
Objects scanned: 114465
Time elapsed: 36 minute(s), 47 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 1
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\xpwsemei (Rogue.AntivirusSuite.Gen) -> Quarantined and deleted successfully.

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

I don't know if this will fix it as I am scared to restart my computer as it takes about 20 times of getting through BSODs with fatal error codes to get my computer to somewhat work again.

Whatever this new malware is, it is BAD

Read other 1 answers
RELEVANCY SCORE 69.2

Both Firefox and IE are infected by redirects.
Tried the following:
* ccleaner
* Malwarebytes
* Fix TDSS
* tdsskiller
* rkill
* Microsoft Security Essentials
 
I appreciate your help.
 
 
Results of DDS
----------------------------
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 9.0.8112.16464  BrowserJavaVersion: 10.7.2
Run by USERNAMEREDACTED at 15:17:32 on 2013-02-14
Microsoft Windows 7 Enterprise   6.1.7601.1.1252.1.1033.18.5942.3967 [GMT -6:00]
.
AV: PC Tools Spyware Doctor with AntiVirus *Disabled/Updated* {2F668A56-D5E0-2DF1-A0AE-CB1284F42AB2}
AV: Microsoft Security Essentials *Enabled/Updated* {3F839487-C7A2-C958-E30C-E2825BA31FB5}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Microsoft Security Essentials *Enabled/Updated* {84E27563-E198-C6D6-D9BC-D9F020245508}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
c:\Program Files\Microsoft Security Client\MsMpEng.exe
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\Hpservice.exe
C:\Windows\system32\atieclxx.exe
C:\Windows\system32\vcsFPService.exe
C:\Windows\... Read more

A:Google / Bing Redirect problem (ie and firefox)

Hello bcaps2142013 and Welcome to The Forums!!Around here they call me Gringo and I'll be glad to help you with your malware problems.Very Important --> Please read this post completely, I have spent my time to put together somethings for you to keep in mind while I am helping you to make things go easier, faster and smoother for both of us!Please do not run any tools unless instructed to do so.We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking ba... Read more

Read other 14 answers
RELEVANCY SCORE 69.2

Hello,
After searching on Google or Bing, clicking on a link in the results redirects to sites such as yellowbook.com or get-answers-fast.com. MalwareBytes detected and removed about 50 infected files, but the redirecting is still happening. This occurs on both IE and Firefox. The DDS is pasted below. I have attached ark.txt, and 2 Malwarebytes logs that show what was removed, and a third that shows no infections. Thanks for the help!

===========================================================
DDS LOG
===========================================================

.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 9.0.8112.16421
Run by Teacher at 10:01:02 on 2011-11-27
Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.1918.1153 [GMT -5:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}
SP: Microsoft Security Essentials *Enabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
C:\Windows\system32\Ati2evxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestr... Read more

A:Infected with Google/Bing search redirect

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.Do not run any other tool untill instructed to do so!Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.Run Combofix:You may be asked to install or update the Recovery Console (Win XP Only) if this happens please allow it to do so (you will need to be connected to the internet for this)Before you run Combofix I will need you to turn off any security software you have running, If you do not know how to do this you can find out >here< or >here<Combofix may need to reboot your computer more than once to do its job this is normal.You can download Combofix from one of these links.Link 1Link 2Link 3 1. Close any open browsers or any other programs that are open.2. Close/disable all anti virus and anti malware programs so they do not interfere with the r... Read more

Read other 12 answers
RELEVANCY SCORE 69.2

UPDATE 3/28: Tried a Google and Bing search today, and none of the links appear covered by redirects. Before receiving instruction not to make any changes to my system, I ran another Anti-Malware scan. The results:Memory Modules Infected:c:\Users\Michael\AppData\Local\Temp\ftpgent.dll (Trojan.Agent) -> Delete on reboot.Registry Values Infected:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\PkgMtend (Trojan.Agent) -> Value: PkgMtend -> Quarantined and deleted successfully.Files Infected:c:\Users\Michael\AppData\Local\Temp\ftpgent.dll (Trojan.Agent) -> Delete on rebootI am not sure if this will completely erradicate the problem, logs from DDS and GMER (pre-antimalware removal) below:Hello,As of yesterday when I search using Google and Bing I am redirected to various sites when attempting to follow links. The redirect links affect most, but not all of the search results. I am running Windows Vista Home Premium, Firefox version 3.6.16. I have run Malwarebytes Anti-malware, which found three malicious files yesterday, 1 Trojan.Agent and 2 Trojan.Dropper. I deleted these files and restarted. I have also run a full scan using McAfee, which registered and deleted 3 trojans. I am pretty much a novice at most of this stuff, but I can follow directions well. Any help is greatly appreciated.Regards,Mike DDS log:.DDS (Ver_11-03-05.01) - NTFSx86 Run by Michael at 15:4... Read more

A:Search engine redirect (Google, Bing)

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you are unable to create a log because your computer cannot start up successfully please provide detailed information about the Windows version you are using: What we in particular need to know is version, edition and if it is a 32bit or a 64bit system. If you are unsure about any of these caracteristics, just let us know and we'll help you figuring it out. Please also tell us if you have your Windows CD/DVD handy.Please include a clear description of the problems you're having, along with any steps you may have performed so far.Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.Even if you have already provided information about your ... Read more

Read other 2 answers
RELEVANCY SCORE 69.2

Hi,

I got a "Internet Security 2010" on Dec 28, 2009. Use AVG, Malwarebytes' Anti-Malware and Ad-Aware (all with the latest update) to clear up the mess. Now, both browser (IE 7 and firefox 3.5) both redirect search results to some bogus web site.

I have run several times using the software mentioned but was not able to find anything.

I've used HijackThis v2.0.2 to produce the following log.

My system Win XP sp3

I've attached the HijackThis log file. Please help!!!!

A:search results redirect (google and bing)

Hi,

Thank you all for posting your suggestions, especially for people working on this site to help others. I saw a post here that ran ComboFix to take care of the browser redirect problem. So, I download it and following the simple instructions. Low and behold, ComboFix was able to detect there was a rootkit running on my computer. After several scan and reboot, my computer is back and no more browser redirect.
I thank you again from the bottom of my heart!!!!

If BleepingComputer.com needs any help, please contact me and I will be more than happy to give my time back to serve the community.

Stephen

Read other 2 answers
RELEVANCY SCORE 69.2

Hi,
I am getting redirected from Google and Bing seach results page to random unrelated pages.
Avast! is giving a message that there is a rootkit detected on startup at C:\\WINDOWS\system32\drivers\disk.sys but is unable to resolve the issue.
I have access to the XP reinstall disc that came with the computer.
Thank you in advance for your assistance.
Cindy
.
DDS (Ver_11-03-05.01) - NTFSx86
Run by Cindy at 20:50:16.54 on Fri 04/08/2011
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.894.531 [GMT -7:00]
.
AV: avast! Antivirus *Enabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
============== Running Processes ===============
.
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
C:\WINDOWS\system32\Ati2evxx.exe
svchost.exe
svchost.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
c:\Program Files\Zune\ZuneBusEnum.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\stsystra.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\Alwil Software\Avast5\avastUI.exe
... Read more

A:Google and Bing search engine redirect

Hello and welcome. Please follow these guidelines while we work on your PC:Malware removal is a sometimes lengthy and tedious process. Please stick with the thread until I’ve given you the “All clear.” Absence of symptoms does not mean your machine is clean!
Please do not run any scans or install/uninstall any applications without being directed to do so.
Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.
Please subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.

Download ComboFix from one of the following locations:
Link 1
Link 2

VERY IMPORTANT !!! Save ComboFix.exe to your Desktop

* IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this linkDouble click on ComboFix.exe & follow the prompts.
As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a... Read more

Read other 9 answers
RELEVANCY SCORE 69.2

Good morning,
I'm having a problem with a search engine redirect. Most results in google and bing are redirected to an undesireable site. Also, when I open IE and type in an address, a new window opens up with an undesirable redirect. In addition to this, I'm also having the following problems:

-"generic host process for Win32 Services" error message
-"No active mixer devices" error message when I try to adjust audio volume
-generally slow running computer
-restarts frequently needed because software freezes when opening

Below is my dds log as well as an attached zip file with the second dds log and the gmer log. Please let me know what I can do to fix this problem. thanks!!
DDS (Ver_10-12-12.02) - NTFSx86
Run by bdavidson at 10:10:08.95 on Tue 12/28/2010
Internet Explorer: 8.0.6001.18702
============== Running Processes ===============
C:\Program Files\Cisco Systems\SSL VPN Client\agent.exe
C:\Program Files\Cisco\Cisco AnyConnect VPN Client\vpnagent.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Broadcom\ASFIPMon\AsfIpMon.exe
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
C:\win32app\ingr\ipshare\clntutil\bin\pidrpcs.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\lotus\notes\ntmulti.exe
C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
C:\WINDOWS\sy... Read more

A:Search Engine Redirect (google, bing, etc.)

Howdy there and welcome to TSF Forums

I'm Steve and I will be helping you throughout this fix.

Before beginning the fix, read this post completely. If there's anything that you do not understand, kindly ask your questions before proceeding. It is IMPORTANT that you don't miss a step. Please perform everything in the correct order/sequence.

Please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription

Please note that the forum is very busy and if I don't hear from you within three days from this initial posting then the thread will be closed.

We will begin with ComboFix.exe. Please visit this webpage for download links, and instructions for running the tool:

http://www.bleepingcomputer.com/comb...o-use-combofix

* Ensure you have disabled all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

Please include the C:\ComboFix.txt in your next reply for further review.

Read other 11 answers
RELEVANCY SCORE 69.2

14 May 2014 I did an auto d/l of Adobe and then Bing Search Bar showed up in both Firefox and Chrome. There is nothing in add-ons to disable, nor in Control Panel to uninstall. I've changed the search page default but Bing keeps taking over. It's probably taken over IE too but I never use that unless absolutely necessary. I hate MS and the way they try to own our computers!!

Is there a way to get rid of Bing eternally and fairly easily?

Thanks for any suggestions/help.

Singer35
 

A:trying to remove Bing Search bar in Firefox and Chrome

If you can find something called Search Protect in your list of programs, uninstall it.
If no luck,
For Google Chrome, you'll have to manually remove those "globally" installed extensions.

Here's how:

http://www.howtogeek.com/140464/how-...ome-extension/

Some may need to be removed from the registry, others, from Chrome&#8217;s extension folders.

For Firefox,

Press the Windows key + R to open a Run box.

Copy/paste the following command:

%APPDATA%\Mozilla\Firefox\Profiles

Press Enter.

Open the searchplugins folder.

Delete the xml file(s) related to Bing.

If still no luck,
Please download AdwCleaner.
Double-click the adwcleaner.exe to run the tool.
Click Scan.
When the scan is finished, click Clean.
When the cleaning process is over, click Report and a Notepad window will be opened.
Please post the contents here in your topic.

 

Read other 1 answers
RELEVANCY SCORE 68.4

Any search results in Firefox from Bing or Google (I haven't tried other search engines) redirect to pleasewaitsearch.com, then redirect again to another random site.Opera and Internet Explorer seem unaffected.I've scanned with Microsoft Security Essentials, Ad-aware, Spybot, SuperAntispyware, Hitman pro, and Malwarebytes. Some of them found and removed stuff, but didn't fix the redirect problem.Disabling Javascript in Firefox does fix the redirect.I tried to scan with gmer but it didn't work. It said c:\windows\system32\config\system didn't exist. I went there and it showed up in the folder with a size of about 13 megs. I tried opening it in notepad++ which said it didn't exist and asked if I wanted to create it so I did. gmer no longer threw that error when started but when I start a scan it says the file is in use by another process then proceeds to scan and find nothing (the log is empty).Also, all the gmer checkboxes are grayed out except Services, Registry, Files, ADS, and my drives.Thanks for any help you can give me, this thing is driving me nuts.Here's my DDS.txt:DDS (Ver_10-03-17.01) - NTFSX64 Run by Chris at 18:43:30.90 on Tue 08/17/2010Internet Explorer: 8.0.7600.16385 BrowserJavaVersion: 1.6.0_18Microsoft Windows 7 Ultimate 6.1.7600.0.1252.1.1033.18.6135.4373 [GMT -7:00]SP: Spybot - Search and Destroy *enabled* (Outdated) {ED588FAF-1B8F-43B4-ACA8-8E3C85DADBE9}SP: SUPERAntiSpyware *enabled* (Updated) {222A897C-501... Read more

A:Firefox Google/Bing results redirect to pleasewaitsearch.com

Hello , And to the Bleeping Computer Malware Removal Forum. My name is Elise and I'll be glad to help you with your computer problems.I will be working on your malware issues, this may or may not solve other issues you may have with your machine.Please note that whatever repairs we make, are for fixing your computer problems only and by no means should be used on another computer.The cleaning process is not instant. Logs can take some time to research, so please be patient with me. I know that you need your computer working as quickly as possible, and I will work hard to help see that happen. Please reply using the Add/Reply button in the lower right hand corner of your screen. Do not start a new topic. The logs that you post should be pasted directly into the reply. Only attach them if requested or if they do not fit into the post.Unfortunately, if I do not hear back from you within 5 days, I will be forced to close your topic. If you still need help after I have closed your topic, send me or a moderator a personal message with the address of the thread or feel free to create a new one.You may want to keep the link to this topic in your favorites. Alternatively, you can click the button at the top bar of this topic and Track this Topic, where you can choose email notifications. The topics you are tracking are shown here.-----------------------------------------------------------If you have since resolved the original problem you were having, we would appreciate you... Read more

Read other 4 answers
RELEVANCY SCORE 68.4

cannot conduct any searches on the computer. Will bring up searcg results but everytime I click a result from the search I am redirected to other pages such as http://search.us.b00kmarks.com/search.php?keyword=norton+internet+security+systems and http://www.blinkx.com/ac/cb?adid=02-100-201-300-404-25&affiliate=6363F6E9%2D9BFC%2D4F79%2D9439%2D761078D881A1 redirected pages are always different. dds text below:
.
DDS (Ver_2011-06-23.01) - NTFSx86
Internet Explorer: 8.0.6001.18702
Run by kelly at 20:06:55 on 2011-07-24
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.1014.479 [GMT -4:00]
.
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Motive\McciCMService.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc... Read more

A:Google, Bing and other search engines redirect constantly

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

Read other 7 answers
RELEVANCY SCORE 68.4

I'm just going to throw out as much info as I can think of. I run XP, ran defogger, then dds, but gmer crashes before the scan is complete. It gets to a certain point and crashes. The folder it gets hung up on is:

c:\documents and settings\myname\application data\mozilla\firefox\crash reports\pending (Ironic!)

Mainly this is just affecting searching right now, with a few pop ups, but it's getting worse so I need to get rid of this ASAP!

.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_23
Run by Dawg at 13:59:28 on 2012-02-07
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1022.424 [GMT -5:00]
.
AV: AVG Anti-Virus Free Edition 2012 *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
AV: Lavasoft Ad-Watch Live! Anti-Virus *Disabled/Updated* {A1C4F2E0-7FDE-4917-AFAE-013EFC3EDE33}
.
============== Running Processes ===============
.
C:\PROGRA~1\AVG\AVG2012\avgrsx.exe
C:\Program Files\AVG\AVG2012\avgcsrvx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\Program Files\Sandboxie\SbieSvc.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Dell\Media Experience&... Read more

A:TDSS and Google/Bing redirect search results

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps.===Replace your hosts file first.Go to: http://www.funkytoad.com/index.php?option=com_content&task=view&id=13&Itemid=Download the program HostsXpert to restore the default hosts file back onto your machine.Unzip the program and execute it.Select "Restore MS Hosts File".Close the application.=*=Please DownloadTDSSKiller.zip>>> Double-click on TDSSKiller.exe to run the application.Click on the Start Scan button and wait for the scan and disinfection process to be over.If an infected file is detected, the default action will be Cure, click on Continue
If a suspicious file is detected, the default action will be Skip, click on Continue
If you are asked to reboot the computer to complete the process, click on the Reboot Now button. A report will be automatically saved at the root of the System drive ((usually C:\) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt" (for example, C:\TDSSKiller.2.2.0_20.12.2009_15.31.43_log.txt). Please copy and paste the contents of that file here.If no reboot is required, click on Report. A log file will appear. Please copy and paste the contents of that file in your next reply.Download http://public.avast.com/~gmerek/aswMBR.exe (aswMBR.exe) ( 511KB ) to your desktop. Double click the ... Read more

Read other 11 answers
RELEVANCY SCORE 68.4

Hello,

I keep getting redirected when I search something in Google or Bing. After searching something on either search engine, the search results page will load, but once I click on one of the result links it redirects me to something totally differnt. The websites I'm redirected to vary between various websites - often including something called "Mfeed", "Stopzilla" and a few others. I have tried searcing with both internet explorer and firefox with the same results. I am also unable to log onto Google Talk or Skype. When I try to log onto Google Talk I get an error message that says "Could not authenticate server".

I first noticed this off and on a week or so ago but wasnt sure if I was imagining things, since it only happened rarely. Approximately two days ago I recieved a notice that my outlook was signing onto a server without a valid signature, but I clicked "ok" or something (in hindsight, not the smartest idea). Since then, the search engine redirects have been increased significantly and now 100% of the search engine results are redirected.

Since I noticed the infection, and before I logged onto bleeping computer, I ran Malwarebytes Anti-Malware, which found 8 infections and then said it removed them. I also ran SUPERAntiSpyware which found 1 trojan and 993 adware cookies, all of which were removed by the program.

I hope this information is helpful to anyone. If anyone can help me I would greatly, greatly appreciate it... Read more

A:Google/Bing Search Redirect - seems like a hijack problem

Apologies for the improper post - I am just reading about the proper way to post a request for help. I am a noob - apologies. I will post a proper posting as soon as I can run the proper programming. Thank you.

Read other 1 answers
RELEVANCY SCORE 68.4

So, I've removed malware countless times from PCs using the free tools and everything.. this is the first one to kick my rear.Running Windows 7 Ultimate 32bit, and tried Malwarebytes, temp deletion, Ccleaner, Ccleaner registry tool, SAS Full scan, Spybot S&D, Hitman Pro, HJT 2.0.4, creating host file from scratch, flush and register DNS, and I even went down to Combofix. Every time I search while running windows in Normal mode, I get a redirect when clicking on a google or bing search link that goes something like this:Search results for camping:REMOVED POTENTIALLY MALICIOUS LINKS..-STIt has even come up with legitimate Target.com product searches or verizon.net pages.After a while it will start working again like normal for a while. Also, this does not happen at all in SMw/N. Thanks a ton for your help!Here are the logs requested:DDS (Ver_10-12-12.02) - NTFSx86 Run by Curt at 2:07:42.52 on Thu 02/24/2011Internet Explorer: 8.0.7600.16385 BrowserJavaVersion: 1.6.0_20Microsoft Windows 7 Ultimate 6.1.7600.0.1252.1.1033.18.2038.1190 [GMT -5:00]SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}============== Running Processes ===============C:\Windows\system32\wininit.exeC:\Windows\system32\lsm.exeC:\Windows\system32\svchost.exe -k DcomLaunchC:\Windows\system32\svchost.exe -k RPCSSC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestrictedC:\Windows\... Read more

A:Firefox/IE Search redirector (Google, Bing tested)

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

Read other 19 answers
RELEVANCY SCORE 68

Ok, I've been combating this for days. I even lost a whole night of sleep to this. I first got attacked by 3 or so viruses. I ran malwarebytes and Microsoft security essentials. They got rid of the vast majority of the problems. I even had to reset my router because my router settings got hijacked. Anyhow, I've gotten rid of most everything, and every single adware-anti-virus I run is coming up clean, but I know there is still a problem.

Symptoms:
1. Google/Bing/Yahoo searches get redirected to false sites, but only if it is a new site. Once press "back" and go the site I just clicked on, it directs me to the correct site. This is both on Firefox and IE. It doesn't appear to be redirecting Google Chrome.
2. There seems to be an unusual amount of ads for Vimax. It seems like every site has a banner with them all of a sudden. I think this is a result of whatever is messing up my browser.

3. I'm getting popup ads on sites that don't normally have popups.

What I've done.
Ran malewarebytes. Ran AVG Anti-Vir. Ran Microsoft Security Essentials. Ran BHODemon. Everything is showing up clean.

I saw a video on how to stop redirects on youtube.com
YouTube - How to fix the google redirect error

It directs me to go to the C:/Windows/System32/drivers/etc/hosts file, and change the file to read

::1 localhost
127.0.0.1 localhost

as opposed to how it previously was written

127.0.0.1 localhost
::1 localhost
... Read more

A:Google/Bing/Yahoo redirect in Firefox and IE. Continuous Popups

Hello and welcome to TSF.

HijackThis is no longer the preferred initial analysis tool in this forum.

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Read other 1 answers
RELEVANCY SCORE 68

Hi

I am experiencing problems with my Internet Explorer (IE). Whenever I search for a keyword on any search engine (Google/Bing/Yahoo), the main links of the results would redirect to various Ad websites. When I point the mouse over the main link, the status bar of the IE shows a link starting with http://1942.r.google.com... If the link is clicked, another window of IE opens up and redirects to another site. However, if I close that window or press the back key, it will take me to my original window that I initially intended to go to.

I, like any other tech, ran several software in safe mode, such as AVG, Trend Micro Worry Free, Symantec Endpoint Security, Spy-Bot, Ad-Aware, Malware Bytes and more. Even though it cleaned many viruses/spy-wares, it could not fix the redirecting issue. I even checked and removed suspicious registry entries from the system. However, I was unable to get rid of the redirection.

I am including log files that were requested. Please help get rid of this redirection issue. Any help will be greatly appreciated.

Thank You!

========================= DDS.txt =====================================
DDS (Ver_10-12-12.02) - NTFSx86
Run by raf at 21:53:40.07 on Fri 12/17/2010
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_23
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2037.1284 [GMT -5:00]

AV: Microsoft Security Essentials *Disabled/Updated* {BCF43643-A118-4432-AEDE-D861FCBCFCDF}
AV: Trend Micro Security Agent *Disa... Read more

A:search engine redirect virus (Google/Bing/Yahoo)

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

Read other 3 answers
RELEVANCY SCORE 68

Hello,

Today while browsing my AGV notified me that it caught a threat and moved it to the virus vault. Soon after I began having redirects in my Bing search results. I was redirected to Scour the first time and then a couple of other sites during later attempts. I did not get the name of those sites because I hit the back button as quickly as I could. I attempted removal instructions found on the net to no avail. I used rkill, tdsskiller, and scanned with Malewarebytes and AGV. Both found nothing and I'm still getting redirects.

Thank you for the help!

Here is my log:

.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 8.0.6001.18702
Run by Mr. Holbrook at 20:25:38 on 2012-09-18
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1015.291 [GMT -4:00]
.
AV: AVG Anti-Virus Free Edition 2012 *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
.
============== Running Processes ===============
.
C:\PROGRA~1\AVG\AVG2012\avgrsx.exe
C:\Program Files\AVG\AVG2012\avgcsrvx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\AVG\AVG2012&... Read more

A:Infected with Scour Redirect and other Redirects in Bing Search Results

Greetings and Welcome to The Forums!!My name is Gringo and I'll be glad to help you with your computer problems. I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of usPlease do not run any tools unless instructed to do so.
We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.
Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.
Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.
A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE: At... Read more

Read other 18 answers
RELEVANCY SCORE 68

Recently have been unable to search on any of the search engines. When doing a search on google or other sites I am redirected when trying to click on a site of interest. Attempted to use antivirus and anitmalware without luck.

Appreciate boopme and his assistance
Attached is the information requested

Thanks for the help

.
DDS (Ver_11-03-05.01) - NTFSx86
Run by Nicholas at 19:26:12.43 on Mon 03/21/2011
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.503.80 [GMT -5:00]
.
AV: Microsoft Security Essentials *Disabled/Updated* {BCF43643-A118-4432-AEDE-D861FCBCFCDF}
AV: Charter Security Suite 9.01 *Enabled/Updated* {E7512ED5-4245-4B4D-AF3A-382D3F313F15}
FW: Charter Security Suite 9.01 *Enabled*
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\AGRSMMSG.exe
svchost.exe
C:\Program Files\Sony\VAIO Update 2\VAIOUpdt.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\Program Files\Sony\VAIO Zone Remote Commander\AvRmtCtr.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\... Read more

A:Infected with google/bing/yahoo etc redirect virus and un able to search

Hello and welcome to Bleeping Computer We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here. If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far. Upon completing the steps below another staff member will review your topic an do their best to resolve your issues. If you have already posted a DDS log, please do so again, as your situation may have changed. Use the 'Add Reply' and add the new log to this thread. Thanks and again sorry for the delay. We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scr DDS.pifDouble click on the DDS icon, allow it to run. A small box will open, with an explaination about the tool. No input is needed, the scan is running. Notepad will open with the results. Follow the instructions that... Read more

Read other 16 answers
RELEVANCY SCORE 68

I don't remember the exact day it started, but for the past week or so, I have had issues when I try to click on a search result link from any search engine: Google, Bing, etc. Like so many others in different forums/posts I have read over the past few days, if I cut and paste the shortcut into the address bar and hit Enter, it takes me to the appropriate site. But if I just click on the link, I am redirected to anything from porn to shopping to completely random sites. (There is a green globe before the web address for every site I am redirected to, if that helps at all.) That seems to be the only issue I have currently, although a few days back my firewall turned off on its own. Since then, I have downloaded and run Ad-Aware and Malwarebytes' Anti-Malware software, as well as the (paid version of) Spyware Sweeper and (free version of) AVG Anti-Virus that I already had running on my system (Windows XP). At first, a trojan was found (Trojan.Backdoor.ProgDav) and after two tries, seemingly removed. I also had a Win32/Cryptor virus found and removed and two other viruses I can't recall. I have run full scans using everything I have over the past day (in both safe and regular mode) and nothing has been found. But the redirecting links problem still persists and I am worried that there are worse things happening to my computer behind the scenes that I can't detect with the naked eye. Any help would be appreciated; if I can't figure this out soon, I&#... Read more

A:Search Engine (Google, Bing, etc.) Link Redirect Problems

hello JHWK54ME and to Bleepingcomputer.if I can't figure this out soon, I'm going to have to take my laptop in to a professionalmethinks we're going to put these guys out of business one day Yup. . . you've got a nasty on your machine. We can get rid of it. . . but first, a warning.One or more of the identified infections is a backdoor trojan.This allows hackers to remotely control your computer, steal critical system information and download and execute files.I would counsel you to disconnect this PC from the Internet immediately. If you do any banking or other financial transactions on the PC or if it should contain any other sensitive information, please get to a known clean computer and change all passwords where applicable, and it would be wise to contact those same financial institutions to apprise them of your situation.Though the trojan has been identified and can be killed, because of it's backdoor functionality, your PC is very likely compromised and there is no way to be sure your computer can ever again be trusted. Many experts in the security community believe that once infected with this type of trojan, the best course of action would be a reformat and reinstall of the OS. Please read these for more information:How Do I Handle Possible Identify Theft, Internet Fraud and CC Fraud?When Should I Format, How Should I ReinstallWe can still clean this machine but I can't guarantee that it will be 100% secure afterwards. Let me know what you d... Read more

Read other 38 answers
RELEVANCY SCORE 68

Hi

I am experiencing problems with my Internet Explorer (IE). Whenever I search for a keyword on any search engine (Google/Bing/Yahoo), the main links of the results would redirect to various Ad websites. When I point the mouse over the main link, the status bar of the IE shows a link starting with http://1942.r.google.com... If the link is clicked, another window of IE opens up and redirects to another site. However, if I close that window or press the back key, it will take me to my original window that I initially intended to go to.

I, like any other tech, ran several software in safe mode, such as AVG, Trend Micro Worry Free, Symantec Endpoint Security, Spy-Bot, Ad-Aware, Malware Bytes and more. Even though it cleaned many viruses/spy-wares, it could not fix the redirecting issue. I even checked and removed suspicious registry entries from the system. However, I was unable to get rid of the redirection.

I am including log files that were requested. Please help get rid of this redirection issue. Any help will be greatly appreciated.

Thank You!

========================= DDS.txt =====================================
DDS (Ver_10-12-12.02) - NTFSx86
Run by raf at 21:53:40.07 on Fri 12/17/2010
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_23
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2037.1284 [GMT -5:00]

AV: Microsoft Security Essentials *Disabled/Updated* {BCF43643-A118-4432-AEDE-D861FCBCFCDF}
AV: Trend Micro Security... Read more

A:search engine redirect virus (Google/Bing/Yahoo) on IE

Hi and welcome to TSF.

My name is Iain and I will be helping you clean your system.

You may wish to Subscribe to this thread (Thread Tools > Subscribe to this thread) so that you are notified when you receive a reply.

Please read these instructions carefully and then print out or copy this page to Notepad in order to assist you when carrying out the fix. You should not have any open browsers or live internet connections when you are following the procedures below.

Note that the fix may take several posts. Please continue to respond to my instructions until I confirm that your logs are clean. Remember that although your symptoms may vanish, this does NOT mean that your system is clean.

If there is anything you don't understand, please ask BEFORE proceeding with the fixes.

Please ensure that you follow the instructions in the order I have them listed.

Please do not install or uninstall any programmes, or run any other scanners or software, unless I specifically ask you to do so. Also please copy and paste logs into the thread, rather than add them as attachments.


Combofix
We will begin with ComboFix.exe. Please visit this webpage for download links, and instructions for running the tool:

http://www.bleepingcomputer.com/comb...o-use-combofix

Please read all the information carefully! If using Windows XP you should ensure you install the Recovery Console.

You MUST disable your AntiVirus and AntiSpyware applications - please read this thread as a guide. They ... Read more

Read other 10 answers
RELEVANCY SCORE 67.2

On @11/1 i would get redirected to sites that have nothing to do with the search engine result i clicked on. I would need to rerun the search and click on it again to get to it. BACK does not work on the site i'm redirected to, it just sends me to the main page that i'm redirected to.Happens with bot IE and Firefox.I have dwm.exe running from my temp directory and i can't delete it, even in safe mode. Also looks like shell.exe and svchost.exe are running from a wrong directory. Note: I downloaded GMER but the buttons that the instructions say to check are grayed out & uncheckable. Services, Registry & Files & c:/ & ADS are the only ones i'm allowed to check. I did not run it.Here are my logs as per http://www.bleepingcomputer.com/forums/topic34773.html .DDS.txt:DDS (Ver_10-11-03.01) - NTFS_AMD64 Run by John at 4:49:51.15 on Thu 11/04/2010Internet Explorer: 8.0.7600.16385 BrowserJavaVersion: 1.6.0_17Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.2814.1630 [GMT -4:00]============== Running Processes ===============C:\Windows\system32\wininit.exeC:\Windows\system32\lsm.exeC:\Windows\system32\svchost.exe -k DcomLaunchC:\Windows\system32\svchost.exe -k RPCSSC:\Windows\system32\atiesrxx.exeC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestrictedC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestrictedC:\Windows&#... Read more

A:Browser redirect in Search Engine results (Yahoo, Bing, Google)

Moderator - please close this thread.
I followed boopme's 1st post in the below thread and i'm good now.
http://www.bleepingcomputer.com/forums/topic358309.html

THANK YOU!

Read other 2 answers
RELEVANCY SCORE 67.2

I have had a search engine redirect virus for some time. Inititally I thought it was the "google redirect" virus, so I started playing with other search engines (Bing, Yahoo) from both Firefox and IE, but I get redirected on all search hits through those engines too. I disabled PrevX software, Spybot software, and AVG software, ran Malwarebyte's Anti-malware which identified 5 things to remove - most it couldn't remove until reboot - but the reboot did not remove them. I ran Hijack This, which directed me to here and to the DDS tool.

Thanks in advance - Sara.

The DDS log is as follows:
DDS (Ver_09-06-26.01) - NTFSx86
Run by Sara at 11:07:36.18 on Sat 06/27/2009
Internet Explorer: 6.0.2900.5512 BrowserJavaVersion: 1.6.0_13
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2046.1446 [GMT -4:00]

AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
AV: Prevx Edge *On-access scanning enabled* (Updated) {D486329C-1488-4CEB-9CC8-D662B732D901}

============== Running Processes ===============

J:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
J:\WINDOWS\System32\svchost.exe -k netsvcs
J:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
J:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
J:\WINDOWS\system32\spoolsv.exe
J:\WINDOWS\Explorer.EXE
J:\Program Files\McAfee\Common... Read more

A:Redirect virus from variety of search engines (e.g., google, bing, yahoo)

I also should mention two things:

1 - that I have run "Find" on GooredFix.exe and here is the log it creates:

GooredFix v1.92 by jpshortstuff
Log created at 13:42 on 27/06/2009 running Option #1 (Sara)
Firefox version 3.0.11 (en-US)

=====Suspect Goored Entries=====

=====Dumping Registry Values=====

[HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Mozilla Firefox 3.0.11\extensions]
"Plugins"="J:\Program Files\Mozilla Firefox\plugins"

[HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Mozilla Firefox 3.0.11\extensions]
"Components"="J:\Program Files\Mozilla Firefox\components"

[HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\extensions]
"[email protected]"="J:\Program Files\AVG\AVG8\Toolbar\Firefox\[email protected]"

[HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\extensions]
"[email protected]"="J:\Program Files\Java\jre6\lib\deploy\jqs\ff"

[HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\extensions]
"{3f963a5b-e555-4543-90e2-c3908898db71}"="J:\Program Files\AVG\AVG8\Firefox"
And 2, I have run CCCleaner, and here is that log (though I did not have it clear the Firefox cache as I was busy composing this post at the same time):

CLEANING COMPLETE - (4.849 secs)
------------------------------------------... Read more

Read other 7 answers
RELEVANCY SCORE 66.4

Please help! I have been infected by something that redirects me do random sites after I have done a searchs on Google, Yahoo or Bing. The latest redirects have taken me to the following website hxxp://server2.mediajmp.com/surveys/don-index.html?sub=yahoo.comor hxxp://server2.mediajmp.com/surveys/don-index.html?sub=google.comBoth of these links have an audio file asking me to participate in a 30 second survey. I have run Byspot Search & Destroy, PC Tools Spyware Doctor. Adaware & Malwaresbytes Anti Malware and still can not rid this thing. Other sites worth noting which are part of the redirect there are 9 click.php files here are some of the URL'shxxp://64.111.208.43/click.php?re=1&cc=eNoVUs3OqjAUfCATbQuUduECUPlERAFBYHNDC4j8qKCCEB7-amYyyUxOchYz10kkFE0I4GlfKB-r2H4mMAdQ_OkvBxRCRABCVMJTeIbSVjdyXn-q1F4uJ8gTIGaMEiDwOOYZSBCDCUScpISSmP-DNOM4FgSQUkw4FzOJUSQnNMNMRoyyCaJJmFLrXnlW9b6Mir0wGmLUGrevD7-yhfJuKbaSO2LDe-e-jfr6eOwwbt24dcfnuD96_Wc1k9vv20p5FabpGsRD2H0koPKNzs5eoguHRTc8mjxVr59z4dB1mWe3esXtNKt0t6tIK-zOg8w3z-RlVUBk6_Wi1AYr90vzSA6CT1Zdu7iPqNmWffHurdQYj3-qLcB920inRluczuqmf2yybnSawNEeRSll1Ws3vNP4-Iy4FP3lQxU4GCq9mvsZ9e-BWjfrEgkzwxc7sFadYIisp25oPDx_Bh_qoLeiY9kf6pNXBhqbxfygaKi-xeSa6UPirzwxuuyk0NuBgofrw-4un3TlOr5uTXgYxtCTN7PNFcscRqV5qQ-tebLExZ4IWvq4pezQlK5K3MdMSYYn8y7LiZI5QtJcIF9OYIKEzEUwl9Ec_-yEpkRIBLOGHbtZIAqMVxgYbRQ4PdM3ReRKBUOg-17-8O00RhCbZ-cdBepg1lbHfntBIMFJmooES4jiFCBKMlliTGIA41RG_wGSB9Po&cu=54d123a8433ce1b67595029df86bafdf&co=bc2be11daa9a7ffd8567da1141096460&... Read more

A:Search Engine Result Redirect Google, Yahoo & Bing http://r9237242.cn/

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 2 answers
RELEVANCY SCORE 58

Hi - I just joined this evening. Someone infected our home PC with the XP fakware virus and this site was the most helpful at removing it. I was so thankful I decided to join! On the same PC (running XP) I used Malwarebytes to clean it up. I was hoping it would catch another issue happening as well when using any internet browser. It didn't find whatever the issue is. I have checked the browser history after I do a google search and it starts with search.php, v3.php, go.php and various others. Sometimes when not initiating a search - reading in a browser window - a new tab will pop up (firefox) directing me to a crappy site. I've tried to search the forums and couldn't find anything on this. Does anyone know what this is? I have also searched the net and haven't found anything that has helped. I figured if I find the answer - it will be here!
Thanks,
Julia

Read other answers
RELEVANCY SCORE 58

Hello,

Today I began to have a problem in which AVG found multiple malware infections that were moved to the Virus Vault: "Win32/Kryptik.TNG ; TR/Crypt.XPACK.Gen2 ; Unknown Virus in C:\Windows\SYSWOW64\RUNDLL32.EXE ; and TROJ_VUNDO.SMIB.

Malwarebytes' Anti Malware found and quarantined threats as well:
Files Infected:
c:\Users\DW\AppData\LocalLow\Sun\Java\deployment\cache\6.0\11\3528520b-3e3cb5f3 (Backdoor.Bot) -> Quarantined and deleted successfully.
c:\Users\DW\AppData\LocalLow\Sun\Java\deployment\cache\6.0\32\41e34420-62a7398f (Trojan.Exploit.Drop) -> Quarantined and deleted successfully.
c:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\deployment\cache\6.0\32\41e34420-26b5cca9 (Trojan.Exploit.Drop) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Sun\Java\deployment\cache\6.0\32\41e34420-26b5cca9 (Trojan.Exploit.Drop) -> Quarantined and deleted successfully.
Registry Values Infected:
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\MouseUpdateProfile (Trojan.SHarpro.PGen) -> Value: MouseUpdateProfile -> Quarantined and deleted successfully.

Presently if I do a google sea... Read more

A:Search redirect on Firefox 7.0.1

Please download GooredFix from one of the locations below and save it to your DesktopDownload Mirror #1Download Mirror #2Ensure all Firefox windows are closed.To run the tool, double-click it (XP), or right-click and select Run As Administrator (Vista).When prompted to run the scan, click Yes.GooredFix will check for infections, and then a log will appear. Please post the contents of that log in your next reply (it can also be found on your desktop, called GooredFix.txt).

Read other 28 answers
RELEVANCY SCORE 58

My search results in IE8 and Firefox get redirected to bogus pages. I have ran SUPERAntiSpyware, Malwarebytes, and AT+T internet security(Mcafee). All have found and removed things but the redirect is still there. Below are my logs
DDS (Ver_10-12-12.02) - NTFSx86
Run by Valued Compaq Client at 16:46:58.98 on Sat 01/29/2011
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_22
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1535.886 [GMT -8:00]

AV: McAfee VirusScan *Disabled/Updated* {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}
FW: McAfee Personal Firewall *Enabled*

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\rundll32.exe
svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
svchost.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.... Read more

A:Search Redirect in Firefox and IE

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.Do not run any other tool untill instructed to do so!Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.Run Combofix:You may be asked to install or update the Recovery Console (Win XP Only) if this happens please allow it to do so (you will need to be connected to the internet for this)Before you run Combofix I will need you to turn off any security software you have running, If you do not know how to do this you can find out >here< or >here<Combofix may need to reboot your computer more than once to do its job this is normal.You can download Combofix from one of these links.Link 1Link 2Link 3 1. Close any open browsers or any other programs that are open.2. Close/disable all anti virus and anti malware programs so they do not interfere with the r... Read more

Read other 16 answers
RELEVANCY SCORE 57.6

Hello everyone, I originally posted this request in the "Am I Infected..." forum. Garmanma and Quietman7 helped me run many tests, Topic referenced is here: http://www.bleepingcomputer.com/forums/t/277581/google-search-redirect-firefox-only/ ~ OB I will list everything I remember below, but my Google search in Firefox only is still being redirected- as an example, I ran a Google search for "Christmas Star Origin", clicked on a link to go to "www.thehistoryofchristmas.com/trivia/star.htm" and was redirected to a malware site at "c.ppcxml.net" which was blocked by the browser as a malware site. However, I could just as easily be taken to a random search site. This has been going on for about a month. None of the other browsers, IE8 or Chrome seem to be affected. I run Windows Server 2003, it is updated to Service Pack 2, and I keep all the MS security updates up to date, as well as all the browser updates. Antivirus is not too strong, I use ClamWin, because it will work on Server 2003. On all my other computers, I run Avast Home Free Edition, which won't run on Server 2003. I also run Spybot, Asquared free, and Spyware Blaster. First, DDS.scr will not run on Server 2003, so I was unable to run that program and provide the information. However, I downloaded and ran HiJack This, and also Root Repeal, and I can provide those log reports. Garmanma was my first contact with this website throu... Read more

A:Google search redirect in Firefox only

Hello , And to the Bleeping Computer Malware Removal Forum. My name is Elise and I'll be glad to help you with your computer problems.I will be working on your malware issues, this may or may not solve other issues you may have with your machine.Please note that whatever repairs we make, are for fixing your computer problems only and by no means should be used on another computer.You may want to keep the link to this topic in your favorites. Alternatively, you can click the button at the top bar of this topic and Track this Topic, where you can choose email notifications. The topics you are tracking are shown here.-----------------------------------------------------------If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explanation about the tool. No inp... Read more

Read other 12 answers
RELEVANCY SCORE 57.6

Hello Everyone,

My computer has picked up some piece of malware of some sort. It all started about 3 weeks ago when I noticed that firefox was reopening itself
without being initiated. My computer is running Small Business Server 2003, I keep it patched and have kept up with all the updates. I am running
ClamWin Antivirus, which I also keep up to date. I know it's not the best, but Avast Free edition (which I run on all my other family computers) does
not offer a free edition for the server 2003 group. For antimalware/trojans, I run A squared Free, and when I ran that scan, I found a number of infections,
which I cleaned up using it. I restarted the computer and performed another scan, and found it clean. But, when I launched Firefox, I noticed that I was
being redirected after performing a search to various sites, some questionable security sites, and other general "we'll find what you're looking for sites"
that were not a part of the Google results. I searched using other browsers, and IE8 would not even start up, or would Chrome.Error was "unable to load
page". FYI, my home page is deliberately set to "about: blank" on all my browsers. Found this site, and started reading about redirect exploits, and that
led me to install MalwareBytes AntiMalware, which found more infections, and subsequently fixed them. I also ran "Sophos AntiRoot Kit" which found ... Read more

A:Google Search Redirect, Firefox only

Welcome to BCUpdate mbam and run a FULL scanPlease post the results=============We Need to check for Rootkits with RootRepealDownload RootRepeal from the following location and save it to your desktop.Direct Download (Recommended)Primary MirrorSecondary MirrorSecondary MirrorSecondary MirrorZip Mirrors (Recommended if you have a slower connection or if the Direct Download mirror is down)
Primary MirrorSecondary MirrorSecondary MirrorRar Mirrors - Only if you know what a RAR is and can extract it.
Primary MirrorSecondary MirrorSecondary MirrorExtract RootRepeal.exe from the archive (If you did not use the "Direct Download" mirror).Open on your desktop.Click the tab.Click the button.Check all seven boxes: Push OkCheck the box for your main system drive (Usually C:), and press Ok.Allow RootRepeal to run a scan of your system. This may take some time.Once the scan completes, push the button. Save the log to your desktop, using a distinctive name, such as RootRepeal.txt. Include this report in your next reply, please.============================Please download Win32kDiag.exe by AD and save it to your desktop.alternate download 1alternate download 2This tool will create a diagnostic report Double-click on Win32kDiag.exe to run and let it finish. When it states Finished! Press any key to exit..., press any key on your keyboard to close the program. A file called Win32kDiag.txt should be created on your Desktop.Open that file in Notepad and copy/paste the entire... Read more

Read other 24 answers
RELEVANCY SCORE 57.6

Simple problem: Whenever I open Firefox and do a a google search, 9 times out of 10 my first search click in the results is redirected to a random search site. Running this on a windows 7 laptop.

What I have done: A couple of months ago I decided to do some research and thought I was pretty sharp. Ran mbam, spybot sd, and avast scans... even panda scan. got rid of some crap.... then did my own combofix. Seemed to have worked temporarily. I was not advised by anyone to do this at the time.

What I need: Help from someone that knows what they are doing, as these redirects are pretty bad now.

At the command of someone that can give me a step by step. I'm certainly humbled by my ill-advised attempts previously.

A major thank you for your time in advance.

A:Firefox Google Search Redirect

DownloadTDSSkillerLaunch it.Click on change parameters-Select TDLFS file systemClick on "Scan".Please post the LOG report(log file should be in your C drive) Please download GMER from here(doesnot work on 64 bit OS)http://www2.gmer.net/download.phpTemporarily disable any real-time active protection so your security programs will not conflict with gmer's driver.GMER will open to the Rootkit/Malware tab and perform an automatic Full Scan when first run. (do not use the computer while the scan is in progress)If you receive a WARNING!!! about rootkit activity and are asked to fully scan your system...click NO.Now click the Scan button. If you see a rootkit warning window, click OK.When the scan is finished, click the Save... button to save the scan results to your Desktop. Save the file as gmer.log.Click the Copy button and paste the results into your next reply. DownloadaswMBRLaunch it, allow it to download latest Avast! virus definitionsClick the "Scan" button to start scan.After scan finishes,click on Save logPost the log results here

Read other 10 answers
RELEVANCY SCORE 57.6

This seems to be a common infection with Firefox. When I execute a Google search in the search bar in the upper right corner of the Firefox window, when clicking on the results, instead of going to the website listed in the results, I get redirected to a different ad site. I have attempted to run several programs and while they've picked up on some things, the problem still persists.The DDS.txt report is as follows:DDS (Ver_10-03-17.01) - FAT32x86 Run by Tawrin J. McGrew at 9:21:34.25 on Mon 08/30/2010Internet Explorer: 8.0.6001.18702Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.502.245 [GMT -5:00]AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}============== Running Processes ===============C:WINDOWSsystem32svchost -k DcomLaunchSVCHOST.EXEC:WINDOWSSystem32svchost.exe -k netsvcsC:WINDOWSsystem32svchost.exe -k WudfServiceGroupC:Program FilesAVGAVG9avgchsvx.exeC:Program FilesAVGAVG9avgrsx.exeC:Program FilesAVGAVG9avgcsrvx.exeSVCHOST.EXESVCHOST.EXEC:WINDOWSsystem32spoolsv.exeSVCHOST.EXEC:WINDOWSSystem32svchost.exe -k AkamaiC:Program FilesAVGAVG9avgwdsvc.exeC:AcerEmpowering TechnologyadmServ.exeC:Program FilesAVGAVG9avgnsx.exeSVCHOST.EXEC:Program FilesJavajre6binjqs.exeC:WINDOWSSystem32svchost.exe -k HPZ12C:WINDOWSSystem32svchost.exe -k HPZ12C:Program FilesCyberLinkShared FilesRichVideo.exeC:Program FilesMicrosoftSearch Enhancement PackSeaPortSeaPort.exeC:WINDOWSsystem32svchost.exe -k imgsvcC:WINDOWSsyste... Read more

A:Firefox Google Search Bar Redirect

Hello GranTorino, My name is Syler and I will be helping you to solve your malware issues. Sorry for the delayin replying, we are very busy at the moment.Please note because we are very busy, if I don't hear from you within 5 days the topic will be closed, If youhave since resolved your issues I would appreciate if you would let me no so I can close this topic.Please download Malwarebytes' Anti-Malware from HereNote: If you already have Malwarebytes' Anti-Malware, just update then run it.Double Click mbam-setup.exe to install the application.Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.If an update is found, it will download and install the latest version.Once the program has loaded, select "Perform Quick Scan", then click Scan (the scan may take some time to finish, so please be patient).When the scan is complete, click OK, then Show Results to view the results.Make sure that everything is checked, and click Remove Selected.When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.Copy and Paste the entire report in your next reply .Note: If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process,if asked to restart... Read more

Read other 3 answers
RELEVANCY SCORE 57.6

Currently running XP Home Edition, SP2 and all of my searches, within the last day or so, are being redirected to rogue advertising sites. I'd appreciate some help in getting rid of the offensive virus/malware.

Thanks, in advance. here is the HiJack This log.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:43:22 AM, on 5/20/2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http... Read more

A:IE8 & Firefox search redirect problems

Read other 16 answers
RELEVANCY SCORE 57.6

Hi,I think most of you should know what I'm talking about here.. 95% of my search results in Google redirect to spam sites. Tried Malware Bytes and it worked the first time, but the virus/malware has since returned and now seems immune to MB.Any help appreciated.Also, perhaps unrelated, but equally annoying, Chrome now seems to be consuming several processes and making my machine work multiples times harder.. The screenshot below shows a fresh restart of Windows and loading the browser and navigating to only this thread.. Look at the corresponding amount of Chrome processes running concurrently..!Thanks,Z

A:Chrome/Firefox Search Redirect

Hello? Anyone there?

Read other 3 answers
RELEVANCY SCORE 57.6

I am having trouble mainly with websites redirecting, "Themes" service not automatically starting with windows even though it is set to, and finally I cannot access the Windows Update web page. I have read through a couple other posts in this forum and have done all that I feel comfortable doing without some guidance. So far I have used AVG, Avast, Baku, Malwarebytes, Ad-Aware, and Spy-bot search and destroy; all at separate times hoping to fix this problem with no luck. I would use one of them with no luck, uninstall it, install a new one and so on. All that is left now is Spy-bot and Hijack This!. I didn't know if this could possibly be a Pragma virus? I am not too sure what that is but I am unable to look it up due to it redirecting. If someone would take a look at my Hijack This! log and help through some more processes I would really appreciate your help. I also tried reinstalling Windows XP via booting from the disk but it says that the drive is unavailable when I try that, and the disk only auto plays about half the time I load it into the computer. Thank you for your time, I will get back to and replies first thing in the morning.

 

A:IE8 & Firefox search redirect problems as well

Read other 14 answers
RELEVANCY SCORE 57.6

Greetings to whomever it may concern,

contracted "Antivirus PC security live" and I removed it as per instructions on this very site...it has not reappeared.

However once I started searching on Google on Firefox and IE I kept getting redirected to other spam sites. So it has led me here. I am able to go to desired sites searched from yahoo search engine.

I have not run any scans to check for anything else since initial malware removal.

I have downloaded Hijackthis and am ready to post a log if necessary.
Thanks in advance!

Read other answers
RELEVANCY SCORE 57.6

Hi,Thanks in advance! With the holiday I assume the posting will be a little slow on both sides but I am ready to go on my end! Anyway...I seem to be infected with malware that redirects my searches (in firefox) in a sporadic and random way to a different site than my search click. At first Google was the only search affected but now that I am using Yahoo the problem has drifted into the yahoo search as well. Internet Explorer doesnt seem to be affected...yet...I have Mcafee Security Suite installed and up to date and I have run scans liberally since the problem as well as running;MalwarebytesSpybot Search and DestroyAd - AwareCCleanerWindows DefenderWindows Malware removal ToolWindows online free Onecare and I attempted to run Trend Micro Housecall but could not get it to start.The problem persists and I am at my wits end to resolve it and I have contemplated a restore with Acronis True image 11 but my last restore is over a month old and I am always nervous about going that route as I have had problems with this particular computer with unfixable crashes. I also dont know if a restore would fix the problem. I know my way around computers a tiny bit but this problem is WAY beyond what I can handle. These logfiles are crazy complicated and bless you for knowing what they mean!I will post the Logs as instructed and if the problem can be resolved I would love the help! Logfile of random's system information tool 1.05 (written by random/random)Run by Jason at 20... Read more

A:Search Engine Redirect in Firefox

Since it has been a few days since you scanned your computer with HijackThis, we will need a new HijackThis log. If you have not already downloaded Random's System Information Tool (RSIT), please download Random's System Information Tool (RSIT) by random/random which includes a HijackThis log and save it to your desktop. If you have RSIT already on your computer, please run it again. Double click on RSIT.exe to run RSIT. Click Continue at the disclaimer screen. After it has finished, two logs will open. Please post the contents of both. log.txt will be maximized and info.txt will be minimized. Thank you for your patience.Please see Preparation Guide for use before posting about your potential Malware problem. Thank you for your patience.If you have already posted this log at another forum or if you decide to seek help at another forum, please let us know. There is a shortage of helpers and taking the time of two volunteer helpers means that someone else may not be helped. While we are working on your HijackThis log, please: Reply to this thread; do not start another! Do not make any changes on your computer during the cleaning process or download/add programs on your computer unless instructed to do so. Do not run any other tool until instructed to do so! Let me know if any of the links do not work or if any of the tools do not work. Tell me about problems or symptoms that occur during the fix. Do not run any other programs or open any other w... Read more

Read other 20 answers
RELEVANCY SCORE 57.6

Wasn't sure where to post this. Posted it in reply to my own HJT thread, http://www.bleepingcomputer.com/forums/t/202342/search-results-redirected/, but I wanted to get the word out a little bit more.If you are having google searches redirected in Firefox 3.0.6, but all of your malware scans are coming up clean, try the following: go into your firefox installation directory, to the Extensions folder (eg: C:\Program Files\Mozilla Firefox\extensions).One at a time, cut a folder out of this location and paste it to the desktop.Then try to search. Click on like 10 results and see if you get any redirects.If you do, you've removed the wrong extension. Put it back. If you don't, you've just identified the extension that's causing the redirects. Put it back and test again, just to be certain.Once you've identified the problem extension (you've positively verified that when it's out of your extensions folder you get no redirects, and when it's in your extensions folder you do), delete it. If it gives you trouble deleting it, move it and rename it for now, and look for help deleting problem files. Your problems should be gone.note: I have been told that two addons for Firefox, Web of Trust and NoScript, will prevent this problem in the future but I have not used them and cannot vouch for them.Also: I saved the little bugger in case anyone wants to see it.

Read other answers
RELEVANCY SCORE 57.6

Hello.
I am running Windows 7 64 bit.
Okay, so I have not had a virus or spyware issue in years, and I'm pretty proud of that. The other day, I was on YouTube watching videos and what not, then all of the sudden I hear my default Windows 7 start up notification, like I restarted, but I was in my browser watching videos. I looked down at my clock, and my battery, wifi status, everything cleared and reset, then BAM! My browser exits in the middle of my video (gRrrr lol) and this application called Win 7 Security 2012 pops up. Automatically, I knew it was 'rogue malicious spyware'.

I decided to try and remove it manually (I usually have more luck going into my registry and removing it myself) but for the first time, I totally screwed it up. I deleted a few files that I found in an article that are associated with this 'name changing malware', restarted, thought everything was okay, but - every time I tried to start Firefox, Chrome, System Restore, regedit.exe, etc, I got the "Select a program from the list to open - or Search The Web For A Suggested Program" window. I gave up for a couple days, irritated I had be hijacked out of no where - for no apparent reason (I am a computer geek, I know what not to click in certain search engines etc...but my boyfriend doesn't! lol)

So, this evening, I started my HP DV7 up (nice computer btw - had it for 3 years now.) and decided to give it a go.
Long story short, I ran Firefox as administrator, a... Read more

A:Firefox Search Redirect Problems - 63.209.69.107

Hello, what you may have missed was running RKill prior to MBAM,to end the processes that belong to Win 7 Antispyware 2012 before removing. This infection also usually carries a TDSS infection that needs to be checked for and removed . Look at our GUIDE ..you will see the tools and all the Associated Win 7 Antispyware 2012 & Vista Antivirus 2012 Files and Registry Information.Remove Win 7 Antispyware 2012 and Vista Antivirus 2012 name changing rogue (Uninstall Guide) This should hrlp the file associations issue:Download this reg file and double-clicking it. Allow it to merge. This will reset the default exe file associations for Windows as long as the main infection is gone. default_exe.reg

Read other 14 answers
RELEVANCY SCORE 57.6

This is an Acer laptop running Windows 7 Home Premium (64). I've ran TDSSKiller and Norton Antivirus so far. Firefox is affected, IE 64/32 bit is not.
Many search engines are affected (Google, Bing, etc). Some sites aren't (Altavista).
I was told that the error messages that I've been getting when Windows starts up is related to this issue (Window is named RunDLL. The error message reads: There was a problem starting CtaMon.dll. The specified module could not be found). Also, I am constantly reminded to install a program whenever Windows starts up (Application install - security warning).
I'm not sure if this last issue is related but sometimes I need to refresh a new window exactly twice in order for the page to load (Firefox).

Also, I have been mounting my HTC Thunderbolt as a disk drive on this infected laptop. Should I be concerned?

A:Search engine redirect - Firefox

Can you post the TDSSKiller log?Hello,And welcome to BleepingComputer.com, before we can assist you with your question of: Am I infected? You will need to perform the following tasks and post the logs of each if you can.Malwarebytes Anti-MalwarePlease download Malwarebytes Anti-Malware and save it to your desktop.Download Link 1Download Link 2MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.
For instructions with screenshots, please refer to the How to use Malwarebytes' Anti-Malware Guide.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan.If an update is found, the program will automatically update itself. Press the OK button to close that box and continue.If you encounter any problems while downloading the definition updates, manually download them from here and just double-click on mbam-rules.exe to install.On the Scanner tab:Make sure ... Read more

Read other 2 answers
RELEVANCY SCORE 57.6

When I click on links from search engines (Google/Bing/Yahoo), I am being redirected to different ad/search sites. On occasion, an additional tab will spontaneously open in the browser (Firefox/IE). Very annoying.I currently have AVG (free) as my antivirus, which runs weekly scans. I have also recently installed and run scans with Malwarebytes' Anti-Malware, SpyBot, SuperAntiSpyware, WiseDisk Cleaner, WiseRegistry Cleaner. These have found various nasties, but none of the removals/quarantines have fixed the browser redirect problem I am experiencing.I am running Windows XP on a Sony Vaio laptop connected wirelessly via an Apple Airport Extreme. The wireless router is connected directly to a DSL modem. Happy to provide more networking details if needed; note that our MacBook that is connected via the same wireless system is not experiencing any problems.I have followed the preparation guide and pasted the DDS text below, and attached the Ark.log and Attach.txt files.Please let me know if there is any additional information you need -###############################################DDS (Ver_10-03-17.01) - NTFSx86 Run by XXXXXXXXXXX at 21:13:58.17 on Wed 07/21/2010Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_20Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1014.250 [GMT -7:00]AV: AVG Anti-Virus Free *On-access scanning disabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}============== Running Processes ===============C:\WINDOWS\syst... Read more

A:Search Engine redirect with Firefox and IE

Hi,Welcome to Bleeping Computer. My name is m0le and I will be helping you with your log.Please subscribe to this topic, if you haven't already. You can subscribe by clicking the Options box to the right of your topic title and selecting Track This Topic.Please avoid installing/uninstalling or updating any programs and attempting any unsupervised fixes or scans. This can make helping you impossible.Please reply to this post so I know you are there.The forum is busy and we need to have replies as soon as possible. If I haven't had a reply after 3 days I will bump the topic and if you do not reply by the following day after that then I will close the topic.Once I receive a reply then I will return with your first instructions.Thanks

Read other 15 answers
RELEVANCY SCORE 57.6

Hello, everyone! This is my first post so please forgive me if I forget to include details. I am running Windows XP service pk 3. Firefox is redirecting all of my searches to advertisement sites. I have run Malwarebytes, Super Anti-Spyware and SpyBot numerous times. All 3 programs did find infections, cleaned/deleted them but nothing is fixed. The last thing found was AdRotator via Malwarebytes. Google works in Firefox safe mode, but Firefox crashes eventually and closes unexpectedly. I downloaded Safari and Google works fine on it. Safari will also crash anytime I download a picture/video. Any assistance/suggestions you could offer me would be outstanding. I'm literally over it at this point. Thanks tons!

A:Firefox Google Search Redirect

Hello :

I am facing the same problem of google search results leading to wrong websites. I ran scans with different tools and they reported different malwares / adwares but the problem seems to persist. Please let me know if you found the solution to the problem.

Thanks a ton !

Read other 21 answers