Over 1 million tech questions and answers.

Google & Bing search results redirected using IE

Q: Google & Bing search results redirected using IE

Google search results being redirected when using IE, but not when using Chrome.

I have tried these fixes without success....

Norton Internet Security 2009
MalwareBytes
SuperAntiSpyware
CCleaner
GooredFix
VundoFix
ComboFix (I can submit log if requested)

I have not yet run HijackThis.

Please help.

Thanks, RGWomack

Read other answers
RELEVANCY SCORE 200
Preferred Solution: Google & Bing search results redirected using IE

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

RELEVANCY SCORE 116.4

Sometimes when a search result link is clicked a window is displayed with an animated graphic in green or orange that says redirect , then a page opens that is not the page from the link. Other times there is no animated graphic but the page that opens is not the one whose link was clicked on. Sometimes, there is a warning banner at the top of the browser window stating this site is not safe. Navigating back to the search engine and clicking on the same link opens the correct webpage. Some links lead directly to the correct webpage. Have scanned whole computer in normal mode with updated AVG Anti-Virus Free Edition 2012 and updated Malwarebytes Anti-Malware free, niether found any malware. The last malware detected and quaranteened by Malwarebytes on 7-19-12 was Trojan.Happili.
The computer may be running more slowly and the display might flicker every once in a while.

.
DDS (Ver_2011-08-26.01) - FAT32x86
Internet Explorer: 8.0.6001.18702
Run by Arnold at 13:02:18 on 2012-07-28
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.511.256 [GMT -4:00]
.
AV: AVG Anti-Virus Free Edition 2012 *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
FW: ZoneAlarm Free Firewall *Enabled*
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost -k DcomLaunch
SVCHOST.EXE
C:\WINDOWS\System32\svchost.exe -k netsvcs
SVCHOST.EXE
SVCHOST.EXE
C:\WINDOWS\Explorer.EXE
C:\Program Files\CheckPoint\ZAFor... Read more

A:Google and Bing search results redirected in IE8

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps.===Please download ComboFix from one of these locations:Link 1Link 2* IMPORTANT !!! Save ComboFix.exe to your DesktopDisable your Anti-Virus and Anti-Spyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools
Close any open browsers, and all other programs working. Make sure you save your file if working on a document.
Do not install any other programs until this if fixed.[/b]
Double click on ComboFix.exe & follow the prompts.
As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.
Some Rookit infection may damage your boot sector. The Windows Recovery Console may be needed to restore it. Do not bypass... Read more

Read other 50 answers
RELEVANCY SCORE 116.4

This computer was infected but cleaned with Norton Internet Security 2010 quite some time ago. I do not have the logs for those cleanings but today's full scan turned up nothing. Clicking on search results will bring up fake pages. Sometimes going back and clicking the link again will bring up the right page. It happens about 1 in every 4-6 search results.I've scanned with MalwareBytes, SuperAntispyware and Norton and nothing seems to correct this problem. I have followed the instructions on posting here and following is the DDS.txt report:--------------------- cut here----------------------DDS (Ver_09-12-01.01) - NTFSx86 Run by Jim at 12:42:00.75 on Wed 01/06/2010Internet Explorer: 7.0.5730.13Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1022.257 [GMT -8:00]AV: Norton Internet Security *On-access scanning disabled* (Updated) {E10A9785-9598-4754-B552-92431C1C35F8}FW: Norton Internet Security *enabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220}============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcsC:\Program Files\Intel\Wireless\Bin\EvtEng.exeC:\Program Files\Intel\Wireless\Bin\S24EvMon.exeC:\Program Files\Intel\Wireless\Bin\WLKeeper.exesvchost.exesvchost.exeC:\WINDOWS\system32\spoolsv.exec:\program files\common files\logitech ... Read more

A:Google (And Bing) search results are being redirected...

Hello and welcome to Bleeping Computer.My name is km2357 and I will be helping you to remove any infection(s) that you may have.I will be giving you a series of instructions that need to be followed in the order in which I give them to you.If for any reason you do not understand an instruction or are just unsure then please do not guess, simply post back with your questions/concerns and we will go through it again.Please do not start another thread or topic, I will assist you at this thread until we solve your problems.Lastly the fix may take several attempts and my replies may take some time but I will stick with it if you do the same.Sorry for the delay in replying, the forum is very busy. If you still need help, please post a fresh DDS Log

Read other 3 answers
RELEVANCY SCORE 115.2

Hello.

For the past several days whenever I would use google, yahoo, or bing, my search results are redirected through a website called "searchingandclick44.com" and the original search terms are then plugged into several other websites.
I'm not completely sure that this is connected to it, but at the same time this started happening I became unable to use Gmail, as my browser (Both IE and Firefox) started saying "There is a problem with this website's security certificate." The same thing would happen when I used other websites that required the use of Gmail, such as signing into Youtube.
Occasionally when using the search toolbar to the right of my address bar with google, it will state that the 302 has moved and will give me a link.

I have tried to use MalwareBytes, but it will not pick up the problem, even after updating the program.
I tried to use gmer to see if I could find anything, but that didn't work either, because whenever I open it, it says, "C:\Windows\system32\config\system: The system cannot find the file specified." And the only things that can be checked afterwards are Services, Registry, Files, and ADS.

I use Windows 7, IE 8, and Firefox 3.5.11

I'd like to thank you in advance, and I look forward to you're help.
Ivan the Submissive.

A:Search results for Google, Yahoo, and Bing are redirected

Try this:http://www.bleepingcomputer.com/virus-remo...sing-tdsskiller

Read other 1 answers
RELEVANCY SCORE 115.2

Both Firefox (v3.6.3) and IE 8 get redirected from the google and bing search pages. When I click on links they get redirected to other sites. Also, randomly the speakers start blaring advertisements. Task Manager shows instances of IE running in the background. Killing the IE process stops the ads from the speakers.I disabled using Defogger, then ran the DDS utility and am supplying the two logs. The GMER utility does not run to completion. It closes before I can save the logs. I saved a log in the middle of the scan and am attaching it. Not sure if it is useful. Additionally, I ran TDSSkiller and it indicated that I had a 'Driver "atapi" infected by TDSS rootkit!' but it could not cure the problem.I have also run MalwareBytes and Spybot Search and Destroy and both now provide clean scans but the browser redirect problem still exists.Please help.________________DDS.log:_______________DDS (Ver_10-03-17.01) - NTFSx86 Run by Compaq_Administrator at 12:07:25.09 on Fri 04/30/2010Internet Explorer: 8.0.6001.18702Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.958.295 [GMT -4:00]AV: Windows Live OneCare *On-access scanning enabled* (Updated) {427ADFC3-B354-4A51-BE34-A9D4218E45C4}FW: Windows Live OneCare Firewall *enabled* {A3899D22-27E6-4A7E-AE4E-2C106646DAAB}============== Running Processes ===============C:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\Program Files�... Read more

A:Browser gets redirected from google, bing and other search results

Hello pn123 Welcome to the BC HijackThis Log and Analysis forum. I will be assisting you in cleaning up your system.I ask that you refrain from running tools other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.In the upper right hand corner of the topic you will see a button called Options. If you click on this in the drop-down menu you can choose Track this topic. By doing this and then choosing Immediate E-Mail notification and then clicking on Proceed you will be advised when we respond the your topic and facilitate the cleaning of your machine.Please keep in mind that we have a large backlog of users just like yourself waiting to be helped so try to be as timely as possible in your replies. Since we do this on a part-time voluntary basis we are limited on how many logs we can respond to and keep open due to time restraints. If you have to be away or can't answer for some other reason just let me know. Thank you for your understanding.After 5 days if a topic is not replied to we assume it has been abandoned and it is closed.Please download ComboFix from one of these locations:Link 1Link 2* IMPORTANT !!! Save ComboFix.exe to your DesktopDisable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. Instruction can be f... Read more

Read other 12 answers
RELEVANCY SCORE 98.8

I could not get DSS to run without an error and outputing garbage. GMER Output (ARK) is as follows:

GMER 1.0.15.15641 - http://www.gmer.net
Rootkit scan 2011-07-24 22:43:36
Windows 6.1.7600 Harddisk0\DR0 -> \Device\Ide\iaStor0 WDC_WD32 rev.12.0
Running: gmer.exe; Driver: C:\Users\Kathleen\AppData\Local\Temp\uwdcrkob.sys
---- System - GMER 1.0.15 ----

SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwAdjustPrivilegesToken [0x90F32BD0]
SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwAlpcConnectPort [0x90F3452C]
SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwAlpcCreatePort [0x90F34782]
SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwAlpcSendWaitReceivePort [0x90F349FC]
SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) Z... Read more

A:Bing & search engines results redirected

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

Read other 24 answers
RELEVANCY SCORE 96.4

Hi,

Search results from Google, Yahoo and Bing are being re-directed to other sites. It seems like the first result I click on is OK, but if I back-arrow back to the results and select another it is redirected to random sites. Your assistance is appreciated. Here is the log:
DDS (Ver_09-07-30.01) - NTFSx86
Run by Christina at 14:33:03.57 on Sat 08/01/2009
Internet Explorer: 8.0.6001.18813
Microsoft? Windows Vista? Home Premium 6.0.6001.1.1252.1.1033.18.3070.1286 [GMT -4:00]

AV: ESET NOD32 Antivirus 3.0 *On-access scanning enabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
SP: ESET NOD32 Antivirus 3.0 *enabled* (Updated) {E5E70D32-0101-4B98-A4D6-D1D15C3BB448}
SP: Spybot - Search and Destroy *enabled* (Updated) {ED588FAF-1B8F-43B4-ACA8-8E3C85DADBE9}
SP: Lavasoft Ad-Watch Live! *enabled* (Updated) {67844DAE-4F77-4D69-9457-98E8CFFDAA22}
SP: Windows Defender *enabled* (Outdated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32�... Read more

A:Google/Yahoo/Bing Results are redirected to other sites

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 12 answers
RELEVANCY SCORE 92

Avast keeps coming up with mailicous URL Blocked.
The IP addresses it reports as Malware are 64.111.211.158 and 64.11.211.165

I've run just about every malware scanner/remover I can find and still I keep getting redirects and the avast warning. I've tried following the advice in other posts here and have had no success so I am opening up this post in hopes that someone has encountered this.

Here is the DDS.txt
I will append the gmer log later since the last time I tried to run it IT locked up.
.
DDS (Ver_2011-06-23.01) - NTFSx86
Internet Explorer: 8.0.7600.16385
Run by Ali at 17:34:13 on 2011-07-03
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.2812.1026 [GMT -4:00]
.
AV: avast! Antivirus *Enabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Enabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\windows\system32\wininit.exe
C:\windows\system32\lsm.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\system32\atiesrxx.exe
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\system32&... Read more

A:Google/Bing Search Results redirecting

Here are the results of the GMER scan

GMER 1.0.15.15640 - http://www.gmer.net
Rootkit scan 2011-07-03 18:41:14
Windows 6.1.7600 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP1T0L0-1 TOSHIBA_MK3263GSX rev.FG020M
Running: gmer.exe; Driver: C:\Users\Ali\AppData\Local\Temp\kwtdrpow.sys
---- System - GMER 1.0.15 ----

SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwAddBootEntry [0x90A26202]
SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ZwAllocateVirtualMemory [0x910A5CB2]
SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwCreateEvent [0x90A2881C]
SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwCreateEventPair [0x90A28874]
SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwCreateIoCompletion [0x90A2898A]
SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ... Read more

Read other 4 answers
RELEVANCY SCORE 92

Hi,

I got a "Internet Security 2010" on Dec 28, 2009. Use AVG, Malwarebytes' Anti-Malware and Ad-Aware (all with the latest update) to clear up the mess. Now, both browser (IE 7 and firefox 3.5) both redirect search results to some bogus web site.

I have run several times using the software mentioned but was not able to find anything.

I've used HijackThis v2.0.2 to produce the following log.

My system Win XP sp3

I've attached the HijackThis log file. Please help!!!!

A:search results redirect (google and bing)

Hi,

Thank you all for posting your suggestions, especially for people working on this site to help others. I saw a post here that ran ComboFix to take care of the browser redirect problem. So, I download it and following the simple instructions. Low and behold, ComboFix was able to detect there was a rootkit running on my computer. After several scan and reboot, my computer is back and no more browser redirect.
I thank you again from the bottom of my heart!!!!

If BleepingComputer.com needs any help, please contact me and I will be more than happy to give my time back to serve the community.

Stephen

Read other 2 answers
RELEVANCY SCORE 92

.
DDS (Ver_11-05-19.01) - NTFSx86
Internet Explorer: 8.0.6001.18702
Run by Ken at 10:55:03 on 2011-05-21
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.2036.874 [GMT -5:00]
.
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
C:\WINDOWS\system32\svchost.exe -k netsvcs
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\system32\svchost.exe -k hpdevmgmt
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Norton Security Suite\Engine\5.1.0.29\ccSvcHst.exe
C:\WINDOWS\System32\svchost.exe -k HPZ12
C:\Program Files\Norton Online\Engine\2.1.0.23\ccSvcHst.exe
C:\WINDOWS\System32\svchost.exe -k HPZ12
C:\WINDOWS\system32\tcpsvcs.exe
svchost.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Norton Security Suite\Engine\5.1.0.29\ccSvcHst.exe
C:\Program Files\Norton Online\Engine\2.1.0.23\ccSvcHst.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\Mixer.exe
C:\WINDOWS\system32&... Read more

A:Google/Bing search results keep redirecting.

Hello and welcome to the forums!My secret agent name on the forums is SweetTech (you can call me ST for short), it's a pleasure to meet you. I would be glad to take a look at your log and help you with solving any malware problems.If you have since resolved the issues you were originally experiencing, or have received help elsewhere, please inform me so that this topic can be closed. If you have not, please adhere to the guidelines below and then follow instructions as outlined further below:Logs from malware removal programs (OTL is one of them) can take some time to analyze. I need you to be patient while I analyze any logs you post. Please remember, I am a volunteer, and I do have a life outside of these forums.
Please make sure to carefully read any instruction that I give you. Attention to detail is important! Since I cannot see or directly interact with your computer I am dependent on you to "be my eyes" and provide as much information as you can regarding the current state of your computer.
If you're not sure, or if something unexpected happens, do NOT continue! Stop and ask!
If I instruct you to download a specific tool in which you already have, please delete the copy that you have and re-download the tool. The reason I ask you to do this is because these tools are updated fairly regularly.
Do not do things I do not ask for, such as running a spyware scan on your computer. The one thing that ... Read more

Read other 12 answers
RELEVANCY SCORE 92

GMER locked up my PC twice during file scanning segment. The log attached resulted from a scan with Files unchecked. I am leaving for a 10 day road trip 9/7 and won't have access to the PC so work me in accordingly.

Thanks in advance.
Jay
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:12:32 AM, on 9/6/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17080)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Documents and Settings\All Users\Application Data\EPSON\EPW!3 SSRP\E_S40RP7.EXE
C:\Program Files\Dell Network Assistant\hnm_svc.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
C:\Program Files\Dell Support Center\bin\sprtsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Amazon\Amazon Unbox Video\ADVWindowsClientService.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe... Read more

A:Google, Bing search results re-directed

Read other 8 answers
RELEVANCY SCORE 92

I tried running Malwarebytes and a few othe malware programs all unsuccessfully removed the problem of being redirect to odd web sites when clicking on a link in a search page. Please help.

.
DDS (Ver_2011-06-23.01) - NTFSx86
Internet Explorer: 8.0.6001.18702
Run by PTPros at 13:59:54 on 2011-08-23
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2003.1020 [GMT -4:00]
.
AV: Microsoft Security Essentials *Disabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}
.
============== Running Processes ===============
.
C:\Program Files\Fingerprint Sensor\AtService.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
svchost.exe
c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
c:\drivers\audio\r213367\stacsv.exe
C:\Program Files\Wave Systems Corp\Trusted Drive Manager\TdmService.exe
svchost.exe
C:\Program Files\Dell\Dell ControlPoint\Connection Manager\SMManager.exe
C:\Program Files\Dell\Dell ControlPoint\DCPButtonSvc.exe
C:\Program Files\Dell\Dell System Manager\DCPSysMgrSvc.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
C:\Program Files\Java\jre7\bin\jqs.exe
C:\WINDOWS\system32\svchost.exe -k ... Read more

A:Keep getting redirected on Search pages Google or Bing

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

Read other 3 answers
RELEVANCY SCORE 92

I am completely stumped. My wife's laptop acquired this issue and all steps to remove have been unsuccessful:

I modified the hosts file to include: 127.0.0.1 click.findsearchengineresults.com which blocks most redirection. Selecting a google search result now returns:

"http://67.196.0.168/c.php?p=KJchZinb4iU5KERo8yqGaYB8h5fSu7MrEUF_KOkkiVCupcungVwT3SlPVpvJVonDi1H4HhSwY5zBiuYFViBJu3zyTJXRW6SeZ2o1D363uy2UBF-ZS87j6IIEb9-..............................." IP Address varies...
.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 10.4.1
Run by Jill3 at 10:08:52 on 2012-05-26
Microsoft Windows 7 Ultimate 6.1.7601.1.1252.1.1033.18.3062.1740 [GMT -7:00]
.
AV: Symantec Endpoint Protection *Enabled/Updated* {88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Symantec Endpoint Protection *Enabled/Updated* {33A8BBD2-AA01-20A2-213B-0B8EB45B02E8}
FW: Symantec Endpoint Protection *Enabled* {B0F2DB13-C654-2E74-30D4-99C9310F0F2E}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system3... Read more

A:IE Google/Bing search result redirected

Hello and Welcome to Bleeping Computer!!My name is Gringo and I'll be glad to help you with your computer problems.I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of usPlease do not run any tools unless instructed to do so.
We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.
Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.
Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.
A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE: At t... Read more

Read other 5 answers
RELEVANCY SCORE 91.2

I'm just going to throw out as much info as I can think of. I run XP, ran defogger, then dds, but gmer crashes before the scan is complete. It gets to a certain point and crashes. The folder it gets hung up on is:

c:\documents and settings\myname\application data\mozilla\firefox\crash reports\pending (Ironic!)

Mainly this is just affecting searching right now, with a few pop ups, but it's getting worse so I need to get rid of this ASAP!

.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_23
Run by Dawg at 13:59:28 on 2012-02-07
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1022.424 [GMT -5:00]
.
AV: AVG Anti-Virus Free Edition 2012 *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
AV: Lavasoft Ad-Watch Live! Anti-Virus *Disabled/Updated* {A1C4F2E0-7FDE-4917-AFAE-013EFC3EDE33}
.
============== Running Processes ===============
.
C:\PROGRA~1\AVG\AVG2012\avgrsx.exe
C:\Program Files\AVG\AVG2012\avgcsrvx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\Program Files\Sandboxie\SbieSvc.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Dell\Media Experience&... Read more

A:TDSS and Google/Bing redirect search results

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps.===Replace your hosts file first.Go to: http://www.funkytoad.com/index.php?option=com_content&task=view&id=13&Itemid=Download the program HostsXpert to restore the default hosts file back onto your machine.Unzip the program and execute it.Select "Restore MS Hosts File".Close the application.=*=Please DownloadTDSSKiller.zip>>> Double-click on TDSSKiller.exe to run the application.Click on the Start Scan button and wait for the scan and disinfection process to be over.If an infected file is detected, the default action will be Cure, click on Continue
If a suspicious file is detected, the default action will be Skip, click on Continue
If you are asked to reboot the computer to complete the process, click on the Reboot Now button. A report will be automatically saved at the root of the System drive ((usually C:\) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt" (for example, C:\TDSSKiller.2.2.0_20.12.2009_15.31.43_log.txt). Please copy and paste the contents of that file here.If no reboot is required, click on Report. A log file will appear. Please copy and paste the contents of that file in your next reply.Download http://public.avast.com/~gmerek/aswMBR.exe (aswMBR.exe) ( 511KB ) to your desktop. Double click the ... Read more

Read other 11 answers
RELEVANCY SCORE 91.2

Multiple browsers and multiple search engines,
Search results appear normal, but links (clicked or copied) all begin hxxp://adsense.yahoodbengimesearch.com/...

Clear cache problem resolves temporarily, then recurs after a few searches.

Symantec Antivirus Corporate Edition 10.1.7 defs from Jan4, 2011 finds nothing.

Malwarebytes finds nothing wrong:
Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Database version: 5457

Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.13

1/4/2011 12:09:48 PM
mbam-log-2011-01-04 (12-09-48).txt

Scan type: Full scan (C:\|)
Objects scanned: 161421
Time elapsed: 47 minute(s), 6 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

HJT is this:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 1:41:46 PM, on 1/4/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17091)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WI... Read more

A:Search results hijacked (IE7, Moz 6.15; Google, Yahoo, Bing)

Ran Kaspersky TDSS rootkit and "Cured" Backdoor.Win32.Sinowal.knf

So far effective.
2011/01/05 11:12:15.0234 TDSS rootkit removing tool 2.4.12.0 Dec 16 2010 09:46:46
2011/01/05 11:12:15.0234 ================================================================================
2011/01/05 11:12:15.0234 SystemInfo:
2011/01/05 11:12:15.0234
2011/01/05 11:12:15.0234 OS Version: 5.1.2600 ServicePack: 3.0
2011/01/05 11:12:15.0234 Product type: Workstation
2011/01/05 11:12:15.0234 ComputerName: SVAHS-A-130-TEA
2011/01/05 11:12:15.0234 UserName: User
2011/01/05 11:12:15.0234 Windows directory: C:\WINDOWS
2011/01/05 11:12:15.0234 System windows directory: C:\WINDOWS
2011/01/05 11:12:15.0234 Processor architecture: Intel x86
2011/01/05 11:12:15.0234 Number of processors: 1
2011/01/05 11:12:15.0234 Page size: 0x1000
2011/01/05 11:12:15.0234 Boot type: Normal boot
2011/01/05 11:12:15.0234 ================================================================================
2011/01/05 11:12:15.0390 Initialize success
2011/01/05 11:12:23.0140 ================================================================================
2011/01/05 11:12:23.0140 Scan started
2011/01/05 11:12:23.0140 Mode: Manual;
2011/01/05 11:12:23.0140 ================================================================================
2011/01/05 11:12:24.0156 ACPI (8fd99680a539792a30e97944fdaecf17) C:\WINDOWS\system32\DRIVERS\ACPI.sys
2011/01/05 11:12:24.0234 ACPIEC (98... Read more

Read other 12 answers
RELEVANCY SCORE 91.2

A day or two ago I picked up something that redirects the search sites results to ad sites. This happens in IE and Firefox. It seems to happen with the results from google, yahoo and Bing. I havent really tried any other search engines. I have AVG free installed, and the spybot resident. I have run MalwareBytes, Spybot and although they found some tracking cookies and such, have not fixed the issue. I d/l'ed and installed HitMan Pro 3.5 as others have had luck with Rootkits with that, and it did report finding a rootkit in firefox.exe and quarantined it, removing firefox. It runs cleannow too, but the redirection remains.Attached are le logs from the Preperation guide.I really appreciate any help you can give me, thanl you so very much.DDS (Ver_10-03-17.01) - NTFSx86 Run by Philipvw at 17:53:37.68 on Sun 08/15/2010Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_14Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1023.514 [GMT -4:00]AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcssvchost.exeC:\Program Files\AVG\AVG9\avgchsvx.exeC:\Program Files\AVG\AVG9\avgrsx.exesvchost.exeC:\Program Files\AVG\AVG9\avgcsrvx.exeC:\WINDOWS\system32\spoolsv.exesvchost.exeC:&... Read more

A:Google, Yahoo, Bing search results Redirection

Hello , And to the Bleeping Computer Malware Removal Forum. My name is Elise and I'll be glad to help you with your computer problems.I will be working on your malware issues, this may or may not solve other issues you may have with your machine.Please note that whatever repairs we make, are for fixing your computer problems only and by no means should be used on another computer.The cleaning process is not instant. Logs can take some time to research, so please be patient with me. I know that you need your computer working as quickly as possible, and I will work hard to help see that happen. Please reply using the Add/Reply button in the lower right hand corner of your screen. Do not start a new topic. The logs that you post should be pasted directly into the reply. Only attach them if requested or if they do not fit into the post.Unfortunately, if I do not hear back from you within 5 days, I will be forced to close your topic. If you still need help after I have closed your topic, send me or a moderator a personal message with the address of the thread or feel free to create a new one.You may want to keep the link to this topic in your favorites. Alternatively, you can click the button at the top bar of this topic and Track this Topic, where you can choose email notifications. The topics you are tracking are shown here.-----------------------------------------------------------If you have since resolved the original problem you were having, we would appreciate you... Read more

Read other 25 answers
RELEVANCY SCORE 90.8

Hi,

After using Spybot, latest version, my wife's computer still has a malware infection which after doing a search and clicking a link, gets redirected to some other site, probably a pay per click site. After searching I found hijackthis and it was recommended to post the log file here for help in determining what entries are suspect. I thought I was fairly knowledgable, but getting into the registry and knowing what is a problem is not my comfort area. Hopefully it is for someone here. This is the log file.

Thanks,
Mark

A:Click links from Google or Bing search get redirected

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

Read other 25 answers
RELEVANCY SCORE 90

My laptop is a HP dv6000 t2250 1.73GHz 2 GB RAM running windows xp sp3. I have the search engine redirecting problem, but only with ie8 and firefox. I can still use chrome for google, yahoo, etc. The links all work as intended. There is nothing wrong with my computer speed or connection. I decided to look into the problem the other day when I ran the Norton Scan and it found Spyguard 2008 and had it removed from my laptop. Also, I am not sure if this is related to the virus, but whenever I restart my laptop I get the Blue Screen right before it loads the desktop and then it restarts the entire reboot all over again. Usually it only does this once, then it loads properly the second time. However, recently it gave me the blue screen twice and then loaded on the third time. I ran my avast antivirus (full scan last night then a quick scan today) and it moved what it found to the virus chest. I can provide the logs for both scans if needed. I have run TDSS killer and it came back clean. Same thing with Malwarebytes, the results came back clean. I also used CCleaner to clean my computer and clear my registry. I read that an old version of Java contributed to getting the virus/malware so i removed all the old versions on the laptop and then downloaded the newest one. Here is my HijackThis Log. Thank you for your help.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:07:07 PM, on 8/14/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Unable to get Internet Explorer ve... Read more

A:Google/Yahoo/Bing search engine links are being redirected to ads

Read other 16 answers
RELEVANCY SCORE 89.2

On @11/1 i would get redirected to sites that have nothing to do with the search engine result i clicked on. I would need to rerun the search and click on it again to get to it. BACK does not work on the site i'm redirected to, it just sends me to the main page that i'm redirected to.Happens with bot IE and Firefox.I have dwm.exe running from my temp directory and i can't delete it, even in safe mode. Also looks like shell.exe and svchost.exe are running from a wrong directory. Note: I downloaded GMER but the buttons that the instructions say to check are grayed out & uncheckable. Services, Registry & Files & c:/ & ADS are the only ones i'm allowed to check. I did not run it.Here are my logs as per http://www.bleepingcomputer.com/forums/topic34773.html .DDS.txt:DDS (Ver_10-11-03.01) - NTFS_AMD64 Run by John at 4:49:51.15 on Thu 11/04/2010Internet Explorer: 8.0.7600.16385 BrowserJavaVersion: 1.6.0_17Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.2814.1630 [GMT -4:00]============== Running Processes ===============C:\Windows\system32\wininit.exeC:\Windows\system32\lsm.exeC:\Windows\system32\svchost.exe -k DcomLaunchC:\Windows\system32\svchost.exe -k RPCSSC:\Windows\system32\atiesrxx.exeC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestrictedC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestrictedC:\Windows&#... Read more

A:Browser redirect in Search Engine results (Yahoo, Bing, Google)

Moderator - please close this thread.
I followed boopme's 1st post in the below thread and i'm good now.
http://www.bleepingcomputer.com/forums/topic358309.html

THANK YOU!

Read other 2 answers
RELEVANCY SCORE 89.2

Hi,
This is my first post here but I have been on the site before to get help by browsing other members posts & advice. I now, for the first time, am so stuck on what to do to solve this problem that I'm requesting some help myself. PLEASE HELP!!
The problem is that in both Firefox & Internet explorer (I haven't tried other browsers) the results of any search in either Google or Bing are being redirected to junk/ad sites (mostly - but sometimes even ebay or youtube). I then have to click the Back button & clicking the link a second time then takes me to where it should do. This is most annoying!!
So far i have run Avira Antivirus & found nothing. SpyHunter finds nothing. MalwareBytes will only run in safe mode & finds nothing. ComboFix will only run in safemode & does not solve the issue. I have edited my Hosts file to remove a HUGE list of spam sites to leave only this entry: 127.0.0.1 localhost. Also, this may be unrelated but my copy of CopyToDVD stopped working around the same time this issue started. My PC just freezes when I try use this program & I need to switch off with the main power button. Again, this my be unrelated to the search links problem.
Anyway - any help anyone can give me will be greatly appreciated!
Thanks,
Paul.
I forgot to mention that very recently I had a big problem with getting loads of popups, very erratic PC behaviour & stuff disappearing from my Start Menu. Avira & Spyhunter ... Read more

A:Google & Bing search result links redirected to junk sites

I am going to re-post with more information so please ignore this request.

Read other 1 answers
RELEVANCY SCORE 89.2

I am using a Dell Dimension DIM 4550 with a Pentium4, 2.4GHz, 2.39 GHz 768 RAM running Windows XP Home 2002 Service Pack 3. (I have not updated Windows for over one year because when a Windows update form the last year or so gets installed I cannot get a wireless connection between my Netgear RangeMax Wireless N Gigabit router WNR3500 and Netgear RangeMax Dual Band Wireless-N USB 2.0Adapter WNDA3100-- I have the auto update disabled after figuring out that if I system restored to a point before updates I do not lose wireless connection.)

My problem is that when trying to use the internet, I cannot get passed the search engine page. I use Internet Explorer and Google. I have switched the search engine to Bing and Yahoo and each results in same problem. I also loaded Firefox and tried Google, Bing and Yahoo with Firefox with same bad result.

I use ESET and ran Malwarebytes. I am able to access updates for each. I've run scans with each and have found and removed things a couple of times. I still can't get passed the search engine homepage.

This is what happens when I run a search, go to a favorite or type in a URL. I initially get to the next page but then I get a warning
"ESET NOD 32 Antivirus
Address has been blocked
URL
clkh71yhks66.com/eOGNg6de5asc8hvI2S5Xpeg...
IP
78.47.249.228:80"

Then I get an error message telling me that Internet Explorer has encountered a problem and needs to close. Then I get an error page that says "X we were unable ... Read more

A:Search Engine Redirected and can't get past Google/Bing/Yahoo page

Please read carefully and follow these steps.

Download TDSSKiller and save it to your Desktop.
Extract its contents to your desktop.
Once extracted, open the TDSSKiller folder and doubleclick on TDSSKiller.exe to run the application, then on Start Scan.

If an infected file is detected, the default action will be Cure, click on Continue.

If a suspicious file is detected, the default action will be Skip, click on Continue.

It may ask you to reboot the computer to complete the process. Click on Reboot Now.

If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.
If a reboot is required, the report can also be found in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here.

 

Read other 3 answers
RELEVANCY SCORE 87.2

My windows and other programs will not update and Windows update redirects to Google. Any searches in google will redirect when I click on a link. I have run Malwarebytes, Superantisyware and Hyjackthis.This is the latest Hijack this log. I would appreciate any help you can give me.Thanks,PaulLogfile of Trend Micro HijackThis v2.0.2Scan saved at 10:48:59 PM, on 2/10/2009Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16705)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\Ati2evxx.exeC:\Program Files\Lavasoft\Ad-Aware\aawservice.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\RunDll32.exeC:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exeC:\WINDOWS\mHotkey.exeC:\WINDOWS\CNYHKey.exeC:\Program Files\Java\jre6\bin\jusched.exeC:\Program Files\HP\HP Software Update\HPWuSchd2.exeC:\Program Files\iTunes\iTunesHelper.exeC:\PROGRA~1\Grisoft\AVG7\avgcc.exeC:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exeC:\WINDOW... Read more

A:Windows update redirects to google, and other search results being redirected to different search engines

Welcome to the BleepingComputer Forums. Since it has been a few days since you scanned your computer with HijackThis, we will need a new HijackThis log. If you have not already downloaded Random's System Information Tool (RSIT), please download Random's System Information Tool (RSIT) by random/random which includes a HijackThis log and save it to your desktop. If you have RSIT already on your computer, please run it again. Double click on RSIT.exe to run RSIT. Click Continue at the disclaimer screen. Please post the contents of log.txt. Thank you for your patience.Please see Preparation Guide for use before posting about your potential Malware problem. If you have already posted this log at another forum or if you decide to seek help at another forum, please let us know. There is a shortage of helpers and taking the time of two volunteer helpers means that someone else may not be helped. Please post your HijackThis log as a reply to this thread and not as an attachment. I am always leery of opening attachments so I always request that HijackThis logs are to be posted as a reply to the thread. I do not think that you are attaching anything scary but others may do so. While we are working on your HijackThis log, please: Reply to this thread; do not start another! Do not make any changes on your computer during the cleaning process or download/add programs on your computer unless instructed to do so. Do not run any other tool until instruc... Read more

Read other 2 answers
RELEVANCY SCORE 87.2

Hi, I am having trouble with using google on a computer running Windows XP SP3. The links from search results are being redirected through the pages "basic-search.net", "get-answers-fast.com" and "easyA-Z.com".

Steps taken so far:
1)
Attempted manual removal of files after searching for this problem on google. Located and removed files in
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader
"qmgr0.dat" and "qmgr1.dat".

These had to be removed in safe mode - upon restarting they were back again.

2)
Scanned computer using malwarebytes and spybot s&d. Other than tracker cookies, no problems were detected.
Scanned computer using TDSSkiller, which found nothing either. Some unregistered drivers were found when the optional settings were enabled.
Attempted scan using combofix, based on the success story here:
http://www.bleepingcomputer.com/forums/topic412458.html/page__st__45
although this stalls soon after it starts scanning for infected files.

Any help would be greatly appreciated.

A:google search results redirected (basic-search.net, get-answers.fast.com and easya-z.com)

Hello and welcome pezboytom! We need a deeper look. Please go here....Preparation Guide ,do steps 6 - 9.Create a DDS log and post it in the new topic explained in step 9,which is here Virus, Trojan, Spyware, and Malware Removal Logs and not in this topic,thanks.If Gmer won't run,skip it and move on.Include a link back to this topic.Let me know if that went well.

Read other 5 answers
RELEVANCY SCORE 86.8

When doing google searches in Firefox or IE the links will get redirected when clicked on.
When the redirect is happening www.search-tracker.net appears in the bottom bar of firefox and the page displayed is wrong.
If I copy the link from the page (right click/copy link location) and paste it into the tile bar it always works correctly.
AVG does not show any issues.
Comcast cable network offers free install of McAfee security suite that I use to run.
When this issue showed up I found I could no longer do a virus scan with McAfee as the computer would reboot when the scan started.
All the management functions of McAfee worked fine but start a scan and the computer reboots.
I uninstalled McAfee and installed AVG.
AVG did one round of cleaning and now can't find anything.
I don't remember what AVG found other then tracking cookies. If it leaves a log behind that may still be around.
I have tried to install and run Malwarebytes' Anti-Malware.
It seems to install fine but will not run. Double click the icon and nothing.
I have uninstalled and reinstalled several times but nothing. Never tries to do the update either.
I have uninstalled and reinstalled Firefox but that did not help.
I just copied the the mbam.exe file to a new name and double clicked that and it started up. Cool.
I have attached the attach.txt file.
The Malwarebytes run finished. 1 Trogan.Agent was found. I have attached that log file also.
I will send this and then have Malwarebytes remove it. I will then ... Read more

A:Links in google search results get redirected / www.search-tracker.net

Hello dchoyt,Uninstall these old versions of Java, as they are malware magnets. Java™ 6 Update 2Java™ 6 Update 3Java™ 6 Update 5Java™ 6 Update 7Java™ SE Runtime Environment 6Java™ SE Runtime Environment 6 Update 1We will run ComboFix. You should NOT use Combofix unless you have been instructed to do so by a Malware Removal Expert. It is intended by its creator to be used under the guidance and supervision of an Malware Removal Expert, not for private use. Using this tool incorrectly could lead to disastrous problems with your operating system such as preventing it from ever starting again. Please read Combofix's Disclaimer. Further, ComboFix logs are not permitted outside the HijackThis forums and then only when requested by a HJT Team member. You need to disable your AVG Antivirus before running ComboFix, as it will prevent it from running. To disable AVG antivirus: Please open the AVG Control Center program -> double-click on the "AVG Resident Shield" component (looks like this: ) -> deselect the "Turn on AVG Resident Shield" checkmark and save the setting.When you need to enable the AVG Resident Shield, just open the AVG Control Center program -> double-click on the "AVG Resident Shield" component -> select the "Turn on AVG Resident Shield" checkmark and save the setting.Note: If you already have a copy of ComboFix on your system it is essential that you delete it before downloading this ... Read more

Read other 15 answers
RELEVANCY SCORE 86.4

Hi there, so whenever I search using bing or google and try to open the search results they keep redirecting to potentially dangerous looking sites
and also my home page keeps going to isearch.avg.com even though i dont have it in my new tab or homepage settings. I have a 64-bit Windows so am pasting the DDS Log only.



.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 10.5.1
Run by kpn at 18:21:24 on 2012-08-08
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.3891.872 [GMT -7:00]
.
AV: AVG Anti-Virus Free Edition 2012 *Enabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
SP: AVG Anti-Virus Free Edition 2012 *Enabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\PROGRA~2\AVG\AVG2012\avgrsa.exe
C:\Program Files (x86)\AVG\AVG2012\avgcsrva.exe
C:\windows\system32\wininit.exe
C:\windows\system32\lsm.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\nvvsvc.exe
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\system32\... Read more

A:Google, bing search results keep redirecting to malicious looking sites and home page redirects to isearch.avg.com

Hi,Welcome to Bleeping Computer. My name is m0le and I will be helping you with your log.Please subscribe to this topic, if you haven't already. Click the Watch This Topic button at the top on the right.

Please avoid installing/uninstalling or updating any programs and attempting any unsupervised fixes or scans. This can make helping you impossible.

Please reply to this post so I know you are there.The forum is busy and we need to have replies as soon as possible. If I haven't had a reply after 3 days I will bump the topic and if you do not reply by the following day after that then I will close the topic.Once I receive a reply then I will return with your first instructions.Thanks

Read other 33 answers
RELEVANCY SCORE 86

Recently my Google Search results have been getting hijacked to ad websites. Whenever I delete my cookies it goes away for awhile, then comes back. I also have occasional audio advertisements play on my computer, I found whatever trojan is doing this, is using iexplore.exe. I ran a scan with Spybot S&D, and it found some things, but things are still being redirected. I ran a scan with HijackThis, and the log is pasted below. If you could have a look at this, and see what could be doing this. I am running Windows 7 32bit Ultimate, with everything updated, all updates. I have Kaspersky IS 2010 installed. All help is appreciated. If you need any more information, just send me a message.LOG FROM HIJACKTHIS:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 7:19:54 PM, on 11/25/2009Platform: Unknown Windows (WinNT 6.01.3504) ----> (Windows 7 Ultimate 32bit)MSIE: Internet Explorer v8.00 (8.00.7600.16385)Boot mode: NormalRunning processes:C:Windowssystem32taskhost.exeC:Windowssystem32taskeng.exeC:ProgramDataLaplinkLaplink Goldtsircusr.exeC:Windowssystem32Dwm.exeC:Program FilesASUSAI SuiteEnergySavingPwSave.exeC:WindowsExplorer.EXEC:Program FilesVMwareVMware Playerhqtray.exeC:Program FilesAnalog DevicesSoundMAXSoundTray.exeC:Program FilesKaspersky LabKaspersky Internet Security 2010avp.exeC:Program FilesJavajre6binjusched.exeC:Windowssystem32ctfmon.exeC:Program FilesSpybot - Search & DestroyTeaTimer.exeC:Program FilesSpybot - Search & DestroySDFiles.exeC:Program... Read more

A:Google Chrome and Firefox Google Search Results keep getting redirected

Hello and to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.*If you have since resolved the original problem you were having, we would appreciate you letting us know. *If not please perform the following steps below so we can have a look at the current condition of your machine. *If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.**If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.You may want to keep the link to this topic in your favorites. Alternatively, you can click the button at the top bar of this topic and Track this Topic, where you can choose email notifications. In order to be notified via email when your topic has a reply you need to enable topic notifications. To enable topic notifications you should do the following: 1. Click on the My C... Read more

Read other 2 answers
RELEVANCY SCORE 86

Hello.

For the last few days, Google search results have been getting redirected constantly. I have run SpyBot, Ad-Aware, CA Security Center, etc. A few items were removed, but the problem still remains. I have run DDS and have posted the log below. The ATTACH file is also attached. I hope I have followed the instructions correctly. Thank you for the time.
DDS (Ver_09-06-26.01) - NTFSx86
Run by Administrator at 19:24:27.92 on Mon 07/13/2009
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2038.1149 [GMT -4:00]

AV: CA Anti-Virus *On-access scanning disabled* (Updated) {17CFD1EA-56CF-40B5-A06B-BD3A27397C93}
FW: CA Personal Firewall *enabled* {14CB4B80-8E52-45EA-905E-67C1267B4160}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\CA\SharedComponents\HIPSEngine\UmxCfg.exe
C:\Program Files\CA\SharedComponents\HIPSEngine\UmxFwHlp.exe
C:\Program Files\CA\SharedComponents\HIPSEngine\UmxPol.exe
C:\Program Files\CA\SharedComponents\HIPSEngine\UmxAgent.exe
svchost.exe
C:\Pr... Read more

A:Google search results getting redirected

Hi,Please visit this webpage for download links, and instructions for running ComboFix tool:http://www.bleepingcomputer.com/combofix/how-to-use-combofixPlease ensure you read this guide carefully and install the Recovery Console first.The Windows Recovery Console will allow you to boot up into a special recovery (repair) mode. This allows us to more easily help you should your computer have a problem after an attempted removal of malware. It is a simple procedure that will only take a few moments of your time.Once installed, you should see a blue screen prompt that says:The Recovery Console was successfully installed.Please continue as follows:Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix, link
Remember to re-enable them afterwards.

Click Yes to allow ComboFix to continue scanning for malware.When the tool is finished, it will produce a report for you. Please include the following reports for further review, and so we may continue cleansing the system:C:\ComboFix.txtNew dds.txt log.A word of warning: Neither I nor sUBs are responsible for any damage you may have caused your machine by running ComboFix. This tool is not a toy and not for everyday use.

Read other 8 answers
RELEVANCY SCORE 86

I've been having this problem for a while. Google and Yahoo search results are being redirected to ad sites After closing the tabs and trying again, I eventually get to the right site. I ran Spybot and Malwarebyte's Anti-Malware and neither could find anything. Here is my DDS log:
DDS (Ver_09-05-14.01) - NTFSx86
Run by Richard at 0:21:20.04 on 05/19/09
Internet Explorer: 6.0.2900.2180 BrowserJavaVersion: 1.6.0_11
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.2038.1329 [GMT -7:00]
============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
svchost.exe
svchost.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files ... Read more

A:Google Search Results Redirected

Hello RhyykeWelcome to Welcome to BleepingComputer =====================Download OTL to your desktop.Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.When the window appears, underneath Output at the top change it to Minimal Output.Under the Standard Registry box change it to All.Check the boxes beside LOP Check and Purity Check.Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.When the scan completes, it will open two notepad windows. OTListIt.Txt and Extras.Txt. These are saved in the same location as OTListIt2.Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post it with your next reply.===========Download This file. Note its name and save it to your root folder, such as C:\.Disconnect from the Internet and close all running programs.Temporarily disable any real-time active protection so your security program drivers will not conflict with this file.Click on this link to see a list of programs that should be disabled.Double-click on the downloaded file to start the program. (If running Vista, right click on it and select "Run as an Administrator")Allow the driver to load if asked.You may be prompted to scan immediately if it detects rootkit activity.If you are prompted to scan your system click "Yes" to begin the scan.If not prompted, click the "Rootkit/Malware" tab.On the right-side, all items to be scanned should... Read more

Read other 9 answers
RELEVANCY SCORE 86

Hello -New here, so not sure if this is the right place to post.I managed to get infected resulting in at least two symptoms. The first showed up as an antispyware program looking very much like Windows security center calling itself 'Antispyware 2008." Its symptoms were popups saying I was infected, etc., and changing my home page from google to the page where I could buy their "product." I think I've fixed that problem wiith Malwarebyte's Anti-Malware. (SpyBot S&D and Norton didn't find anything.)The remaining problem showed up at the same time. Google searches go as usual, but when I click on a result I end up at a page not intended - usually a slightly related site, always trying to sell somthing related to the search. Norton, SpyBot, Malwarebyte don't find anything to fix.I've posted the HJT log done after the Antispyware 2008 problem was fixed.Thanks for the helpConan------------------------------------------------------------Logfile of Trend Micro HijackThis v2.0.2Scan saved at 6:51:02 PM, on 7/20/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16674)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exec:\Program Files\Hewlett-Packard\Drive ... Read more

A:Google Search Results Redirected

HiFirst ... as you've run Malwarebytes' Anti-Malware ... please post the log THEN ...Download Deckard's System Scanner (formerly Comboscan) to your Desktop.Note: You must be logged onto an account with administrator privileges.1. Close all applications and windows. 2. Double-click on dss.exe to run it, and follow the prompts. 3. When the scan is complete, two text files will open - main.txt <- this one will be maximized and extra.txt <-this one will be minimized 4. Copy (Ctrl+A then Ctrl+C) and paste (Ctrl+V) the contents of main.txt in your next reply.5. Then do the same with extra.txtNote: you'll find extra.txt here :- C:\Deckard\System Scanner\extra.txtPlease remember to post both txt files ...Note: some firewalls may warn that sigcheck.exe is trying to access the internet - please ensure that you allow sigcheck.exe permission to do so.THEN ..Please run a Kaspersky Online Scan Please do an online scan with Kaspersky WebScanner Click on Kaspersky Online Scanner Click AcceptYou will be promted to install an ActiveX component from Kaspersky, Click Yes. The program will launch and then begin downloading the latest definition files: Once the files have been downloaded click on NEXT Now click on Scan Settings In the scan settings make sure that the following are selected: Scan using the following Anti-Virus database: Extended (if available otherwise Standard)
Scan Options: Scan Archives Scan Mail BasesClick OK Now under select a target to scan: Select My Co... Read more

Read other 5 answers
RELEVANCY SCORE 86

Hi,Some of my google search results when using Google Chrome are redirected to ad sites. How do I fix this? I've run malware and search&destroy.Here is my hijackthis log:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 11:57:45 PM, on 1/20/2010Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Lavasoft\Ad-Aware\aawservice.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Analog Devices\Core\smax4pnp.exeC:\WINDOWS\system32\hkcmd.exeC:\WINDOWS\system32\igfxpers.exeC:\Program Files\Dell\Media Experience\DMXLauncher.exeC:\WINDOWS\System32\DLA\DLACTRLW.EXEC:\Program Files\Common Files\InstallShield\UpdateService\issch.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\Program Files\iTunes\iTunesHelper.exeC:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exeC:\Program Files\Bonjo... Read more

A:Google search results redirected

Hi,My name is Extremeboy (or EB for short), and I will be helping you with your log.We apologize for the delay of response. If you still require assistance we would like to see the current condition of your system so please post a new set of DDS Logs as well as a RootRepeal log and a description of any remaining problems or symptoms you may still have please.If for any reason you did not post a DDS log or RootRepeal log please refer to this page and in step #6 and Step #7 for further instructions on downloading and running DDS & RootRepeal. If you have any problems when running the tools or unable to produce a report for any reason, just let me know in your next reply.For your next reply I would like to see:-The DDS logs---DDS.txt and Attach logs-RootRepeal logs-Description of any remaining problems you may still have.Thanks again and we apologize for the delay.With Regards,Extremeboy

Read other 3 answers
RELEVANCY SCORE 86

When I click google search results, (especially ones relating to anti virus programs) I get redirected to a different website. Heres my log:

(Edit:Solved)
Thanks in advance for any help! You guys are awesome.

A:Google search results being redirected

The problem has been solved by reseting my router/ADSL2+ modem. I suspect that my router was infected because I had left it with the default username/password, which allowed the virus to infect my router. The infection in the router was causing the redirects. After the modem reset I changed the password and username on my router so this won't happen again.

I suggest anyone with problems similar to mine check if all computers connected to their router/modem are getting the redirects. If so then a router reset might be a good idea.

Read other 2 answers
RELEVANCY SCORE 86

Hello,I am currently having extreme difficulty with my computer. When I do a search in Google, I get a results page that looks a bit different. If I click on a result, I am always redirected somewhere else. This problem occurs in both Internet Explorer and Firefox. I have Windows XP Media Center. I also have a current subscription of Norton 360. I have done scans through Malwarebytes, Stopzilla and Hitman Pro in the past 24 hours. They all detected items and removed them. All scans now come up clean, but the problem persists.HELP!!Thank you in advance for helping to save the day!(Moderator edit: post moved to more appropriate forum. jgw)

A:Google search results redirected

Welcome aboard Download Security Check from HERE, and save it to your Desktop. * Double-click SecurityCheck.exe * Follow the onscreen instructions inside of the black box. * A Notepad document should open automatically called checkup.txt; please post the contents of that document.=============================================================================Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList last 10 Event Viewer logList Users, Partitions and Memory sizeClick Go and post the result.=============================================================================Download Malwarebytes' Anti-Malware (aka MBAM): http://www.malwarebytes.org/products/malwarebytes_free to your desktop. * Double-click mbam-setup.exe and follow the prompts to install the program. * At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish. * If an update is found, it will download and install the latest version. * Once the program has loaded, select Perform quick scan, then click Scan. * When the scan is complete, click OK, then Show Results to view the results. * Be sure that everything is checked, and click Remove Selected. * When completed, a log will open in Notepad. * Post the log back here.Be sure to restart the computer.The log can also be found here:C... Read more

Read other 14 answers
RELEVANCY SCORE 86

I just cleaned an infection off of a PC in my office that was redirecting google links to different sites, mostly related to rocketnews.com

I ran all the tools in my arsenal but they all came up clean. Then logged in as the user of the PC and found this entry in his Windows RUN registry:

"TANSP"="rundll32 \"C:\\Documents and Settings\\appel\\Application Data\\browselcx.dll\",FCTQRK"

After removing both the registry item and the file it pointed to, and doing one final scan and reboot of the machine, all appears normal now.

I've run a search on browselcx.dll but not finding any information at all on it - guessing this is a new infection of some sort?

Anyway, thought I would pass this along.

A:Google Search Results Redirected

I had an infection with similar behavior - redirects from google search results (some of them to www.rocketnews.com). McAfee VirusScan Enterprise failed to catch it despite that it had recent DAT, it was configured to catch adware and spyware and there were no scan exceptions. The infection occurred about 2 months ago in non-administrative account (there were no traces of infection in the administrative account).

appmgru.dll was part of the infection. Avast! detected it as Win32:Diller-DD and ESET NOD32 detected it as a variant of Win32/Ponmocup.BU trojan.

Read other 2 answers
RELEVANCY SCORE 86

When getting google search results in both IE(v8) and Firefox(v3.5), the links are being redirected to seemingly random sites. I've since found multiple instances of this happenning to others, but cannot isolate the cause. Any help would be appreciated!

Thanks,

-- Richard

A:Google search results being redirected

The computer in question is being wiped clean.... starting over.

Read other 2 answers
RELEVANCY SCORE 86

HiGoogle search results are being redirectedAnd some sites are being blocked, S-Bot updates etcFiles as requested are attachedDDS (Ver_10-03-17.01) - NTFSx86 Run by Plesh at 10:18:02.43 on Tue 06/04/2010Internet Explorer: 8.0.6001.18882 BrowserJavaVersion: 1.6.0_19Microsoft? Windows Vista? Home Premium 6.0.6002.2.1252.61.1033.18.3038.1741 [GMT 10:00]SP: Spybot - Search and Destroy *disabled* (Outdated) {ED588FAF-1B8F-43B4-ACA8-8E3C85DADBE9}SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}============== Running Processes ===============C:\Windows\system32\wininit.exeC:\Windows\system32\lsm.exeC:\Windows\system32\svchost.exe -k DcomLaunchC:\Windows\system32\svchost.exe -k rpcssC:\Windows\system32\Ati2evxx.exeC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestrictedC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestrictedC:\Windows\system32\svchost.exe -k netsvcsC:\Windows\System32\DriverStore\FileRepository\stwrt.inf_827e372d\STacSV.exeC:\Windows\system32\svchost.exe -k GPSvcGroupC:\Windows\system32\SLsvc.exeC:\Windows\system32\svchost.exe -k LocalServiceC:\Windows\system32\Ati2evxx.exeC:\Windows\system32\Hpservice.exeC:\Windows\system32\svchost.exe -k NetworkServiceC:\Windows\System32&#... Read more

A:Google search results redirected

Hello , And to the Bleeping Computer Malware Removal Forum. My name is Elise and I'll be glad to help you with your computer problems.I will be working on your malware issues, this may or may not solve other issues you may have with your machine.Please note that whatever repairs we make, are for fixing your computer problems only and by no means should be used on another computer.The cleaning process is not instant. Logs can take some time to research, so please be patient with me. I know that you need your computer working as quickly as possible, and I will work hard to help see that happen. Please reply using the Add/Reply button in the lower right hand corner of your screen. Do not start a new topic. The logs that you post should be pasted directly into the reply. Only attach them if requested or if they do not fit into the post.Unfortunately, if I do not hear back from you within 5 days, I will be forced to close your topic. If you still need help after I have closed your topic, send me or a moderator a personal message with the address of the thread or feel free to create a new one.You may want to keep the link to this topic in your favorites. Alternatively, you can click the button at the top bar of this topic and Track this Topic, where you can choose email notifications. The topics you are tracking are shown here.-----------------------------------------------------------If you have since resolved the original problem you were having, we would appreciate you let... Read more

Read other 12 answers
RELEVANCY SCORE 86

Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows XP Professional, Service Pack 3, 32 bit
Processor: Genuine Intel(R) CPU T2400 @ 1.83GHz, x86 Family 6 Model 14 Stepping 8
Processor Count: 2
RAM: 2558 Mb
Graphics Card: ATI Mobility Radeon X1300, 512 Mb
Hard Drives: C: Total - 52580 MB, Free - 17246 MB;
Motherboard: LENOVO, 200749U
Antivirus: McAfee Anti-Virus and Anti-Spyware, Updated: Yes, On-Demand Scanner: Enabled
----------------------------------------------------------------------------------------
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 1:34:29 PM, on 8/30/2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\ibmpmsvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Carbonite\Carbonite Backup\carboniteservice.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32... Read more

Read other answers
RELEVANCY SCORE 86

I know that a few others have posted reporting the same thing, but like with humans, every case is different, so I'm posting for help with my specific problem. I have downloaded (but not yet installed) HJT, so I have no log to post yet. Should I uninstall my Avira AntiVir first before doing so?

My problem is that my Google search results are being redirected to sites that don't even match the thing I'm searching for. (Ex.: I'm searching for an actor/actress' name and it gives me a shopping website that seems to be down or no longer online.) I also went to uninstall this random Spyware Protect 2009 thing that literally just popped up on my computer (and is annoying the crud out of me), but it doesn't show in the Add/Remove list, so I'm guessing that's also an issue, though I'm not sure.

I ran my Avira AntiVir and it came up with 8 warnings and 3 detections (I can post the log if needed). It will also not update on it's own, saying I have no internet connection, when I clearly do (I updated Avira manually yesterday). I am wanting to avoid revamping my computer entirely since I have many things I want to keep on here (most of which I've copied to cd now), and I do not have the money to pay for an anti-virus subscription. Along with installing and running HJT, what's my next step to be? I greatly appreciate any help given.

OS: XP Home, SP 2
Browser: GreenBrowser
AntiVirus: Avira, freshly updated
Computer: Dell Dimension 1100
CPU... Read more

A:Redirected search results in Google

bump (sorry if it's not allowed)

Read other 13 answers
RELEVANCY SCORE 86

I ran MBAM and it found nothing, also ran combofix; I guess I need help Thanks in advance!

A:some Google search results redirected

Greetings and Welcome to The Forums!!My name is Gringo and I'll be glad to help you with your malware problems.I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of usPlease do not run any tools unless instructed to do so.
We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.
Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.
Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.
A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE: At the top o... Read more

Read other 28 answers
RELEVANCY SCORE 86

I've noticed that lately a few of my opened links are actually to other sites, not the one I clicked on. For example, I click on a google search result link (www.engineering.utoronto.ca/) and I end up going elsewhere (http://www.guidetoonlineschools.com/engineering.html?source=looksmart_gtos_eng&kw=engineering%20universities&utm_source=looksmart&utm_medium=cpc&utm_campaign=gtos&utm_source=looksmart&utm_medium=cpc). I've run several virus, spyware, and adware scanners (Malawarebytes, AdAware, Panda Cloud, Sympatico Virus Scan) and none of them have returned any hits. In addition, several of the scanners can't connect to the internet, even though I'm using this same computer and connection to write this. Most worrying is that my protection suite (Sympatico Security) keeps crashing for no discernable reason.Finally, I can't access Hotmail at all. Going to hotmail.com gives "Internet Explorer cannot display the webpage". I can't access it through Firefox either. This is despite the fact that the computer beside this one (with the same internet connection) can access Hotmail with no problems.DDS.scr & DDS.pif don't seem to work. The command prompt opens and then closes almost immediately.Any help would be greatly appreciated.----------------------------------------------Logfile of Trend Micro HijackThis v2.0.2Scan saved at 9:46:49 PM, on 07/05/2009Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mod... Read more

A:Google search results are redirected

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.comDDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the resul... Read more

Read other 7 answers
RELEVANCY SCORE 86

Hi, I am new to this forum and I have been having this problem where when I click on the search results from google, I occassionally get redirected to a set of random sites, some appear to be search engines, some are ad sites, and sometimes I get a 302 error message. I have already tried scanning with Malwarebytes and AVG separately and did not find any malicious files. The following is a log of the scan from DDS. May I please get some help on resolving this issue? Thank you!!

Also, I do not have access to a working Windows disk or boot CD.


DDS (Ver_10-03-17.01) - NTFSx86
Run by Kenneth Tse at 7:21:20.96 on 09/18/2010 Sat
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_20
Microsoft Windows XP Professional 5.1.2600.3.936.86.1033.18.990.220 [GMT -6:00]

AV: AVG Internet Security *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
FW: AVG Firewall *enabled* {8decf618-9569-4340-b34a-d78d28969b66}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\Program Files\AVG\AVG9\avgrsx.exe
svchost.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Vist... Read more

A:Google Search Results Redirected

Hello and welcome to TSF


We will do our best to assist you. However, in order to do so, please follow all instructions provided in the sequence given. Do not install/re-install any programs or run any fixes or scanners that you have not been instructed to use. This may cause conflicts with the tools being used in the cleanup process.

If you have questions regarding any of the instructions or problems running any tools, please let us know.

You may wish to subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.

-------------------------------------

Before beginning the fix, read this post completely. If there's anything that you do not understand, kindly ask your questions before proceeding.


We will begin with ComboFix.exe. Please visit this webpage for download links, and instructions for running the tool:

http://www.bleepingcomputer.com/comb...o-use-combofix

* Ensure you have disabled all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
See this link for instructions on how to do this:
How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs

Please include the C:\ComboFix.txt in your next reply for further review.


Please note that the forum is very busy and if I don't hear from you within three day... Read more

Read other 19 answers
RELEVANCY SCORE 86

My google searches generate results normally, but when I click on these, I am redirected to other sites. I am copying the HJT report and DDS below. The gmer found nothing, and thus generated a blank log.
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 3:25:48 PM, on 8/28/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\PROGRA~1\AVG\AVG10\avgchsvx.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\acs.exe
C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe
C:\Program Files\AVG\AVG10\avgwdsvc.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ThpSrv.exe
C:\WINDOWS\system32\TODDSrv.exe
C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe
C:\Program Files\AVG\AVG10\avgnsx.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Atheros\ACU.exe
C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
C:\WINDOWS\system32\TDispVol.exe
C:\WINDOWS\system32\Zo... Read more

Read other answers
RELEVANCY SCORE 86

I am using Firefox v3.6.6. When I click on Google Search items I am redirected to other sites. I can enter addresses in to the address bar and get to the correct sites.Thanks,JohnUNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.IF REQUESTED, ZIP IT UP & ATTACH ITDDS (Ver_10-03-17.01)Microsoft Windows XP ProfessionalBoot Device: \Device\HarddiskVolume1Install Date: 12/27/2008 9:08:10 AMSystem Uptime: 7/7/2010 12:11:01 AM (42 hours ago)Motherboard: LENOVO | | 4058CTOProcessor: Intel Pentium III Xeon processor | None | 2792/266mhz==== Disk Partitions =========================C: is FIXED (NTFS) - 143 GiB total, 97.224 GiB free.D: is CDROM ()==== Disabled Device Manager Items =============Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}Description: Intel® WiFi Link 5300 AGNDevice ID: PCI\VEN_8086&DEV_4236&SUBSYS_10118086&REV_00\4&318470AD&0&00E1Manufacturer: Intel CorporationName: Intel® WiFi Link 5300 AGNPNP Device ID: PCI\VEN_8086&DEV_4236&SUBSYS_10118086&REV_00\4&318470AD&0&00E1Service: NETw5x32==== System Restore Points ===================RP346: 4/9/2010 6:08:47 PM - Software Distribution Service 3.0RP347: 4/10/2010 3:12:47 PM - Software Distribution Service 3.0RP348: 4/11/2010 9:34:29 PM - Software Distribution Service 3.0RP349: 4/12/2010 10:16:21 AM - Software Distribution Service 3.0RP350: 4/13/2010 6:33:33 PM - Software Distribution Service 3.0RP351: 4/15/2010 7:46:24 AM - Soft... Read more

A:Google Search Results are redirected

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.In the upper right hand corner of the topic you will see a button called Options. If you click on this in the drop-down menu you can choose Track this topic. By doing this and then choosing Immediate E-Mail notification and then clicking on Proceed you will be advised when we respond to your topic and facilitate the cleaning of your machine.Note** If you are having problems posting the complete log into this thread upload them here http://www.rapidshare.com/ and post the links in this thread We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.I order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is ... Read more

Read other 15 answers
RELEVANCY SCORE 86

Hi
When I search for something in google and click one of the links to one of the results, most of the time it redirects me to other websites. Please help.

Logfile of HijackThis v1.99.1
Scan saved at 2:01:55 PM, on 4/9/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\brsvc01a.exe
C:\WINDOWS\system32\brss01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlservr.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\n... Read more

A:Getting redirected from google search results

You may want to print out these instructions for reference, since you will have to restart your computer during the fix.

Please download FixWareout fom

http://downloads.subratam.org/Fixwareout.exe
or
http://www.bleepingcomputer.com/files/lonny/Fixwareout.exe

Save it to your desktop and run it. Click Next, then Install, make sure "Run fixit" is checked and click Finish.
The fix will begin; follow the prompts.
You will be asked to reboot your computer; please do so.
Your system may take longer than usual to load; this is normal.
Once the desktop loads post the text that will open (report.txt) and a new Hijackthis log in the forum please.
 

Read other 3 answers
RELEVANCY SCORE 86

Dear sir / madam,

Whenever i click on a link from a Google search result, i get redirected
to another website. I can also see Pleasewaitsearch.com and other unknown URLs
being displayed while loading.

I have tried Malwarebytes, Avira, Combofix, Hitman Pro and Super anti spyware
but no success so far.

Please advise me on how to solve this problem.
Thank you very much.

A:Google search results being redirected (please help)

Please note the message text in blue at the top of this forum. No one should be using ComboFix unless specifically instructed to do so by a Malware Removal Expert who can interpret the logs. It is a powerful tool intended by its creator to be "used under the guidance and supervision of an expert. Using this tool incorrectly could lead to disastrous problems with your operating system such as preventing it from ever starting again. Please read the pinned topic ComboFix usage, Questions, Help? - Look here. With that said, please download the TDSS Rootkit Removing Tool (TDSSKiller.zip) and save it to your Desktop. <-Important!!!Be sure to print out and follow all instructions for performing a scan or refer to these instructions with screenshots.Extract (unzip) the file to your desktop and make sure TDSSKiller.exe (the contents of the zipped file) is on the Desktop itself, not within a folder on the Desktop. Vista/Windows 7 users refer to these instructions.If you don't have an extracting program, you can download TDSSKiller.exe and use that instead.Double-click on TDSSKiller.exe to run the tool for known TDSS variants.
Vista/Windows 7 users right-click and select Run As Administrator.When the program opens, click the Start Scan button.Do not use the computer during the scanIf the scan completes with nothing found, click Close to exit.If malicious objects are found, they will show in the Scan results - Select action for found objects and offer three options.Ensure Cure is ... Read more

Read other 1 answers
RELEVANCY SCORE 86

Hello,

When I search on Google and click on a result link I am redirected to 58.65.234.196 IP address which will redirect me to another web site. Scanning computer with several antaviruses such as MCCafee, NOD, Ad-Aware, Windows Defender does not fix the problem. Also, I can't access the Windows update web site, I am getting the IE cannot display the webpage.

I ran the HJT tool and reviewed the log file but could not find anything suspicious. Please see attached HJT log file.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:51:43 PM, on 5/6/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe
C:\Program Files\Dell\Media Experience\DMXLauncher.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpd... Read more

Read other answers
RELEVANCY SCORE 86

Hi,Whenever i do a search on google and click on one of the search results, it takes me to another page instead of the one in the search results. I also get redirected to a site clean-pc-now.com. I have cleaned my computer with:Malwarebytes antispywarespybot search and destroyad-awareI have no luck trying to get rid of that problem. This problem affects IE and firefox and not Chrome.Please help.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 2:34:29 AM, on 8/16/2009Platform: Windows Vista SP1 (WinNT 6.00.1905)MSIE: Internet Explorer v7.00 (7.00.6001.18000)Boot mode: NormalRunning processes:C:\Windows\system32\Dwm.exeC:\Windows\Explorer.EXEC:\Windows\system32\taskeng.exeC:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exeC:\Program Files\SigmaTel\C-Major Audio\WDM\sttray.exeC:\Windows\System32\rundll32.exeC:\Program Files\ESET\nod32kui.exeC:\Windows\OEM02Mon.exeC:\Program Files\DellTPad\Apoint.exeC:\Windows\WindowsMobile\wmdc.exeC:\Program Files\Internet Download Manager\IDMan.exeC:\Program Files\Windows Live\Messenger\msnmsgr.exeC:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exeC:\Program Files\Dell\QuickSet\quickset.exeC:\Program Files\Datacolor\Spyder3Pro\Utility\Spyder3Utility.exeC:\Program Files... Read more

A:Redirected From Google Search Results

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 2 answers