Over 1 million tech questions and answers.

Internet Explorer Redirects To Another Website

Q: Internet Explorer Redirects To Another Website

Im unsure of the virus,unknown...We have 3 different users at login on this pc.Im the owner. heres the HJT logLogfile of HijackThis v1.99.1Scan saved at 1:12:43 PM, on 12/3/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.5730.0011)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\csrss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Sygate\SPF\smc.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exeC:\Program Files\Executive Software\DiskeeperLite\DKService.exeC:\Program Files\Common Files\LightScribe\LSSrvc.exeC:\WINDOWS\System32\wdfmgr.exeC:\WINDOWS\wanmpsvc.exeC:\WINDOWS\System32\MsPMSPSv.exeC:\WINDOWS\System32\wbem\wmiprvse.exeC:\WINDOWS\System32\alg.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\Explorer.EXEC:\windows\system\hpsysdrv.exeC:\WINDOWS\System32\hphmon05.exeC:\WINDOWS\System32\hkcmd.exeC:\Program Files\HP\Digital Imaging\Unload\hpqcmon.exeC:\Program Files\Multimedia Card Reader\shwicon2k.exeC:\Program Files\Java\jre1.5.0_10\bin\jusched.exeC:\HP\KBD\KBD.EXEC:\PROGRA~1\MUSICM~1\MUSICM~1\MMDiag.exeC:\WINDOWS\System32\igfxtray.exeC:\Program Files\Ahead\ODD Toolkit\DVDTray.exeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mim.exeC:\Program Files\Trend Micro\Tmasy\Tmasy.exeC:\WINDOWS\System32\wbem\wmiapsrv.exeC:\unzipped\hijackthis2\HijackThis.exeR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.live.comR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dllO2 - BHO: (no name) - {3FC53EBA-DF2C-DDFE-5CE1-874A338CAC99} - C:\WINDOWS\System32\ejq.dllO2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dllO4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exeO4 - HKLM\..\Run: [HPHUPD05] C:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exeO4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exeO4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exeO4 - HKLM\..\Run: [CamMonitor] c:\Program Files\HP\Digital Imaging\Unload\hpqcmon.exeO4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXEO4 - HKLM\..\Run: [{DF-FB-B9-92-ZN}] c:\windows\system32\rqdsregq.exe FI002O4 - HKLM\..\Run: [USIUDF_Eject_Monitor] C:\Program Files\Common Files\Ulead Systems\DVD\USISrv.exeO4 - HKLM\..\Run: [Ulead Quick-Drop] "C:\Program Files\Ulead Systems\Ulead DVD MovieFactory 4.0 Disc Creator TBYB\Ulead Quick-Drop 1.0\Quick-Drop.exe" WINDOWCALLO4 - HKLM\..\Run: [Sunkist2k] C:\Program Files\Multimedia Card Reader\shwicon2k.exeO4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXEO4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exeO4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exeO4 - HKLM\..\Run: [MimBoot] C:\PROGRA~1\MUSICM~1\MUSICM~1\mimboot.exeO4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -kO4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXEO4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exeO4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exeO4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1124729638\ee\AOLHostManager.exeO4 - HKLM\..\Run: [DVDTray] C:\Program Files\Ahead\ODD Toolkit\DVDTray.exeO4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUPO4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exeO4 - HKLM\..\Run: [AutoTKit] C:\hp\bin\AUTOTKIT.EXEO4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"O4 - HKLM\..\Run: [SunServer] C:\Program Files\Sunbelt Software\CounterSpy\Consumer\sunserver.exeO4 - HKCU\..\Run: [Uniblue Registry Booster] C:\Program Files\Uniblue\Registry Booster\RegistryBooster.exe /SO4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exeO4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\ypager.exe" -quietO4 - HKCU\..\Run: [Windows Registry Repair Pro] C:\Program Files\3B Software\Windows Registry Repair Pro\RegistryRepairPro.exe 4O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHookO4 - HKCU\..\Run: [Microsoft Location Finder] "C:\Program Files\Microsoft Location Finder\LocationFinder.exe"O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimizedO4 - HKCU\..\Run: [BackupNotify] c:\Program Files\HP\Digital Imaging\bin\backupnotify.exeO4 - Startup: Trend Micro Anti-Spyware.lnk = C:\Program Files\Trend Micro\Tmasy\Tmasy.exeO4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exeO4 - Global Startup: America Online 9.0 Tray Icon.lnk = C:\Program Files\America Online 9.0\aoltray.exeO4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXEO8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dllO9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dllO9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLLO9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exeO9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exeO9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exeO9 - Extra button: Paper Shredder - {EB55A514-7BDA-407F-BB10-17C6962E8316} - C:\Program Files\WinMeta\PaperShredder\PaperShredder.shdO9 - Extra 'Tools' menuitem: &Paper Shredder - {EB55A514-7BDA-407F-BB10-17C6962E8316} - C:\Program Files\WinMeta\PaperShredder\PaperShredder.shdO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO11 - Options group: [INTERNATIONAL] International*O12 - Plugin for .divx: C:\Program Files\Netscape\Netscape Browser\PLUGINS\npdivx32.dllO16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) - http://help.bellsouth.net/sdccommon/download/tgctlcm.cabO16 - DPF: {288C5F13-7E52-4ADA-A32E-F5BF9D125F99} - http://www.miniclip.com/puzzlepirates/miniclipGameLoader.dllO16 - DPF: {2A32B14F-4D29-4EA3-AC54-E9B19F436CE7} (Scanner Class) - http://www.windowsecurity.com/trojanscan/TDECntrl.CABO16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1146095102140O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1165019282875O16 - DPF: {6E5A37BF-FD42-463A-877C-4EB7002E68AE} (Housecall ActiveX 6.5) - http://housecall65.trendmicro.com/housecal...ivex/hcImpl.cabO16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} - http://www.bitdefender.com/scan/Msie/bitdefender.cabO16 - DPF: {9AC54695-69A4-46F1-BE10-10C74F9520D5} - http://cabs.elitemediagroup.net/cabs/mediaview.cabO16 - DPF: {A3009861-330C-4E10-822B-39D16EC8829D} (CRAVOnline Object) - http://www.ravantivirus.com/scan/ravonline.cabO16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} - http://fdl.msn.com/zone/datafiles/heartbeat.cabO16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/controls/msnchat45.cabO17 - HKLM\System\CCS\Services\Tcpip\..\{0689CEC2-8D77-4684-9520-B9193268E020}: NameServer = 85.255.115.117,85.255.112.184O17 - HKLM\System\CCS\Services\Tcpip\..\{858F5459-E68B-40F8-8717-EF0525E66D32}: NameServer = 85.255.115.117,85.255.112.184O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.115.117 85.255.112.184O17 - HKLM\System\CS1\Services\Tcpip\..\{0689CEC2-8D77-4684-9520-B9193268E020}: NameServer = 85.255.115.117,85.255.112.184O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 85.255.115.117 85.255.112.184O17 - HKLM\System\CS2\Services\Tcpip\..\{0689CEC2-8D77-4684-9520-B9193268E020}: NameServer = 85.255.115.117,85.255.112.184O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.115.117 85.255.112.184O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLLO18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLLO20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dllO23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exeO23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeO23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeO23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exeO23 - Service: Diskeeper - Executive Software International, Inc. - C:\Program Files\Executive Software\DiskeeperLite\DKService.exeO23 - Service: License Management Service ESD - element5 - C:\Program Files\Common Files\element5 Shared\Service\Licence Manager ESD.exeO23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exeO23 - Service: NMSAccess - Unknown owner - C:\Program Files\CDBurnerXP Pro 3\Tools\NMSAccess.exe (file missing)O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exeO23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exeO23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe

RELEVANCY SCORE 200
Preferred Solution: Internet Explorer Redirects To Another Website

I recommend downloading and running DAP. It can help sort out any driver and firmware related issues on your system

It's worked out well for many of us in the past.

You can download it direct from this link http://downloaddap.org. (This link will open the download page of DAP so you can save a copy to your computer.)

A: Internet Explorer Redirects To Another Website

You may want to print out these instructions for reference, since you will have to restart your computer during the fix.Please download FixWareout http://downloads.subratam.org/Fixwareout.exeorhttp://swandog46.geekstogo.com/Fixwareout.exeSave it to your desktop and run it. Click Next, then Install, then make sure "Run fixit" is checked and click Finish. The fix will begin; follow the prompts. You will be asked to reboot your computer; please do so. Your system may take longer than usual to load; this is normal.When your system reboots, follow the prompts. Afterwards, Hijack This will launch. Close Hijack This, and click OK to proceed. )Fix these with HJT ? mark them, close IE, click fix checkedO17 - HKLM\System\CCS\Services\Tcpip\..\{0689CEC2-8D77-4684-9520-B9193268E020}: NameServer = 85.255.115.117,85.255.112.184O17 - HKLM\System\CCS\Services\Tcpip\..\{858F5459-E68B-40F8-8717-EF0525E66D32}: NameServer = 85.255.115.117,85.255.112.184O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.115.117 85.255.112.184O17 - HKLM\System\CS1\Services\Tcpip\..\{0689CEC2-8D77-4684-9520-B9193268E020}: NameServer = 85.255.115.117,85.255.112.184O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 85.255.115.117 85.255.112.184O17 - HKLM\System\CS2\Services\Tcpip\..\{0689CEC2-8D77-4684-9520-B9193268E020}: NameServer = 85.255.115.117,85.255.112.184O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.115.117 85.255.112.184If you have connection problems after this* Go to Control Panel. - If you are using Windows XP's Category View, select the Network and Internet Connections category. If you are in Classic View, go to the next step .? Double-click the Network Connections icon? Right-click the Local Area Connection icon and select Properties.? Hilight Internet Protocol (TCP/IP) and click the Properties button.? Be sure Obtain DNS server address automatically is selected.? OK your way out.* Go to Start > Run and type in cmd? Click OK.? This will open a commad prompt.? Type or copy and paste the following line in the command window:ipconfig /flushdns? Hit Enter? Exit the command windowDo that before you restart.=============At the end of the fix, you may need to restart your computer again.Finally, please post the contents of the logfile C:\fixwareout\report.txt, along with a new Hijack This log. ==================================If you get an Autoexec nt error do the followingXP Fix - http://www.visualtour.com/downloads/ Scroll down to get XP FixAnd run FixWareout again.

Read other 7 answers
RELEVANCY SCORE 75.6

I have been having trouble in internet explorer 8. Every time I go to a website, it automatically redirects to a google image search. Sometimes it's doubleclick.net, other times it's something different. I am not connected to the internet through a router, rather I am wirelessly tethered to my rooted LG Optimus S, running the RebornROM. I'm not sure that this has anything to do with my problem, though. I am only having this problem in Internet Explorer, I can use Safari with no problems. I am running Windows Vista Home Premium, 32-bit.

Here is my DDS log:
.
DDS (Ver_2011-06-11.01) - NTFSx86
Internet Explorer: 9.0.8112.16421
Run by WES at 23:09:21 on 2011-06-10
Microsoft? Windows Vista? Home Premium 6.0.6002.2.1252.1.1033.18.3062.1358 [GMT -5:00]
.
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\SLsvc.exe... Read more

A:every website in internet explorer redirects to google image search!

Hello and welcome to Bleeping ComputerMy name is etavares and I will be working with you to fix your computer.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Please take note:If you have since resolved the original problem you were having, we would appreciate you letting us know. If you are unable to create a log because your computer cannot start up successfully please provide detailed information about your installed Windows Operating System including the Version, Edition and if it is a 32bit or a 64bit system.
If you are unsure about any of these characteristics just post what you can and we will guide you.Please tell us if you have your original Windows CD/DVD available.If you are unable to perform the steps we have recommended please try one more time and if unsuccessful alert us of such and we will design an alternate means of obtaining the necessary information.Once we start working together, please reply back within 3 days or this thread may be closed so we can help others who are waiting. If you will be unable to respond (e.g. vacation, travel, etc.), please let me know ahead of time.Please refrain from running tools or applying updates other than those w... Read more

Read other 2 answers
RELEVANCY SCORE 68.4

Hi there
 
I am having trouble with many pieces of malware at once I think.
A few days ago I noticed I was being redirected around to different websites (something like www.ads-find-all-you-want.com) about 20% of the time when I clicked on any link. I have tried to get rid of it with malwarebytes, but it didn't go away. Today I noticed the computer slowing donw significantly and I have multiple instances of 300k+ memory usage "explorer.exe" being open and multiple "iexplore.exe" despite me having never used internet explorer.
 
I have tried using the dds tool to make a dds.txt, but it will only generate me the attach.txt  and no dds.txt file no matter the options I select. I visited this forum (or a similar one) many years ago now and was told to make HijackThis logs. Not sure if this is still a thing at all but I made some anyway and i'll attach those.
 
I also took a screengrab of all the explorer.exe's running
http://imgur.com/b945RG0
 
Hope you can help me, and I can provide any other things you need
 
Thanks!
 

A:Multiple viruses - Internet website redirects, multiple "explorer.exe's"

Hello! Welcome to BleepingComputer Forums!
My name is Georgi and and I will be helping you with your computer problems.
Before we begin, please note the following:
I will working be on your Malware issues, this may or may not, solve other issues you have with your machine.
The logs can take some time to research, so please be patient with me.
Stay with the topic until I tell you that your system is clean. Missing symptoms does not mean that everything is okay.
Instructions that I give are for your system only!
Please do not run any tools until requested ! The reason for this is so I know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.
Please perform all steps in the order received. If you can't understand something don't hesitate to ask.
Again I would like to remind you to make no further changes to your computer unless I direct you to do so. I will not help you if you do not follow my instructions.
 
 
Please download the latest version of Farbar Recovery Scan Tool and save it to your desktop.Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy a... Read more

Read other 18 answers
RELEVANCY SCORE 61.6

Windows XP..

Internet Explorer 6 cannot browse the internet - but I can ping the websites. Tried Microsoft's registry removal and IE reinstall.

Mozilla Firefox also will not connect.

Note the machine had 4 instances of blaster, according to SARC's removal tool.
 

A:Internet Explorer 6: Won't connect to website, but still can ping website

Read other 13 answers
RELEVANCY SCORE 60.4

Hi, I think my system is totally corrupted with Virus , malware and it keeps on doing multiple website redirects all the time. Could anyone of the guru's help me to resolve the problem. Attaching the FRST and addition file providing additional details.   ThanksTBSAdditional scan result of Farbar Recovery Scan Tool (x64) Version: 02-01-2015Ran by Bhavani at 2015-01-02 15:37:25Running from C:\Users\Bhavani\DesktopBoot Mode: Normal============================================================================== Security Center ========================(If an entry is included in the fixlist, it will be removed.)AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}==================== Installed Programs ======================(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)Apple Application Support (HKLM-x32\...\{78002155-F025-4070-85B3-7C0453561701}) (Version: 3.0.6 - Apple Inc.)Apple Mobile Device Support (HKLM\...\{6AF2AC2A-3532-43FD-9F4D-BDC9C0D724C7}) (Version: 7.1.2.6 - Apple Inc.)Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)AVG SafeGuard toolbar (HKLM-x32\...\AVG SafeGuard toolbar) (Version: 18.1.9.799 - AVG Technologies)Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Vers... Read more

A:Virus , Malware - Internet website redirects

Hey my friend,  CHR dev: Chrome dev build detected! <======= ATTENTIONThat means that you have to reinstall Chrome. Please do so. ;)Step 1: UninstallsWe need to remove programs using "Programs and Features"Open Computer and click on the "Computer" tab, then click on Uninstall or Change a Program.A list of programs installed will be "populated" (this may take a bit of time).If they exist, uninstall the following by clicking the below entries and selecting "Remove":BrowserSafeguard with RocketTabPC Fix Speed 1.2.0.52SuperManCouponAdditional instructions can be found here if needed.Step 2: FRST FixPlease open Notepad.exe. Make sure that you don't use any other software than Notepad.exe!Copy and Paste the content of the codebox below into the empty textfile:AlternateDataStreams: C:\Windows:nlsPreferences
AlternateDataStreams: C:\Users\Bhavani\SkyDrive:ms-properties
HKLM-x32\...\Run: [vProt] => "C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe"
AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll => C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll File Not Found
AppInit_DLLs: C:\Users\Bhavani\AppData\Local\Linkey\IEEXTE~1\iedll64.dll => C:\Users\Bhavani\AppData\Local\Linkey\IEEXTE~1\iedll64.dll File Not Found
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\vpngui.exe.lnk
ShortcutTarget: vpngui.exe.lnk -> C:\Windows\Installer\{5FDC06BF-3D3D-4367-8FFB-4FAFCB61972D}\Icon09DB8A851.exe ()
CHR HKLM\SOF... Read more

Read other 2 answers
RELEVANCY SCORE 60

HelloI was told to post on this forum from the "Am I infected? What do I do?" forum. This is where it started... http://www.bleepingcomputer.com/forums/t/224624/computer-running-slow-some-redirects-and-explorer-crashes/Anyway, my computer is still running really slow and I've tried using McAfee, Ad-Aware, and Malwarebytes' Anti-Malware. I also tried to use SDFix but was unable to do so. Explorer.exe keeps crashing whenever I try to use it. I finally was able to run RSIT and here is the log from that scan. Please help! Thanks!-------------------------------------------Logfile of random's system information tool 1.06 (written by random/random)Run by John John at 2009-05-20 22:55:41Microsoft Windows XP Professional Service Pack 3System drive C: has 26 GB (24%) free of 108 GBTotal RAM: 1014 MB (52% free)Logfile of Trend Micro HijackThis v2.0.2Scan saved at 10:56:20 PM, on 5/20/2009Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Intel\Wireless\Bin\EvtEng.exeC:\Program Files\Intel\Wireless\Bin\S24EvMon.exeC:\Program Files\Intel\Wireless\Bin\WLKeeper.exeC:\WINDOWS\system32\LEXBCES.EXEC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\LEXPPS.EXEC:\Program Files\Common Files\Apple\Mo... Read more

A:Computer running slow, some redirects, explorer crashes, cannot access anti-virus website

Anyone? Anyone? Bueller?===========Hello While we understand your frustration at having to wait, please note that Bleeping Computer deals with several hundred requests for assistance such as yours on a daily basis. As a result, our backlog is quite large as are other comparable sites that help others with malware issues. Although our HJT Team members work on hundreds of requests each day, they are all volunteers who work logs when they can and are able to do so. No one is paid by Bleeping Computer for their assistance to our members.Further, our malware removal staff is comprised of team members with various levels of skill and expertise to deal with thousands of malware variants, some more complex than others. Although we try to take DDS/HJT logs in order (starting with the oldest), it is often the skill level of the particular helper and sometimes the operating system that dictates which logs get selected first. Some infections are more complicated than others and require a higher skill level to remove. Without that skill level attempted removal could result in disastrous results. In other instances, the helper may not be familiar with the operating system that you are using, since they use another. In either case, neither of us want someone to assist you who is not familiar with your issue and attempt to fix it.We ask that once you have posted your log and are waiting, please DO NOT "bump" your thread or make further replies until it has been responded to by a me... Read more

Read other 19 answers
RELEVANCY SCORE 55.6

Besides internet browser redirects, also get Norton Internet Security warnings of repeated notices - "An intrusion atempt by -------- (eg 194.60.205.232) was blocked." "HTTP FakeAV Redirect Request 9"

Please help

Operating System XP Home

A:Internet browser redirects - both Internet Explorer and Firefox

After Malwarebytes removal of AntivirSolutionPro, Trojan.BHO and TrojanMokif.Gen some time ago (see pasted log at bottom of page) both Internet Explorer and Firefox using both Yahoo and Google redirect intermittently. Besides internet browser redirects, also get Norton Internet Security warnings of repeated notices - "An intrusion atempt by -------- (eg 194.60.205.232) was blocked." "HTTP FakeAV Redirect Request 9" and high memory usage.DDS (Ver_10-12-12.02) - NTFSx86 Run by Owner at 13:39:04.43 on Thu 03/03/2011Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_23Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.479.90 [GMT -5:00]AV: Norton Internet Security *Enabled/Updated* {E10A9785-9598-4754-B552-92431C1C35F8}FW: Norton Internet Security *Enabled* ============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcssvchost.exesvchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Synaptics\SynTP\SynTPLpr.exeC:\Program Files\Synaptics\SynTP\SynTPEnh.exeC:\Program Files\CyberLink\PowerDVD\PDVDServ.exeC:\Program Files\Digital Media Reader\shwicon2k.exeC:\WINDOWS\system32\igfxpers.exeC:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exeC: ... Read more

Read other 21 answers
RELEVANCY SCORE 54.8

Am getting redirects from IE7 from BING or GOOGLE clicking on the resulting search items. Sometimes it redirects and sometimes it does not. Sometimes just opening IE7 a second window will open to another site. I am running Norton Internet Security v18.5.0.125. I have also ran AD-Aware, Malwarebytes and Spybot Search & Destroy and still am getting the redirects.

DDS.TXT
DDS (Ver_10-12-12.02) - NTFSx86
Run by Todd at 18:38:32.82 on Sat 02/19/2011
Internet Explorer: 7.0.5730.13
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2046.1224 [GMT -5:00]

AV: Lavasoft Ad-Watch Live! Anti-Virus *Enabled/Updated* {A1C4F2E0-7FDE-4917-AFAE-013EFC3EDE33}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\AOL\1169593976\ee\AOLSoftware.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.... Read more

A:Internet Explorer Redirects

Good evening. Take a trip to this webpage for download links and instructions for running Combofix by sUBs: http://www.bleepingcomputer.com/combofix/how-to-use-combofix * When prompted to save Combofix, change the filename BEFORE saving it - any name will do, as long as it has .exe at the end. Please be aware that this tool may require the PC to be rebooted so close any programs you have open before you start. When CF has finished, it will produce a log - C:\ComboFix.txt - copy and paste Let me know how the PC is behaving.* There are two points to note from the instructions page:1) The Recovery Console.It is recommended that you install this as, in certain circumstances, it may be the difference between a successful repair and a reformat. If you are uncertain as to whether or not you already have the Recovery Console installed, simply run CF and it will prompt you if it does not detect it.CF will complete some, but not all, of it's removal tasks without the installation of the Console, so you are free to choose whether you want to complete this step, but it is in your interests to do so.2) Disabling your Anti-Virus.CF has been the victim of false-positive detections on occasion and a resident AV may incorrectly identify and delete part of the tool which won't do it much good. If you don't disable your AV, you may not get the results you hoped for!

Read other 14 answers
RELEVANCY SCORE 54.8

Hi, my name is Jim and I have a computer problem.

I do a search in Google (using IE....Firefox seems to be working fine) and almost every link redirects to somewhere other than what the search results indicate it will go. Not every time,but most of the time. I've tried a few things (AVAST, Malwarebytes, etc) but nothing is finding it. Please help.

I read "Preparation Guide For Use Before Using Malware Removal Tools and Requesting Help", but when I started GMER I did not get the option to select all of the checkboxes that the guide indicated that I would. Most of them are grayed out.

The computer is running Windows 7 and the IE version is 8...but you could probably tell those things from the logs.
I run AVAST at all times and I'm surprised that it did not catch this problem.
Windows update is turned on and set to update automatically.
My son recently installed

I'll wait for further instructions before attempting to do anything else.

Thanks in advance.

A:Internet Explorer redirects

Hello and Welcome to Bleeping Computer!!My name is Gringo and I'll be glad to help you with your computer problems.I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of usPlease do not run any tools unless instructed to do so.
We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.
Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.
Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.
A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE: At t... Read more

Read other 24 answers
RELEVANCY SCORE 54.8

I've disabled all the add-ins in IE8, repaired the registry with a registry scanner, run ad-aware, which picked up 3 Trojans classified as 10 on the Richter scale! Spybot S+D, Superantispyware and Malwarebytes will install, but none of them will run. The spoolsv process ran up to 99% overnight so I killed that and did a reboot. I should have mentioned that a successful AVG scan ran but nothing detected. If I put a search into Google, I get results, but some of the links, not all, e.g., wikipedia OK, redirect. I'm posting this via Chrome, which seems to be OK. HiJackThis log is attached. Hope you can help.

A:Internet Explorer redirects

Hello and welcome to Bleeping Computer! We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open wit... Read more

Read other 2 answers
RELEVANCY SCORE 54.8

Internet Explorer started redirecting to multiple sites. Even when Internet Explorer was closed I could still hear audio from commercials. I performed Avg updates and scans. It came back with Trojan horse Generic 13.ATYY. I quarentined it. Now Internet Explorer only redirects when I try to update via Microsoft.com to google. Also when I try to use windows update in Vista I recieve an error code 80244019. Please Help.


DDS (Ver_09-05-14.01) - NTFSx86
Run by Mateo at 9:12:10.72 on Sat 05/23/2009
Internet Explorer: 7.0.6001.18000
Microsoft? Windows Vista? Home Premium 6.0.6001.1.1252.1.1033.18.3069.2230 [GMT -7:00]

SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\Ati2evxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\Ati2evxx.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Windows\system32\svchost.exe -k ... Read more

A:Internet Explorer Redirects

Hello and Welcome to TSF.

Please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription.

Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.

------------------------------------------------------

Please note that these fixes are not instantaneous. Most infections require more than one round to properly eradicate.

Please stay with me until given the 'all clear' even if symptoms seemingly abate.

Kindly follow my instructions and please do no fixing on your own or running of scanners unless requested by a helper.

------------------------------------------------------

Please visit this webpage for download links, and instructions for running ComboFix:

http://www.bleepingcomputer.com/comb...o-use-combofix

* Ensure you have disabled all antivirus and antimalware programs so they do not interfere with the running of ComboFix.

Get help here

Please post the C:\ComboFix.txt in your next reply for further review.

------------------------------------------------------

Read other 2 answers
RELEVANCY SCORE 54.8

I have been having a problem with Internet Explorer redirects for a couple of weeks now. I have deleted IE and reinstalled and it still redirect to livesearch.com results. I have run Super Antispyware, Tdss killer and Trojan remover with no help. I also noticed that my firewall was turned off and all my Windows securtiy updates have failed.Mod Edit:Moved from XP to the Am I Infected forum ~~boopme

A:Internet Explorer Redirects

DownloadTDSSkillerLaunch it.Click on change parameters-Select TDLFS file systemClick on "Scan".Please post the LOG report(log file should be in your C drive) Do not change the default options on scan resultsDownloadaswMBRLaunch it, allow it to download latest Avast! virus definitionsClick the "Scan" button to start scan.After scan finishes,click on Save log(Do not click on FIXMBR)Post the log results here.If you get crashes in normal mode,run it in safemode with networkingDownloadESET online scannerInstall itClick on START,it should download the virus definitionsWhen scan gets completed,click on LIST of found threatsExport the list to desktop,copy the contents of the text file in your reply.Ignore it if there are no detected threats.

Read other 17 answers
RELEVANCY SCORE 54.8

Having some recent difficulties with redirects from Google in IE and a program (DVD Fab) will not open. The computer is genrally running slower than usual, but I hadn't given that much thought until the redirects started. I have scanned regularly with Superantispyware (free). Can anyone help me out? The following is the Hijackthis log:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:57:58 PM, on 11/04/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\windows\System32\smss.exe
C:\windows\system32\winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\Ati2evxx.exe
C:\windows\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\windows\System32\svchost.exe
C:\windows\system32\svchost.exe
C:\windows\system32\spoolsv.exe
C:\windows\system32\Ati2evxx.exe
C:\windows\Explorer.EXE
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Digital Media Reader\readericon45G.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\windows\eHome\ehRecvr.exe
C:\windows\eHome\ehSched.exe
C:\windows\RTHDCPL.EXE
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~... Read more

A:Redirects in Internet Explorer etc

I thought I would update the description of difficulties I am having. Anti virus (AVG free) will not update. Microsoft updates cannot load. I have scanned with Malwarebytes, but problems persist. I was having difficulty updating Superantispyware (free), but eventually was able to manually, and ran a scan. Both Malwarebytes and Superantispyware detected things, but that has not cleared up the problems. I tried unsuccessfully to scan with Kaspersky, but it seems to stall midway through the scan. I should also mention that after I attempt to update AVG Internet Explorer will no longer load a web page and a restart is required. Another curious thing I noticed is that programs I have removed from startup using msconfig have reappeared at startup.
I look forward to your guidance when you can take a look at this for me.
 

Read other 3 answers
RELEVANCY SCORE 54.8

Hello, I am using internet explorer, and it doesn't matter if what search engine I am using, google, yahoo, etc., when I click on a link, it redirects me to a an advertising website, or opens pop ups with ads. Also there are times when I close internet explorer, and it reopens itself with the advertising website. I had resetted my internet explorer setting using the fix it on microsoft support, but the redirects still occur. I have microsoft security essentials and malware bytes on the laptop.

Thank you.

A:Internet explorer redirects

DownloadTDSSkillerLaunch it.Click on change parameters-Select TDLFS file systemClick on "Scan".Please post the LOG report(log file should be in your C drive) Do not change the default options on scan resultsDownloadaswMBRLaunch it, allow it to download latest Avast! virus definitionsClick the "Scan" button to start scan.After scan finishes,click on Save logPost the log results hereDownloadESET online scannerInstall itClick on START,it should download the virus definitionsWhen scan gets completed,click on LIST of found threatsExport the list to desktop,copy the contents of the text file in your reply

Read other 12 answers
RELEVANCY SCORE 54.8

Hi,
I run a search in Google, then click on 1st result and get redirected to an unwanted site.
Also IE shuts down randomly without warning.
I've attached a log from hijackthis.

Any help would be appreciated.

Rgds

Colly2
DDS (Ver_09-03-16.01) - NTFSx86
Run by Colin at 17:40:08.55 on 27/04/2009
Internet Explorer: 7.0.5730.13
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.502.86 [GMT 1:00]

AV: *On-access scanning disabled* (Updated)
AV: Symantec AntiVirus Corporate Edition *On-access scanning enabled* (Updated)
FW: *disabled*

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
C:\WINDOWS\system32\svchost -k rpcss
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\msdtc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Symantec AntiVirus... Read more

A:Internet Explorer redirects

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explanation about the tool. No input is needed, the scan is running.Notepad will open with the results, click no to the Optional_Sca... Read more

Read other 2 answers
RELEVANCY SCORE 54.8

Running SpyBot, Adaware and Norton Antivirus 2005 I have cleaned and recleaned up: smitfraud-C.toolbar 888, ReliableStats, Winsoftware.WinAntiVirusPro2006 (very annoying), and Microsoft.WindowsSecurityCenter.FirewallDisableNofity

I'm attaching my HijackThis log below:

Logfile of HijackThis v1.99.1
Scan saved at 11:45:52 AM, on 3/28/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
... Read more

A:Internet Explorer Redirects...

Did I do something incorrect while posting? I'm just a little surprised to see no response after 3 days.

Thanks for your help.
Cheers,

Scott

Read other 10 answers
RELEVANCY SCORE 54.8

Hi there,

I've been suffering with this for a few months now and I just cant bare it anymore :( Basically my searches redirect to other websites, usually skooble.com. I've tried to install Adaware, Spybot, Malware bytes, HJT, ComboFix with no joy. The virus removes them all. I've even tried renaming the files and the .exe to .bat and .scr but it still removes them. When I open HJT I get as far as scanning then the virus deletes it half way through a scan.

If anybody could help me this would be greately appreciated. Im on IE 7 with Vista.

Thanks, Ross.

A:Internet Explorer Redirects

Are you able to boot into safe mode?

If so, try running the following scans in safe mode.

If you are unable to reach safe mode (reboot > tap F8 repeatedly on startup until an option menu appears...arrow up to safe mode)

If not...please go into your task manager > processes tab and list out all the running processes for me (ctrl +alt +del)

Please download DDS from either of these links

LINK 1
LINK 2

and save it to your desktop.Disable any script blocking protection
Double click dds.pif to run the tool.
When done, two DDS.txt's will open.
Save both reports to your desktop.
---------------------------------------------------
Please include the contents of the following in your next reply:

DDS.txt
Attach.txt.


NEXT



Download GMER Rootkit Scanner from here or here. Extract the contents of the zipped file to desktop.
Double click GMER.exe. If asked to allow gmer.sys driver to load, please consent .
If it gives you a warning about rootkit activity and asks if you want to run scan...click on NO.


Click the image to enlarge it
In the right panel, you will see several boxes that have been checked. Uncheck the following ... Sections
IAT/EAT
Drives/Partition other than Systemdrive (typically C:\)
Show All (don't miss this one)

Then click the Scan button & wait for it to finish.
Once done click on the [Save..] button, and in the File name area, type in "Gmer.txt" or it will save as a .log file... Read more

Read other 2 answers
RELEVANCY SCORE 54.8

I have something causing Internet Explorer to redirect from google search links to various places. Avast recognizes the redirect problem and stops the transfer, but I am having trouble navigating the net. Please help!

I did a scan with MBAM and a "HKEY_CLASSES_ROOT\.fsharproj" infection was found, but after I removed the item the problem was still present.

Thanks in advance...

A:Internet Explorer Redirects

Help me please !

Read other 19 answers
RELEVANCY SCORE 54.8

This is a computer at the place I work and it had some problems and blue screen of death. Finally got it all straightened out but now still have the google redirect BS. I've searched around and tried to run TDSSKiller but no matter what I try it will not run. It has slowed the computer down greatly and is laggy all the time. We don't use IE much but if you do it instantly redirects everytime you search for anything. Some helpful hints and info would be greatly appreciated!

I'm attaching all the files and info that have been asked for and run everything to my knowledge that is asked for in the Preparation Guide.

.
DDS (Ver_2011-06-12.02) - NTFSx86
Internet Explorer: 7.0.5730.13
Run by sellpaint at 9:06:04 on 2011-06-16
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.510.151 [GMT -5:00]
.
AV: Sunbelt VIPRE *Disabled/Updated* {964FCE60-0B18-4D30-ADD6-EB178909041C}
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\brsvc01a.exe
C:\WINDOWS\system32\brss01a.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\program files\firebird15\bin\fbguard.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Sunbelt Software\VIPRE\... Read more

A:Internet Explorer Redirects

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

Read other 3 answers
RELEVANCY SCORE 54.8

When running internet explorer 7 and clicking on a link from a search menu, I'm redirected to some other web seach page or site. Is there some type of virus or malware doing this. Please help.Here is a print from the Hijackthis log.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 11:03:15 AM, on 7/4/2008Platform: Windows Vista (WinNT 6.00.1904)MSIE: Internet Explorer v7.00 (7.00.6000.16681)Boot mode: NormalRunning processes:C:\Windows\system32\taskeng.exeC:\Windows\system32\Dwm.exeC:\Windows\Explorer.EXEC:\Program Files\PrevxCSI\prevxcsi.exeC:\Program Files\Intel\IntelDH\CCU\CCU_TrayIcon.exeC:\Program Files\Common Files\Intel\IntelDH\NMS\Support\IntelHCTAgent.exeC:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exeC:\Windows\System32\wpcumi.exeC:\Windows\System32\hkcmd.exeC:\Windows\System32\igfxpers.exeC:\Program Files\Panda Security\Panda Internet Security 2008\apvxdwin.exeC:\Program Files\Common Files\Real\Update_OB\realsched.exeC:\Windows\ehome\ehtray.exeC:\Program Files\Linksys EasyLink Advisor\LinksysAgent.exeC:\Program Files\Windows Media Player\wmpnscfg.exeC:\Program Files\Panda Security\Panda Internet Security 2008\SRVLOAD.EXEC:\Windows\ehome\ehmsas.ex... Read more

A:Internet Explorer Redirects

Hello and welcome to BCWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. We aim to provide the valuable service known to come from BC to every member we can, but sometimes it takes just a little longer to get to every request for help.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine.Upon completing the steps below a staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.Thanks and again sorry for the delay. Please download Deckard's System Scanner (DSS) and save to your Desktop.alternate download siteDSS will do the following:Create a new System Restore point in Windows XP and Vista.Clean your Temporary Files, Downloaded Program Files, Internet Cache Files, and empty the Recycle Bin on all drives.Check some important areas of your system and produce a report for an analyst to review.Automatically run HijackThis. It will also install and place a shortcut to HijackThis on your desktop if you do not already have it installed. So if HijackThis is not installed and DSS prompts you to download it, please answer yes.You must be logged onto an account with administrator priv... Read more

Read other 2 answers
RELEVANCY SCORE 54.4

Hello, all Tech Support Guys, I'm new, this's my first thread. I heart this forum is very pro and response fast.

I have a question is how can Internet Explorer can only access one website address. I have a computer at my company which is open for public, i just want my customers to browes my company website (www.sportcarmotion.com) only. Can anyone tell me how to do the setup at Windows XP Professonial? Thank you
 

A:Access only one website @ Internet Explorer

IE > Tools > Internet Options > Content > Content Advisor

Enable Content Advisor and set a password. Then go to the Approved Sites tab.
 

Read other 2 answers
RELEVANCY SCORE 54.4

Hi. I have a Dell Dimension Desktop using Windows XP. My computer is great but lately when I am on an internet site with a lot of information (ex. a cruise line website), my computer freezes. I have to press control-alt-delete to shut everything down and start all over again. THis has happened mutliple times in the past few days. Any ideas? Help, please. THanks so much in advance for whomever responds!
J.A.

A:Internet explorer website freeze

Download firefox by mozilla then ask geekgirl for the fix for ie 6.

Read other 1 answers
RELEVANCY SCORE 54.4

My operating system for all computers is Windows XP. I have tryed accessing MSN.com on 4 computers and none of them can access the website. Internet Explorer trys to connect for about 2 to 3 minutes then the page comes up "Internet Explorer cannot display website". I can by pass the URL with search engines or Favorites and get to websites, except for MSN.com. Any ideal what would cause this. I have not added or changed anything since this start happening about 4 days ago.
 

A:Internet Explorer cannot display MSN website

Read other 7 answers
RELEVANCY SCORE 54.4

I am trying to open this website https://www.novakhomes.in/ in Chrome but it can't open. I am getting error your connection is not secure.

The connection to https://www.novakhomes.in/ was interrupted while the page was loading.

Read other answers
RELEVANCY SCORE 54.4

i've looked all over the net and i can't seem to find the answer to why my internet explorer won't open www.ezboard.com. I have a problem with shdoclc.dll i believe. Whenever i go to ezboard it says "cant find server." thats the only page that i've had trouble with. I know the problem isn't with ezboard though because i can get on the site on my college campus computers. My computer downstairs and this computer both won't let me access any sites on ezboard. I use Windows XP SP1. HELP ME PLEASE! I've tried hp recovery to see if that works and it didn't. i can't delete internet explorer either. there isn't the option on the add/remove programs list to delete IE.

here's my hijack log.

Logfile of HijackThis v1.98.2
Scan saved at 11:44:54 PM, on 11/30/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
c:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Softex\OmniPass\Omniserv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Softex\OmniPass\OPXPApp.exe
C:\WINDOWS\Explorer.EXE
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
C:\WINDOWS\System32\hphmon05.exe
C:\HP\KBD\KBD.EXE
C:\Pr... Read more

A:Internet Explorer Won't open 1 website.

Your log is actually clean. Here's a couple tools to try, let me know if they work in resolving your problem.

Please download Ad-aware SE and install it if you don't have it already. Make sure it's the newest version and check for any updates before running it. Go to this site to get the plug-in for fixing VX2 variants. To run this tool, go into Ad-aware->Add-ons and select VX2 Cleaner. Then click Run Tool and OK to start it. If it's clean, it will say Status System Clean. Otherwise, you will have to click on the Clean button to remove the VX2 infection. Also make sure to customize the settings in Ad-aware for better scan results. Run the scan and fix everything that it finds.

Download WinsockFix and unzip it. Then double-click on it to run it.

Read other 11 answers
RELEVANCY SCORE 54.4

I was at my friend's house and connected his ethernet cable to my laptop. I checked my email and downloaded a document file and along came a scareware? I'm not really sure how a virus or scareware came into my laptop. It was a fake antispyware soft program. I used Superantispyware and another Mareware removal program to try and delete the virus/scareware. I think these two program did the job, but now my Internet Explorer won't work. I think it is something I did with these two programs, but I'm not sure. This is my hijackthis log below, can anyone please help me solve this problem? Thank you.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:01:49 PM, on 10/12/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16711)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\PccGuide.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Dell\MediaDirect\PCMService.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\WLTRAY.EXE
C:\Program Files\DellTPad\Apoint.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\AIM\aim.exe
C:\Windows\ehome\ehtray.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Pr... Read more

A:Internet Explorer Does Not Show Any Website

Read other 9 answers
RELEVANCY SCORE 54.4

Hello,

I've pasted my log below. Can you please review and let me know if you see any problems? I'm unable to connect to any websites through IE7.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:16:27, on 1/23/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17093)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Symantec AntiVirus\Smc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\spoolsv.exe
c:\drivers\audio\r213367\stacsv.exe
C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostControlService.exe
C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostStorageService.exe
C:\WINDOWS\System32\SCardSvr.exe
C:\WINDOWS\system32&... Read more

A:Internet Explorer 7 won't connect to any website...

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

Read other 3 answers
RELEVANCY SCORE 54.4

Hello everyone,

Recently i have purchased a new web design for my web hosting company website, the website template was ok at the start but after i customised it everything went pearshaped, i use the built-in HTML editor in cPanel which is a web hosting control panel to edit my website viewing it from Mozilla Firefox, everything looks ok and the website was getting on great but when i went to view my website on Internet explorer everything looked messed up the text was everywhere the images where misplaced, so i though this is just my PC playing up again so i asked my friend who has both IE7 & IE8 Beta, it was roughly the same, i don't no what to do anymore. Any ideas how i can fix this?

Thanks
 

Read other answers
RELEVANCY SCORE 54.4

Hello,

Recently my internet explorer 7 started launching itself and go to unknown websites : its not a normal launch since its only visible at the task manager procces page and the websites didnt show in the history file.
As I have experiance using my PC I begun doing everything I know.
After Having my computer scanned with many anti malware/spyware proggrams including - Malwarebytes,RogueRemover,Kaspersky,Avg and few more. I failed to find what was causing this and why there isnt any history records of this.
Doing some more research I found a program to view the contents of the explorers history file (IEHV) what I found is that the explorer goes to this site :

tibia-inject.com/ping.php?id=68085&conf=uwp33&infid=1375893814&infname=lol (DONT CLICK IT!!!!!!!!!)

So far I have failed to remove this but I suppose its some sort of keylogger for the game tibia. I have zemana Antilogger but it doesnt catch this 1.
All of my attempts to remove it or finding information on the web on how to remove it have not been succesfull all I found are known rogue program sites so I obviously avoided them in order to not get anything even worse.

If anyone have encountered a similar problem or can refer me to a topic on how to remove this horribly nasty infection and willing to share it here please do.

Thanks

A:Internet explorer keeps going to keloggers website

Please reboot the computerOpen MBAM and click Update tab, select Check for Updates,when doneclick Scanner tab,select FULL scan After scan click Remove Selected, Post new scan log for review

Read other 1 answers
RELEVANCY SCORE 54.4

I am trying to open this website https://www.modiind.com/ in Internet Explorer, but it can't open. I am getting error your connection is not secure. The connection to https://www.modiind.com/ was interrupted while the page was loading.

Read other answers
RELEVANCY SCORE 54.4

When I type in a url or click search results, IE takes me to different site. My computer did have a virus and malware removed recently. Malwarebytes' Anti-Malware finds nothing - SuperAntiSpyware finds nothing. I had avg at the time all this started happening. I have Mcafee on her now and it finds nothing.
I've tried to follow some of the advise to similar posts but I still have a problem.
Thanks-

This is my computer info..
Tech Support Guy System Info Utility version 1.0.0.1
OS Version: Microsoft Windows XP Professional, Service Pack 3, 32 bit
Processor: Intel(R) Pentium(R) D CPU 2.80GHz, x86 Family 15 Model 6 Stepping 5
Processor Count: 2
RAM: 2013 Mb
Graphics Card: ATI Radeon Xpress 1100, 128 Mb
Hard Drives: C: Total - 152539 MB, Free - 128685 MB;
Motherboard: Dell Inc. , 0CU395, , ..CN7082174SC1S6.
Antivirus: McAfee Anti-Virus and Anti-Spyware, Updated: Yes, On-Demand Scanner: Disabled
 

A:Internet Explorer redirects to different site

Read other 7 answers
RELEVANCY SCORE 54.4

Hello,

I apparently have either a virus or piece of spyware that is redirecting my internet searches. When I click on a link in Google, I am often, although not always, redirected to various sites. Typically, these sites are ad/marketing sites. I currently use Symantec Endpoint, which has not detected any issues, as well as Spybot Search and Destroy. Is there anyway to find and remove this spyware without simply resinstalling windows?

Thank you
 

A:Internet Explorer 8 Automatically Redirects

Read other 9 answers
RELEVANCY SCORE 54.4

Hello,
My internet explorer search engines redirects my searches. Now I have run Norton and every spyware killer I can get my hands on and still nothing helps. I am including my hijack log with hopes someone can help. Thanks Ron

Logfile of HijackThis v1.99.1
Scan saved at 10:14:31 PM, on 6/7/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16441)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb04.exe
C:\WINDOWS\system32\hphmon03.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\dllhost.exe
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\WINDOWS\System32\vssvc.exe
C:\WINDO... Read more

A:my internet explorer redirects my searches

Welcome to TSG

You may want to print out these instructions for reference, since you will have to restart your computer during the fix.

Please download FixWareout from one of these sites:
http://downloads.subratam.org/Fixwareout.exe
http://www.bleepingcomputer.com/files/lonny/Fixwareout.exe

Save it to your desktop and run it. Click Next, then Install, make sure "Run fixit" is checked and click Finish.
The fix will begin; follow the prompts.
You will be asked to reboot your computer; please do so.
Your system may take longer than usual to load; this is normal.
Once the desktop loads Save the text that will open (report.txt) to your desktop.
1) Go to Start > Control Panel >Network Connections. Right click your default connection, usually Local Area Connection or Dial-up Connection if you are using Dial-up, and left click on Properties.
* Make a note of the settings before you change them just in case you need to put them back how they were.
Double-click on the Internet Protocol (TCP/IP) item and select the radio button that says Obtain DNS servers automatically. Click OK twice.

2) Go to Start > Run, enter CMD and click OK.
At the Dos Prompt Screen, type in cd\ and then press <ENTER>.
Now type in ipconfig /flushdns and then press <ENTER>. (notice the space after ipconfig)
Close the command prompt window.

In your next reply, please include a fresh Hijackthis log and report.txt. Thanks
 

Read other 3 answers
RELEVANCY SCORE 54.4

I originally had a probelm wheer all my files were hidden and my internet explorer was being redirected. After running malware bytes and an "unhide" program i now can see all my files again and everything works exceptthat my internet explorer still gets hijacked and redirected to ad sites and "Hapilli". Below are the log files from hijack this and dds. Can anyone give me specific software to run to remove this problem. Thank you very much.

Hijack log:
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:45:41 AM, on 5/2/2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal
Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\Panasonic\Panasonic-DMS\Port Controller\Mfpscdl.exe
C:\Program Files\Wave Systems Corp\Trusted Drive Manager\TdmNotify.exe
C:\Program Files\APC\APC PowerChute Personal Edition\apcsystray.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\MarkThompson7\Desktop\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Softwar... Read more

Read other answers
RELEVANCY SCORE 54.4

My Internet Explorer will Jump or Redirect to a random page when I click on a link.

I've run different recommended programs, such as Windows Defender, Hijack This, and KillBox.

None worked and I'll post the Hijack This log since you guys know what you are doing.


Logfile of HijackThis v1.99.1
Scan saved at 3:17:45 PM, on 4/3/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\WINDOWS\system32\DVDRAMSV.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
c:\TOSHIBA\IVP\swupdate\swupdtmr.exe
C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe
C:\WINDOWS\system32\TODDSrv.exe... Read more

A:Internet Explorer Redirects or Jumps

Hi and welcome to the Security Forum.

Apologies for any delay in replying, but we have been rather busy lately, and, of course, all our helpers are volunteers.

You may wish to Subscribe to this thread (Thread Tools > Subscribe to this thread) so that you are notified when you receive a reply.

Please read these instructions carefully and then print out or copy this page to Notepad in order to assist you when carrying out the fix. You should not have any open browsers or live internet connections when you are following the procedures below.


You may want to print out these instructions for reference, since you will have to restart your computer during the fix.

Please download FixWareout or use this alternate location.


Save it to your desktop and run it. Click Next, then Install, make sure "Run fixit" is checked and click Finish.
The fix will begin; follow the prompts. You will be asked to reboot your computer; please do so. Your system may take longer than usual to load; this is normal.

When your system reboots, follow the prompts. Afterwards, HijackThis will launch (if it doesn't, please launch it manually). Please click Scan, and check the following items:

O17 - HKLM\System\CCS\Services\Tcpip\..\{0D81659D-37A2-43B7-BA16-1642271F4E69}: NameServer = 85.255.115.34,85.255.112.63
O17 - HKLM\System\CCS\Services\Tcpip\..\{2661326C-9A36-4329-9EA9-F5B2F81C02ED}: NameServer = 85.255.115.34,85.255.112.63
O17 - HKLM\System\CCS\Services\Tcpip\..... Read more

Read other 2 answers
RELEVANCY SCORE 54.4

I have had this problem for awhile now, I have no clue where it came from although I do know the google redirects started happening after I got hit with one of those fake antivirus programs (I removed it the trojan).

Internet Explorer has 2 processes running in my task manager and sometimes they can take up to 60% of my CPU, they also open up pages sometimes ads lately just Google pages. It's extremely frustrating especially when I'm playing a game and it starts lagging up because my CPU is being worked so much.

Any and all help will be GREATLY appreciated.

A:Redirects and Internet Explorer Opening on its own

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

Read other 3 answers
RELEVANCY SCORE 54.4

I am almost sure i have a virus but i have scanned with malwarebites antimalware and found nothing. i scanned twice and it said no infected files but everytime i go google something and click on a link it redirects me to a site and sometimes my avg pops up and says found infected file to link .......so yeah guys i really need help here is my hijackthis log
 

A:Firefox/Internet Explorer redirects

Read other 7 answers
RELEVANCY SCORE 54.4

Experiencing an issue with Internet explorer where it redirects the search from the intended website. Tried to use Malwarebytes anti-malware and Mcafee Stinger and it found and deleted some viruses. When I logged on to Internet Explorer, the redirecting to other websites was still happening.
 
This is from the Malwarebytes log:
Files Detected: 2
C:\Users\sdasi310\AppData\Local\Temp\tmph5609006633011116378.tmp (Exploit.Drop) -> Quarantined and deleted successfully.
C:\Users\sdasi310\AppData\Local\Temp\.exe (Trojan.Agent) -> Quarantined and deleted successfully.
 
DDS txt ouput below:                
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64 NETWORK
Internet Explorer: 10.0.9200.16720  BrowserJavaVersion: 1.6.0_18
Run by sdasi310 at 20:00:57 on 2013-10-28
Microsoft Windows 7 Enterprise   6.1.7601.1.1252.1.1033.18.3933.3157 [GMT -4:00]
.
AV: McAfee VirusScan Enterprise *Disabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: McAfee VirusScan Enterprise Antispyware Module *Disabled/Updated* {3D54B793-665E-3129-9103-206115370C8A}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchos... Read more

A:Internet Explorer redirects to other websites

Hello noviceuser I would like to welcome you to the Malware Removal section of the forum.Around here they call me Gringo and I will be glad to help you with your malware problems.Very Important --> Please read this post completely, I have spent my time to put together somethings for you to keep in mind while I am helping you to make things go easier, faster and smoother for both of us!Please do not run any tools unless instructed to do so.We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the sam... Read more

Read other 14 answers
RELEVANCY SCORE 54.4

Hello,

I am using Internet Explorer 8 on Windows XP Professional SP3, and am having an issue with redirects and pop-ups when using Internet Explorer. I have run scans with BitDefender 2010, Ad-Aware and Malwarebytes Anti-Malware that have not turned up anything. I am attaching a HijackThis log to this thread. Any help will be greatly appreciated!
 

A:Internet Explorer Browser Redirects

Read other 16 answers
RELEVANCY SCORE 54.4

My internet explorer 6 is messed up. When I go to a website I have to hit stop before the webpage is done loading. If I dont it will redirect me to a website Ive never visited. It also sets that website as my homepage in my internet options. No matter how many times I change my homepage it always happens. I dont understand what is going on. If someone could help me thanks.
 

A:Internet Explorer redirects without me clicking anything

You need to download a good Spyware and Trojan Removal program.

Spybot Search and Destroy:
http://www.safer-networking.org/index.php?page=spybotsda

SpySweeper:
http://www.webroot.com/wb/products/spysweeper/index.php
This will also protect your home page from being hijacked.

Ad-Aware:
http://www.lavasoft.de/

With any of the above three programs, just like with Anti-Virus software, should have the latest updates installed before doing a scan.

CWShredder:
http://www.spywareinfo.com/downloads/tools/CWShredder.exe

KazaaBeGone
http://www.spywareinfo.com/~merijn/files/kazaabegone.zip

Programs that can help prevent getting infected:

Spyware Blaster
http://www.javacoolsoftware.com/spywareblaster.html

Spyware Guard
http://www.wilderssecurity.net/spywareguard.html
 

Read other 2 answers
RELEVANCY SCORE 54.4

Internet Explorer randomly redirects from google searches I also installed Google Chrome and that does the same thing, so i uninstalled it.
I have Avast antivirus installed and have run a full scan, there was a file picked up which i deleted. (sorry cant remember the filename)
I also have Spy Sweeper installed and having run a scan with that it only picked up a load of adware cookies.
Anyway problem still there. Any ideas what i can try to fix this annoying problem ?

thanks
Neil

PS windows XP 32bit installation

Read other answers
RELEVANCY SCORE 54.4

Yesterday on my Windows XP computer, I got infected with XP Security 2012 Antivirus. I removed it (I think) by running FixNCR.reg, RKill and Malware Bytes as described here.Today when I launch IE, about 20 seconds after the homepage comes up, pop-ups browser windows start appearing that are going to various shady looking sites with alert boxes, etc. Usually about this time, the computer becomes very very sluggish. Checking Task Manager, the CPU is up to 100% and the process that is getting it up that high is svchost. If I end the task, then the computer becomes responsive again (i.e. CPU goes down) and the popups I believe even stop appearing. It appears the popups do not show up when using Firefox.Following instructions in this Bleeping Computer forum post, I ran OTL with the Custom Scan options. Following the instructions in this forum post, I ran DDS. Below I'm pasting the results of DDS -- maybe a rootkit infection? And I'm not sure if I can attach files here, so am posting links to my other results. Thank you in advance.http://allben.net/misc/scan/attach.txthttp://allben.net/misc/scan/dds.txthttp://allben.net/misc/scan/Extras.txthttp://allben.net/misc/scan/OTL.txt.DDS (Ver_2011-06-23.01) - NTFSx86 Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_23Run by jim at 16:01:43 on 2011-07-27Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1023.552 [GMT -7:00].AV: ESET NOD32 Antivirus 3.0 *Enabled/Updated* {E5E70D32-0101-4F12-8FB0-D96ACA4F... Read more

A:Internet Explorer Redirects to Ad sites and 100% CPU

Good evening. Download aswMBR.exe from here and save it to your Desktop. Double click the tool to run it. Click the Scan button to, well, start the scan - obvious really! Once the scan reports "Scan finished successfully", which takes less than a minute on my system, click Save log. On my system it offers to save it to the Desktop, which may or may not be it's default behaviour, but it's as handy a place as any. You'll also see a file called MBR.dat appear as well - this is a backup that it created, just in case it's needed. Keep it handy for now.I'd like the contents of aswMBR.txt in your next reply, if you'd be so kind.

Read other 9 answers
RELEVANCY SCORE 54

Hi,

I recently made a website using Microsoft Publisher and then I edited it with a 30-day trial of Dreamweaver....I've put it on the web...it seems to be working great with firefox but on internet explorer its slow, images take a very long time to load, the page is off center, etc., here's the link to the website...thanks for any help!

http://www.hep.upenn.edu/Quarknet/summer2008/index.htm

A:My Website Works In Firefox But Not Internet Explorer.

Hmm, if you're seriously interested in creating websites you're probably better off learning HTML, CSS (&Possibly Javascript)... Using publisher is probably not the best of ideas, and i've never been impressed by dreamweaver.

If you're interested in learning HTML then i suggest the tutorials here: www.w3schools.com which can guide you through creating w3 standard websites...

As for the problem i see no reason that it should be lagging on one browser and not on the other. And your images are relatively small so i really don't see the problem.

Cheers,
Jamey

Read other 2 answers
RELEVANCY SCORE 54

End users access a website and normally after they answer security questions for the website they can check "remember this computer" and they will not be prompted to answer them again. Since changing to Windows 10, when the end user goes to that
website, even though they check the "remember this computer" option, they are prompted every time to answer security questions. The vendor said that it is nothing on their site. Is there a setting on Windows 10 or IE 11 that is doing this?

Read other answers
RELEVANCY SCORE 54

I dont know why, but every now and then I get this message when I try to access the website I look after.
It says OOPS! Internet explorer could not find (the web address)

I contacted my ISP and the web host when it first happened, and both said they had no problem with it. My webhost gave me some sites, such as proxy servers to try, and sure enough the website was up. Just I couldnt access it.
It drives me crazy. I cant go in and update the site as it Internet explorer for some reason doesnt find it.
Yet in a day or so, it usually comes right.
I have cleared the cache, the temporary internet files, deleted the cookies and the browser history. I have turned off Norton and none of that made any difference.
I ensured ssl 2 and ssl3 were checked.
It only does it with the website I am monitoring.

Any ideas please??

A:OOPS! Internet Explorer could not find my website

I Just fixed it, I saw this answer on another site

Go into IE Tools, click internet options, click advanced, click on Restore advanced settings and also on reset.
You then have to close IE and open it again.
when the Welcome to IE 8 box opens, I clicked cancel and did not choose any of its options. Now I can access it again. YAY.

Hope this helps someone else.

Read other 1 answers
RELEVANCY SCORE 54

Hi,
Please would anyone be able to help? - I have been trying for a while to get on to here and some other websites but some sort of virus is stopping me.

I am not very good with computers so please bear with me.

I keep getting the message: Internet Explorer Warning - visiting this web site may harm your computer!
every time I go to any website. I finally managed to get into this site for help but have been unable to get into hotmail for example to get at my e-mails and many other websites.

Below is Hijack this log

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:43:54, on 15/04/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Program Files\Home Cinema\PowerCinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\... Read more

A:Please help - every website I go to says Internet explorer warning - desperate

This can now be closed please - am recieving help.
 

Read other 1 answers