Over 1 million tech questions and answers.

One of my urls is redirected to several games and competition websites

Q: One of my urls is redirected to several games and competition websites

This is something that regularly seems to happen, yesterday for the second time.  The first time it disappeared just by a "SuperAntispyware Free" scan, but this time it didn't go away with this program.  I found Combofix.exe on the internet, but only now read you shouldn't use this without suppervision.  The installation went without problems and it run for about one hour, without change in the popup.  I closed the program without problems again, but as the redirect on my site hasn't disppeared (Combofix wasn't finished yet), I come to this forum for further help.
 
In case I really need a scan with Combofix, please can somebody tell me what to do further?  The problem is thus that the program doesn't show any progress after the blue popup telling it is scanning the computer system and that it can take 10 minutes or the double in case of heavy infections.  I thought an hour is too much and then, the program seemed never to finish .
 
Please is Combofix the best program to get the redirect removed or do I need to use something else?
 
What I further to know is if you can avoid these redirects by protecting your site with Norton or another antivirus?
 
And at last, doesn't the inbuilt antivirus of a browser (when it is 'on') not protect against redirects?

RELEVANCY SCORE 200
Preferred Solution: One of my urls is redirected to several games and competition websites

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

A: One of my urls is redirected to several games and competition websites

Hello, so you do NOT have a CF log?What browser are you using?The infection could have come with something you installed, in that event the AV ignored it s you said yes to the install.Let's do all these and see what we get.Please download MiniToolBox, save it to your desktop and run it.Checkmark the following checkboxes:Flush DNSReport IE Proxy SettingsReset IE Proxy SettingsReport FF Proxy SettingsReset FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Users, Partitions and Memory size.Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run.Note: When using "Reset FF Proxy Settings" option Firefox should be closed.Download TDSSKiller and save it to your desktop.Extract (unzip) its contents to your desktop.Open the TDSSKiller folder and doubleclick on TDSSKiller.exe to run the application, then on Start Scan.If an infected file is detected, the default action will be Cure, click on Continue.If a suspicious file is detected, the default action will be Skip, click on Continue.It may ask you to reboot the computer to complete the process. Click on Reboot Now.If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.If a reboot is required, the report can also be found in your root directory (usually C:\ folder) in the form of TDSSKiller_xxxx_log.txt. Please copy and paste the contents of that file here....ADW CleanerPlease download AdwCleaner by Xplode and save to your Desktop.Double click on AdwCleaner.exe to run the toolClick on the Scan button.AdwCleaner will begin to scan your computer like it did before.After the scan has finished...<-insert any special instructions here for what to uncheck OR remove this line if there are none->This time click on the Clean button.Press OK when asked to close all programs and follow the onscreen prompts.Press OK again to allow AdwCleaner to restart the computer and complete the removal process.After rebooting, a logfile report (AdwCleaner[S#].txt) will open automatically (where the largest value of # represents the most recent report).Copy and paste the contents of that logfile in your next reply.A copy of that logfile will also be saved in the C:\AdwCleaner folder.... Please download Junkware Removal Tool to your desktop.Shut down your protection software now to avoid potential conflicts.Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".The tool will open and start scanning your system.Please be patient as this can take a while to complete depending on your system's specifications.On completion, a log (JRT.txt) is saved to your desktop and will automatically open.Post the contents of JRT.txt into your next message.....Last run ESET.Hold down Control and click on this link to open ESET OnlineScan in a new window.Click the button.For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)Click on esetsmartinstaller_enu.exe to download the ESET Smart Installer. Save it to your desktop.Double click on the icon on your desktop.Check "YES, I accept the Terms of Use."Click the Start button.Accept any security warnings from your browser.Under scan settings, check "Scan Archives" and "Remove found threats" Click Advanced settings and select the following:Scan potentially unwanted applicationsScan for potentially unsafe applicationsEnable Anti-Stealth technologyESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.When the scan completes, click List ThreatsClick Export, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.Click the Back button.Click the Finish button.NOTE:Sometimes if ESET finds no infections it will not create a log.

Read other 16 answers
RELEVANCY SCORE 84

Hi,
About 3 weeks ago, my PC got a virus (Win. 32) and it also redirects some of the urls i go to. I've removed the Win.32 virus already with MalwareBytes'. Tazinga and other websites have appeared during google searches and when I try my other favorite sites. I use AT&T Yahoo to browse, but I have Internet Explorer. I've already had MalwareBytes Anti-Malware for about 5 months now and I have avast antivirus. Please help cause I can't fully browse the internet with this virus.

Thanks,
Umichmadness
 

A:Some Urls are redirected to Tazinga.com and other websites (pop-ups also) plz help

Read other 11 answers
RELEVANCY SCORE 84

Hi,
About 3 weeks ago, my PC got a virus (Win. 32) and it also redirects some of the urls i go to. I've removed the Win.32 virus already with MalwareBytes'. Tazinga and other websites have appeared during google searches and when I try my other favorite sites. I use AT&T Yahoo to browse, but I have Internet Explorer. I've already had MalwareBytes Anti-Malware for about 5 months now and I have avast antivirus. Please help cause I can't fully browse the internet with this virus.

Thanks,
Umichmadness

A:Some Urls are redirected to Tazinga.com and other websites (pop-ups also) plz help

Hello and welcome to TSF.

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Read other 1 answers
RELEVANCY SCORE 60.8

when i open a site from google i am often redirected to another web site (often promotional).

sometimes i can [back] to my google results and click again to get desired site. other times i cannot return to google and must close IE and begin again.

i've resorted to copy/paste url's to bypass redirects.

my pc is free of popups and performance is good.

any suggestions?

thanks
jeri lynn

A:being redirected to other URLs ...

Welcome to TSF.

It sounds like your computer is infected.

To get help with malware removal:

Please follow the 5 steps here: http://www.techsupportforum.com/secu...oval-help.html

Post the logs here: http://www.techsupportforum.com/secu...this-log-help/

Read other 1 answers
RELEVANCY SCORE 60

Hello, My computer has started redirecting my links to other sites when I click on them. Often a new link just starts up on its own.I've run Spybot SD, adaware, Norton Antivirus and others and the problem persists.I hoping you all can help.Below is the DDS log and hijackthis log: I hope this helps, and thanks for any help.DDS log:DDS (Ver_10-03-17.01) - NTFSx86 Run by boss at 20:30:00.72 on Sun 07/11/2010Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_20Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1270.589 [GMT -5:00]============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcssvchost.exesvchost.exeC:\WINDOWS\system32\LEXBCES.EXEC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\LEXPPS.EXEsvchost.exeC:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exeC:\Program Files\NavNT\defwatch.exeC:\WINDOWS\eHome\ehRecvr.exeC:\WINDOWS\eHome\ehSched.exeC:\Program Files\Common Files\Intuit\Update Service\IntuitUpdateService.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Java\jre6\bin\jqs.exeC:\Program Files\NavNT\rtvscan.exesvchost.exeC:\WINDOWS\system32\svchost.exe -k imgsvcC:\WINDOWS\ehome\ehtray.e... Read more

A:New tabs and URLs redirected

Hello, sanfroid.My name is aommaster and I will be helping you with your log.I apologize for the delay in response we get overwhelmed at times but we are trying our best to keep up.If you have since resolved the original problem you were having, I would appreciate you letting us know. If not please perform the following below so I can have a look at the current condition of your machine.ThanksShould you still require assistance, please take note of the points below:Please track this topic by either adding it to your favourites or clicking the Options button at the top of this thread and then Track this topic.Please disable word-wrap before posting logs. This can be done by clicking Format and un-ticking the word-wrap feature in notepad. The logs that you post should be copied and pasted directly into the reply. Only attach them if requested or if they do not fit into the post.If you do not reply within 5 days, I will have to close your topic. Should you not be able to meet this, please notify me so that I will leave the topic open.Please do not install, update, or run any programs for the duration of the fix.If you do not understand the instructions I provide, please don't hesitate to ask. That's what I'm here for Please continue to reply to this topic until I give you the all clean. Just because there are no symptoms of infection doesn't mean that the computer is clean.If you are running Vista, please run all the fixes as an administrator. This is done by ri... Read more

Read other 3 answers
RELEVANCY SCORE 60

Clicking on Google URLs are redirected to incorrect site or another search engine. If I search again, the second time I click on the Google URL, I'm taken to the correct web page.

A:Google URLs Redirected

Hello.looks like malware,I will move this to the Am I infected forum from XP.Please run these next. If you have Spybot installed temporarily disable it.Next run ATF:Note: On Vista, "Windows Temp" is disabled. To empty "Windows Temp" ATF-Cleaner must be "Run as an Administrator".Please download ATF Cleaner by Atribune & save it to your desktop.Double-click ATF-Cleaner.exe to run the program.Under Main "Select Files to Delete" choose: Select All.Click the Empty Selected button.If you use Firefox browser click Firefox at the top and choose: Select AllClick the Empty Selected button.
If you would like to keep your saved passwords, please click No at the prompt.If you use Opera browser click Opera at the top and choose: Select AllClick the Empty Selected button.
If you would like to keep your saved passwords, please click No at the prompt.Click Exit on the Main menu to close the program.Next run MBAM (MalwareBytes):Please download Malwarebytes Anti-Malware (v1.45) and save it to your desktop.alternate download link 1alternate download link 2MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any change... Read more

Read other 8 answers
RELEVANCY SCORE 60

My Windows 7 laptop is infected with a virus/malware that redirects URLs entered in the browser. I immediately ran malware bytes and it did remove few spurious items. However the redirection still happens sporadically. Here are the logs. (I am also enclosing the latest malware bytes log). Please guide me to clean this out completely.

Hijackthis
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 3:30:16 AM, on 1/21/2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16700)
Boot mode: Normal
Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\DellTPad\Apoint.exe
C:\Program Files\IDT\WDM\sttray.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Dell\DW WLAN Card\WLTRAY.EXE
C:\Program Files\Dell\Dell ControlPoint\Dell.ControlPoint.exe
C:\Program Files\Dell\Dell ControlPoint\Connection Manager\Dell.UCM.exe
C:\Program Files\Wave Systems Corp\Services Manager\DocMgr\bin\WavXDocMgr.exe
C:\Program Files\Dell\Dell ControlPoint\Security Manager\BcmDeviceAndTaskStatusService.exe
C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe
C:\dell\DBRM\Reminder\DbrmTrayicon.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\LeapFrog\LeapFrog Connect\Monitor.exe
C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
C... Read more

A:URLs Redirected - Tazinga

Read other 15 answers
RELEVANCY SCORE 59.6

I noticed yesterday when I go online using IE8 (XP Pro, Service Pack 3), my homepage (google) won't open because it is being redirected to a non-existent g.msn.com/... blah..google.com .. blah.. page. Note the google URL is imbedded in the "path". All my Favorites and any typed URLs do the same (the same, meaning the desired URL is within the longer g.msn.com address). Yet if I click on my wife's XP username, her IE homepage/favorites/URLs all work fine, which is how I am writing this message (and from where I ran the reports below). In summary, IE is infected under my login, but wife's IE is not infected. Is this a Rootkit problem? Here are the contents of my dds.txt report (I have attached the attach.txt and ark.txt (Root Repeal) reports as well):DDS (Ver_09-12-01.01) - NTFSx86 Run by Kristi at 16:55:42.20 on Sat 12/05/2009Internet Explorer: 8.0.6001.18702Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2022.1198 [GMT -8:00]AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcsC:\WINDOWS\system32\svchost.exe -k WudfServiceGroupsvchost.exesvchost.exeC:\Program Files\AVG\AVG9\avgchsvx.exeC:\Program Files\AVG\AVG9\avgrsx.exeC:\Program Files\AVG\AVG9\avgcsr... Read more

A:ALL IE favorites & typed URLs Redirected to g.msn.com

Hi,My name is Extremeboy (or EB for short), and I will be helping you with your log.We apologize for the delay of response. If you still require assistance we would like to see the current condition of your system so please post a new set of DDS Logs as well as a RootRepeal log and a description of any remaining problems or symptoms you may still have please.If for any reason you did not post a DDS log or RootRepeal log please refer to this page and in step #6 and Step #7 for further instructions on downloading and running DDS & RootRepeal. If you have any problems just let me know in your next reply or simply post a Hijackthis log.For your next reply I would like to see:-The DDS logs---DDS.txt and Attach logs-RootRepeal logs-Description of any remaining problems you may still have.Thanks again and we apologize for the delay.With Regards,Extremeboy

Read other 18 answers
RELEVANCY SCORE 59.6

My Windows Vista computer has a virus that redirects most browser URLs to a Tazinga.com, Blinkx.com and a variety of other sites. Not sure how to remove. When I first got it, my desktop was wiped clean of icons and the fonts and styles of windows looked different. After a couple of days, my desktop is back to normal but still getting redirected in Mozilla and Internet Explorer. Here is my Hijack this Log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:40:50 AM, on 5/29/2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18904)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Windows\System32\WLTRAY.EXE
C:\Program Files\Adobe\Acrobat 8.0\Acrobat\acrotray.exe
C:\Program Files\AVG\AVG8\avgtray.exe
C:\Program Files\Sigmatel\C-Major Audio\WDM\sttray.exe
C:\Program Files\Java\jre1.6.0\bin\jusched.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Java\jre1.6.0\bin\jucheck.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\prevhost.exe
C:\Program Files\Windows Media Player\wmprph.exe
C:\Program Files\Windows Media Player\wmplayer.ex... Read more

A:urls redirected to Tazinga.com, Blinkx.com, etc.

Read other 11 answers
RELEVANCY SCORE 58.8

After a google search, selected URL takes me to sites that don't match the URL. Sites are either search engines or product sites. If I repeat the original search and select the same URL it usually takes me to the correct site.I have also lost sound on video reports from yahoo and other news websites. I still can play DVD movies and get sound.I attempted to run the gmer program. The scan would start but then the computer would reboot on its own before scan was complete.I have attached the Attach.txt.I appreciate your assistance.Here is the DDS.txt:DDS (Ver_10-03-17.01) - NTFSx86 Run by John M Miller at 12:46:53.01 on Thu 04/08/2010Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_07Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2038.745 [GMT -7:00]AV: McAfee VirusScan *On-access scanning enabled* (Updated) {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}FW: McAfee Personal Firewall *enabled* {94894B63-8C7F-4050-BDA4-813CA00DA3E8}============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcsC:\Program Files\Intel\Wireless\Bin\EvtEng.exeC:\Program Files\Intel\Wireless\Bin\S24EvMon.exesvchost.exesvchost.exeC:\WINDOWS\system32\spoolsv.exesvchost.exeC:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exeC:\WINDOWS\system32\DVDRAMSV.exeC:\WINDOWS\eHo... Read more

A:Google URLs redirected to wrong site

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. Please include a clear description of the problems you're having, along with any steps you may have performed so far.Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.Even if you have already provided information about your PC, we need a new log to see what has changed since you originally posted your problem.We need to create an OTL ReportPlease download OTL from one of the following mirrors:This is THE MirrorSave it to your desktop.Double click on the icon on your desktop.Click the "Scan All Users" checkbox.In the custom scan box paste the following:CODEnetsvcsmsconfigsafebootminimalsafebootnetworkactivexdrivers32%systemroot%�... Read more

Read other 8 answers
RELEVANCY SCORE 58.8

I have several long URL links that I have shortened using the free shortening service at Tinyurl.com. About a week ago all the shortened URLs have started redirecting to a Linkbucks URL. Also, when I type tinyurl.com into the browser on this computer and click enter nothing comes up and the page remains blank. Furthermore, this Linkbucks URL to which I am redirected also has an exit pop-up when I try to leave the page.
 
I used the shortened URLs on another computer in the house and the same thing happened.The URL to which it redirects shows as "d1771a74.linkbucks.com/url/"...followed by my original link before it was shortened. I use Google Chrome usually but also have Firefox and IE on my computer. The same redirect happens in Firefox and in IE it shows an error message "page cannot be found".  
 
However, when I tested the links using another IP on a remote VPS they were working fine and there was no redirect. That means it is an issue that starts at the source of the internet connection coming into my house (maybe the IP is infected?). Those were the details about the issue that I am facing.
 
I have Bitdefender anti-virus and Malware Antibytes. I have run system scans through both. MAMB detected a Trojan which I deleted, same with BitD which again I deleted. But the redirect issue still remains.
 
Other than the Tinyurl link redirects there are no major issues but yes the computer has been a bit slow in the last few days and the mouse seems a lit... Read more

A:Tinyurl shortened URLs being redirected to Linkbucks

Welcome aboard   Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2 SecurityCheck may produce some false warning(s), so leave the results reading to me. Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeClick Go and post the result. Download Malwarebytes' Anti-Malware (aka MBAM): http://www.malwarebytes.org/products/malwarebytes_free to your desktop.* Double-click mbam-setup.exe and follow the prompts to install the program.* At the end, be sure a checkmark is placed next to Up... Read more

Read other 13 answers
RELEVANCY SCORE 58

First post here so if I get something wrong, please take it easy on me.A friend's computer is running extremely slow. IE is even worse. URLs he enters or clicks on from a search are being redirected. I caught someone about eZanga before a few of them were redirected.I ran CCleaner and cleaned out temporary files, etc. and fixed registry errors.I tried to run Spybot but gave up and quit after 20 minutes and it had only run about 2,000 tests. So, I tried Ad-aware and got the same results - long time for just a few items checked.That's when I ran DDS and GMER. DDS took about 20 minutes even thought it said it should only take about 3 minutes. The log is posted below. I then ran GMER but it crashed the computer after a few minutes so I am not able to post a log from it.Now, last night he decided to run Spybot and let it run until it needed to. Well, it ran slow, he needed to do something so he sent me a text saying he force quit it (not sure if Ctrl-Alt-Del or just held down the power button on the computer). Now he tried to start up and the computer goes to the screen where you select "Start Normally", "Safe Mode", "Safe Mode with command prompt", etc. He has tried all selections and it keeps coming back to that screen.So, not only does he possibly have a virus that needs to be fixed but he also can't start the computer.Any suggestions are extremely appreciated.Thank you.===========================DDS (Ver_09-12-01.01) - NTFSx86 Ru... Read more

A:CIE Extremely slow / URLs redirected / eZanga ?? / Won't start

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. Please include a clear description of the problems you're having, along with any steps you may have performed so far.Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.Even if you have already provided information about your PC, we need a new log to see what has changed since you originally posted your problem.[We need to create an OTL ReportPlease download OTL from one of the following mirrors:This is THE MirrorSave it to your desktop.Double click on the icon on your desktop.Click the "Scan All Users" checkbox.In the custom scan box paste the following:CODEnetsvcsmsconfigsafebootminimalsafebootnetworkactivexdrivers32%systemroot%&#... Read more

Read other 3 answers
RELEVANCY SCORE 58

I apparently have one or more viruses in my XP computer that is blocking access to anti-virus we sites and is messing with my browser. When I do a search (either Google or Live Search) the results appear but when I click on a hyperlink I am redirected to an ad site that has some relation to the search terms. Worst of all, very often when I type a URL for an antivirus web site in the browser window, it gets redirected as a Google search and I can't connect to the URL, or I get the message "Internet Explorer cannot display the web page." For example, when I enter http://www.bleepingcomputer.com I get the message that "Internet Explorer cannot display the web page." However, when I click on Diagnose the Connection, Windows reports that the internet connection is fine. Most other (non-antivirus) destinations appear to be immune to this redirection - I can connect to them. In order to be able to access HijackThis I had to download the program on another computer (that is not infected) and transfer the program to my computer and run it. Then when I run HijackThis the log is prepared, but when I click on "Upload to TrendMicro" I get the error message in my browser, "Internet Explorer cannot display the web page." So I e-mailed the log to the computer I'm using to post this message and I will attach it from this computer.I have scanned my computer using AVAST and Threatfire, but they have not solved the problem.Thanks for any help you c... Read more

A:Antiviral URLs blocked and Search Results Redirected

Redirect Address:I downloaded fixwareout.exe from files.filefront.com and ran that. I DO NOT RECOMMEND THAT ANYONE ELSE DO THAT BECAUSE IT COULD BE MALWARE. Nonetheless, I did it and it tells you it will reboot the computer and it tells you that when it does it will take a long time to reboot. It does take a long time, and that?s pretty scary. However, it did very termporatily mprove the situation. Following that, when I entered a search term in the Google tool bar for non-virus related subject matter, clicking on one of the results that was produced the browser was directed to that website instead of an redirect ad, as before. However, after a few more uses the old problem returned. Enterin a search for "Electrical and Optical Characterization of Bulk Heterojunction" produces a list of results. If you click on one of the search results the browser is redirected to http://playingsearch.com/search2.php?q=ele...+heterojunctionOther parts of the problem also remain. When www.bleepingcomputer.com/forums is entered in the browser?s URL window, the URL window changes that to:http://www.google.com/search?q=www.bleepin...amp;startPage=1 and when clicking on that link you are re-directed to http://www.strikingoffers.com/search44.php...gcomputer%2EcomWhen a search for ?bleepingcomputer? is entered in the Google toolbar search a link to www.bleepingcomputer.com/forums/, is produced. However, a click on that link is directed to:http://feed.bidsystem.com/a... Read more

Read other 6 answers
RELEVANCY SCORE 58

Hi tech-helpers,

Besides a general slow-down of my computer, I've recently been finding that when I search for something on google and click a URL, it redirects me to some other random site (including 7search.com, parentsask.com, etc). I've run Search and Destroy but it can't seem to find what's wrong. Any help would be greatly appreciated!

The info:

HijackThis
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:19:00 PM, on 9/27/2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Users\Hank Song\AppData\Roaming\Microsoft\Windows\shell.exe
C:\Users\Hank Song\AppData\Roaming\Microsoft\svchost.exe
C:\Users\HANKSO~1\AppData\Local\Temp\dwm.exe
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files (x86)\BisonCam\BisonHK.exe
C:\Program Files (x86)\BisonCam\DeLay.exe
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files (x86)\Hotkey\Hotkey.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Microsoft Office\Office12\WINWORD.EXE
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Users\Hank Song\Desktop\HijackThis.exe
C:\Program Files (x86)\Skype\Toolbars\Share... Read more

A:URLS get redirected to other sites (7Search, etc) + General Slow Down

*bump*
 

Read other 1 answers
RELEVANCY SCORE 57.6

My Firefox and Google Chrome have been opening up strange tabs all by themselves.... some of the websites it trys to open are:

hxxp://www.projectpayday.com/home.cgi

hxxp://www.snap.com/sosearch?query=Business+Report&query2=_QIdlAeqmWQ8Llx0jaIiq4G5QLYwyDQPJosNCx0luwQqTUKb0R2wlUNNzo83uGONz84vqGdrI&source=77df3b7f4d37b2a4d57ab3eb0d06f879&campaign=LinkAds&product=linkads&new=0&spa_key=77df3b7f4d37b2a4d57ab3eb0d06f879&spa_rkl=keylinks&ssvid=585f56e080f2262b8064ad546e1f3b3e&subid=&linkads_site_id=1379136&qpt=_f4BaLjqO49XJzGSFU7xNI7m0abpQ2RASClONPegewRrxsbj-IPw.AMkIu6j&serp=_EAmj3qb6rvwVvaSdGGzf6gLp0WhCalyS381tPWWULtdTAUkkWr7h5vGabhw71HLRl5cLnmcOulSHz50t-ochgFjM7a5A8mjI5554jIaD1nujkj&dfs=7.7&pu=http://www.ibreporttv.com/&ip=70.149.86.207&sid=c66fe62ff757cb0d9f3f513417db91f0&u=cm&mo=2&ctmr=207&cver=22328&cpos=0

hxxp://baregirlshop.net/

hxxp://efficacynow.com/

hxxp://www.cs102175.com/click.php?s=2&k=646395382&pub=14

etc....

I have run MalWare Bytes, I have Symantec AV running, and I have run Spybot SD...all show up clean...please take a look and contact me with suggestions...
DDS (Ver_09-12-01.01) - NTFSx86
Run by mmccloskey at 14:57:19.88 on Wed 12/02/2009
Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_15
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3071.2035 [GMT -5:00]

AV: Symantec Endpoint Protection *On-access scanning enabled* (Updated) {FB06448E-52... Read more

A:FFox AND Chrome are getting redirected to nonsense URLs and blank tabs...

Are any advisors available to help me with this?

Thanks in advance!!

Read other 21 answers
RELEVANCY SCORE 57.2

Hello. I got a fake anti-virus alert yesterday. I didn't click on it but my computer is infected anyway. I ran Superantispyware and Malwarebytes numerous times yesterday and both had results of critical viruses. After the virus removal, the computer seemed normal but I ran Superantispyware and Malwarebytes again and once again showed results of critical point viruses. Due to these viruses, some websites have been opening up blank one minute and then opens normally the next minute. Some websites get redirected to other/random websites. And every few minutes the computer makes a sound (sound you hear when a small window pops up informing you that a anti-virus software has finished scanning for viruses) even though no programs are opened.







.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 6.0.2900.2180 BrowserJavaVersion: 1.6.0_26
Run by sama at 15:38:38 on 2011-11-22
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.1022.285

[GMT -5:00]
.
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\WINDOWS\system32\brsvc01a.exe
C:\WINDOWS\system32\brss01a.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
C:\WINDOWS ... Read more

A:Websites opening up blank/ Keep getting redirected to random websites

Hi,Download the latest version of TDSSKiller from here and save it to your Desktop.Doubleclick on TDSSKiller.exe to run the application, then click on Change parameters.
Check the boxes beside Verify Driver Digital Signature and Detect TDLFS file system, then click OK.
Click the Start Scan button.
If a suspicious object is detected, the default action will be Skip, click on Continue.
If malicious objects are found, they will show in the Scan results and offer three (3) options.Ensure Cure is selected, then click Continue => Reboot now to finish the cleaning process.
Note: If Cure is not available, please choose Skip instead, do not choose Delete unless instructed.A report will be created in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste its contents on your next reply.Download and Install CombofixDownload ComboFix from one of the following locations:Link 1 Link 2 VERY IMPORTANT !!! Save ComboFix.exe to your Desktop *IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here Double click on ComboFix.exe & follow the prompts.Accept the disclaimer and allow to update if it asks

When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in... Read more

Read other 2 answers
RELEVANCY SCORE 50.4

I have been rendered completely dumbfounded by a very recently encountered problem.

I was on facebook earlier tonight when I was told about a terrible film called Birdemic. My friend linked the wikipedia page through a comment. When I clicked it (It was definitely a link to wikipedia), I came across a "Server not found" page and upon closer inspection, instead of saying "http://en.wikipedia.org/wiki/Birdemic:_Shock_and_Terror" it brought me to "http://en.facebook.com/wiki/Birdemic:_Shock_and_Terror", which obviously doesn't exist. I tried going through a google search, which will do the same thing, and through the integrated search engine in Firefox, and everytime it would redirect me to the nonexistent en.facebook.com. Curiously, the Welcome page for wikipedia works, as does the mobile site (by changing it to en.m.wikipedia.org). I tried going to different wikipedia entries as well, but its the same problem. Every time I try to correct it in the URL bar, it will just change back.

If this is a virus, it is the most ridiculously trivial and mundane virus I have ever had, however it would also be the most confusing to me.

If it is not a virus, I have no idea what it could be. I have cleared my history, web cache, cookies, everything. In addition to Firefox, I also tried it in IE, to identical results. AVG scan is currently underway, 82%, no threats found.

Any ideas?

EDIT: For further clarification, this does not happen when I try it wit... Read more

A:All wikipedia URLs redirect to Facebook URLs?

Read other 6 answers
RELEVANCY SCORE 50

The last few days I've been having problems looking at webpages. When I google a topic and click on a site I am redirected to another bogus site. I have to back space 1 to 2 times before I am brought back to google. Once I am back on google I reclick on the site and am able to access it correctly. I updated malwarebytes and super antispy then scanned with both, as well as avast.

Malwarebytes removed 8 maleware.trace, 2 trojan.agent, 1 trojan.agent.gen, 2 trojan.BHO. All of them were files except BHO were registry key.

Avast removed 6 Java:Agent-LC[expl], 2 Win32:downloader-IAQ [trj] and 2 more said action is posted until the next reboot, which I have rebooted my computer and turned it off and on and still hasn't deleted. Avast also did a boot-time scan and found 2 of the java and 2 of the Win32.

.
DDS (Ver_2011-06-12.02) - NTFSx86
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_22
Run by ThiSu at 10:48:24 on 2011-06-22
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.2046.1286 [GMT -6:00]
.
AV: avast! Antivirus *Enabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C... Read more

A:being redirected to other websites

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

Read other 16 answers
RELEVANCY SCORE 50

Having problem using google and yahoo. everything i click on is redirected to a different website than what I intended to go to.

inbeded below is the dds.txt
attached are the ark and attach.txt


DDS (Ver_09-05-14.01) - NTFSx86
Run by Administrator at 13:13:31.81 on Tue 05/19/2009
Internet Explorer: 7.0.5730.11 BrowserJavaVersion: 1.6.0_07
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2046.1418 [GMT -6:00]


============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
C:\Program Files\Common Files\Intuit\Update Service\IntuitUpdateService.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\WINDOWS\system32\nvsvc32.exe
svchost.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\Vongo\VongoService.exe
C:\WINDOWS\system32\mqsvc.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\WINDOWS\system32\mqtgsvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
C:\P... Read more

A:Websites being redirected on IE

Hello and Welcome to the forums!

My name is Gringo and I'll be glad to help you with your computer problems. HijackThis logs can take some time to research, so please be patient with me. I know that you need your computer working as quickly as possible, and I will work hard to help see that it happens.

Before we start: Please be aware that removing Malware is a potentially hazardous undertaking. I will take care not to knowingly suggest courses of action that might damage your computer. However it is impossible for me to foresee all interactions that may happen between the software on your computer and those we'll use to clear you of infection, and I cannot guarantee the safety of your system. It is possible that we might encounter situations where the only recourse is to re-format and re-install your operating system, or to necessitate you taking your computer to a repair shop.

Because of this, I advise you to backup any personal files and folders before you start.

Somethings to remember while we are working together.
1.Please do not run any other tool untill instructed to do so!
2.Please reply to this thread, do not start another!
3.Please tell me about any problems that have occurred during the fix.
4.Please tell me of any other symptoms you may be having as these can help also.
5.Please try as much as possible not to run anything while executing a fix.

If you follow these instructions, everything should go smoothly.

I am going over your logs now an... Read more

Read other 4 answers
RELEVANCY SCORE 50

Hi, I think I have a hijack trojan because I keep getting redirected to websites that have nothing to do with the search result. Also, some websites such as the malwarebytes site wont load as I get an error. Thanks in advance for help. Here are the requested logs.DDS (Ver_10-03-17.01) - NTFSx86 Run by Home at 18:19:26.40 on Thu 04/29/2010Internet Explorer: 7.0.5730.11Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1014.581 [GMT -7:00]AV: ESET Smart Security 4.0 *On-access scanning enabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}FW: ESET Personal firewall *enabled* {E5E70D32-0101-4340-86A3-A7B0F1C8FFE0}============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcsC:\WINDOWS\system32\svchost.exe -k WudfServiceGroupsvchost.exesvchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\Program Files\ESET\ESET Smart Security\egui.exeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exesvchost.exeC:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exeC:\WINDOWS\system32\basfipm.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\Program Files\ESET\ESET Smart Security\ekrn.exeC:\WINDOWS\system32\svchost.exe... Read more

A:Redirected to various websites

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 2 answers
RELEVANCY SCORE 50

I have been having an issue with my computer. When I go to MSN, Google, or any search engine, enter a search term, search, and then try to click on a search result it redirects me to a different site, almost every time. I think I have a virus, but my Norton is not finding any viruses. Please help.

A:Being Redirected To Other Websites

Good evening. Please follow the instructions here, start a new thread and post accordingly. To keep things tidy i'll lock this one.

Read other 1 answers
RELEVANCY SCORE 50

Keep getting redirected to spam sites in Firefox & Chrome.

HJT:
---------
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 4:30:39 PM, on 3/2/2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16722)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\PC Tools Security\pctsGui.exe
C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe
C:\Users\SamsClub\Local Settings\Apps\F.lux\flux.exe
C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe
C:\Program Files (x86)\hp\HP Software Update\hpwuschd2.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Skype\Plugin Manager\skypePM.exe
C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files (x86)\comcasttb\ComcastSpywareScan\ComcastAntiSpy.exe
C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\SamsClub\Downloads\asdv.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.micros... Read more

A:Websites redirected

Read other 16 answers
RELEVANCY SCORE 50

Hello,

This has been an absolute nightmare. Please can someone advise on how to get rid of this program that is re-directing me??

Dave
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:21:37, on 19/06/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\O2\bin\sprtsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\O2\bin\sprtcmd.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Mozilla Firef... Read more

Read other answers
RELEVANCY SCORE 50

Hi,

Basically I keep getting redirected to all kinds of websites - especially when clicking on a link from google. Most times now, I have to go to google and click 3 times or so on the same website before I actually get onto that website. Even when I want to go on wikipedia from google, I will have to try a number of times before I get to it.

I should say, when I do click a link, from the loading bar at the bottom left of Firefox, I see it getting redirected to a number of IPs instead of going straight to the website I want it to.
It is very frustrating.

My DDS is here:
DDS (Ver_09-07-30.01) - NTFSx86
Run by Ben at 18:03:52.30 on 17/10/2009
Internet Explorer: 8.0.6001.18828 BrowserJavaVersion: 1.6.0_15
Microsoft? Windows Vista? Home Premium 6.0.6001.1.1252.44.1033.18.3070.1622 [GMT 1:00]

SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C... Read more

A:Keep getting redirected to other websites

Hi,Sorry for delayed response. Forums have been really busy. If you still need help with this post a fresh dds log, please. Also, follow instructions here to create Rootrepeal log (step 7).

Read other 16 answers
RELEVANCY SCORE 50

Whenever I go to certain websites I keep getting redirected to random websites. I think I have malware/spyware on my PC. I am running Windows 7 with McAffe Security Centre.

Here's the DDS.txt report:

.
DDS (Ver_2011-06-12.02) - NTFSAMD64
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_24
Run by dd at 21:42:21 on 2011-06-14
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.65.1033.18.8106.6016 [GMT 8:00]
.
AV: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {3D54B793-665E-3129-9103-206115370C8A}
FW: McAfee Firewall *Enabled* {BE0ED752-0A0B-3FFF-80EC-B2269063014C}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Program Files (x86)\Sensible Vision\Fast Access\FAService.exe
C:\Windows\system32\svchost.exe -k netsvcs
C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
C:\Windows\system32\svchost.e... Read more

A:Keep getting redirected for some websites

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

Read other 3 answers
RELEVANCY SCORE 50

I keep getting redirected to http://69.50.190.131/?to=dname&from=in while browsing on the internet. None of my antivirus, spyware programs are able to detect why.

Please help me with my inconvenience.

HI JACK THIS LOG:

Logfile of HijackThis v1.99.1
Scan saved at 11:27:10 PM, on 8/17/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Norton Internet Security\ISSVC.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\System32\wdfmgr.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Fi... Read more

A:Websites Being Redirected

Read other 16 answers
RELEVANCY SCORE 50

I'm trying to help out a friend. He uses a computer for buisness and has to search for parts. When you perform a search typical results come up. When you click on one the browser redirects you to another site. I've looked through the msconfig and programs and they look ok. I've run hijack this and don't see anything unusual. He has Mcafee on the system and it runs clean. Any ideas? He tells me that trustkeeper is a valid program and is used for his credit card transactions.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 5:49:59 PM, on 3/28/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
C:\WINDOWS\system32\mfevtps.exe
C:\Program Files\McAfee Online Backup\MOBKbackup.exe
C:\WINDOWS&#... Read more

A:Help my websites keep getting redirected

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you are unable to create a log because your computer cannot start up successfully please provide detailed information about the Windows version you are using: What we in particular need to know is version, edition and if it is a 32bit or a 64bit system. If you are unsure about any of these caracteristics, just let us know and we'll help you figuring it out. Please also tell us if you have your Windows CD/DVD handy.Please include a clear description of the problems you're having, along with any steps you may have performed so far.Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.Even if you have already provided information about your ... Read more

Read other 5 answers
RELEVANCY SCORE 50

Hello,

I have been using google.com and when I click a link I am being redirected to different websites. If I type a link in directly it works fine.
I ran Malwarebytes Anti Malaware and it found HKEY_CLASSES_ROOT\fsharproj I quarantine the item and it continues to come back. I also noticed a word document that keeps appearing on my desktop

I am using IE and Windows XP

This is my latest Malware scan

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 4052

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

6/29/2011 10:41:40 AM
mbam-log-2011-06-29 (10-41-40).txt

Scan type: Quick scan
Objects scanned: 126034
Time elapsed: 9 minute(s), 55 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 1
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CLASSES_ROOT\.fsharproj (Trojan.Tracur) -> Quarantined and deleted successfully.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

A:Websites are being redirected

Welcome aboard Download Security Check from HERE, and save it to your Desktop. * Double-click SecurityCheck.exe * Follow the onscreen instructions inside of the black box. * A Notepad document should open automatically called checkup.txt; please post the contents of that document.===================================================================================Please download Rootkit Unhooker from one of the following links and save it to your desktop.Link 1 (.exe file)Link 2 (zipped file)Link 3 (.rar file)In order to use this tool if you downloaded from either of the second two links, you will need to extract the RKUnhookerLE.exe file using a program capable of extracing ZIP and RAR compressed files. If you don't have an extraction program, you can download, install and use the free 7-zip utility.Double-click on RKUnhookerLE.exe to start the program.
Vista/Windows 7 users right-click and select Run As Administrator.Click the Report tab, then click Scan.Check Drivers, Stealth, and uncheck the rest.Click OK.Wait until it's finished and then go to File > Save Report.Save the report to your Desktop.Copy and paste the contents of the report into your next reply.-- Note: You may get this warning...just ignore it, click OK and continue: "Rootkit Unhooker has detected a parasite inside itself! It is recommended to remove parasite, okay?".

Read other 29 answers
RELEVANCY SCORE 50

like now at times when i go on google and search for something i get results. so when i click one of the links i'd get redirected to a google-analytics website or summin. and honestly, when i go on a website with "adult" content, i get redirected so some other website and its the SAME website for all the websites with "adult" content. what am i to do? heres my log file from hijackthis programEDIT: Moved from Vista to Malware Removal Logs ~ Hamluis.

A:redirected on certain websites?

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.Do not run any other tool untill instructed to do so!In the upper right hand corner of the topic you will see a button called Options. If you click on this in the drop-down menu you can choose Track this topic. By doing this and then choosing Immediate E-Mail notification and then clicking on Proceed you will be advised when we respond to your topic and facilitate the cleaning of your machine.Note** If you are having problems posting the complete log into this thread upload them here http://www.rapidshare.com/ and post the links in this thread We are sorry it has taken so long to get to your problem (this forum is very busy)to help me get an idea of what may have changed I would like a new set of logs please.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.Double click DeFogger to run the tool. The application window will appear Click the Disable button to disable your CD Emulation drivers Click Y... Read more

Read other 3 answers
RELEVANCY SCORE 50

i'm in need of expertise with removing all of the crap from a friends computer. it was completely useless but it has started to come back. i have run a variety of programs and have slowly worked my down to having a few clean scans.

i have run:
malwarebytes
superantispyware
spybot SD
adaware
ccleaner

i have installed a fresh version of Avira and have run that a couple times.

reenabled windows updates b/c it was disabled (because of a virus??) and hadnt been updated for a few months. still working on that.
what is bothering me now is i am getting redirected to websites through google/yahoo search.

also, every now and then i get this:
"to protect computer Data Execution Prevention has closed host process for windows service" (or something like that) the screen flashes the taskbar does some funky looking thing, too.
here's what the computer has:
vista ultimate
comodo firewall
avira antivirus
firefox 3.6

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:22:49 PM, on 2/11/2010
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18248)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
C:\Windows\ehome\ehtray.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Windows\system32\wuauclt.ex... Read more

Read other answers
RELEVANCY SCORE 50

Hello everyone last week I started getting redirected from websites on my laptop but I decided to ignore the problem but tonight it just got worst I can?t open any website at first it starts loading then it redirects me to gostats.com. I google it and it came back as a virus so I decided to run a full virus scan (have Norton), the results showed up a few cookies. I open firefox, type sevenforums.com, goes to the website (I was like woot problem solved) but as soon as the site loads I get redirected again to gostats.com .
Any ideas of how to solve this would be appreciated.

A:Getting redirected from websites...

Take a look at this thread, and the link I posted to. May be some steps in there you could take.

seven forums, problem with Mozilla

Read other 9 answers
RELEVANCY SCORE 50

Hi,Basically, i've ran scans in AVG, webroot spy sweeper, spyware doctor and registry mechanic, and all virus/trojan/spyware/malware that showed were quara/deleted - however, i'm still having a problem. Basically, when I go to google and search for something, too often i'll get redirected. If i'm searching for a sport suppliment website I use, and click on it - i'll get redirected to a sport/health website. If i'm looking for a travel agent, i'll click a link on google and get redirected to another travel agent/holiday website.If i'm looking for malware removal and click on a link on google, i'll get redirected to a 'malware removal' website.Whatever it is, it's very 'smart'.DDS report here (it says at the top windows defender is enabled - when i went to start and clicked on it, a box came up saying that it was disabled, so not sure what is happening there. Anyhow:DDS (Ver_09-07-30.01) - NTFSx86 Run by Ben at 17:22:16.05 on 13/09/2009Internet Explorer: 8.0.6001.18813 BrowserJavaVersion: 1.6.0_13Microsoft? Windows Vista? Home Premium 6.0.6001.1.1252.44.1033.18.3070.1510 [GMT 1:00]SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}============== Running Processes ===============C:\Windows\system32\wininit.exeC:\Windows\system32\lsm.exeC:\Windows\system32\svchost.exe -k DcomLaunchC:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exeC:\Windows\system32\nvvsvc.... Read more

A:Keep getting redirected to many websites

just to say, i restarted my laptop and tried yet again to do a scan with rootrepeal but it still has a problem when (what I think) the scan finishes.Hello enjibenji,We ask that once you have posted your log and are waiting, please DO NOT "bump" your thread or make further replies until it has been responded to by a member of the HJT Team. The reason we ask this or do not respond to your requests is because that would remove you from the active queue that Techs and Staff have access to. The malware staff checks the forum for postings that have 0 replies as this makes it easier for them to identify those who have not been helped. If you post another response, there will be 1 reply. A team member, looking for a new log to work may assume another HJT Team member is already assisting you and not open the thread to respond.That is why I have made an edit to your last post, instead of a reply. Please do not multiple post here, as that only pushes you further down the queue and causes confusion to the staff.Please be patient. It may take a while to get a response but your log will be reviewed and answered as soon as possible.Thank you for understanding.Regards,The weatherman (Moderator)

Read other 3 answers
RELEVANCY SCORE 50

Hi, i'm looking for help as this is driving me crazy.
I wanted to watch a video and it prompted me to download an active x control, stupidly did and my compute started experiencing problems.

It was slow and i couldn't access task manager. I've solved this problem with the help of the forum.
However i'm having bigger problems now. My computer seems generally slow at responding and when i access the internet i get redirected by www.404sorry.com to different sites i don't want to go.

Also iexplorer seems to run in task manager in the background when i don't have an inernet page open. Also my explorer seems to dissapear often ( the bottom bar and background icons) i then have to stop the explorer task and run a new explorer task to get it back.

I need to do work on my computer but this isn't letting me properly. I've ran AVG, windows defender, spyware doctor and AAware to try and solve this but i'm still experiencing these problems.

Any help would be very much appreciated

A:Redirected to websites & pop-ups

Hi, my problems started when i downloaded an activexcontrol to watch a video after it prompted me. My computer stated acting slowly and i couldn't access the task manager however i have fixed this. The main problem is that iexplore is running in the background when i load my computer up taking up alot of memory, this is strange as i don't have an internet page open.

The internet seems slower however i'm getting re-directed to websites and the toolbar sets itself to www404sorry.com and then directs me to other sites such as search sites and advertising sites. I'm not geat on computers but i think it may be adware. Please can i get some help on this.

My Deckards System Scanner log is shown below:
Deckard's System Scanner v20071014.68
Run by Josh on 2008-03-14 19:40:27
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Successfully created a Deckard's System Scanner Restore Point.


-- Last 5 Restore Point(s) --
11: 2008-03-14 19:42:09 UTC - RP550 - Deckard's System Scanner Restore Point
10: 2008-03-14 12:36:14 UTC - RP549 - Windows Defender Checkpoint
9: 2008-03-14 11:52:57 UTC - RP548 - Software Distribution Service 3.0
8: 2008-03-14 11:47:19 UTC - RP547 - Installed Ad-Aware 2007
7: 2008-03-14 11:39:57 UTC - RP546 - Installed Windows Defender


-- First Restore Point --
1: 2008-03-10 10:42:46 UTC - RP540 - Syste... Read more

Read other 10 answers
RELEVANCY SCORE 50

Hey guys, I just came across this forum and wondered if anyone could help me. I have recently been browsing the net on firefox and all of a sudden I would be redirected to either google or some random site. I'm not really sure what's wrong but would appreciate it if someone could help me. I can post logs of Hijackthis if needed or anything else for that matter, just ask. Thanks a lot in advance.

A:Keep getting redirected to different websites, Please Help!

This is what my Hijackthis log fle looks like:Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\csrss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\AVG\AVG9\avgchsvx.exeC:\Program Files\AVG\AVG9\avgrsx.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\AVG\AVG9\avgcsrvx.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\Explorer.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exeC:\WINDOWS\arservice.exeC:\Program Files\AVG\AVG9\avgwdsvc.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\WINDOWS\eHome\ehRecvr.exeC:\WINDOWS\eHome\ehSched.exeC:\Program Files\Java\jre6\bin\jqs.exeC:\Program Files\Common Files\LightScribe\LSSrvc.exeC:\Program Files\AVG\AVG9\avgnsx.exeC:\Program Files\Common Files\Microsof... Read more

Read other 1 answers
RELEVANCY SCORE 50

Since about yesterday every time I do a web search and click a link it redirects me to a different page. I ran my two anti virus software and nothing is coming up that it's infected. Is there someone that can help me solve this issue?

Read other answers
RELEVANCY SCORE 49.6

Hi
 
i just noticed today that when i do a google search and click on a result i am being redirected to completely random and unrelated websites each time.
 
I fear i have picked up a bug of somekind, please help! It is very frustrating not being able to see the website you clicked on despite numerous tries to view the search result.
 
Also after being redirected to some random site my back history is erased so I cannot hit the back button and return to the search results page. One other problem i am having but I am not sure if it is related is ... despite having my browsing history set to save for 30 days, all browsing history is deleted after 24 hours making my job as a researcher ever harder.
 
Thanks!
 
 

A:I am being redirected to random websites

Hello Antygua and Welcome to The Forums!!Around here they call me Gringo and I'll be glad to help you with your malware problems.Very Important --> Please read this post completely, I have spent my time to put together somethings for you to keep in mind while I am helping you to make things go easier, faster and smoother for both of us!Please do not run any tools unless instructed to do so.We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at... Read more

Read other 35 answers
RELEVANCY SCORE 49.6

Hi,I tried running dds and gmer. Everytime I run GMER, my computer crashes...blue screen of death and it automatically reboots. It does start creating a long list but then crashes.I ran Malware, stuff popped up the first time but nothing when I ran it again.. I still have the problem.Below are the DDS log and attachments. Let me know if I can post anything else. Thanks for your help in advance!DDS (Ver_10-03-17.01) - NTFSx86 Run by Annie at 21:05:50.64 on Sun 09/12/2010Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_18Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1014.613 [GMT -4:00]AV: Webroot AntiVirus with Spy Sweeper *On-access scanning enabled* (Updated) {77E10C7F-2CCA-4187-9394-BDBC267AD597}============== Running Processes ===============C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exeC:\WINDOWS\system32\svchost -k DcomLaunchC:\WINDOWS\system32\svchost -k rpcssC:\WINDOWS\System32\svchost.exe -k netsvcsC:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exeC:\WINDOWS\system32\svchost.exe -k NetworkServiceC:\WINDOWS\system32\svchost.exe -k LocalServiceC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\svchost.exe -k LocalServiceC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\Program Files&#... Read more

A:Websites redirected randomly

hi Aleester,Your log is a few days old. If you still need help simply reply back.

Read other 5 answers
RELEVANCY SCORE 49.6

Hello,
 
Many times when i click on a link using either internet explorer or mozilla firefox, i keep being redirected to different/random websites. Sometimes, i also get messages from the random websites that my system is infected and i should call the number listed on the page. So, i scanned my laptop with AVG free anti-virus software as well as with Windows Defender but the result indicates no threats/viruses were found. Can you please help?
 
Laptop
Windows 7 Home Premium Service Pack 1
Processor: Intel ® Pentium ® CPU B950
 

A:Browser keeps being redirected to different websites

Hi adaba, sounds like a hijacker. Please do these.MiniToolBoxPlease download MiniToolBox, save it to your desktop and run it.Checkmark the following checkboxes:Flush DNSReport IE Proxy SettingsReset IE Proxy SettingsReport FF Proxy SettingsReset FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Users, Partitions and Memory size.Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run. Note: When using "Reset FF Proxy Settings" option Firefox should be closed.TDSSKillerDownload TDSSKiller and save it to your desktop.Extract (unzip) its contents to your desktop.Open the TDSSKiller folder and doubleclick on TDSSKiller.exe to run the application, then on Start Scan.If an infected file is detected, the default action will be Cure, click on Continue.If a suspicious file is detected, the default action will be Skip, click on Continue.It may ask you to reboot the computer to complete the process. Click on Reboot Now.If no reboot is required, click on Report. A log file should appear. Please copy and paste the contents of that file here.If a reboot is required, the report can also be found in your root directory (usually C:\ folder) in the form of TDSSKiller_xxxx_log.txt. Please copy and paste the contents of that file here.AdwCleanerPlease download AdwCleaner by Xplode and save to your Desktop.Double click on AdwCleaner.exe to run the tool. ... Read more

Read other 24 answers
RELEVANCY SCORE 49.6

So I recently started having a problem lately when I do a web search on a topic and click on a link in the results I automatically get redirected to a weird website that has absolutely nothing to with what I was searching.

For example, doing a search on spiders I get redirected to sites with the following addresses.
hxxp://mx2.33371.get-search-results.com/jump2/?affiliate=mx2&subid=33371&terms=spiders

hxxp://213.174.148.4/service/?623e94ec6f9ab09b66de4db2ef1a45e0

I am running Windows XP with Avast Anti-Virus. In addition to that I also regularly run Malwarebytes and Supersecretantispyware. When I first started getting redirected to these weird links I scanned with Avast, Malwarebytes, and Supersecretantispyware. After the scans were done NOTHING was detected. I would even restart and rescan and still get no detections. I have even been scanning my PC everyday hoping some update catches what is causing this but still nothing is detected.

Now about an hour ago I was doing another general search and got redirected to some weird site, but this time some malware was detected. Below is my Malwarebytes log.
Files Infected:
C:\Documents and Settings\Tab\Application Data\hotfix.exe (Trojan.Agent.Gen) -> Quarantined and deleted successfully.
C:\Documents and Settings\Tab\Local Settings\Temp\0.752662389950292.exe (Trojan.Dropper) -> Delete on reboot.
Now does anybody have any advice on how I can get this crap off my PC?&... Read more

Read other answers
RELEVANCY SCORE 49.6

I keep getting pop-ups, they slow down my computer, and when i have a webpage open i get redirected to other ad pages.
I ran symantec, ad-aware, and spybot, none of them have been able to fix the problem, but they all say I have some sort of trojan.
How do I fix this?

Logfile of HijackThis v1.99.1
Scan saved at 7:29:38 PM, on 1/12/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\VNC\winvnc.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\winlogon.exe
C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbload.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Dell\Media Experience\PCMService.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\kdx\KHost.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Winamp\winampa.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\... Read more

A:Solved: I keep getting pop ups and redirected to ad websites

Read other 16 answers
RELEVANCY SCORE 49.6

Hello,

I have been re directed to two websites so far, chacha answers or something like that, and another one that my virus software blocks because it is "dangerous". Please advise me what to do.
Thank you!

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:39:52 PM, on 11/25/2010
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18527)
Boot mode: Normal

Running processes:
C:\Windows\vsnp2uvc.exe
C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe
C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe
C:\Program Files (x86)\AIM\aim.exe
C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
C:\Program Files (x86)\Hewlett-Packard\Media\DVD\DVDAgent.exe
C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe
C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe
C:\Program Files (x86)\Hewlett-Packard\Media\TV\TVAgent.exe
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files (x86)\Java\... Read more

A:Help, I keep being redirected to dangerous websites

Please disregard this topic as the problem has been fixed. I request that my thread be closed, thank you.

Read other 2 answers
RELEVANCY SCORE 49.6

A few days ago I got a fake spyware alert on my computer. Windows security essentials popped up a second later saying something bad was going on and said it cleaned it up. it was called Trojan:Win32/FakeSpypro. Then my browser started redirecting after search results going to the wrong websites. If I clicked back to search results and reclicked on the original link it will usually go to the right one on the second try. I tried finding it and removing it to no avail. Probably should have started here instead. There is something in msconfig called padvsysguard that I think I disabled but it's still happening. I have run Malwarebytes which quarrantined Trojan.Vundo and Trojan.FakeAlert but still having the same problem. Tried Ad Aware which found Win32.Adware.VapSup and a redirected hostfile entry. Noticed Microsoft Security essentials also got this a couple of days later TrojanDOwnloader:JS/Renos. At a loss as to what to try next and hoping I didn't make things worse trying to fix it myself. Any help would be greatly appreciated.
Thanks,
Tony

Here's my Hijack this log.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:29:40 PM, on 11/14/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\ibmpmsvc.exe
C:\WINDOWS\system32\Ati2evxx.e... Read more

Read other answers
RELEVANCY SCORE 49.6

I use zonearlarm firewall, Ad-Aware plus antivirus, spybot search & destroy, malwarebites & hijackthis. None of my anti virus or anti malware detect the infection either in normal or safe mode. Originally they did detect in safe mode & the items were deleted but they came back.DDS (Ver_10-03-17.01) - NTFSx86 Run by Johnson at 10:38:43.78 on Sun 20/06/2010Internet Explorer: 8.0.6001.18702Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1919.1245 [GMT 9.5:30]AV: Lavasoft Ad-Watch Live! Anti-Virus *On-access scanning disabled* (Outdated) {A1C4F2E0-7FDE-4917-AFAE-013EFC3EDE33}FW: ZoneAlarm Firewall *enabled* {829BDA32-94B3-44F4-8446-F8FCFF809F8B}============== Running Processes ===============C:\WINDOWS\system32\nvsvc32.exeC:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcssvchost.exesvchost.exeC:\WINDOWS\system32\ZoneLabs\vsmon.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Lavasoft\Ad-Aware\AAWService.exeC:\WINDOWS\system32\spoolsv.exesvchost.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\Program Files\Java\jre6\bin\jqs.exeC:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exeC:\WINDOWS\system32�... Read more

A:pop ups & browser being redirected to other websites

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Do not Attach logs unless I ask you to.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.Do not run any other tool untill instructed to do so!In the upper right hand corner of the topic you will see a button called Options. If you click on this in the drop-down menu you can choose Track this topic. By doing this and then choosing Immediate E-Mail notification and then clicking on Proceed you will be advised when we respond to your topic and facilitate the cleaning of your machine.Note** If you are having problems posting the complete log into this thread upload them here http://www.rapidshare.com/ and post the links in this thread Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.:run combofix:Please visit this webpage for download links, and instructions for running the tool: http://www.bleepingcomputer.com/combofix/how-to-use-combofixPlease ensure you read this guide carefully and install the Recovery Console first. The Windows Recovery Console will allow you to boot up into a special recovery (repair) mode. This allows us to more eas... Read more

Read other 11 answers
RELEVANCY SCORE 49.6

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:03:16 PM, on 5/23/2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe
C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe
C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe
C:\Windows\SysWOW64\NOTEPAD.EXE
C:\Windows\SysWOW64\DllHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/USCON/1
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com/USCON/1
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explo... Read more

A:Websites being redirected to mostly ad sites

Read other 11 answers
RELEVANCY SCORE 49.6

I want to apologize upfront - I know only enough about computers to make me dangerous. My Google searches get redirected to other websites like 'findstuff.com' and 'forless.com'. It's been going on for about a week or so...before that everything seemed to work to fine. I ran Malware software removal and a bunch of others but nothing helped, so I removed them and await help from the experts (that means you!). I also need some help finding a FREE good virus software that I could use so this doesn't happen again...suggestions are welcome
Thanks in advance!
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:53:35 PM, on 6/6/2011
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\IDT\WDM\sttray.exe
C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:... Read more

A:Google gets redirected to other websites

Read other 16 answers
RELEVANCY SCORE 49.6

I've been having problems with my sites being redirected lately, first it started with just chrome, then firefox, and now even steam gets it when it starts up.
 
malwarebytes doesn't find anything and too afraid to download any different software since it feels like most want you to download their toolbar these days.
 
main things i was seeing was esurf.biz. now it's these "your flash player is out of date" not sure of the link.
 
 
 
 

A:Websites being redirected(hijacked)

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Press the windows key + r on your keyboard at the same time. This will open the RUN BOX.Type Notepad and and click the OK key.Please copy the entire contents of the code box below to the a new file. 
start

CreateRestorePoint:
EmptyTemp:
CloseProcesses:

AutoConfigURL: [S-1-5-21-1989681425-2865372214-3093162474-1001] => hxxp://stopblock.me/wpad.dat?4aa6a07b3a16519387bd546e4f5eea18215575
C:\Users\crsch\AppData\Local\Temp\buddyupdater124583531.exe
C:\Users\crsch\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\crsch\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\crsch\AppData\Local\Temp\nvStInst.exe
C:\Users\crsch\AppData\Local\Temp\{8C4F77C2-9C8B-470C-AC5C-80F13325991A}.exe

End
Save the file as fixlist.txt in the same folder where the Farbar tool is running from.The location is listed in the 3rd line of the Farbar log you have submitted.Run FRST and click Fix only once and wait.Restart the computer normally to reset the registry.The tool will create a log (Fixlog.txt) please post it to your reply.===Please download AdwCleaner by Xplode onto your Desktop.Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click the Scan button and wait for the process to complete.Click the LogFile button and the report will open in... Read more

Read other 2 answers