Over 1 million tech questions and answers.

When click results from search engine (Google & Bing), get sent to wrong sites (ex http://click.livesearchnow.com/...)

Q: When click results from search engine (Google & Bing), get sent to wrong sites (ex http://click.livesearchnow.com/...)

I would appreciate any advice on how to fix this..My computer caught a virus and screwed up the admin account. I managed to get that bug removed. Since then, I have problems when I click the results from search engines. When I click search results, I get sent to different sites. I typically use Google Chrome but it's happened on Bing as well. For example, I did a google search on "virus removal". The link on the Google page was for "www.symantec.com/security_response/removaltools.jsp" but when I click the link, it goes to "http://answers.nixxie.com/s.php?k=virus%20removal&adid=13190&ts=1001SMA_A14&subid=263328-165793-133-27681&click=1609561864-41d3.11f1.50788005.3b97&ref=http://market-find.com/index.php?search=virus%20removal"Cicking "www.kaspersky.com › Support" takes me to "http://r.looksmart.com/og/pr=Psr;ro=1;rc=4;digest=2318dc8762ee3009c073e486df8a499b;kid=6f71bb91533de8f9bb8d92689e59bf39;t=1350074566;v=8;data=gg1A2cbB_NiFMmKDDBkRvp9xLNM-gHzw1ipDmvpgzJM7kA2vsa63GrjukRD6oalWiDGbgjD4_lX7zIN4HI9nmNM701OzoDmp2aba_b-8rQiuWrRnSR6SldsYzIg9duKKiVELnFMfFbijvsXXHu4z3OBZgeOJjsbbEsL9UNuMEytcIVbfpvA8EA;uh=157x17525143547048890673;la=2438185;lm=3039186;ad=756865385;ag=766460146;kw=1609561864;qt=virus%20removal;vr=17;lt=EM;ip=50.80.167.198;pt=;st=118.25.90.0.0.0.0;os=929.249.9.0.4.230.2.6;sy=keyword;my=smart;geo=894417;vid=0;subid=137419-386-27681;opi=bizz_main;lg=0;sqid=610B9C4C-14AD-11E2-A738-E60E0A2C1E10;siid=611D27FA-14AD-11E2-8428-E60E0A2C1E10;ii=41f0.40a.507880c6.4af;pn=;to=;tc=4;po=1;pc=4;pi=bizz_main_pre:tech;ts=;rm=;pfid=263328;rh=shopguidefinds.com%7Chttp://answers.nixxie.com/s.php?k=virus%20removal&adid=13190&ts=1001SMA_A14&subid=263328-137419-386-27681&click=1609561864-41f0.40a.507880c6.4af&ref={referrer}">It seems to redirect me to "http://click.livesearchnow.com/ads-clicktrack/click/jump1..." most of the time.My PC has Windows Vista Home Premium Service Pack 2.I've tried to find the problem using various programs: Malwarebytes, CCleaner, etc.I'm not a techie but I can work through simple issues. I don't typically go into the registry and systems files to change things.Doe anyone have an idea on what I should do? Is there some anti virus software I could run?Thanks for your help!!*** Mod Edit: Moved topic from Vista to the more appropriate forum. ~ bloopie ***

RELEVANCY SCORE 200
Preferred Solution: When click results from search engine (Google & Bing), get sent to wrong sites (ex http://click.livesearchnow.com/...)

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

A: When click results from search engine (Google & Bing), get sent to wrong sites (ex http://click.livesearchnow.com/...)

DownloadTDSSkillerLaunch it.Click on change parameters-Select TDLFS file systemClick on "Scan".Please post the LOG report(log file should be in your C drive) Do not change the default options on scan resultsDownloadaswMBRLaunch it, allow it to download latest Avast! virus definitionsClick the "Scan" button to start scan.After scan finishes,click on Save logPost the log results here.If you get crashes in normal mode,run it in safemode with networkingDownloadESET online scannerInstall itClick on START,it should download the virus definitionsWhen scan gets completed,click on LIST of found threatsExport the list to desktop,copy the contents of the text file in your reply

Read other 24 answers
RELEVANCY SCORE 128

Hi there, this is my first post on BleepingComputer.com and this one's got me stumped.

If I browse to Google, then do a search, clicking on some of the search results will result in a redirection, not to the shortcut link but to firstly, after about 10 seconds:
hxxp://www.cs102175.com/click.php?s=1&k=612447441&pub=249

which shows a page like this
 redirection.JPG   55.43KB
  2 downloads, then redirects straight away (even if I disable my connection it seams) to:
hxxp://bridge1.admarketplace.net/xtrk.php?k=612447441&isaction=1

this page (if my connection's up) will then redirect to a seemingly random ad page, such as:

hxxp://www.shoppingbank.com/sb/105749/mia/pid/10916384/coid/C85EB6AD44F2C04D80EA8CE66C5881C2

I also notice that there is near constant activity on my network connection, when I'm not doing anything.

I see in the RootRepeal log there's a hidden 'Driver: Tcpip, IRP_MJ_CREATE'. Is this the problem? If so, can it be removed?

DDS (Ver_09-10-26.01) - NTFSx86
Run by Dr Ed Suttie at 22:44:56.75 on 11/11/2009
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Professional 5.1.2600.3.1252.44.1033.18.1014.333 [GMT 0:00]

AV: McAfee VirusScan *On-access scanning enabled* (Updated) {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}
FW: McAfee Personal Firewall Plus *enabled* {94894B63-8C7F-4050-BDA4-813CA00DA3E8}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C... Read more

A:Google search results get redirected by http://www.cs102175.com/click.php?s=1&k=612447441&pub=249

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. Please include a clear description of the problems you're having, along with any steps you may have performed so far.Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.Even if you have already provided information about your PC, we need a new log to see what has changed since you originally posted your problem.Please download OTL from following mirror:This is THE MirrorSave it to your desktop.Double click on the icon on your desktop.Click the "Scan All Users" checkbox.Push the button.Two reports will open, copy and paste them in a reply here:OTL.txt <-- Will be openedExtra.txt <-- Will be minimizedIn the upper right hand corner ... Read more

Read other 2 answers
RELEVANCY SCORE 114

Whenever I search on Google or Yahoo I get the results and when I click on one it re-directs me to a completely unrelated site. Please help me fix this.

A:I am redirected on search engine results when i click them

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 2 answers
RELEVANCY SCORE 114

Please help! I have been infected by something that redirects me do random sites after I have done a searchs on Google, Yahoo or Bing. The latest redirects have taken me to the following website hxxp://server2.mediajmp.com/surveys/don-index.html?sub=yahoo.comor hxxp://server2.mediajmp.com/surveys/don-index.html?sub=google.comBoth of these links have an audio file asking me to participate in a 30 second survey. I have run Byspot Search & Destroy, PC Tools Spyware Doctor. Adaware & Malwaresbytes Anti Malware and still can not rid this thing. Other sites worth noting which are part of the redirect there are 9 click.php files here are some of the URL'shxxp://64.111.208.43/click.php?re=1&cc=eNoVUs3OqjAUfCATbQuUduECUPlERAFBYHNDC4j8qKCCEB7-amYyyUxOchYz10kkFE0I4GlfKB-r2H4mMAdQ_OkvBxRCRABCVMJTeIbSVjdyXn-q1F4uJ8gTIGaMEiDwOOYZSBCDCUScpISSmP-DNOM4FgSQUkw4FzOJUSQnNMNMRoyyCaJJmFLrXnlW9b6Mir0wGmLUGrevD7-yhfJuKbaSO2LDe-e-jfr6eOwwbt24dcfnuD96_Wc1k9vv20p5FabpGsRD2H0koPKNzs5eoguHRTc8mjxVr59z4dB1mWe3esXtNKt0t6tIK-zOg8w3z-RlVUBk6_Wi1AYr90vzSA6CT1Zdu7iPqNmWffHurdQYj3-qLcB920inRluczuqmf2yybnSawNEeRSll1Ws3vNP4-Iy4FP3lQxU4GCq9mvsZ9e-BWjfrEgkzwxc7sFadYIisp25oPDx_Bh_qoLeiY9kf6pNXBhqbxfygaKi-xeSa6UPirzwxuuyk0NuBgofrw-4un3TlOr5uTXgYxtCTN7PNFcscRqV5qQ-tebLExZ4IWvq4pezQlK5K3MdMSYYn8y7LiZI5QtJcIF9OYIKEzEUwl9Ec_-yEpkRIBLOGHbtZIAqMVxgYbRQ4PdM3ReRKBUOg-17-8O00RhCbZ-cdBepg1lbHfntBIMFJmooES4jiFCBKMlliTGIA41RG_wGSB9Po&cu=54d123a8433ce1b67595029df86bafdf&co=bc2be11daa9a7ffd8567da1141096460&... Read more

A:Search Engine Result Redirect Google, Yahoo & Bing http://r9237242.cn/

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 2 answers
RELEVANCY SCORE 113.2

On @11/1 i would get redirected to sites that have nothing to do with the search engine result i clicked on. I would need to rerun the search and click on it again to get to it. BACK does not work on the site i'm redirected to, it just sends me to the main page that i'm redirected to.Happens with bot IE and Firefox.I have dwm.exe running from my temp directory and i can't delete it, even in safe mode. Also looks like shell.exe and svchost.exe are running from a wrong directory. Note: I downloaded GMER but the buttons that the instructions say to check are grayed out & uncheckable. Services, Registry & Files & c:/ & ADS are the only ones i'm allowed to check. I did not run it.Here are my logs as per http://www.bleepingcomputer.com/forums/topic34773.html .DDS.txt:DDS (Ver_10-11-03.01) - NTFS_AMD64 Run by John at 4:49:51.15 on Thu 11/04/2010Internet Explorer: 8.0.7600.16385 BrowserJavaVersion: 1.6.0_17Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.2814.1630 [GMT -4:00]============== Running Processes ===============C:\Windows\system32\wininit.exeC:\Windows\system32\lsm.exeC:\Windows\system32\svchost.exe -k DcomLaunchC:\Windows\system32\svchost.exe -k RPCSSC:\Windows\system32\atiesrxx.exeC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestrictedC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestrictedC:\Windows&#... Read more

A:Browser redirect in Search Engine results (Yahoo, Bing, Google)

Moderator - please close this thread.
I followed boopme's 1st post in the below thread and i'm good now.
http://www.bleepingcomputer.com/forums/topic358309.html

THANK YOU!

Read other 2 answers
RELEVANCY SCORE 112.8

Hello,
 
I am trying to address a browser redirection issue.  Microsoft Security Essentials comes up clean.  Malwarebytes comes up clean.  Still, when I search for items through yahoo or google, when I click on the results link I get redirected to places like http://click.livesearchnow.com
 
I am at my wits end.
 
Help me bleeping computer, you are my only hope!

A:http://click.livesearchnow.com Browser Redirect

Please download TDSSKiller from here and save it to your DesktopDoubleclick on TDSSKiller.exe to run the application, then click on Change parameters


Check Loaded Modules  and Detect TDLFS file system.  Do not check Verify file digital signatures (even though it is checked in the example)If you are asked to reboot because an "Extended Monitoring Driver is required" please click Reboot now


Click Start Scan and allow the scan process to run

If threats are detected select Skip for all of them unless I instruct you otherwiseClick Continue


Click Reboot computerPlease post the contents of  TDSSKiller.[Version]_[Date]_[Time]_log.txt found in your root directory (typically c:\)in your reply===================================================aswMBR--------------------Download aswMBR and save it to your desktop.
Please disable your real time protection of any Antivirus, Antispyware or Antimalware programs temporarily. They will interfere and may cause unexpected results.If you need help to disable your protection programs see here and here.Double click the aswMBR.exe file to run it. Please allow when you are asked to download AVAST antivirus engine defs.Wait until the AV update is done, then click on the Scan button to start. The program will launch a scan.

When done, you will see Scan finished successfully. Please click on Save log and save the file to your desktop.

Please post the contents of the log in your next reply.NOTE:  aswMBR will create M... Read more

Read other 17 answers
RELEVANCY SCORE 112.8

hello BC, all.
 
I have followed this thread, attempted to first use rkill then scan with avg free, that came up nothing, so i rebooted, downloaded rkill again, then tried malwarebytes, nothing, then tried tdss killers with the check boxes applicable and still nothing.  i still get the google hijack/liveshow redirect.  ACK!
 
any other suggestions, thanks by the way for any help
 
cave
 
*moderator edit: post split to form a new topic ~ Queen-Evie*

A:Browser Redirect: http://click.livesearchnow.com

    Please download TDSSKiller from here and save it to your DesktopDoubleclick on TDSSKiller.exe to run the application, then click on Change parameters


Check Loaded Modules  and Detect TDLFS file system.  Do not check Verify file digital signatures (even though it is checked in the example)If you are asked to reboot because an "Extended Monitoring Driver is required" please click Reboot now


Click Start Scan and allow the scan process to run

If threats are detected select Skip for all of them unless I instruct you otherwiseClick Continue


Click Reboot computerPlease post the contents of  TDSSKiller.[Version]_[Date]_[Time]_log.txt found in your root directory (typically c:\)in your reply===================================================aswMBR--------------------Download aswMBR and save it to your desktop.
Please disable your real time protection of any Antivirus, Antispyware or Antimalware programs temporarily. They will interfere and may cause unexpected results.If you need help to disable your protection programs see here and here.Double click the aswMBR.exe file to run it. Please allow when you are asked to download AVAST antivirus engine defs.Wait until the AV update is done, then click on the Scan button to start. The program will launch a scan.

When done, you will see Scan finished successfully. Please click on Save log and save the file to your desktop.

Please post the contents of the log in your next reply.NOTE:... Read more

Read other 30 answers
RELEVANCY SCORE 112

Hi,

After using Spybot, latest version, my wife's computer still has a malware infection which after doing a search and clicking a link, gets redirected to some other site, probably a pay per click site. After searching I found hijackthis and it was recommended to post the log file here for help in determining what entries are suspect. I thought I was fairly knowledgable, but getting into the registry and knowing what is a problem is not my comfort area. Hopefully it is for someone here. This is the log file.

Thanks,
Mark

A:Click links from Google or Bing search get redirected

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

Read other 25 answers
RELEVANCY SCORE 112

I'm having problems with Google, Yahoo, and Bing searches directing me to nonrelated sites. This just started yesterday afternoon, probably after trying to download an update to Flash Player HD (?). Also some websites are loading really slow.

I have Windows XP home edition and run IE8.
1st I tried System Restore, but it just stops after I pick a date to restore too.

2nd I downloaded GMER and ran it. It showed 4 areas with possible rootkit problems, but didn't highlight them in red and I couldn't fix them.

3rd I downloaded Sophos Anti-Rootkit software and ran it. The check took 41 minutes and came up with 16 files, but didn't recommend fixing any of those.

4th I downloaded HiJackThis from Trend Micro, Inc. and ran the scan. Trend sent me to this forum for help.

A:Search Engine (Yahoo, Google, and Bing) Redirection to nonrelated sites

Hello and welcome to Bleeping ComputerPlease subscribe to your topic so that you will be notified as soon as I post a reply, instead of you having to check the topic all of the time. This will allow you to get an email notification when I reply.To subscribe, go to your topic, and at the top right hand corner by your first post, click the Options button and then click Track this topic. The bullet the immediate notification bubble. Then press submit.Lets take a look with MalwarebytesPlease download Malwarebytes' Anti-Malware from here:MalwarebytesPlease rename the file BEFORE downloading to zztoy.exe instead of mbam-setup.exeMBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.Double Click zztoy.exe to install the application.* Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.* If an update is found, it will download and install the latest version.* Once the program has loaded, select "Perform Full Scan", then click Scan.* The scan may take some time to finish,so please be patient.* When the scan is complete, click OK, then Show Results to view the results.* Make sure that everything is checked, and click Remove Selected.* When disinfection is completed, a log will open in Notepad and yo... Read more

Read other 38 answers
RELEVANCY SCORE 111.6

On every few google searches on firefox (I run Vista) "click find search" highjacks the search. I downloaded and ran malwarebytes program already. There was another search engine highjacker that no longer runs now, but "click find search" has taken its place.

.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 7.0.6002.18005 BrowserJavaVersion: 1.6.0_33
Run by BA at 13:58:23 on 2012-07-13
Microsoft? Windows Vista? Home Premium 6.0.6002.2.1252.1.1033.18.3998.1229 [GMT -4:00]
.
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_58be29c0\STacSV64.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\Smc.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Expl... Read more

A:click find search engine results malware redirect

Hy there and sorry for the delay.If you still need help, please re-run DDS and post both logs

Read other 16 answers
RELEVANCY SCORE 107.6

Hi there, so whenever I search using bing or google and try to open the search results they keep redirecting to potentially dangerous looking sites
and also my home page keeps going to isearch.avg.com even though i dont have it in my new tab or homepage settings. I have a 64-bit Windows so am pasting the DDS Log only.



.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 10.5.1
Run by kpn at 18:21:24 on 2012-08-08
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.3891.872 [GMT -7:00]
.
AV: AVG Anti-Virus Free Edition 2012 *Enabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
SP: AVG Anti-Virus Free Edition 2012 *Enabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\PROGRA~2\AVG\AVG2012\avgrsa.exe
C:\Program Files (x86)\AVG\AVG2012\avgcsrva.exe
C:\windows\system32\wininit.exe
C:\windows\system32\lsm.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\nvvsvc.exe
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\system32\... Read more

A:Google, bing search results keep redirecting to malicious looking sites and home page redirects to isearch.avg.com

Hi,Welcome to Bleeping Computer. My name is m0le and I will be helping you with your log.Please subscribe to this topic, if you haven't already. Click the Watch This Topic button at the top on the right.

Please avoid installing/uninstalling or updating any programs and attempting any unsupervised fixes or scans. This can make helping you impossible.

Please reply to this post so I know you are there.The forum is busy and we need to have replies as soon as possible. If I haven't had a reply after 3 days I will bump the topic and if you do not reply by the following day after that then I will close the topic.Once I receive a reply then I will return with your first instructions.Thanks

Read other 33 answers
RELEVANCY SCORE 106

I got help elsewhere. Thank you nevertheless This topic can be deleted.

A:google redirects when i click on search results

It appears that this issue is resolved, therefore I am closing the topic. If that is not the case and you need or wish to continue with this topic, please send me or any Moderator a Personal Message (PM) that you would like this topic re-opened.

Read other 1 answers
RELEVANCY SCORE 106

Every time I use google and click on one of the search result links, I am redirected to one of several web sites advertising fake security programs. I don't know if this is important but earlier this week I was infected with a virus where fake security alerts would pop up on my computer telling me to download protection system. I finally got the pop ups to stop. Can anyone help me fix the google problem?

A:Google redirects me when I click on search results

The process of cleaning your computer may require you to temporarily disable some security programs. If you are using SpyBot Search and Destroy, please refer to Note 2 at the bottom of this page.Please download Malwarebytes Anti-Malware and save it to your desktop.alternate download link 1alternate download link 2Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan.If an update is found, the program will automatically update itself.Press the OK button to close that box and continue.If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to install.On the Scanner tab:Make sure the "Perform Quick Scan" option is selected.Then click on the Scan button.If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button. The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".C... Read more

Read other 5 answers
RELEVANCY SCORE 106

About a week ago I somehow downloaded a real bad bug - malware? virus? Who knows; but unfortunately I've been having a very hard time removing it. All I can remember about when the problem started was that a Java logo appeared in the middle of my screen, which promptly disappeared. Now, when I do a google search and click on a link to a search result, I am redirected to a variety of nonsense pages (I'm using firefox as my browser). Such pages include (for example):

hxxp://www.bestmarkstore.com/us/rf/searche.php?q=oscar+nominations+2011&refid=64436+97569
hxxp://shopcompareus.com/ac/search.php?phrase=Oscar%20Nominations%202011&uid=536e4bdab77e644af6d47735f4589eab&kuid=ca4366e6f13e65e4b3941b89d7e5017b&src=ads&partner=mx1-35394
hxxp://mx1.35394.expand-search-goals.com/jump1/?affiliate=mx1&subid=35394&terms=oscar%20nominations%202011&sid=Z283044314%40EzX2EzM2UDNz8VN3UjMfJjMfNDNy8FO2QDO1gDO5ITM&a=zk5&mr=1&rc=0
hxxp://www.informationgetter.com/search-results.aspx?keywords=Oscar+Nominations+2011&q=Oscar+Nominations+2011
hxxp://itcg.21426.expand-search-goals.com/jump1/?affiliate=itcg&subid=21426&terms=oscar%20nominations%202011&sid=Z006044288%40%40QMfZTN3UTOzMzXyEDMy81Nz8VO08VM5MDO1gDO5ITM&a=vgpt&mr=1&rc=0

Additionally, random popups are appearing in new tabs from time to time.

Here is DDS.txt:
DDS (Ver_10-12-12.02) - NTFSx86
Run by bgoldman at 20:34:11.57 on Sun 02/27/2011
Internet Explorer: 8... Read more

A:Can't click search results in google + popups

Brad,My secret agent name on the forums is SweetTech (you can call me ST for short), it's a pleasure to meet you. I would be glad to take a look at your log and help you with solving any malware problems.If you have since resolved the issues you were originally experiencing, or have received help elsewhere, please inform me so that this topic can be closed. If you have not, please adhere to the guidelines below and then follow instructions as outlined further below:Logs from malware removal programs (OTL is one of them) can take some time to analyze. I need you to be patient while I analyze any logs you post. Please remember, I am a volunteer, and I do have a life outside of these forums.Please make sure to carefully read any instruction that I give you. Attention to detail is important! Since I cannot see or directly interact with your computer I am dependent on you to "be my eyes" and provide as much information as you can regarding the current state of your computer.If you're not sure, or if something unexpected happens, do NOT continue! Stop and ask!In Windows Vista and Windows 7, all tools need to be started by right clicking and selecting Run as Administrator!These instructions have been specifically tailored to your computer and the issues you are experiencing with your computer. It's important to note that these instructions are not suitable for any other computer, even if the issues are fairly similar.Do not do... Read more

Read other 22 answers
RELEVANCY SCORE 105.2

All search engines redirect to click.livesearchnow.com.
Occurs in all browsers and all browsers run slowly.

DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 9.0.8112.16457 BrowserJavaVersion: 1.6.0_22
Run by Ethan Bryce at 10:24:49 on 2013-01-19
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.3839.1767 [GMT -8:00]
.
AV: AVG Anti-Virus Free Edition 2013 *Enabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: AVG Anti-Virus Free Edition 2013 *Enabled/Updated* {B5F5C120-2089-702E-0001-553BB0D5A664}
.
============== Running Processes ===============
.
C:\PROGRA~2\AVG\AVG2013\avgrsa.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
C:&#... Read more

A:Google Redirect to click.livesearchnow.com

Greetings and Welcome to The Forums!!My name is Gringo and I'll be glad to help you with your malware problems.I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of usPlease do not run any tools unless instructed to do so.
We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.
Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.
Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.
A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE: At the top o... Read more

Read other 18 answers
RELEVANCY SCORE 105.2

I recently started having an issue with google redirects to click.livesearchnow.com I have Windows Firewall enabled, as well as MBAM Pro. MBAM comes up clean on a full scan.

Thanks in advance for any help you can give me.
Flip

DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 9.0.8112.16457 BrowserJavaVersion: 10.11.2
Run by Flip at 19:33:07 on 2013-01-22
Microsoft Windows 7 Ultimate 6.1.7601.1.1252.1.1033.18.12279.8990 [GMT -5:00]
.
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\nvvsvc.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files (x86)\Common Files\... Read more

A:click.livesearchnow google redirect

Greetings and Welcome to The Forums!!My name is Gringo and I'll be glad to help you with your malware problems.I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of usPlease do not run any tools unless instructed to do so.
We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.
Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.
Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.
A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE: At the top o... Read more

Read other 26 answers
RELEVANCY SCORE 105.2

I have been experiencing this issue for almost 6 months now. I am on a Win 7 laptop and only encounter this issue in Chrome, not IE. When it first started happening, I was still using IE as my primary browser, so it didn't bother me so much. After a month, I finally decided to do something about it. I downloaded and ran every free program I could find to get rid of the virus. I tried programs from Norton, Mcafee, Sophos, Kaspersky, and many others. None of them identified any issues. I continued my searching when I came across a Yahoo question about the same issue and the accepted answer was "download and run Combofix". I tried this as well, but no change. At that point I gave up. I later found out how stupid it was to run some of these tools without guidance, and how lucky I was to still have a working computer afterwards.

I recently noticed that some of the redirects triggered Norton alerts of blocked attacks and decided it was time to resolve this once and for all. I went to the Norton forums and tried to get help there and was somewhat redirected here for resolution.

Thanks in advance for your help.

DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 9.0.8112.16457 BrowserJavaVersion: 10.7.2
Run by Daniel at 23:24:10 on 2012-12-31
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.4063.1167 [GMT -5:00]
.
AV: Norton 360 *Enabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831... Read more

A:Google redirect to click.livesearchnow.com

Greetings and Welcome to The Forums!!My name is Gringo and I'll be glad to help you with your malware problems.I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of usPlease do not run any tools unless instructed to do so.
We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.
Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.
Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.
A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE: At the top o... Read more

Read other 25 answers
RELEVANCY SCORE 105.2

Hello,I have used ATF Cleaner,Malwarebytes Anti Malware,Super AntiSpyware,AVG Anti Virus,Eset Nod 32 and VundoFix.

The last scans have come up empty with no threats.The problem of bogus sites from good search results still exists.Have

no idea what it is.Mostly use Firefox 3.
Thank You for some help,please.

HJT log-

DDS (Ver_09-02-01.01) - NTFSx86
Run by Owner at 23:15:53.14 on Tue 02/10/2009
Internet Explorer: 7.0.5730.13
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.751.147 [GMT -5:00]

AV: AVG Internet Security *On-access scanning disabled* (Updated)
AV: ESET NOD32 Antivirus 3.0 *On-access scanning enabled* (Updated)
FW: AVG Firewall *disabled*

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\drivers\dcfssvc.exe
C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
C:\PROGRA~1\Dantz\RETROS~1\wdsvc.exe
C:\WINDOWS\system32\RioMSC.exe
C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WIN... Read more

A:Google Search Results Redirected To Wrong Sites

Welcome to the BleepingComputer Forums. Since it has been a few days since you scanned your computer with HijackThis, we will need a new HijackThis log. If you have not already downloaded Random's System Information Tool (RSIT), please download Random's System Information Tool (RSIT) by random/random which includes a HijackThis log and save it to your desktop. If you have RSIT already on your computer, please run it again. Double click on RSIT.exe to run RSIT. Click Continue at the disclaimer screen. Please post the contents of log.txt. Thank you for your patience.Please see Preparation Guide for use before posting about your potential Malware problem. If you have already posted this log at another forum or if you decide to seek help at another forum, please let us know. There is a shortage of helpers and taking the time of two volunteer helpers means that someone else may not be helped. Please post your HijackThis log as a reply to this thread and not as an attachment. I am always leery of opening attachments so I always request that HijackThis logs are to be posted as a reply to the thread. I do not think that you are attaching anything scary but others may do so. While we are working on your HijackThis log, please: Reply to this thread; do not start another! Do not make any changes on your computer during the cleaning process or download/add programs on your computer unless instructed to do so. Do not run any other tool until instruc... Read more

Read other 2 answers
RELEVANCY SCORE 104.8

Hi,

I was really tired the other day, had a popup on screen to insatall flash player! I clicked yes, and this didgy looking installer ran, Oh dear. Since then randomly if I do a google search, then click the link (in IE8) i get a new window with bizsearch in the address bar, then a orange arrow graphic on screen in the new window, then the page link from google, or a random link. If i close the new window, and click again sometimes it goes straight to the real page, other times it redirects!

Anyways here is my HJT log: Thanks in advance.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:52:42, on 29/05/2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Boot Camp\KbdMgr.exe
C:\Windows\WindowsMobile\wmdSync.exe
C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\Program Files\VMware\VMware Player\hqtray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files\McAfee\Common Framework\UdaterUI.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Microsoft Office Communicator\communicator.exe
C:\Program Files\McAfee\Common Framework\McTray.exe
C:\Windows\System32\wsqmcons.exe
C:\Program F... Read more

Read other answers
RELEVANCY SCORE 104.8

The problems stared a few weeks ago with the back button not working. The drop down showed "http://www.google.ca/url?xxxxxxxxxxx" where "x" is a lengthy continuance of an address related to the search.
After getting a notice to update IE9 this problem cleared and a new one started.

I now get "Please click here if you are not redirected within a few seconds" appearing in the upper left when web searching with Google using Internet Explorer or Slimbrowser, which piggybacks IE.
Google Image search also results in a blank page with "Please click here if you are not redirected within a few seconds" appearing in the upper left. Clicking "here" in both cases takes me to the results page.
Web search result links seem to work normally, however Image search results are in what Google call basic version and clicking on a link results in a totally blank page with the status bar saying "done"

Also after updating IE9, when I do a Google search I get a security warning about others can see information, do you want to continue. Clicking yes changes internet options restricted sites from the default setting. Clicking no results in Google not working.
Google states my cookies are not enabled when I try to access my Google settings... they are enabled.
Using IE with Bing does not have this problem, nor does this problem occur in Firefox, Waterfox or Slimboat.

Resetting IE does not help.
Uninstalling IE9 reveals the same problem in... Read more

A:Google search results in "Please click here if you are not redirected within a few seconds"

Here is the DDS log
.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 10.7.2
Run by Ken at 16:10:49 on 2012-09-08
Microsoft Windows 7 Ultimate 6.1.7601.1.1252.1.1033.18.4094.1620 [GMT -7:00]
.
AV: Symantec Endpoint Protection *Enabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: PC Tools Spyware Doctor *Disabled/Updated* {94076BB2-F3DA-227F-9A1E-F060FF73600F}
SP: Symantec Endpoint Protection *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
FW: Symantec Endpoint Protection *Enabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
C:\Windows\system32\svchost.exe -k LocalS... Read more

Read other 44 answers
RELEVANCY SCORE 104.8

I've done several, Spybot, Malwarebyte, WindowsDefender, Mcafee virus scans, and I still keep getting redirected when I click on google search results.Below is my hijack this log.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 5:51:57 PM, on 11/25/2009Platform: Windows Vista SP2 (WinNT 6.00.1906)MSIE: Internet Explorer v8.00 (8.00.6001.18828)Boot mode: NormalRunning processes:C:\Windows\system32\Dwm.exeC:\Windows\system32\taskeng.exeC:\Windows\Explorer.EXEc:\PROGRA~1\mcafee.com\agent\mcagent.exeC:\Windows\OEM02Mon.exeC:\Program Files\DellTPad\Apoint.exeC:\Windows\System32\igfxtray.exeC:\Windows\System32\hkcmd.exeC:\Windows\System32\igfxpers.exeC:\Program Files\Microsoft Security Essentials\msseces.exeC:\Windows\system32\igfxsrvc.exeC:\Program Files\Java\jre6\bin\jusched.exeC:\Program Files\Windows Sidebar\sidebar.exeC:\Program Files\Dell Support Center\bin\sprtcmd.exeC:\DazzoWallChgr\WallpaperChangerDazzo.exeC:\Program Files\Spybot - Search & Destroy\TeaTimer.exeC:\Program Files\Dell\QuickSet\quickset.exeC:\Program Files\Windows Sidebar\sidebar.exeC:\Program Files\DellTPad\HidFind.exeC:\Program Files\DellTPad\Apntex.exeC:\Program Files\Mozilla Firefox&... Read more

A:Keep Getting Redirected away from links I click on in Google Search Results.

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 44 answers
RELEVANCY SCORE 104.8

When I do a google search and click on the results I get redirected to other sites.I've also noticed that when I right click on my desktop and go to properties and get the "Display Properties" window, the "Desktop" tab is missing therefore I can't change my wallpaper.Here are my logs, thanks in advance!--------------------------------------------------------------------------------KASPERSKY ONLINE SCANNER 7 REPORT Monday, August 4, 2008 Operating System: Microsoft Windows XP Home Edition Service Pack 2 (build 2600) Kaspersky Online Scanner 7 version: 7.0.25.0 Program database last update: Monday, August 04, 2008 10:57:38 Records in database: 1052395--------------------------------------------------------------------------------Scan settings: Scan using the following database: extended Scan archives: yes Scan mail databases: yesScan area - My Computer: C:\ D:\Scan statistics: Files scanned: 94146 Threat name: 1 Infected objects: 5 Suspicious objects: 0 Duration of the scan: 01:33:43File name / Threat name / Threats countC:\Documents and Settings\Owner\My Documents\Local Disk (D)\Music\(cam) mary j. blige be without you 1 50.wma Infected: Trojan-Downloader.WMA.Wimad.d 1C:\Documents and Settings\Owner\My Documents\Local Disk (D)\Music\(cam) mary j. blige be without you 1 54.wma Infected: Trojan-Downloader.WMA.Wimad.d 1C:\Documents and Settings\Owner\My Documents\Lo... Read more

A:Google Search, Click On Results, Redirected To Another Site

Hello bxroadsWelcome to BleepingComputer ========================If you are still in need of assistance please post a new Dss log.

Read other 13 answers
RELEVANCY SCORE 104.8

Whenever I search Google for a subject, then click on a link in the search results, my browser is hijacked and redirected to websites such as:
www.thewebtimes.com
www.get-answers-fast.com
www.accurately-locate.com
www.goingonearth.com
etc...
and instead of anything pertinent to my actual search, I am bombarded with advertisements and other nonsense.

Whatever virus or malware or spyware program this is was able to get past my Norton 360 and other anti-virus/spyware/malware programs. I have been unsuccessful in locating or removing the problem, with any of them.

I really need help with this, please! I am sure that there are people much more proficient in identifying and solving this problem than myself, so I would be grateful for any assistance that you can give me.

Please let me know what additional information (if any) you need, in order to assist me.

Thanks so much.

Maggie

A:Please Help - PC Hijacked!!! Redirected when I click on search results in Google.

Please download Malwarebytes Anti-Malware and save it to your desktop.Important!! When you save the mbam-setup file, rename it to something random (such as 123abc.exe) before beginning the download.Malwarebytes may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.Make sure you are connected to the Internet and double-click on the renamed file to install the application.
For instructions with screenshots, please refer to this Guide.When the installation begins, follow the prompts and do not make any changes to default settings.Malwarebytes will automatically start and you will be asked to update the program before performing a scan.If an update is found, the program will automatically update itself. Press the OK button and continue.If you encounter any problems while downloading the definition updates, manually download them from here and just double-click on mbam-rules.exe to install.Under the Scanner tab, make sure the "Perform Quick Scan" option is selected.Click on the Scan button.When finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".Click OK to close the message box, then click the Show Results button to see a list of any malware that was found.Make ... Read more

Read other 1 answers
RELEVANCY SCORE 104.8

Hi, this looks like quite a common problem at the moment. When I click on Google search results the browser redirects to another site. I can click the back button, which then takes me to the original link I clicked on, so I guess it is getting redirected after partially loading the real site. I can't get DDS.scr to run on my PC, so I have run HJT from Trendmicro (log file pasted below). I hope that's enough to start with. Thanks to anyone who can help me!Logfile of Trend Micro HijackThis v2.0.2Scan saved at 22:15:18, on 09/03/2009Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16791)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\csrss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\WLTRYSVC.EXEC:\WINDOWS\System32\bcmwltry.exeC:\Program Files\Alwil Software\Avast4\aswUpdSv.exeC:\Program Files\Alwil Software\Avast4\ashServ.exeC:\WINDOWS\system32\LEXBCES.EXEC: ... Read more

A:Browser is redirected when I click on Google search results

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.comDDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Follow the instructio... Read more

Read other 2 answers
RELEVANCY SCORE 104

I enter a search on yahoo or google and the first page of results are:

nissan.edmunds.com,
scanvirus.us,
nissan.edmunds.com,
-best-deals.com,
findstuff.com,
-here.com.
info.com
hotjobs.com
dll-provider.com
shopping-online.com
ave99.com
get5results.com
classifieds.livedeal.com
find-all-people.com
7metasearch.com/
.fittingdeals.com

They have the keywords of what my search was, but the site addresses are like the list above. But if I go to the second page, I get the right site results. Also, google and yahoo search takes 5 seconds to load, normally it took like a second... What is going on?
If it's a virus do you think I can remove it with AVG Anti-Virus Free Edtion?
 

A:Search results on google,yahoo return wrong sites

Dear Iftikarul,
Why not? If it's not a virus (no Virus detected), you better post a HijackThis Log in the Malware section!
 

Read other 1 answers
RELEVANCY SCORE 104

I am searching using google in firefox. I have not tested IE or other search engines. About 50% of the search results get redirected to a commercial site/fake site. For example, I might search on "Garmin Maps" and choose the third result which should take me to Garmins website. It redirects me to a Bizrate.com with some garmin related commercial stuff.

I have tried Norton Antivirus, SpyDoctor, Adaware, Malwarebytes, PandaActiveScan, CleanUp, and resetting router and modem. I still have the problem. I have seen other similar problems/threads, but no one answer that seems to work for me.
DDS (Ver_09-03-16.01) - NTFSx86
Run by User at 7:39:32.93 on Mon 04/06/2009
Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_11
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3071.2444 [GMT -4:00]

AV: Norton AntiVirus *On-access scanning enabled* (Updated)

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
C:\WINDOWS\system32\svchost -k rpcss
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\lg_fwupdate\fwupdate.exe
C:\Program Fil... Read more

A:Google search results redirects to fake/wrong sites

After reading similar threads, I will just reformat and start over. I think that will be easier. Thanks.

Read other 2 answers
RELEVANCY SCORE 104

When I do a google search everything comes up normal, however any link listed that I click does not go where it is aimed but instead redirects me to a third party site.

Any help is greatly appreciated, thanks!!

DDS.txt:

DDS (Ver_09-11-29.01) - NTFSx86
Run by pcsadmin at 15:40:32.06 on Mon 11/30/2009
Internet Explorer: 6.0.2900.2180 BrowserJavaVersion: 1.6.0_16
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.511.127 [GMT -6:00]
============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\PMService.exe
C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\FireSvc.exe
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\McAfee\Common Framework\FrameworkService.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\CCM\CcmExec.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\McAfee\Common Framework\UdaterUI.exe
C:\Program Files�... Read more

A:Malware infection -- when I click on any google search results, I am redirected

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 2 answers
RELEVANCY SCORE 103.6

Hi Everyone,

Whenever I do a google search and click on a link, I get redirected to a different site. I have read several posts on this forum from other people that have had this problem, and they all seem to have been successful in removing it using HiJackThis. So, below is a HiJackThis log file. Would someone please help me by pointing out which files to fix and how I go about ridding this problem.

Thanks in advance.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:07:32, on 11/12/2010
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.18975)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSLoader.exe
C:\Program Files\Launch Manager\LManager.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Offline Course Player\OlpSynch.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Windows Sidebar\si... Read more

A:Redirected to other sites when I click on links in Google Search

Read other 11 answers
RELEVANCY SCORE 103.6

Hello,

Many (not all) clicks on Google search results are being redirected to bad sites (link farms, porn sites).

I have run Spyware Blaster, AVG free version, and malware bytes, with no results. I ran a full scan with my anti-virus McAfee and no results.

I have since uninstalled spyware except for Spyware Blaster and Malwarebytes, since I read in other threads that you use that.

Here is the DDS text. Thnaks in advance for any assistance you can provide.


DDS (Ver_09-06-26.01) - NTFSx86
Run by Judy at 23:47:45.89 on Tue 07/21/2009
Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_14
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1014.358 [GMT -7:00]

AV: McAfee VirusScan *On-access scanning enabled* (Updated) {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}
FW: McAfee Personal Firewall *disabled* {94894B63-8C7F-4050-BDA4-813CA00DA3E8}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Dell\Media Experience\PCMService.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\... Read more

A:Click on Google Search Link Leads to Bad Sites

Hello, and welcome to the forums -

Are the redirects in Firefox only, or Internet Explorer also?

Read other 19 answers
RELEVANCY SCORE 102.8
A:I always get redirected when I click on my search results from Google or Yahoo to random pages

Hello kerr505, Open HiJackThis Click on the "Config..." button on the bottom right Click on the tab "Misc Tools" Click on "Open Process Manager" Find and Click on C:\Users\Together\AppData\Local\Temp\FullMovies.exe Click on "Kill Process" button Click YesNow navigate to that file in bold and delete it : C:\Users\Together\AppData\Local\Temp\FullMovies.exePlease run HijackThis! and click "Scan." Place checks next to the following entries, if present:R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocache/f...etup1.0.1.0.cabO17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.112.153,85.255.112.92O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 85.255.112.207,85.255.112.210O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.112.153,85.255.112.92Close all browsers and other windows except for HijackThis!, and click "Fix checked".Please download Malwarebytes' Anti-Malware from one of these places:http://www.majorgeeks.com/Malwarebytes_Ant...ware_d5756.htmlhttp://www.besttechie.net/mbam/mbam-setup.exeDouble Click mbam-setup.... Read more

Read other 1 answers
RELEVANCY SCORE 102.8

Hi guys, I got a run of the mill search hijack when I do a google search that Im lookin' for help with.

Heres the specs: when i put in addresses directly, no redirect happens. Only happens when i google search. and if i right click and select "copy link location" and paste it in the address bar, it works fine and goes to the right spot. But when i google search and then click on any of the results, it redirects me to various different pages. usually its to the "search" sites that claim to be (whatever-term-i-searched-for.com) and full of nothing but fake links , etc. some popups too, but not a whole lot, firefox stll blocks some of them. For the record, theres not a particular search engine or ad page that comes up repeatedly as far as I notice. In the past it kept going to "tazinga", but not lately.

Anyways, I ran Malwarebytes and nothing came up the last time I used this computer. Im on a dell netbook and I had stopped using it for a few months. when i began using it again today, I realized that I still had this redirect problem from last time, so Im running malwarebytes again, but Im guessing it may not find anything this time either, so far, nothing and its been going for over 2 hrs. Im not really noticing any particular things that stand out with the redirects, its a very generic kind of thing no specific sites or ads that keep popping up, etc.

Ill be happy to post any other information you need from me. i keep trying to attach my gm... Read more

A:Browser (firefox) constantly redirects when I click on google search results

Hello and welcome to the forums!My secret agent name on the forums is SweetTech (you can call me ST for short), it's a pleasure to meet you. I am very sorry for the delay in responding, but as you can see we are at the moment being flooded with logs which, when paired with the never-ending shortage of helpers, resulted in the delayed responding to your thread.I would be glad to take a look at your log and help you with solving any malware problems.If you have since resolved the issues you were originally experiencing, or have received help elsewhere, please inform me so that this topic can be closed. If you have not, please adhere to the guidelines below and then follow instructions as outlined further below:Logs from malware removal programs (OTL is one of them) can take some time to analyze. I need you to be patient while I analyze any logs you post. Please remember, I am a volunteer, and I do have a life outside of these forums.
Please make sure to carefully read any instruction that I give you. Attention to detail is important! Since I cannot see or directly interact with your computer I am dependent on you to "be my eyes" and provide as much information as you can regarding the current state of your computer.
If you're not sure, or if something unexpected happens, do NOT continue! Stop and ask!
In Windows Vista and Windows 7, all tools need to be started by right clicking and selecting Run as Administrator!
Do not d... Read more

Read other 2 answers
RELEVANCY SCORE 102.4

Please Help for this issue...
 

A:Wrong website opens after a google search & click link

Hi,

Does the problem still exist?
 

Read other 1 answers
RELEVANCY SCORE 101.6

Hi,
My Internet Explorer has been having problem, every time I click the search results from google or yahoo, it will redirect the result page to eBay. I spent a lot of time researching and have tried AVG free edition, Ad Ware 2007, it did not correct the problem. I run hijackThis beta V2.0. Here is the result.

Please help!

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 10:07:26 PM, on 6/27/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\System32\DSentry.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\HP\HP Software Update\HPWuSchd.exe
C:\WINDOWS\BCMSMMSG.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\MS... Read more

A:Solved: IE browser hijacking, click on search results from yahoo or google go to eBay

Read other 16 answers
RELEVANCY SCORE 100.8

Hi,

I hope you guys can help me out here. This started yesterday on my PC. Basically if you open google and perform a search (lets say for Tech Guy), when you get your results and you click on the one you want, instead of going to the right site, it opens up a new window with the heading "Please take a second to help us identify click fraud" at the top with a list of search terms shown in a central window. Obviously this isn't right so I'm not sure what's causing this to happen, must be something that's got into my PC.
Can someone help, HJT log is as follows and if you need any more info please just ask.
The only thing thats come up recently is that Bullguard asked if I wanted to allow or block C:\windows\che3.exe and I blocked it as I didn't recognise it.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 08:30:48, on 31/10/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\ATKKBService.exe
C:\Program Files\Common Files\Autodata Limited Shared\Service\ADCDLicSvc.exe
C:\Program Files\BullGuard Software\BullGuard\BullGuardUpdate.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\crypserv.exe... Read more

Read other answers
RELEVANCY SCORE 97.2

I have a phantom item that says "search with bing" on my right click menu in IE11, which I can't remove.  It doesn't appear in the list of search providers in IE options, only the right click menu.

A:Unable to remove "Search with Bing" from Internet Explorer 11 right click search

I think the Bing bar comes as part of win 7 install on a lot of computers so you should find it in add remove programs
and be able to uninstall it from their.

Read other 28 answers
RELEVANCY SCORE 94.8

Hi,

Search results from Google, Yahoo and Bing are being re-directed to other sites. It seems like the first result I click on is OK, but if I back-arrow back to the results and select another it is redirected to random sites. Your assistance is appreciated. Here is the log:
DDS (Ver_09-07-30.01) - NTFSx86
Run by Christina at 14:33:03.57 on Sat 08/01/2009
Internet Explorer: 8.0.6001.18813
Microsoft? Windows Vista? Home Premium 6.0.6001.1.1252.1.1033.18.3070.1286 [GMT -4:00]

AV: ESET NOD32 Antivirus 3.0 *On-access scanning enabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
SP: ESET NOD32 Antivirus 3.0 *enabled* (Updated) {E5E70D32-0101-4B98-A4D6-D1D15C3BB448}
SP: Spybot - Search and Destroy *enabled* (Updated) {ED588FAF-1B8F-43B4-ACA8-8E3C85DADBE9}
SP: Lavasoft Ad-Watch Live! *enabled* (Updated) {67844DAE-4F77-4D69-9457-98E8CFFDAA22}
SP: Windows Defender *enabled* (Outdated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32�... Read more

A:Google/Yahoo/Bing Results are redirected to other sites

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 12 answers
RELEVANCY SCORE 94.8

I wish I was less of a layperson, and I apologize for this.

My laptop is my oxygen! It is incredibly slow, and performing a google search will pull up relevent links, but when I choose any of them it will redirect to an ad page which has nothing to do with the link I was trying to reach. My McAfee antivirus locks up right before it can resolve the problem, Malwarebytes recognized one severe adware virus but locked up after choosing to delete it. AAAARRRGHHH!!!!

My Hijackthis log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:13:15 AM, on 10/11/2010
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.18928)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\DellTPad\Apoint.exe
C:\Windows\System32\WLTRAY.EXE
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\HP\HP Wireless Comfort Mobile Mouse\TSR\xDaemon.exe
C:\Program Files\Avira\AntiVir D... Read more

A:Windows Vista redirects google search engine results to Ad sites, also windows host stops working and goes to blue screen

Hello and welcome to the forums!My secret agent name on the forums is SweetTech (you can call me ST for short), it's a pleasure to meet you. I am very sorry for the delay in responding, but as you can see we are at the moment being flooded with logs which, when paired with the never-ending shortage of helpers, resulted in the delayed responding to your thread.I would be glad to take a look at your log and help you with solving any malware problems.If you have since resolved the issues you were originally experiencing, or have received help elsewhere, please inform me so that this topic can be closed. If you have not, please adhere to the guidelines below and then follow instructions as outlined further below:Logs from malware removal programs (OTL is one of them) can take some time to analyze. I need you to be patient while I analyze any logs you post. Please remember, I am a volunteer, and I do have a life outside of these forums.Please make sure to carefully read any instruction that I give you. Attention to detail is important! Since I cannot see or directly interact with your computer I am dependent on you to "be my eyes" and provide as much information as you can regarding the current state of your computer.If you're not sure, or if something unexpected happens, do NOT continue! Stop and ask!In Windows Vista and Windows 7, all tools need to be started by right clicking and selecting Run as Administrator!These instru... Read more

Read other 2 answers
RELEVANCY SCORE 93.6

I have tried about 7 methods but none worked.
My list of programs does not include Bing - so I cannot delete it.
I have got just one search engine associated with I E 11 (Google) and set it as Default. However; in that same line of text it says that it is "Not Available".
Anyway; when I select I E; I get MSN combined with Bing.
Please advise me

A:On I E 11 How to Use Google Search Engine instead of Bing

Go to gear icon > manage add-ons > search providers > Find more search providers (at Bottom left) > pick one(or some)

Read other 14 answers
RELEVANCY SCORE 92.8

Hey. Just recently i have been having this problem where when i search for something on google, yahoo, etc. and then click on the page i want to go to i get a completly different page. I go to a different site each time and for me to get to the right page i have to click back then click it again. For example, i searched for "circuit city" on google and then clicked the circuit city main webpage off the list of results. However, i go to a compleltly different website called "http://consumerincentivepromotions.com/rd_p?p=96680&c=8774-ccity250gc_emc_d6&a=2400-3sette." They are usually advertising sites too like that. I have a feeling it has something to do with a srchasst folder in my windows folder because i have tried to delete it (knowing that it has to do with some Searchtoolbar spyware) and it keeps coming back right after i delete it. Any ideas? Here is a HijackThis log.

Logfile of HijackThis v1.99.1
Scan saved at 11:51:17 PM, on 12/14/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Trend Micro... Read more

A:Solved: Get wierd results when i click search results

Read other 13 answers
RELEVANCY SCORE 92.8

I had already run combofix and have the log file generated - attaching the file herewith... please help..
thx

A:Cannot upload any search engine - google bing (any)

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you are unable to create a log because your computer cannot start up successfully please provide detailed information about the Windows version you are using: What we in particular need to know is version, edition and if it is a 32bit or a 64bit system. [/b]If you are unsure about any of these caracteristics, just let us know and we'll help you figuring it out. Please also tell us if you have your Windows CD/DVD handy.Please include a clear description of the problems you're having, along with any steps you may have performed so far.Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.Even if you have already provided information about y... Read more

Read other 2 answers
RELEVANCY SCORE 92.8

A few weeks ago I started noticing the search results from Google would redirect to suspicious websites unrelated to my search terms. I was using Firefox, so I then started using IE and searching via Bing. A few days ago the problem started with Bing as well.

I am running Windows 7 64-bit. I use AVG Free antivirus, and keep the Windows firewall on.

I have run Malwarebytes quick scan, which found and quarantined Trojan.Happili (twice) and Exploit.Drop.9 (also twice) both located in the AppData\Local\Temp\ folder.

Even after removal of these, the problem persists.

A:Search Engine Redirects (Google/Bing)

DownloadTDSSkillerLaunch it.Click on change parameters-Select TDLFS file systemClick on "Scan".Please post the LOG report(log file should be in your C drive) DownloadaswMBRLaunch it, allow it to download latest Avast! virus definitionsClick the "Scan" button to start scan.After scan finishes,click on Save logPost the log results hereDownloadESET online scannerInstall itClick on START,it should download the virus definitionsWhen scan gets completed,click on LIST of found threatsExport the list to desktop,copy the contents of the text file in your reply

Read other 8 answers
RELEVANCY SCORE 92.8

Picked up a search redirector that I can not get rid of. Malwarebytes does not touch it. Webroot secrue anywhere will temporarily remove it but it keeps coming back when computer is left on over night etc. I can't find a perminate way to remove it. I aparently also some vestage of windows system suite that it would be nice to remove if I could find the few pieces. It does not come up but it would be nice to not have combo fix show that it is there. Webroot had me download a file listed as AntiTdl.exe that is supposed to clean it but does not seem to. I could attach it if it would help.

A:search engine redirection google bing

Hello,Please follow the instructions in ==>This Guide<== starting at step 6. If you cannot complete a step, skip it and continue.Once the proper logs are created, then post them in a reply to this topic by using the Add Reply button.If you can produce at least some of the logs, then please create the post and explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the reply and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.Please note that I am not a member of the Malware Removal Team and will not be assisting you in removing the infection. I'm simply helping you to post the information they need in order to assist you.If HelpBot replies to your topic, PLEASE follow Step One so it will report your topic to the team members.Orange Blossom

Read other 3 answers
RELEVANCY SCORE 92.8

Good morning,
I'm having a problem with a search engine redirect. Most results in google and bing are redirected to an undesireable site. Also, when I open IE and type in an address, a new window opens up with an undesirable redirect. In addition to this, I'm also having the following problems:

-"generic host process for Win32 Services" error message
-"No active mixer devices" error message when I try to adjust audio volume
-generally slow running computer
-restarts frequently needed because software freezes when opening

Below is my dds log as well as an attached zip file with the second dds log and the gmer log. Please let me know what I can do to fix this problem. thanks!!
DDS (Ver_10-12-12.02) - NTFSx86
Run by bdavidson at 10:10:08.95 on Tue 12/28/2010
Internet Explorer: 8.0.6001.18702
============== Running Processes ===============
C:\Program Files\Cisco Systems\SSL VPN Client\agent.exe
C:\Program Files\Cisco\Cisco AnyConnect VPN Client\vpnagent.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Broadcom\ASFIPMon\AsfIpMon.exe
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
C:\win32app\ingr\ipshare\clntutil\bin\pidrpcs.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\lotus\notes\ntmulti.exe
C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
C:\WINDOWS\sy... Read more

A:Search Engine Redirect (google, bing, etc.)

Howdy there and welcome to TSF Forums

I'm Steve and I will be helping you throughout this fix.

Before beginning the fix, read this post completely. If there's anything that you do not understand, kindly ask your questions before proceeding. It is IMPORTANT that you don't miss a step. Please perform everything in the correct order/sequence.

Please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription

Please note that the forum is very busy and if I don't hear from you within three days from this initial posting then the thread will be closed.

We will begin with ComboFix.exe. Please visit this webpage for download links, and instructions for running the tool:

http://www.bleepingcomputer.com/comb...o-use-combofix

* Ensure you have disabled all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

Please include the C:\ComboFix.txt in your next reply for further review.

Read other 11 answers
RELEVANCY SCORE 92.8

Hi,
I am getting redirected from Google and Bing seach results page to random unrelated pages.
Avast! is giving a message that there is a rootkit detected on startup at C:\\WINDOWS\system32\drivers\disk.sys but is unable to resolve the issue.
I have access to the XP reinstall disc that came with the computer.
Thank you in advance for your assistance.
Cindy
.
DDS (Ver_11-03-05.01) - NTFSx86
Run by Cindy at 20:50:16.54 on Fri 04/08/2011
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.894.531 [GMT -7:00]
.
AV: avast! Antivirus *Enabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
============== Running Processes ===============
.
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
C:\WINDOWS\system32\Ati2evxx.exe
svchost.exe
svchost.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
c:\Program Files\Zune\ZuneBusEnum.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\stsystra.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\Alwil Software\Avast5\avastUI.exe
... Read more

A:Google and Bing search engine redirect

Hello and welcome. Please follow these guidelines while we work on your PC:Malware removal is a sometimes lengthy and tedious process. Please stick with the thread until I’ve given you the “All clear.” Absence of symptoms does not mean your machine is clean!
Please do not run any scans or install/uninstall any applications without being directed to do so.
Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.
Please subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.

Download ComboFix from one of the following locations:
Link 1
Link 2

VERY IMPORTANT !!! Save ComboFix.exe to your Desktop

* IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this linkDouble click on ComboFix.exe & follow the prompts.
As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a... Read more

Read other 9 answers
RELEVANCY SCORE 92.8

UPDATE 3/28: Tried a Google and Bing search today, and none of the links appear covered by redirects. Before receiving instruction not to make any changes to my system, I ran another Anti-Malware scan. The results:Memory Modules Infected:c:\Users\Michael\AppData\Local\Temp\ftpgent.dll (Trojan.Agent) -> Delete on reboot.Registry Values Infected:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\PkgMtend (Trojan.Agent) -> Value: PkgMtend -> Quarantined and deleted successfully.Files Infected:c:\Users\Michael\AppData\Local\Temp\ftpgent.dll (Trojan.Agent) -> Delete on rebootI am not sure if this will completely erradicate the problem, logs from DDS and GMER (pre-antimalware removal) below:Hello,As of yesterday when I search using Google and Bing I am redirected to various sites when attempting to follow links. The redirect links affect most, but not all of the search results. I am running Windows Vista Home Premium, Firefox version 3.6.16. I have run Malwarebytes Anti-malware, which found three malicious files yesterday, 1 Trojan.Agent and 2 Trojan.Dropper. I deleted these files and restarted. I have also run a full scan using McAfee, which registered and deleted 3 trojans. I am pretty much a novice at most of this stuff, but I can follow directions well. Any help is greatly appreciated.Regards,Mike DDS log:.DDS (Ver_11-03-05.01) - NTFSx86 Run by Michael at 15:4... Read more

A:Search engine redirect (Google, Bing)

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you are unable to create a log because your computer cannot start up successfully please provide detailed information about the Windows version you are using: What we in particular need to know is version, edition and if it is a 32bit or a 64bit system. If you are unsure about any of these caracteristics, just let us know and we'll help you figuring it out. Please also tell us if you have your Windows CD/DVD handy.Please include a clear description of the problems you're having, along with any steps you may have performed so far.Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.Even if you have already provided information about your ... Read more

Read other 2 answers
RELEVANCY SCORE 92.4

I google stuff and click on the links it is redirecting me to a different AD page called like Medolife or something like that. When use a differnt page it seems to work fine.


I could not run the gmer thing because somehow my computer would say something about a computer error happened for safety and will automatically shut down my comp it was a blue screen. I tried to do it in safe mode same problem. The scan wouldnt start when i open the gmer soo i did the instructions it said to uncheck those tabs and clicked scan. When i start the gmer it does a quick scan then stops in like 3 seconds so i saved w/e that scan did, not sure it will help.


I've added a combofix just incase that will help.


DDS (Ver_09-12-01.01) - NTFSx86
Run by Mike at 12:51:44.76 on Sat 02/13/2010
Internet Explorer: 8.0.6001.18882 BrowserJavaVersion: 1.6.0_18
Microsoft? Windows Vista? Home Premium 6.0.6002.2.1252.1.1033.18.3071.1608 [GMT -5:00]

SP: Windows Defender *disabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
SP: SUPERAntiSpyware *disabled* (Updated) {222A897C-5018-402e-943F-7E7AC8560DA7}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:... Read more

A:Browser redirecting me when i click on links on google, bing,yahoo etc.

Hello and Welcome to TSF.

Please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription.

Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.

------------------------------------------------------

Please note that these fixes are not instantaneous. Most infections require more than one round to properly eradicate.

Please stay with me until given the 'all clear' even if symptoms seemingly abate.

Kindly follow my instructions and please do no fixing on your own or running of scanners unless requested by a helper.

------------------------------------------------------

Due to the restrictions on Vista, all tools should be started by right-click > Run as Administrator

If you click 'Start' and have no 'Run' function, please right-click Start > Properties > Start menu tab > Customize button > and tick the 'Display Run' or 'Run command' box > OK > OK.

------------------------------------------------------

Who instructed you to run ComboFix? As stated in the disclaimer you had to pass when running ComboFix, it is not intended for unsupervised use.

As you also should have read here in Step 2 of our NEW INSTRUCTIONS thread:

Why we don't ask you to run ComboFix from the onset ... Read more

Read other 19 answers