Over 1 million tech questions and answers.

Redirect to searchalligator.com for address bar searches and intranet sites in both IE and FF

Q: Redirect to searchalligator.com for address bar searches and intranet sites in both IE and FF

Hello,

My computer is automatically redirecting me searchalligator.com for either single word address bar searches or when looking up intranet sites (but not connected to my intranet via vpn).
This line item pops up every few seconds in my TCP view and the IP address resolves to searchalligator.com. Please help.

I am on a wireless network, if that makes any difference.

Here's my tcpview:
AppleMobileDeviceService.exe 268 TCP 127.0.0.1 27015 0.0.0.0 0 LISTENING
CcmExec.exe 3800 UDP 127.0.0.1 2553 * *
cvpnd.exe 680 TCP 127.0.0.1 62514 127.0.0.1 2487 ESTABLISHED 488 24,400 488 7,808
cvpnd.exe 680 UDP 127.0.0.1 62514 * *
iexplore.exe 1016 UDP 127.0.0.1 1522 * * 1,334 1,334 1,335 1,335
iexplore.exe 3020 UDP 127.0.0.1 1873 * * 20 20 21 21
iexplore.exe 3020 TCP 192.168.0.100 3220 204.2.187.17 80 ESTABLISHED
iexplore.exe 3020 TCP 192.168.0.100 3221 204.2.187.17 80 ESTABLISHED
iexplore.exe 3020 TCP 192.168.0.100 3222 204.2.187.17 80 ESTABLISHED
iexplore.exe 3020 TCP 192.168.0.100 3223 204.2.187.17 80 ESTABLISHED
iexplore.exe 3020 TCP 192.168.0.100 3225 204.2.187.17 80 ESTABLISHED
iexplore.exe 928 TCP 127.0.0.1 3231 127.0.0.1 5152 FIN_WAIT2
jqs.exe 1692 TCP 127.0.0.1 5152 127.0.0.1 2938 CLOSE_WAIT
jqs.exe 1692 TCP 127.0.0.1 5152 0.0.0.0 0 LISTENING
lsass.exe 1728 UDP 0.0.0.0 500 * *
lsass.exe 1728 UDP 127.0.0.1 2500 * *
lsass.exe 1728 UDP 0.0.0.0 4500 * *
mDNSResponder.exe 556 TCP 127.0.0.1 5354 0.0.0.0 0 LISTENING
mDNSResponder.exe 556 UDP 192.168.0.100 5353 * *
mDNSResponder.exe 556 UDP 0.0.0.0 1025 * *
SUPERANTISPYWARE.EXE 3992 TCP 192.168.0.100 2013 209.62.68.168 443 CLOSE_WAIT
SUPERANTISPYWARE.EXE 3992 TCP 192.168.0.100 2014 209.62.68.168 443 CLOSE_WAIT
svchost.exe 148 TCP 192.168.0.100 2869 192.168.0.1 1075 CLOSE_WAIT
svchost.exe 540 TCP 0.0.0.0 135 0.0.0.0 0 LISTENING
svchost.exe 148 TCP 0.0.0.0 2869 0.0.0.0 0 LISTENING
svchost.exe 296 TCP 0.0.0.0 3389 0.0.0.0 0 LISTENING
svchost.exe 632 UDP 192.168.0.100 123 * *
svchost.exe 148 UDP 192.168.0.100 1900 * * 344 99,450
svchost.exe 632 UDP 127.0.0.1 123 * *
svchost.exe 148 UDP 127.0.0.1 1900 * *
svchost.exe 632 UDP 127.0.0.1 2610 * *
System 4 TCP 0.0.0.0 445 0.0.0.0 0 LISTENING
System 4 TCP 192.168.0.100 139 0.0.0.0 0 LISTENING
System 4 UDP 192.168.0.100 137 * * 107 5,350 42 2,100
System 4 UDP 192.168.0.100 138 * *
System 4 UDP 0.0.0.0 445 * *
System 4 TCP 192.168.0.100 3229 64.74.223.39 445 SYN_SENT

Read other answers
RELEVANCY SCORE 200
Preferred Solution: Redirect to searchalligator.com for address bar searches and intranet sites in both IE and FF

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

RELEVANCY SCORE 75.6

Any google affiliated site comes up with a "404 not found, nginx" page. I can do a search on google.com, but when I click on a link from the search it first redirects to dietpuma.com or any ****puma.com site before taking me to the site I want. This problem will spontaneously go away once in a while but always comes back. I've tried solutions I found online about 'hosts' files but didn't work. Any help is much appreciated! I tried to adhere strictly to the instructions found on the 'preparation guide'. Here is the DDS log, I ran GMER and it said 'no modifications found' or something to that effect. I saved the gmer log, but it is blank. Please advise if I did this correctly. Thanks again!
-Andy

.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 9.0.8112.16421
Run by Andy at 1:28:00 on 2012-02-13
Microsoft Windows 7 Home Premium 6.1.7601.1.949.82.1033.18.3999.2644 [GMT -4:00]
.
AV: Norton Internet Security *Disabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: IObit Malware Fighter *Disabled/Updated* {A751AC20-3B48-5237-898A-78C4436BB78D}
SP: Norton Internet Security *Disabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
FW: Norton Internet Security *Enabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\syste... Read more

A:Google sites blocked and searches redirect to various puma.com sites.

Hello and Welcome to the forums!My name is Gringo and I'll be glad to help you with your computer problems.Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.Do not run any other tool untill instructed to do so!Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.Run Combofix:You may be asked to install or update the Recovery Console (Win XP Only) if this happens please allow it to do so (you will need to be connected to the internet for this)Before you run Combofix I will need you to turn off any security software you have running, If you do not know how to do this you can find out >here< or >here<Combofix may need to reboot your computer more than once to do its job this is normal.You can download Combofix from one of these links.Link 1Link 2Link 31. Close any open browsers or any other programs that are open.2. Close/disable all anti virus and anti malware programs so they do not interfere with the runn... Read more

Read other 16 answers
RELEVANCY SCORE 71.6

I have chronicled a thread in the Winows XP forum for a whilehttp://www.bleepingcomputer.com/forums/t/212199/searchalligatorcom/I have totally wiped the hard drive (filling the drive with random 1 or zeroes dd if=/dev/random of = /dev/hda)Installed windows XP using only the drivers supplied by DELLPerformed Windows Updates from Microsoft.Theredirect to search alligator.com occurs when a bad url or a search termis entered in the address bar of a browser (Firefox, Chrome or IE).The default search engine for all of these browsers is www.google.com.The redirect only occurs when using a wireless connection with the 3945abg.The redirect does not occur when using another wireless adapter.The redirect does not occur when using a hard wired Ethernet connection.I have ran Spybot, Adaware, Malwarebytes and Prevx and no spyware has been detected.I have ran Sophos and Clamav Antivirus products and no virii have been detected.The redirect occurs independent of the wireless network in which I connect.

A:searchalligator.com redirect

Is it possible that your router is infected? You could try resetting your router (usually done by sticking a paperclip or small object into the hole on the back of the router for a few seconds).

Read other 21 answers
RELEVANCY SCORE 71.2

Hello,

My first post here. I recently used Malware Bytes (paid edition) and Super Antivirus (free edition) to remove Antimalware Trojan. I thought all was well until all my searches (Google, Yahoo, & Bing) are being redirect to to Ad Sites. Please help, this is my work computer!

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 6:27:57 PM, on 10/21/2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v7.00 (7.00.6002.18005)
Boot mode: Normal
Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrobat_sl.exe
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Online Backup\Agent.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Symantec AntiVirus\VPTray.exe
C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Users\sct12509\Desktop\HijackThis.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,De... Read more

Read other answers
RELEVANCY SCORE 70.4

When I search something in google and the list of findings come up, if I click on any of them I get redirected to an advertisement site.
It redirects to a form of go.google.php then takes me to an ad page.
I have tried searching for people with similar problems but none of the solutions work.
Any help would be appreciated.

Logfile of HijackThis v1.99.1
Scan saved at 7:29:06 PM, on 8/25/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\aspimgr.exe
C:\Program Files\SigmaTel\C-Major Audio\WDM\STacSV.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\sttray.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\hello\Desktop\d2hackmap_v1.14\d2hackmap.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\buoN54HT.exe
\greenteapc... Read more

A:Google searches redirect me to ad sites

Hello and Welcome. Please subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.

---------------------------------------------------------------------------------------------

If you still require assistance with this issue, please do this:

You are using an outdated version of HijackThis. Please uninstall from Add or Remove Programs, and then delete your current version.

Next, download HijackThis to your desktop

Alternate link
Double-click on the file you just downloaded.
Click on the "Unzip" button to install. It will by default install to the directory - C:\Program Files\Trend Micro\HijackThis

Upon install, HijackThis should open for you.

Just close it for now.
Download RSIT by random/random and save it to your desktop.
Double click RSIT.exe to start the tool and click Continue at the disclaimer.
When the scan completes it will open a log named log.txt maximized, and a log named info.txt minimized.
Copy (Ctrl+A then Ctrl+C) and paste (Ctrl+V) the contents of log.txt here.
Please attach info.txt to your post.
To attach a file to a new post, simplyClick the[Manage Attachments] button under Additional Options > Attach Files on the post composition page, and
copy and paste the following into the "Upload File from your Computer" box:C:\rsit\info.txt

Click U... Read more

Read other 2 answers
RELEVANCY SCORE 70.4

This showed up about a week ago. It was sporadic, now it seems to be most search results. McAffee and Malwarebytes do not find any infection, though Malwarebytes frequently stops the redirect stating that I'm attempting to go to a dangerous website. It is often Scour.com, but there are other sites too. My machine is running Windows 7, 64 bit. This occurs in both Internet Explorer and Firefox. I have not included the gmer logs since it notes that it isn't valid for 64bit machines. Thank you for taking your time helping me.

Steph

DDS.txt:

.
DDS (Ver_11-03-05.01) - NTFS_AMD64
Run by steph at 9:47:04.01 on Fri 04/08/2011
Internet Explorer: 8.0.7600.16385 BrowserJavaVersion: 1.6.0_24
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.7928.5777 [GMT -4:00]
.
AV: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {3D54B793-665E-3129-9103-206115370C8A}
FW: McAfee Firewall *Enabled* {BE0ED752-0A0B-3FFF-80EC-B2269063014C}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNet... Read more

A:Google Searches Redirect to Other Sites, both FF and IE

I tried many things listed on the other threads, and it *seems* that running ComboFix did the trick. So if you all would like to ignore me, feel free. I will post again if the problem should return.

THANK YOU!!

Read other 2 answers
RELEVANCY SCORE 70.4

Hi,

Whenever I use Google on either Firefox (3.5.7), or Internet Explorer (IE8), the search results come up fine. However, when I click on a result, it SOMETIMES redirects me to some other, random page. Other times it works ok.

Please help!

Here is a HijackThis report:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:18:42, on 31/01/2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Dell\DellDock\DockLogin.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
C:\Windows\system32\AERTSrv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files... Read more

A:Google searches redirect to different sites

From the look of things, the ComboFix seems to be recommended to everyone with this problem, so I took the liberty of running it myself. Here is the log file:

ComboFix 10-01-30.07 - Jim 31/01/2010 19:29:58.2.2 - x86
Microsoft? Windows Vista? Home Premium 6.0.6002.2.1252.44.1033.18.2036.1055 [GMT 0:00]
Running from: c:\users\Jim\Desktop\comfix.exe
AV: Norton Internet Security *On-access scanning disabled* (Updated) {E10A9785-9598-4754-B552-92431C1C35F8}
FW: Norton Internet Security *disabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220}
SP: Norton Internet Security *disabled* (Updated) {CBB7EE13-8244-4DAB-8B55-D5C7AA91E59A}
SP: Spybot - Search and Destroy *disabled* (Updated) {ED588FAF-1B8F-43B4-ACA8-8E3C85DADBE9}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.

((((((((((((((((((((((((( Files Created from 2009-12-28 to 2010-01-31 )))))))))))))))))))))))))))))))
.

2010-01-31 19:36 . 2010-01-31 19:36 -------- d-----w- c:\users\Public\AppData\Local\temp
2010-01-31 19:36 . 2010-01-31 19:36 -------- d-----w- c:\users\LogMeInRemoteUser\AppData\Local\temp
2010-01-31 19:36 . 2010-01-31 19:36 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-01-31 19:36 . 2010-01-31 19:36 -------- d-----w- c:\users\Darren\AppData\Local\temp
2010-01-31 18:18 . 2010-01-31 18:18 -------- d-----w- c:\program files\Trend Micro
2010-01-31 17:44 . 2009-12-14 09:00 84912 ----a-w- c:\programdata\Symantec\Definitions\VirusDefs\20100131.003\NAVENG.... Read more

Read other 3 answers
RELEVANCY SCORE 70.4

When I do Google searches, much of the time the links I click will redirect me to one adsearch site or another, which then redirects me to an ad site. When I run command/cmd, it just restarts explorer. Various programs have randomly been getting 'critical errors' and 'need to close'. I have the free versions of AVG and Malware-Bytes installed. I tried getting combofix.exe off your site, but when I tried to download it, firefox closed itself. When I did get it off another computer via USB drive, it wouldn't run. Any help would be very appreciated.

A:Google searches redirect to ad sites

Lets start here:The process of cleaning your computer may require temporarily disabliling some security programs. If you are using SpyBot Search and Destroy, please refer to Note 2 at the bottom of this page.Please download Malwarebytes Anti-Malware and save it to your desktop.alternate download link 1alternate download link 2Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan.If an update is found, the program will automatically update itself.Press the OK button to close that box and continue.If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to install.On the Scanner tab:Make sure the "Perform Quick Scan" option is selected.Then click on the Scan button.If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button. The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all obj... Read more

Read other 13 answers
RELEVANCY SCORE 70.4

I realized I had a problem when my Google search links started redirecting me to pharmaceutical sites, or sometimes just not loading at all. I notice Firefox is always loading something like "100ksearches" in the bottom left of the browser before it redirects or fails to load. I've been all over the internet looking for solutions, downloading a bunch of anti-virus/malware programs and scanning repeatedly. I can't find anything unusual and I don't know any better myself as to exactly what is going on. The only thing I can tell is that every person has a different solution for a similar problem and none of them seem to work. I found this website in one of the comments sections and thought maybe someone wiser than I could help explain what is going on. The problem is frustrating to say the least, and also nerve racking because I don't know the extent to which my personal information is being compromised. Does anyone have any insight? Thanks so much!

A:Searches Redirect to Junk Sites

What all have you downloaded and tried?

Read other 9 answers
RELEVANCY SCORE 70

I have had topics posted in the following forums and I have been requested to start a new topic here.http://www.bleepingcomputer.com/forums/t/212199/searchalligatorcom/http://www.bleepingcomputer.com/forums/t/223297/searchalligatorcom-redirect/I have totally wiped the hard drive (filling the drive with random 1 or zeroes dd if=/dev/random of = /dev/hda)Installed windows XP using only the drivers supplied by DELLPerformed Windows Updates from Microsoft.Theredirect to search alligator.com occurs when a bad url or a search termis entered in the address bar of a browser (Firefox, Chrome or IE).The default search engine for all of these browsers is www.google.com.The redirect only occurs when using a wireless connection with the 3945abg.The redirect does not occur when using another wireless adapter.The redirect does not occur when using a hard wired Ethernet connection.I have ran Spybot, Adaware, Malwarebytes and Prevx and all of the reccommeded spyware removal tools in the previously mentioned forum posts - no spyware has been detected.I have ran Sophos and Clamav Antivirus products and no virii have been detected.The redirect occurs independent of the wireless network in which I connect. additionally I have installed a freshly imaged hard drive from DELL and was able to operate normally with my hardware and the stock drivers from the Intel website - so the problem is not hardware relatedI was requested to download and run DDS - the results are embedded below:DDS (Ver_09-05-14.... Read more

A:searchalligator.com redirect on wireless connection

any suggestions ?RG===========Hello While we understand your frustration at having to wait, please note that Bleeping Computer deals with several hundred requests for assistance such as yours on a daily basis. As a result, our backlog is quite large as are other comparable sites that help others with malware issues. Although our HJT Team members work on hundreds of requests each day, they are all volunteers who work logs when they can and are able to do so. No one is paid by Bleeping Computer for their assistance to our members.Further, our malware removal staff is comprised of team members with various levels of skill and expertise to deal with thousands of malware variants, some more complex than others. Although we try to take DDS/HJT logs in order (starting with the oldest), it is often the skill level of the particular helper and sometimes the operating system that dictates which logs get selected first. Some infections are more complicated than others and require a higher skill level to remove. Without that skill level attempted removal could result in disastrous results. In other instances, the helper may not be familiar with the operating system that you are using, since they use another. In either case, neither of us want someone to assist you who is not familiar with your issue and attempt to fix it.We ask that once you have posted your log and are waiting, please DO NOT "bump" your thread or make further replies until it has been responded to by a member ... Read more

Read other 3 answers
RELEVANCY SCORE 69.6

Hi Everyone. I'm new here, and this is my first time posting a topic. I use Mozilla Firefox 3.6.4 on Windows 7, and when I click on links from Google search, it redirects me to other sites. This happens about 25% of the time, and I have to click on the same link 4-7 times before it directs me to the right site. Occasionally, ads pop up even though I didn't click on anything. I ran a scan with BitDefender, but it didn't detect anything. If anyone can help me with this, it would be great. I've pasted a HijackThis log below. Thanks!Logfile of Trend Micro HijackThis v2.0.2Scan saved at 2:39:45 PM, on 6/25/2010Platform: Unknown Windows (WinNT 6.01.3504)MSIE: Internet Explorer v8.00 (8.00.7600.16385)Boot mode: NormalRunning processes:C:\windows\system32\Dwm.exeC:\windows\system32\taskhost.exeC:\windows\Explorer.EXEC:\Windows\System32\igfxtray.exeC:\Windows\System32\hkcmd.exeC:\Windows\System32\igfxpers.exeC:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exeC:\Program Files\System Control Manager\MGSysCtrl.exeC:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exeC:\Program Files\Common Files\Java\Java Update\jusched.exeC:\Program Files\Microsoft Office\Office12\GrooveMonitor.exeC:\Program Files\iTunes\iTunesHelper.exeC:\Windows\... Read more

A:Links on Google searches redirect to other sites

Hi Rigen,Welcome to Bleeping Computer!My name is mpascal, and I will be helping you fix your problem.Before we begin, I would like to make a few things clear so that we can fix your problem as efficiently as possible:Be sure to follow all my instructions carefully! If there is anything you don't understand, don't hesitate to ask.Please do not do anything or perform other steps unless I have asked you to do so.Please make sure you post all logs I ask you to, and make sure that the entire log gets posted.Don't attach any logs unless asked. Posting them in the forums will make them easier to analyze.If you are unsure of how to reply, or need help with anything regarding the website, please look here.STEP 1 - Preparation GuidePlease follow the instructions in the Preparation Guide until you have reached step 6. You may stop once you have finished step 6 and continue with the instructions here.STEP 2 - MBAMPlease download Malwarebytes Anti-Malware (v1.44) and save it to your desktop.Download Link 1Download Link 2MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.For instructions with screenshots, please refer to the How to use Malwarebytes' Anti-Malware Guide.When... Read more

Read other 15 answers
RELEVANCY SCORE 69.6

When using the Google search engine the links that I want to go to get redirected to a random, various ad sites. It does not happen all the time. Some help would be awesome. Thanks.

DDS file:
.
DDS (Ver_2011-06-23.01) - NTFSAMD64
Internet Explorer: 7.0.6001.18000
Run by Thien at 8:48:58 on 2011-08-13
Microsoft? Windows Vista? Home Premium 6.0.6001.1.1252.1.1033.18.4027.2091 [GMT -7:00]
.
AV: Norton 360 *Enabled/Updated* {88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Norton 360 *Enabled/Updated* {33A8BBD2-AA01-20A2-213B-0B8EB45B02E8}
FW: Norton 360 *Enabled* {B0F2DB13-C654-2E74-30D4-99C9310F0F2E}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\taskeng.exe
C:... Read more

A:Google searches redirect to unwanted sites.

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

Read other 16 answers
RELEVANCY SCORE 69.6

Hi Everyone. I'm new here, and this is my first time posting a topic. I use Mozilla Firefox 3.6.6 on Windows 7, and when I click on links from Google search, it redirects me to other sites. This happens about 25% of the time, and I have to click on the same link 4-7 times before it directs me to the right site. Occasionally, ads pop up even though I don't click on anything. I ran a scan with BitDefender, but it didn't detect anything. If anyone can help me with this, it would be great. I've pasted my HijackThis log below. Thanks!

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:41:21 PM, on 6/28/2010
Platform: Unknown Windows (WinNT 6.01.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\windows\system32\taskhost.exe
C:\windows\system32\Dwm.exe
C:\windows\Explorer.EXE
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\System Control Manager\MGSysCtrl.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe
C:\Windows\System32\spool\drivers\w32x86\3\E_FATIFCA.EXE
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\Ar... Read more

A:Links on Google searches redirect to other sites

Download TDSSKiller and save it to your Desktop.
Extract the file and run it.
Once completed it will create a log in your C:\ drive
Please post the contents of that log

 

Read other 1 answers
RELEVANCY SCORE 69.6

When I do a google search and I click on the hyperlink, I am not taken to the pages I am trying to go to. I am taken to random advertisement pages. I have run malware-bytes and prevx, both show clean. This redirect problem happens under mozzilla and IE

The URL that causes the redirects 83.133.124.109 that is the main website that all the redirects come from an example of one of the redirects is
83.133.124.109/click.php?c=66b866880b771b1b7dd6f9b9ec00



DDS (Ver_09-12-01.01) - NTFSx86
Run by Administrator at 21:36:22.95 on Sat 01/02/2010
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1979.1348 [GMT -6:00]

AV: avast! antivirus 4.8.1368 [VPS 091229-0] *On-access scanning enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
AV: McAfee VirusScan Enterprise *On-access scanning disabled* (Updated) {918A2B0B-2C60-4016-A4AB-E868DEABF7F0}
AV: Prevx 3.0 *On-access scanning enabled* (Updated) {D486329C-1488-4CEB-9CC8-D662B732D901}

============== Running Processes ===============

C:\WINDOWS\system32\TAMSvr.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\Program Files\Intel\WiFi\bin\S24EvMon.exe
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\WINDOWS\system32\agrsmsvc.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\Program Files\Prevx\prevx.exe
C:\Program Files\Intel... Read more

A:Google searches redirect to random sites

Welcome to the forum ramscards05
Are you still in need of assistance ? if so are there any changes since you last posted and what has been done ?

Read other 3 answers
RELEVANCY SCORE 69.6

Like others who have posted here, I find that when I perform a Google search, I am directed to pages that look like good matches according to the blue text, but which actually turn out to be redirected to unrelated sites, including security-antivirus.com, freescan.antivirus.com, www.strikingoffers.com, www.monstermarketplace.com, and stuff.maxim.com, to name just a few recurrent examples.

Before and while this problem has occurred, I have had McAfee Internet Security 2009 installed and running, with automatic updates that take place daily. System scans run after this problem appeared indicated no problem. The firewall is in place. Since I have discovered this problem I have downloaded and run Spybot-Search and Destroy, which told me it detected no problem. But I definitely think there is one! I am careful with my browsing (no adult sites, no questionable sites) and don't click on links in emails of unknown origin (and in fact generally don't open emails of unknown origin) so I am a little chagrined at having picked up this bug somewhere.

In addition to the search redirection, my C: drive has been making the kind of noise it makes when it is running some kind of process in the background--it makes this sound almost constantly. At times, the computer's performance slows considerably, but at other times it seems fine (though I'm limiting my time on this computer while the problem is going on).

Here is my log that I got by following the steps laid out in the instru... Read more

A:Google searches redirect to unrelated sites

Welcome to the BleepingComputer Forums. Since it has been a few days since you scanned your computer with HijackThis, we will need a new HijackThis log. If you have not already downloaded Random's System Information Tool (RSIT), please download Random's System Information Tool (RSIT) by random/random which includes a HijackThis log and save it to your desktop. If you have RSIT already on your computer, please run it again. Double click on RSIT.exe to run RSIT. Click Continue at the disclaimer screen. Please post the contents of log.txt. Thank you for your patience.Please see Preparation Guide for use before posting about your potential Malware problem. If you have already posted this log at another forum or if you decide to seek help at another forum, please let us know. There is a shortage of helpers and taking the time of two volunteer helpers means that someone else may not be helped. Please post your HijackThis log as a reply to this thread and not as an attachment. I am always leery of opening attachments so I always request that HijackThis logs are to be posted as a reply to the thread. I do not think that you are attaching anything scary but others may do so. While we are working on your HijackThis log, please: Reply to this thread; do not start another! Do not make any changes on your computer during the cleaning process or download/add programs on your computer unless instructed to do so. Do not run any other tool until instruc... Read more

Read other 16 answers
RELEVANCY SCORE 69.6

I see that this seems to be a relatively-prevalent problem recently. Google search link results are randomly redirecting to what I am sure are malware sites. Thankfully, I have NoScript active, so the pages don't actually load. Still, all attempts to remove the problem using Windows Defender, UnHackMe, Avast, and Housecall have failed I even changed over my DNS to OpenDNS in the hopes that it would solve the problem. I didn't think it would, and it didn't, but it was worth a shot.

I am running Windows 7 Ultimate on a Lenovo IdeaPad Y510.

Thanks so much for your help.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:07:13 PM, on 10/24/2009
Platform: Unknown Windows (WinNT 6.01.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Grass Valley\ProCoder 3\Kernel\PNXSERVR.exe
C:\Program Files\UnHackMe\hackmon.exe
C:\Users\Geekza\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Windows\system32\igfxsrvc.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Windows\system32\SearchFilter... Read more

A:Google searches redirect to random sites

I ended up reverting to a restore point created yesterday, when all was well. It seems to have worked. If the problem rears its ugly head again, I'll come back and post again. Thanks!
 

Read other 1 answers
RELEVANCY SCORE 68.8

I noticed last few weeks that my laptop has been behaving strangely when I do web searches and get redirected to many fake sites without logitimate results presented. When I am logged in with my google account, however, I can search google with normal accuracy and no issues, so this seems to happen when I am not logged in to google account, and rather just simply searching the web. I downloaded and ran several malware programs including Spybot S&D, Malwarebytes, and AdAware with no success. I have XP firewall turned on now, and since then installed McAfee anti-virus suite which is running. See HijackThis log below. Not sure what's infecting it, but it won't go away. ThanksDDS (Ver_09-01-07.01) - NTFSx86 Run at 14:50:04.60 on Thu 01/08/2009Internet Explorer: 7.0.5730.13Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.3070.2318 [GMT -5:00]AV: McAfee VirusScan *On-access scanning enabled* (Updated)FW: McAfee Personal Firewall *enabled*============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcssvchost.exesvchost.exeC:\WINDOWS\System32\WLTRYSVC.EXEC:\WINDOWS\System32\bcmwltry.exeC:\Program Files\Lavasoft\Ad-Aware\aawservice.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Synaptics\SynTP\SynTPEnh.exeC:\WINDOWS\system32\rundll32.exeC:\WINDOWS\system32\... Read more

A:Google, Yahoo Searches Redirect to fake sites

Howdy, my name is Hoov, and I will be helping you with your dilemma. Sorry it took so long to get you help.Please make sure you watch this thread for responses. If you click the options tab at the top of your first post, you can select to track this thread. Here is what I am asking you to do during the repair of your computer*Tell me everything that you have done, if anything, to try and fix this problem.*Please only use 1 forum to help clear up your problem. Posting on more than 1 and following instructions from more than 1 forum will cause those helping you to pull out thier hair.*Follow my instructions - If you can't for some reason, or if you don't understand something, please tell me. If you deviate from my instructions, tell me, it may make a difference on where we go. Don't install anything, even other programs that have nothing to do with security or malware, it could cause things to change, and I would never know it. *Have faith. I will do all I can to get your computer working, and if I can't - someone else here will know something else to try. *Stick with me to the end. My aim is to fix your problems, and give you the tools and knowledge to keep this from happening again.Now onto trying to fix your computer. Please download Malwarebytes Anti-Malware and save it to your desktop.alternate download link 1alternate download link 2Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.When the installation begins, follow th... Read more

Read other 2 answers
RELEVANCY SCORE 68.8

Hello,

First time forum poster here.

I'm experiencing chronic browser issues which is almost surely malware related. I use Firefox 99% of the time, with IE as a backup. In the last few months I've experienced very odd behavior in Firefox. First, I usually need to click on the Firefox icon in the taskbar twice before it will actually load and show the browser screen. In Task Manager, I see two active instances of Firefox in the processes section. Second, Firefox runs fine at a normal pace, but at least once every 5 minutes, a new browsing tab will open in Firefox and a suspicious ad or search page will load with a very convoluted URL. A pop-up button almost surely appears as well, sometimes saying I've won a prize, click here, etc, etc. I can close those with out issue. Third, when I click on search links that appear on a search result page from Google or Yahoo(only two I use at the moment), the desired URL loads for a second, then rapidly re-routes to an undesired URL for a somewhat similar search. This happens to all links in a search result page for Google or Yahoo.

I have run MalwareBytes, Avast Free Antivirus, Spyware Doctor w/ AV(currently uninstalled), gmer, and CCleaner, all to no avail.

At one point 1.5 months ago, my outbound Internet was practically disabled. I could not update my AV, load web pages, or ping anything. Strangely, Windows Update was able to function fine, or a boot-up AV could update itself while in DOS. This was fixed by a... Read more

A:Firefox & IE redirect searches and loan random ad sites

Hi imbiber, and welcome to Bleeping Computer.Firstly,Download OTL.exe by OldTimer to your Desktop.Close all windows and double click OTL.exe.In the "Custom Scans/Fixes" window (under the light green bar) paste the following in bold:

netsvcs
drivers32
%SYSTEMDRIVE%\*.*
%systemroot%\*. /mp /s
CREATERESTOREPOINT
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs

Click Run Scan and let the program run uninterrupted.When the scan completes, it will open two Notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL. Post both logs in this thread.You may need to use two posts to get it all.Secondly,Download TDSSKiller.zip and extract TDSSKiller.exe to your Desktop.Execute TDSSKiller.exe by doubleclicking on it.Press Start ScanIf Malicious objects are found, ensure Cure is selected (it should be by default).Click Continue then click Reboot now.
Once complete, a log will be produced at the root drive which is typically C:\

For example, C:\TDSSKiller.2.4.0.0_24.07.2010_13.10.52_log.txt
Please post that log here.

Read other 3 answers
RELEVANCY SCORE 68.8

I seem to be having the same problem that many others are having where I open IE or safari, do a google search and then I see this "overclick" redirection and the results take me to random sites. I have tried both Malware Bytes and Ad-aware, both did nothing. I also have noticed that there doesnt seem to be a problem if I am browsing using AOL 9.1. Also of note, before I found BleepingComputer.com for help I found another forum that reccomended d/l ComboFix. I ran the program, and noticed that it sped the computer up a bit, but I am still getting overclick redirects. Little did I know but you guys (Bleepingcomputer.com) designed the combofix program. Anyway after some other searches I found you guys. (wish I started here first.) Any help would be great. Thanks.
DDS (Ver_09-06-26.01) - NTFSx86
Run by Tyler at 18:45:19.48 on Tue 07/21/2009
Internet Explorer: 8.0.6001.18783
Microsoft? Windows Vista? Home Premium 6.0.6002.2.1252.1.1033.18.2008.957 [GMT -5:00]

SP: Lavasoft Ad-Watch Live! *disabled* (Updated) {67844DAE-4F77-4D69-9457-98E8CFFDAA22}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows�... Read more

A:Google and Yahoo Searches Redirect to other sites in IE and Safari

Hi,

Sorry for delayed response. Forums have been really busy. If you still need help with this post a fresh dds log, please. Also, include contents of c:\ComboFix.txt file.

Read other 2 answers
RELEVANCY SCORE 68.8

google search works correct but clicking on provided links redirect to different websites only on 3rd click it redirect to correct website.Ran Hijackthis, Norton Antivirus, spyboot, mbam.Please help.Here is a latest Hijack file after all cleanup:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 9:10:46 PM, on 10/22/2009Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXED:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exeC:\Program Files\Bonjour\mDNSResponder.exeD:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\LTSMMSG.exeC:\WINDOWS\System32\ezSP_Px.exeC:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B... Read more

A:Google/yahoo searches redirect to random sites

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 19 answers
RELEVANCY SCORE 68.8

Google search redirects through clickfraud.com to advertising sites.

I live on google search, so it's been very tough for me. I am an internet marketer.

here is my log file


DDS (Ver_09-12-01.01) - NTFSx86
Run by laci at 12:03:36.89 on Thu 03/04/2010
Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_18
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3134.1773 [GMT -5:00]

AV: ESET Smart Security 3.0 *On-access scanning enabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
FW: ESET Personal firewall *enabled* {E5E70D32-0101-4340-86A3-A7B0F1C8FFE0}

============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\mnmsrvc.exe
C:\Program Files\PCPitstop\PCPitstopScheduleService.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\TeamViewer\Version4\TeamViewer_Service.exe
C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe
C:\Program Files\Google\Update\1.2.183.17\GoogleCrashHandler.exe
C:\Program Files\TeamViewe... Read more

A:Google searches redirect through clickfraud.com to advertising sites...

Hi,

DNA
UseNeXT

Above listed ones are P2P file sharing programs. P2P downloads are nowadays one of those things that most likely bring infection into the system. My recommendation is to uninstall these (and other if present) P2P file sharing programs.


Please visit this webpage for download links, and instructions for running ComboFix tool:

http://www.bleepingcomputer.com/comb...o-use-combofix

Please ensure you read this guide carefully first.


Please continue as follows:
Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix, link
Remember to re-enable them afterwards.

Click Yes to allow ComboFix to continue scanning for malware.

When the tool is finished, it will produce a report for you.

Please include the following reports for further review, and so we may continue cleansing the system:

C:\ComboFix.txt
New dds log.

A word of warning: Neither I nor sUBs are responsible for any damage you may have caused your machine by running ComboFix. This tool is not a toy and not for everyday use.

Read other 19 answers
RELEVANCY SCORE 67.2

The search results for any search engine in Firefox/IE have been redirected to advertisement websites. Also, every 15 minutes or so, a new tab will open of its own accord with similar advertisement websites. Looks similar to a problem a lot of people are having. I was unable to obtain the GMER log. I ran it a few times and it either blue-screened or froze up. Below is the DDS log and I attached the other log. Thanks in advance for the help.DDS (Ver_10-03-17.01) - NTFSx86 Run by Kelly Williams at 11:43:28.73 on Sat 06/12/2010Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_19Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2046.1365 [GMT -5:00]AV: Symantec Endpoint Protection *On-access scanning enabled* (Updated) {FB06448E-52B8-493A-90F3-E43226D3305C}============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcsC:\Program Files\Symantec AntiVirus\Smc.exesvchost.exesvchost.exeC:\Program Files\Common Files\Symantec Shared\ccSvcHst.exeC:\WINDOWS\System32\WLTRYSVC.EXEC:\WINDOWS\System32\bcmwltry.exeC:\WINDOWS\system32\spoolsv.exesvchost.exeC:\Program Files\Apoint\Apoint.exeC:\WINDOWS\system32\rundll32.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\Program ... Read more

A:Firefox/IE searches results redirect to advertisement site; Occasional pop ups for the same sites

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Do not Attach logs unless I ask you to.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.Do not run any other tool untill instructed to do so!In the upper right hand corner of the topic you will see a button called Options. If you click on this in the drop-down menu you can choose Track this topic. By doing this and then choosing Immediate E-Mail notification and then clicking on Proceed you will be advised when we respond to your topic and facilitate the cleaning of your machine.Note** If you are having problems posting the complete log into this thread upload them here http://www.rapidshare.com/ and post the links in this thread Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.Gmer is the best but can be hard to get a log lets try this and see what we get.Scan With RKUnHookerPlease Download Rootkit Unhooker Save it to your desktop.Now double-click on RKUnhookerLE.exe to run it.Click the Report tab, then click Scan.Check (Tick) Drivers, Stealth, Files, Code Hooks. Uncheck the rest. then Click OK.Wait till the scanner has finished and ... Read more

Read other 20 answers
RELEVANCY SCORE 66.8

Until recently, I could enter text strings in the address bar in IE and Chrome and search results would be returned.  Now whenever I do this, I get a message saying that Malwarebytes has blocked a potentially malicious site.  
 
Here's the message that pops up whenever I try to search as previously mentioned:
 
Malwarebytes Anti-Malware
Successfully blocked access to a potentially malicious website: 64.20.54.67
Type: Outgoing
Port: 56434, Process: Avastsvc.exe
 
Here's my system info:
 
OS Name Microsoft Windows 7 Professional
Version 6.1.7601 Service Pack 1 Build 7601
Other OS Description Not Available
OS Manufacturer Microsoft Corporation
System Name SOUTHWOODS
System Manufacturer Dell Inc.
System Model OptiPlex 780
System Type X86-based PC
Processor Intel® Core™2 Duo CPU     E8400  @ 3.00GHz, 3000 Mhz, 2 Core(s), 2 Logical Processor(s)
BIOS Version/Date Dell Inc. A03, 2/13/2010
SMBIOS Version 2.5
Windows Directory C:\Windows
System Directory C:\Windows\system32
Boot Device \Device\HarddiskVolume1
Locale United States
Hardware Abstraction Layer Version = "6.1.7601.17514"
User Name SouthWoods\Tom
Time Zone Central Daylight Time
Installed Physical Memory (RAM) 8.00 GB
Total Physical Memory 2.96 GB
Available Physical Memory 490 MB
Total Virtual Memory 5.93 GB
Available Virtual Memory 3.04 GB
Page File Space 2.96 GB
Page File C:\pagefile.sys
 
Browser Info:
 
Chrome: Version 27.0.1453.116 m
IE: Ver 10.0.9200.... Read more

A:Unable to Enter Searches in Address Bar - Redirect to http://search.startnow.com

Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2 SecurityCheck may produce some false warning(s), so leave the results reading to me. Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeClick Go and post the result. Download Malwarebytes' Anti-Malware (aka MBAM): http://www.malwarebytes.org/products/malwarebytes_free to your desktop.* Double-click mbam-setup.exe and follow the prompts to install the program.* At the end, be sure a checkmark is placed next to Update Malwarebytes' Ant... Read more

Read other 9 answers
RELEVANCY SCORE 66.4

Hello
We are testing Windows 10 1703 prior to rolling it out to our estate and have come across an issue with Internet Explorer Site Zoning and just wondering if anyone else has seen the issue.
So on Windows 7, 8.1 and Windows 10, 1511 and 1607 using IE11. We have a SharePoint intranet site setup on intranet.example.co.uk. We use a proxy so we have a list of sites that by pass the proxy so for example we have *.example.co.uk in the bypass
proxy exceptions. On the above clients OS we browse to the site in IE and it loads, checking the zone it has picked it up as 'Local Intranet' so seems to use the 'Automatic logon on in Intranet Zone' setting. - all good.
Just for clarity these settings are same in IE on all versions. as are the default security options.

When we do the same thing on Windows 10 1703 it results in the user being prompted for credentials. the same proxy exceptions settings are applied as above. Entering the username/password allows access to the site. Checking the zone and the site is
being seen as an 'internet site'. This issue also appears in Chrome and Edge and only on Windows 10 1703
Adding intranet.example.co.uk to the bypass list makes no difference either, the only thing that does work is by adding intranet.example.co.uk into the Local Intranet Zone sites list - again all other settings are the same as above and work on
previous versions of Windows.
So the question is has Microsoft changed something in IE o... Read more

Read other answers
RELEVANCY SCORE 66.4

IE11 tel: Link does not work in trusted sites or intranet sites
If the site is in internet zone the link does work.

Any hints for a fix?

Read other answers
RELEVANCY SCORE 64.4

Hi Guys,

Original post:

http://www.techsupportforum.com/f100...es-368470.html

Im new here. Please help me on this. Everytime I tried to browse to our intranet sites, it redirects me to some 'malicious' internet sites. I can't access all of our intranet sites now, since last week. And a lot of pop ups are showing whenever I tried to browse the web, very irritating..

Your help will be greatly appreciated..

=============== DDS.txt ===========================

DDS (Ver_09-03-16.01) - NTFSx86
Run by ADMIN at 11:31:27.28 on Mon 04/20/2009
Internet Explorer: 7.0.5730.11
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1014.328 [GMT 8:00]

AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated)
AV: Microsoft Forefront Client Security *On-access scanning enabled* (Updated)
FW: Sygate Security Agent *enabled*

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
c:\Program Files\Microsoft Forefront\Client Security\Client\Antimalware\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
C:\Program Files\Sygate\SSA\smc.exe
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
C:\Program Files\Microsoft Forefront\Client Security\Client\SSA\FcsSas.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\M... Read more

A:Intranet Sites Redirected to Other Internet Sites

Hello and Welcome to TSF.

Please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription.

Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.

------------------------------------------------------

It appears that you have two antivirus programs installed and running, AVG and Microsoft Forefront Client Security. While this may seem like better protection, they can actually conflict with one another and cause system instability or even system hangs. Please choose one to keep and uninstall the other via Add or Remove Programs in your Control Panel.

------------------------------------------------------

Please note that these fixes are not instantaneous. Most infections require more than one round to properly eradicate.

Please stay with me until given the 'all clear' even if symptoms seemingly abate.

Kindly follow my instructions and please do no fixing on your own or running of scanners unless requested by a helper.

------------------------------------------------------

Please visit this webpage for download links, and instructions for running ComboFix:

http://www.bleepingcomputer.com/comb...o-use-combofix

* Ensure you have disabled all antivirus and antimalware programs so they do not inter... Read more

Read other 9 answers
RELEVANCY SCORE 62

Hi Guys,

Im new here. Please help me on this. Everytime I tried to browse to our intranet sites, it redirects me to some 'malicious' internet sites. I can't access all of our intranet sites now, since last week. And a lot of pop ups are showing whenever I tried to browse the web, very irritating..

Your help will be greatly appreciated..

Here's my log from HijackThis. I don;t have any idea how to interpret this..
-------------------------------------------------------
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:02:13 AM, on 4/20/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
c:\Program Files\Microsoft Forefront\Client Security\Client\Antimalware\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Sygate\SSA\smc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
C:\Program Files\Microsoft Forefront\Client Security\Client\SSA\FcsSas.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\system32\CCM\CLICOMP\RemCtrl\Wuser32.exe
C:\WINDOWS\system32\CCM\Ccm... Read more

A:Please Help. :( Intranet Sites Redirected to Other Sites

Hello and welcome to TSF.

HijackThis is no longer the preferred initial analysis tool in this forum

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Read other 1 answers
RELEVANCY SCORE 60.8

I can not consistently load pages using IE8 on my local intranet. I never receive a "page not found" error. You just get a "wait for..." message in the progress bar and nothing ever happens.

This only affects my PC. All other PCs in the network load the pages without issue.

I do develop web applications on this PC, so not sure it software or settings on my PC are preventing a consistent load.

Any help is appreciated.
 

A:IE and Intranet sites

Read other 7 answers
RELEVANCY SCORE 59.6

I am using the browser Internet Explorer7 . I am trying to open the 'Local Intranet' sites but i am unable to open the local sites. Please any one help me to open the local intranet sites using IE7 browser.

Thank You,
Jug

A:Can't Open Local Intranet sites Using IE7

what happens when you try and open them

Read other 2 answers
RELEVANCY SCORE 59.6

Hi

I'm not sure that anyone can help me with this problem but I'd like to ask.

DETAILS:

IBM Thinkpad T22 Laptop
Windows 2000 Professional

A user at our company connects to an internal intranet website. The web server is located in the US (we are in the UK) and so its a bit slow but ok.

When he gets to a certain site he clicks a link that should open an Excel document. He clicks the link and his pc appears to freeze up. I checked task manager and IE is still running, cpu usage is around 3%. If you wait for 8 minutes (timed it a few times) the document opens up fine.

I logged the user off and logged on as myself. I accessed the link and the document opend up with 10 seconds!

Things I have tried:

1. Ran an IE browser repair.
2. Rebuilt the users Windows 2000 Profile.
3. Deleted Temp Internet Files including Index.dat
4. Detect and Reapir in Excel (just in case!)

Its not a major problem but the document should open up in about 10-15 seconds instead of 8 minutes.

Does anyone have any suggestions for me?

Regards

Pileyrei
 

A:Problems accessing intranet sites

Anyone?
 

Read other 1 answers
RELEVANCY SCORE 59.2

Hello
This thanksgiving i was download a few files from the internet.. and wha thappened next is that .. whenever i search for something on google, it redirects to a new site that are allll maliciious sites/porn sites !! I am scared to death as this is my office laptop and i am not the kind to browse for this sort of stuff, especially on my office laptop ! I am sure there is a lot of viruses/malwares infecting my laptop . I tried running sophos antivirus , avast antivirus (which did remove a few viruses)) , followed by malware-byte antimalware and spyware doctor. The problem still remains !! I have tried this on IE , Firefox and Chrome. Problem persists on ALL of them !!
Please help me ... here is the contents of the dds.txt pasted below , and the attach.txt and ark.txt are attached. Thanks !!!!

DDS.txt ---
DDS (Ver_09-11-29.01) - NTFSx86
Run by 203017980 at 12:18:36.74 on Mon 11/30/2009
Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_10
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.2038.1152 [GMT -6:00]

AV: Spyware Doctor with AntiVirus *On-access scanning disabled* (Updated) {D3C23B96-C9DC-477F-8EF1-69AF17A6EFF6}
AV: Sophos Anti-Virus *On-access scanning enabled* (Updated) {3F13C776-3CBE-4DE9-8BF6-09E5183CA2BD}
AV: Symantec AntiVirus Corporate Edition *On-access scanning disabled* (Updated) {FB06448E-52B8-493A-90F3-E43226D3305C}
FW: Sophos Client Firewall *enabled* {0786E95E-326A-4524-969... Read more

A:Malware infected. Redirects google searches to mal-sites and porn-sites

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 2 answers
RELEVANCY SCORE 58.8

I have, what seems to me, a strange problem. The company I work for uses sharepoint for our intranet sites (no, this is not a sharepoint question) and we have recently upgraded to a new version. When we upgraded, the site now needs to be added to the local
intranet site list in order for it to automatically receive windows log in credentials and log users in to SharePoint. This is a simple fix, I have done it on dozens of machines, but on a select few the fix doesn't seem to work. Whenever I add a website to
the intranet sites list, it acts as if it was added... then as soon as I close the dialog box that is used to enter and display this info, it's gone, and by gone I mean I open back up the box and it has disappeared from the list. There is no trace of me ever
having changed a setting. There are currently no GPOs active that would cause these to be taken out of the list, I have tried adding the sites directly into the registry and they disappear there too, I'm not sure if this is the right place for my question
but I figure it's a start. So again:
Problem: Sites do not stay in proper security zone, all traces of them existing are erased on closing of dialog box.

Troubleshooting Done so Far: Tried directly placing in registry, no fix. No GPO's are active to remove said sites from zones.

A:IE 11 - Intranet sites added to list do not stay

Hi,
"but on a select few the fix doesn't seem to work"
Confused with this sentence, does this issue only occur in a specific PC\user account?
Have you tried the suggestion mentioned in the your original thread to reset IE, test the result?
What about other security zones, like Internet or trusted zone? Are there any other websites under the Intranet zone? Though you mentioned that these's no GPO applied to control this, I still recommend you run cmd rsop to check the settings applied
on this machine and user account.
Yolanda Zhu
TechNet Community Support

Read other 4 answers
RELEVANCY SCORE 58.8

Hi all,

My PC appears to be infected, but nothing is detecting it, including Malwarebytes' Anti-Malware.

I'm experiencing tons of redirects on site loads, e.g. typing in a site into the address bar, Google searches, etc. as well as inappropriate popup ads.

Could someone please assist me in some next steps as to how to remove these redirect attacks I'm experiencing?

Thanks -

Best,

Anthony

A:Sites & Google Searches Redirecting to Ad Sites, Innapropriate Popups

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.Do not run any other tool untill instructed to do so!Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.I would like to get a better look at your system, please do the following so I can get some more detailed logs.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will appear Click OKDeFogger may ask you to reboot the machine, if it does - click OKDo not re-enable these drivers until otherwise instructed.IMPORTANT! If you receive an error message while running DeFogger, please post the log defogger_disable which will appear on your desktop.Download DDS:Please dow... Read more

Read other 34 answers
RELEVANCY SCORE 58.4

how can I enable this option ( display intranet sites in compatibility view ) in IE 11

Read other answers
RELEVANCY SCORE 57.2

Hi,

When i am opening my intranet websites which have security prompts
from IE11 in windows server 2016 as shown below and passing the credential,its not responding after clicking OK button.


Request advise on the same.



Thank you.

Regards,
Prashant

Read other answers
RELEVANCY SCORE 56.4

Hello,
Is there Registry key to uncheck Display intranet sites in Compatibility View from Internet Explorer ?

-Subramani

Read other answers
RELEVANCY SCORE 56.4

Hi, i am looking for a policy that will allow me to uncheck 'display intranet sites in compatibility view' without graying out the option to recheck it if a user needs the option in the future. So far the only option i found under Computer
Configuration/Administrative Templates/Windows Components/Internet Explorer/Compatibility View/Turn on Internet Explorer Standards Mode for Local Intranet would gray out the option to recheck the box.

Read other answers
RELEVANCY SCORE 56.4

Hi,

We have an odd issue. IE11 is running all sites in compatibility mode. This appears to be because it is treating all sites as being in the Intranet Zone. This is:
a) breaks many websites that require modern browsers 
b) is a huge security issue as many protections are disabled by default on the intranet zone.

Has anyone else seen this or have ideas on what we can do to solve it.

I will add that we have autodetect proxy settings enabled, and wpad hosts a proxy.pac that instructs browsers to go direct to all websites. 

Thanks

Nick

Read other answers
RELEVANCY SCORE 55.6

using internet explorer on windows xp, when i click on a link from the router's configuration site to upgrade the routers software (2wire 1000SW) i get redirected to porn. how do i stop this from happening? it's weird becuase if its on the intranet i would think theres something wrong with my dns cache or what? im sure the link is to a intranet site as well, its something like "http://home.download_upgrade/manual.htm" so isnt that just stored in the router?

how can i remove reset the dns or whatever so i can access the link and not some stupid porn site.

A:intranet links redirect to porn

u probraly have some sort of spyware/virus on ur system..

Read other 5 answers
RELEVANCY SCORE 52.4

I need some assistance in running down this issue. when connected wirelessly, I get redirected to searchalligator.com for a unresolved site in the address bar for all Firefox and IE and Chrome . For example typing "dsgflkjsdhSJHDS" into the address bar of the browser should return the search results from the search provider - but instead redirects to searchalligator.com
I have ran Sophos antivirus,clam antivirus, Spybot, Adaware, MalwareBytes and any other malware - adware cleaner that I could find. No virus or malware was found.
I am running a Dell D620 on XP Professional. The problem only occurs when I am connected via a wireless connection. The problem seems tied directly to my wireless card. The issue is the same on whatever wireless point I connect to. The problem does not exist when I connect via a wired connection.

I have now totally wiped and shredded my hard drive and reinstalled XP Pro. I just checked and the redirect to searchalligator.com is still present. The wireless card is an Intel 3945abg

A:searchalligator.com

What is your default search engine?

Do you have Alexa toolbar installed?

Louis

Read other 11 answers
RELEVANCY SCORE 51.6

Hi. Whenever I do a search and click on a link, instead of taking me where I want to go, my browser says "jumping" and it takes me to some other shopping type search site, ie: "bestwebchoices", "couponmountain", etc. I've tried using Google, Bing, and Yahoo and using browsers IE8, Firefox and Google Chrome. Same problem with all of them.

I guess I have some kind of virus. Help will be greatly appreciated. I ran Spybot and it got rid of many things but this problem still exists.

Thanks
Kathy

 

A:All my searches get hijacked to other sites

Read other 7 answers
RELEVANCY SCORE 51.6

My computer was infected with a virus. I used Malwarebytes and Spybot Search and Destroy. Both removed multiple viruses. I thought the problem was fixed, but that was not the case. Whenever I do a google search in IE and Safari browsers, about 30% to 40% of the links I click on are redirected to reandom sites, usually things like apartmentfinder.com, ect. If I manually enter the URL of a site, it works fine. It is only when I search that I have the problem. I ran Combofix after a friend suggested it. It did not fix the problem. I also uninstalled IE 8 and had no results.

DDS (Ver_09-11-24.01) - NTFSx86
Run by HP_Owner at 21:47:27.70 on Mon 11/23/2009
Internet Explorer: 7.0.5730.13
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.2559.1733 [GMT -8:00]
============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Pinnacle\Shared Files\Programs\USBTip\USBTip.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\HP\KBD\KBD.EXE
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\ALCWZRD.EXE
C:\WINDOWS\ALCMTR.EXE
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:�... Read more

A:IE Searches Are Redirected to Different Web Sites

Hello! My name is Sam and I will be helping you. In order to see what's going on with your computer I will ask for you to post various logs from the tools that we will use to resolve your issue. Please also share with me any information about how your computer is reacting and behaving each step of the way as we work through this process.Please download Malwarebytes Anti-Malware and save it to your desktop.alternate download link 1alternate download link 2Make sure you are connected to the Internet.Double-click on Download_mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan. If an update is found, the program will automatically update itself. Press the OK button to close that box and continue. If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to install.On the Scanner tab:Make sure the "Perform Quick Scan" option is selected.Then click on the Scan button.If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.The scan will begin and "Scan in progress" will show at the top. It may ta... Read more

Read other 21 answers
RELEVANCY SCORE 51.6

Every time I try to search using any search engine I get a response and when I then try to click on the website listed in the return, I am directed to other sites. I removed several suspected programs from my computer however I am still having the same problem. I also tried removing IE 9 and using Firefox which did not help. Here is the HijackThis log. Please help this is very frustrating. Thanks

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:10:57 PM, on 6/26/2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Unable to get Internet Explorer version!
Boot mode: Normal

Running processes:
C:\windows\system32\Dwm.exe
C:\windows\Explorer.EXE
C:\Program Files\Common Files\Pinnacle\Shared Files\Programs\USBTip\USBTip.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Sony\Reader\Data\bin\launcher\Reader Library Launcher.exe
C:\Program Files\McAfee.com\Agent\mcagent.exe
C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
C:\windows\system32\taskeng.exe
C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSwMgr.exe
C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe
C:\Program Files\Mozilla Firefox\firef... Read more

A:Searches get directed to other sites

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

Read other 3 answers
RELEVANCY SCORE 51.6

Hi,When using Google in Internet Explorer7 i will search a particular site click on the link and i'm being redirected to a variety of different sites for example:In google i type in "Guild Wars", searching it i get all the listings for guildwars. I click the link for the guild wars website but i get redirected to a variety of different sites that either advertise free ring tones etc or it's another search engine with listings of my original search.I have used spybot, ad aware and Norton and it hasn't resolved this issue. I have created a HJT Log to see if you can help. Logfile of HijackThis v1.99.1Scan saved at 21:53:33, on 23/11/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.5730.0011)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\csrss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Common Files\Symantec Shared\ccSvcHst.exeC:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exeC:\WINDOWS\sys... Read more

A:Hjt Log: Redirected Searches To Different Sites

Hi and welcome to Bleeping Computer! My name is Sam and I will be helping you. Please download FixWareout from one of these sites:http://downloads.subratam.org/Fixwareout.exehttp://www.bleepingcomputer.com/files/lonny/Fixwareout.exeSave it to your desktop and run it. Click Next, then Install, make sure "Run fixit" is checked and click Finish.The fix will begin; follow the prompts. You will be asked to reboot your computer; please do so. Your system may take longer than usual to load; this is normal.Finally, please post the contents of the logfile C:\fixwareout\report.txt, along with a new HijackThis log into this topic.

Read other 7 answers
RELEVANCY SCORE 51.6

Any time I do a search and then click the link the search is redirected to a different site like asklots, gugle, gurrgle or weird shopping sites. Favorites menu usually works as does copying and pasting the web address. Included is the requested information. Thank you in advance for you time.DDS (Ver_10-03-17.01) - NTFSx86 Run by Mary Belot at 13:47:20.79 on Sat 09/11/2010Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_21Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.502.87 [GMT -4:00]AV: Lavasoft Ad-Watch Live! Anti-Virus *On-access scanning enabled* (Updated) {A1C4F2E0-7FDE-4917-AFAE-013EFC3EDE33}============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcssvchost.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Amazon\Amazon Games & Software Downloader\AmazonGSDownloaderService.exeC:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\WINDOWS\system32\CSHelper.exeC:\WINDOWS\system32\svchost.exe -k hpdevmgmtC:\WINDOWS\system32\inetsrv\inetinfo.exeC:\Program Files\Common Files\Intuit\Update Service\IntuitUpdateService.exeC:\Program Files\iolo\common\lib\ioloServiceManager.exeC: ... Read more

A:All searches are redirected to various sites

Hello mjb2010 and welcome to the forums here at BleepingComputer.Sorry for the delay in getting to your post here, as you can probably see the forums are very busy. Please read carefully and follow these steps. Download TDSSKiller and save it to your Desktop.Extract its contents to your desktop.Once extracted, open the TDSSKiller folder and doubleclick on TDSSKiller.exe to run the application, then on Start Scan.If an infected file is detected, the default action will be Cure, click on Continue.If a suspicious file is detected, the default action will be Skip, click on Continue.It may ask you to reboot the computer to complete the process. Click on Reboot Now.If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.If a reboot is required, the report can also be found in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here.

Read other 28 answers
RELEVANCY SCORE 51.6

Hello to all.I'm currently running windows xp sp3. All web searches being forwarded to Ad-sites. I've ran Malware Bytes, Kaspersky, SpybotSD and still I am infected. I've also done what I realise now I shouldn't have done, I ran a Combofix. Still to no avail. All searches are being forwarded whenever I click the links from the search page. Here is the combofix log. (I NOW realise that I shouldn't have run Combofix; My apologies.) ComboFix 10-10-02.02 - Hollie Khan 10/03/2010 11:35:12.1.1 - x86Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.2038.1613 [GMT -4:00]Running from: c:\documents and settings\Hollie Khan\Desktop\ComboFix.exeAV: Kaspersky Anti-Virus *On-access scanning disabled* (Updated) {2C4D4BC6-0793-4956-A9F9-E252435469C0}.((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))).C:\Install.exe.((((((((((((((((((((((((( Files Created from 2010-09-03 to 2010-10-03 ))))))))))))))))))))))))))))))).2010-10-03 00:13 . 2010-10-03 00:13 -------- d-----w- c:\program files\ESET2010-10-02 23:51 . 2010-06-06 23:47 0 ----a-w- c:\documents and settings\Hollie Khan\Application Data\WinPatrol\Config.sys2010-10-02 23:51 . 2010-06-06 23:47 0 ----a-w- c:\documents and settings\Hollie Khan\Application Data\WinPatrol\Autoexec.bat2010-10-02 23:51 . 2010-10-02 23:51 -------- d-----w- c:\documents and settings�... Read more

A:All web searches being forwarded to Ad-sites

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.In the upper right hand corner of the topic you will see a button called Options. If you click on this in the drop-down menu you can choose Track this topic. By doing this and then choosing Immediate E-Mail notification and then clicking on Proceed you will be advised when we respond to your topic and facilitate the cleaning of your machine.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.Double click DeFogger to run the tool. The ap... Read more

Read other 13 answers