Over 1 million tech questions and answers.

Occasional link redirects to random sites such as "askthecrew.net"

Q: Occasional link redirects to random sites such as "askthecrew.net"

I started getting some random link redirects in the latest Firefox (with Adblock Plus and NoScript) and Opera browsers to sites like "askthecrew.net" as well as others which I cannot recall. It's occasional and doesn't seem to be website specific. I'm not sure if it's related but not long after noticing the redirects my Windows User Account control settings were reset from never notify to default. I had NOD32 version 4 installed and ran a scan which found malicious java files in the temporary folder. I uninstalled NOD32 and installed the latest version of Kaspersky Internet Security, yet some time later I started getting the same occasional redirects with no malicious files detected in a scan but with at least some of the malicious links blocked by Kaspersky. As an example some of the links appear as xx.xxx.xxx.xxx.com/favicon.ico.

I have run Malwarebytes, TDSSkiller, TFC, aswMBR, and few of the online scan tools with no results.

RELEVANCY SCORE 200
Preferred Solution: Occasional link redirects to random sites such as "askthecrew.net"

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

A: Occasional link redirects to random sites such as "askthecrew.net"

Download Security Check from HERE, and save it to your Desktop. * Double-click SecurityCheck.exe * Follow the onscreen instructions inside of the black box. * A Notepad document should open automatically called checkup.txt; please post the contents of that document.=============================================================================Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply.====================================================================================Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeClick Go and post the result.=============================================================================Download Malwarebytes' Anti-Malware (aka MBAM): http://www.malwarebytes.org/products/malwarebytes_free to your desktop. * Double-click mbam-setup.exe and follow the prompts to install the program. * At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish. * If an update is found, it will download and install the latest version. * Once the program has loaded, select Perform quick scan, then click Scan. * When the scan is complete, click OK, then Show Results to view the results. * Be sure that everything is checked, and click Remove Selected. * When completed, a log will open in Notepad. * Post the log back here.Be sure to restart the computer.The log can also be found here:C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txtOr at C:\Program Files\Malwarebytes' Anti-Malware\Logs\log-date.txt=============================================================================Download aswMBR to your desktop.Double click the aswMBR.exe to run it.If you see this question: Would you like to download latest Avast! virus definitions?" say "Yes".Click the "Scan" button to start scan.On completion of the scan click "Save log", save it to your desktop and post in your next reply.NOTE. aswMBR will create MBR.dat file on your desktop. This is a copy of your MBR. Do NOT delete it.

Read other 15 answers
RELEVANCY SCORE 77.2

When I use Google the search links redirect to other sites about 50% of the time and will go away and return without any obvious reason. I will click on the search result and be taken to a site like informationgetter.com, bcckools.com, "randomnumber".blueseek.com, etc. I am running Windows Vista Ultimate.

I've tried combofix, Avast, AVG, Ad-Aware, IObit, and Malwarebytes in both regular and safe modes. Below is my HJT log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:17:17 AM, on 12/4/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
C:\Program Files\PowerISO\PWRISOVM.EXE
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Apoint\Apoint.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\ACT\Act for Windows\Act.Outlook.Service.exe
C:\Program Files\IObit\IObit Security 360\is360tray.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Windows\System32\regsvr32.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Apoint\ApMsgFwd.exe
C:\Windows\ehome\ehmsas.exe
C... Read more

A:Occasional Redirects to other Sites from Google Search Links

Read other 6 answers
RELEVANCY SCORE 73.6

Hello i have currently experienced this problem and i don't know how to stop it. What happens is sometimes when i am on firefox a random popup comes up. It is not very often but it happens on websites like Google and websites i know that dont have popups. This problems also arose with the popups at the same time and that is sometimes i click a google link it redirects me to a random page. Some of these pages are free malware removal, shopping websites, and sometimes even yellow pages come up. I have experienced this for 2 days and have tried Super AntiSpyware and Malwarebytes with both saying i have no infections. I would appreciate any help as this is starting to irritate me.

A:Occasional Random Popups and Google Redirects

Can you post the logs from the scans performed with Malwarebytes and Super Anti-Spyware?

Read other 2 answers
RELEVANCY SCORE 71.6

Please help me. I am having several problems that I've never had before with my computer and I am now convinced that it is hi-jacked and infected with malware.

The only protection I have used since I got the computer is avast antivirus protection and piriform ccleaner. I have had no malware, spyware or viruses on this computer in the past. I've had it for almost a year.

However my computer has since yesterday (i think) become infected. It has not slowed down much, but whenever I use Google, it redirects me to random sites. Many websites I visit regularly that have never had pop-up ads before now have pop-up ads.

When I went to check my e-mail in Hotmail, I received this message constantly:

"Please refresh your browser window. When you access your Windows Live Hotmail account from more than one computer, we ask you to sign in again to help keep your account private and secure."
At this point I decided to install Spybot, however the website was blocked. I went to download.com and downloaded it and attempted to install but I was unable to, receiving this message:

"Error sending request. The server name or address could not be resolved."

I just installed ad-aware and did a full scan and it found one malware agent and supposedly fixed it, but after rebooting all of these issues are still occuring.

So this brings me to here and now. I just downloaded Trend Micro HijackThis and here is my log:

Logfile of Trend Micro HijackThis v2.0.2
Sca... Read more

A:Google redirects to random sites, some sites blocked, can't install spybot.

Read other 6 answers
RELEVANCY SCORE 71.2

In addition to the browser redirects. Boot up time has become extremely long. Often when boot up is complete Macaffee and wireless network adapter are not working. Thanks much for any support you can provide.
RSL
DDS (Ver_09-07-30.01) - NTFSx86
Run by Family at 17:13:11.14 on Tue 09/22/2009
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1022.133 [GMT -4:00]

AV: McAfee VirusScan *On-access scanning enabled* (Updated) {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}
FW: McAfee Personal Firewall *enabled* {94894B63-8C7F-4050-BDA4-813CA00DA3E8}

============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\Program Files\Aventail\Connect\as32svc.exe
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\D-Link\D-Link DWA-552 Xtreme N Desktop Adapter\acs.exe
svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\WINDOWS\system32\dlcxcoms.exe
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched... Read more

A:IE Browser Hijacked... Redirects to random sites/search sites

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. Pleaseinclude a clear description of the problems you're having, along with any steps you may have performed so far.Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.Even if you have already provided information about your PC, we need a new log to see what has changed since you originally posted your problem.Please download OTL from following mirror:This is THE MirrorSave it to your desktop.Double click on the icon on your desktop.Click the "Scan All Users" checkbox.Push the button.Two reports will open, copy and paste them in a reply here:OTL.txt <-- Will be openedExtra.txt <-- Will be minimizedIn the upper right hand corner o... Read more

Read other 2 answers
RELEVANCY SCORE 69.6

Hello,

This is my first post. I registered on this site because from one of the posts that I've read, I see how helpful the moderators in BC are. So, I was hoping that someone could help me fix my issue with my computer. Please be aware that I am an average computer user, being a mechanical engineer and have somewhat only moderate computing jargon vocab.

This is my problem. Pretty straight forward as what my topic title describes,I am unable to enter most of any pages from any links that I click, be it from search engines or links from other sites. Every time I click on a link, instead of sending me to the proper page, some ad site loads up. Often it is about winning prizes and/or selling discounted computer products or gadgets like iPhones and iPad.

Please help. Any advice is highly appreciated.

Regards,
Wan Djawad

Read other answers
RELEVANCY SCORE 68.8

**********I format/reinstalled. It was hidden somewhere and since the machine's been compromised I figured I'd do the format/reinstall.********************

Last night I left my work computer on (forgot to lock it- my mistake) and this morning I came in to a malware puke-fest on my machine. Long story short I know I had vundo, spyaxe, who else knows. Just popups galore, antispyware 2008 software installed and VIRUS ALERT!!! all over, my background had been changed and I couldn't access task manager and program files on the start menu. This occurred last night sometime around 9pm. Mystery aside I have run combofix, smitfraud, wareout fix, avg, adaware, spywaredoctor, spybot search and destroy, cwshredder, and hijack this but I cant figure out why I'm being redirected when I click on google search links. Research indicates a wareout infection but I can't find it. Maybe fresh eyes will help.

You all are the last bastian of hope for this machine as it's about to get a good format/reinstall.

Thanks in advance!!!
-Christine

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:52, on 2008-07-30
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:&#... Read more

A:Clicking On Google Search Link Redirects To Ad Sites

Hello and Welcome to the forums! My name is Carolyn and I'll be glad to help you with your computer problems. HijackThis logs can take some time to research, so please be patient with me. I know that you need your computer working as quickly as possible, and I will work hard to help see that it happens. Please do not run any other tool untill instructed to do so!Please reply to this thread, do not start another!Please tell me about any problems that have occurred during the fix.Please tell me of any other symptoms you may be having as these can help also.Please try as much as possible not to run anything while executing a fix. If you follow these instructions, everything should go smoothly. I am sorry that we were unable to reply to your post sooner. The forums have been very busy. Download Deckard's System Scanner (DSS) to your Desktop. Note: You must be logged onto an account with administrator privileges. Close all applications and windows.
Double-click on dss.exe to run it, and follow the prompts.
When the scan is complete, two text files will open - main.txt <- this one will be maximized and extra.txt<-this one will be minimized
Copy (Ctrl+A then Ctrl+C) and paste (Ctrl+V) the contents of main.txt and the extra.txt in your reply.Please post the contents of main.txt and extra.txt.

Read other 2 answers
RELEVANCY SCORE 68

Hello,

I'm having an issue where when I click on the result of an internet search, I am redirected to a non-related advertising type site. Also occasionally I will have the browser directed at some website and then all of the sudden a random window pops up with the same type of advertising type site as above.

It used to happen in both IE and firefox on both google and yahoo (possibly others, I only tried those 2). I have tried running Antivirus scans, malwarebytes and SAS. They found and removed a couple things, but no help. I then tried a system restore back to 2 weeks ago before I had any issues, but that also did not help. I've noticed now that it is only when I search using the integrated search area in the top right corner of IE (which is set to google). If I type in www.google.com in the address window, and then search from there, it does not redirect when I click on the results.

Thanks so much in advance!

Win XP Pro SP3, IE8

A:Random pop-ups and Search Result redirects to random sites.

Try this:http://www.bleepingcomputer.com/virus-remo...sing-tdsskiller

Read other 1 answers
RELEVANCY SCORE 66.8

I'm working on my father's computer. He seems to get repeated malware infections. The latest was a fake anti-malware that popped up at install and any link he clicks on or any attempts to visit a site will cause a redirect to one of the many false search engine / ad / malware sites. Usually after a 3rd attempt to visit a link or site will be successfull.

I was able to get rid of the fake anti-malware using Malwarebytes. After running that and AdAware the link redirects continue. I was unable to find any consitant fix for this via my mediocre googling skills, thus I turn to you for help. The requested links are pasted below. Thanks in advance for any assistance.

_____________________
HijackThis.log
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 7:07:42 PM, on 4/5/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\Program Files\AVG\AVG9\avgrsx.exe
C:\WINDOWS\System32\bcmwltry.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AVG\AVG9\avgwdsvc.exe
C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program ... Read more

A:Random Link Redirects

Read other 16 answers
RELEVANCY SCORE 66

I've been getting redirected to random sites when doing searches especially when using GOOGLE - but the same thing happens with any search engine. Sometimes I'll actually be on a page - and suddenly a random page opens up. I'm using IE8 - Windows XP SP3 - with all the automatic updates. I've use Maleware and spyware and virus software and nothing seems to find the little bugger that is causing this. I've attached a Hijack log file to this questions.
 

A:IE redirects to random sites

Read other 9 answers
RELEVANCY SCORE 66

I was infected with Antisyware Soft. I believe Combofix got rid of that. Then I got this redirect virus and the time on my computer is now in military time. It redirects every search I make. I have to operate it in safe mode now. Could you please help?DDS (Ver_10-03-17.01) - NTFSx86 NETWORK Run by chris at 21:53:41.03 on Tue 05/18/2010Internet Explorer: 8.0.6001.18702Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.478.190 [GMT -4:00]AV: avast! antivirus 4.8.1368 [VPS 100518-1] *On-access scanning enabled* (Outdated) {7591DB91-41F0-48A3-B128-1A293FD8233D}============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcssvchost.exesvchost.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Internet Explorer\iexplore.exeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Documents and Settings\chris\Desktop\dds.scr============== Pseudo HJT Report ===============uInternet Connection Wizard,ShellNext = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q105&bd=pavilion&pf=laptopuInternet Settings,ProxyOverride = <local>uInternet Settings,ProxyServer = http=127.0.0.1:5555uURLSearchHooks: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn0 ... Read more

A:IE redirects to random sites

Hello slowhand361, Welcome to Bleeping Computer. My name is fireman4it and I will be helping you with your Malware problem.Please take note of some guidelines for this fix: Refrain from making any changes to your computer including installing/uninstall programs, deleting files, modifying the registry, and running scanners or tools. If you do not understand any step(s) provided, please do not hesitate to ask before continuing. Even if things appear to be better, it might not mean we are finished. Please continue to follow my instructions and reply back until I give you the "all clean". Finally, please reply using the button in the lower right hand corner of your screen. Do not start a new topic. The logs that you post should be pasted directly into the reply, unless they do not fit into the post.1.Please Delete any previous copy of [b[Combofix[/b] from your desktop.2.Download and Run RKillPlease download RKill by Grinler from one of the 4 links below and save it to your desktop.Link 1Link 2Link 3Link 4 Before we begin, you should disable your anti-malware softwares you have installed so they do not interfere RKill running as some anti-malware softwares detect RKill as malicious. Please refer to this page if you are not sure how. Double-click on Rkill on your desktop to run it. (If you are using Windows Vista, please right-click on it and select Run As Administrator) A black screen will appear and then disappear. Please do not worry, that is... Read more

Read other 12 answers
RELEVANCY SCORE 65.2

Hello,I have been lurking bleepingcomputer as a non-member for a while now. I typically am able to find the instructions to fix almost any problem a computer (be it mine or a friends) has from your forum. Now it seems I am unable to find the solution to my specific problem, so I finally signed up as a member! My problem is similar to all these redirect virus issues I have been reading, but slightly different and not quite the same.Here's the problem:Randomly when I am browsing the internet, every now and again a site that I come across (typically while using StumbleUpon [Firefox Add-On]) will redirect to some completely random site. It doesn't appear to follow any pattern, and has redirected to various different websites. The websites I am redirected to are rarely the same website I was redirected to before, the only exception being theclickcheck.com and yellowpages.com, both of these websites I have been redirected to more than once. Additionally, even if I don't have a browser open a pop-up will appear in a new window. If a browser is open, the pop-up window error will occur more frequently it seems(in a separate window, not a separate tab). Also, I noticed each redirect or pop-up goes through google-analytics.com, so this may still be the google redirect virus, but I am unsure.I have had this issue for about a week now, and I have been unable to get the time to really find the problem. I wish to do online banking, bill paying, and the what not but fear that... Read more

A:Random redirects and occasional pop-up while browsing with Firefox (particularly when using Firefox Add-On StumbleUpon)

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.In the upper right hand corner of the topic you will see a button called Options. If you click on this in the drop-down menu you can choose Track this topic. By doing this and then choosing Immediate E-Mail notification and then clicking on Proceed you will be advised when we respond to your topic and facilitate the cleaning of your machine.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The ... Read more

Read other 3 answers
RELEVANCY SCORE 65.2

It started last week with a couple of malware/virus attacks. I ran malwarebytes and got some removed. However, now when I click on Google searches I get redirected to random sites. Also since the attack I haven't been able to access Window Updates or get Spyware Doctor restore points. I don't know if this means anything. Anyways, here is my log file, PLEASE HELP.Logfile of Trend Micro HijackThis v2.0.4Scan saved at 11:49:23 PM, on 6/1/2010Platform: Windows Vista SP2 (WinNT 6.00.1906)MSIE: Internet Explorer v8.00 (8.00.6001.18904)Boot mode: NormalRunning processes:C:\Windows\system32\Dwm.exeC:\Windows\system32\taskeng.exeC:\Windows\Explorer.EXEC:\Program Files\Windows Defender\MSASCui.exeC:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exeC:\Program Files\Lexmark 5600-6600 Series\lxdumon.exeC:\Program Files\Spyware Doctor\pctsTray.exeC:\Windows\WindowsMobile\wmdc.exeC:\Program Files\iTunes\iTunesHelper.exeC:\Windows\System32\rundll32.exeC:\Windows\System32\igfxtray.exeC:\Windows\System32\hkcmd.exeC:\Windows\System32\igfxpers.exeC:\Program Files\Google\Google Desktop Search\GoogleDesktop.exeC:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exeC:\Program Files\Acronis\TrueImageHome\TimounterMoni... Read more

A:Google redirects to random sites

Hello, mrkotter1.My name is aommaster and I will be helping you with your log.I apologize for the delay in response we get overwhelmed at times but we are trying our best to keep up.If you have since resolved the original problem you were having, I would appreciate you letting us know. If not please perform the following below so I can have a look at the current condition of your machine.ThanksShould you still require assistance, please take note of the points below:Please track this topic by either adding it to your favourites or clicking the Options button at the top of this thread and then Track this topic.Please disable word-wrap before posting logs. This can be done by clicking Format and un-ticking the word-wrap feature in notepad. The logs that you post should be copied and pasted directly into the reply. Only attach them if requested or if they do not fit into the post.If you do not reply within 5 days, I will have to close your topic. Should you not be able to meet this, please notify me so that I will leave the topic open.Please do not install, update, or run any programs for the duration of the fix.If you do not understand the instructions I provide, please don't hesitate to ask. That's what I'm here for Please continue to reply to this topic until I give you the all clean. Just because there are no symptoms of infection doesn't mean that the computer is clean.If you are running Vista, please run all the fixes as an administrator. This is done by r... Read more

Read other 16 answers
RELEVANCY SCORE 65.2

Sometime today, I noticed that my google searches started redirecting me to some weird search engines full of ads or some ad sites. I also found that my system restore had been disabled. Basically, this is what I did :1) Deleted cookies and temp internet files.2) Ran prefetch and cleared the folder.3) Ran %temp% and cleared the folder.4) Ran Malwarebytes (which found some malware) and deleted the items.5) Ran Hijackthis and analysed it on hijackthis.de - didn't show any discrepancies.6) Used gpedit and enabled system restore - started the service.7) Retried a google search - the issue still occurred.8) Ran Trendmicro housecall which (found some malware as well) and deleted the infected files.9) Retried the google search - no go. "dds.txt"DDS (Ver_09-12-01.01) - NTFSx86 Run by User at 1:36:19.64 on 27/01/2010Internet Explorer: 7.0.5730.11Microsoft Windows XP Professional 5.1.2600.3.1252.44.1033.18.510.64 [GMT 0:00]AV: PCguard Anti-Virus *On-access scanning disabled* (Outdated) {5B5A3BD7-8573-4672-AEA8-C9BB713B6755}FW: PCguard Firewall *disabled* {80593BF4-D969-4EC5-ADAE-A22F2DFC7A22}============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcsC:\Program Files\Virgin Broadband\PCguard\Fws.exesvchost.exesvchost.exeC:\WINDOWS\system32\spoolsv.exesvchost.exeC:\Program Files\Virgin Broadband Wireless\Af... Read more

A:google redirects to random ad sites in IE

I also did a OTL custom scan (after seeing it on another forum) usingnetsvcs%SYSTEMDRIVE%\*.exe/md5starteventlog.dllscecli.dllnetlogon.dllcngaudit.dllsceclt.dllntelogon.dlllogevent.dlliaStor.sysnvstor.sysatapi.sysIdeChnDr.sysviasraid.sysAGP440.sysvaxscsi.sysnvatabus.sysviamraid.sysnvata.sysnvgts.sysiastorv.sysViPrt.syseNetHook.dllahcix86.sysKR10N.sys/md5stop%systemroot%\*. /mp /s%systemroot%\system32\*.dll /lockedfilesCREATERESTOREPOINT----------------------------------------------------------------------------------------------------------------------------------------------OTL logfile created on: 27/01/2010 02:10:34 - Run 1OTL by OldTimer - Version 3.1.27.0 Folder = C:\Documents and Settings\User\DesktopWindows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstationInternet Explorer (Version = 7.0.5730.11)Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy 510.00 Mb Total Physical Memory | 150.00 Mb Available Physical Memory | 29.00% Memory free1.00 Gb Paging File | 1.00 Gb Available in Paging File | 53.00% Paging File freePaging file location(s): C:\pagefile.sys 768 1536 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program FilesDrive C: | 38.28 Gb Total Space | 24.08 Gb Free Space | 62.91% Space Free | Partition Type: NTFSD: Drive not present or media not loadedE: Drive not present or media not loadedF: Drive not present or... Read more

Read other 8 answers
RELEVANCY SCORE 65.2

is this malware that I haven't managed to remove or can something else cause this. the redirects occur only when I try to use a link on any search engine, type in the URL directly and I get to the site I want.

A:Redirects to seemingly random sites.

It is usually a malware. Lets run these and see how you are.Please download the TDSS Rootkit Removing Tool (TDSSKiller.exe) and save it to your Desktop. <-Important!!!Be sure to download TDSSKiller.exe (v2.4.0.0) from Kaspersky's website and not TDSSKiller.zip which appears to be an older version 2.3.2.2 of the tool.Double-click on TDSSKiller.exe to run the tool for known TDSS variants.
Vista/Windows 7 users right-click and select Run As Administrator.If TDSSKiller does not run, try renaming it. To do this, right-click on TDSSKiller.exe, select Rename and give it a random name with the .com file extension (i.e. 123abc.com). If you do not see the file extension, please refer to How to change the file extension.Click the Start Scan button.Do not use the computer during the scanIf the scan completes with nothing found, click Close to exit.If malicious objects are found, they will show in the Scan results - Select action for found objects and offer three options.Ensure Cure (default) is selected, then click Continue > Reboot now to finish the cleaning process.A log file named TDSSKiller_version_date_time_log.txt (i.e. TDSSKiller.2.4.0.0_27.07.2010_09.o7.26_log.txt) will be created and saved to the root directory (usually Local Disk C:).Copy and paste the contents of that file in your next reply.Next run MBAM (MalwareBytes):Please download Malwarebytes Anti-Malware and save it to your desktop.Download Link 1Download Link 2MBAM may "make changes to... Read more

Read other 11 answers
RELEVANCY SCORE 65.2

Hi
After searching on google and clicking a link from the results I often get redirected to random advert sites. Also occasionally popups appear from nowhere when not even using the computer. I have Malwarebytes Antimalware which I have done a quick scan but it doesnt pick anything up. Neither does my Norton Antivirus. Any help would be much appreciated.

A:Google redirects to random sites

Hello and welcome. let's do this...Please download the TDSS Rootkit Removing Tool (TDSSKiller.exe) and save it to your Desktop. <-Important!!!Be sure to download TDSSKiller.exe (v2.4.0.0) from Kaspersky's website and not TDSSKiller.zip which appears to be an older version 2.3.2.2 of the tool.Double-click on TDSSKiller.exe to run the tool for known TDSS variants.
Vista/Windows 7 users right-click and select Run As Administrator.If TDSSKiller does not run, try renaming it. To do this, right-click on TDSSKiller.exe, select Rename and give it a random name with the .com file extension (i.e. 123abc.com). If you do not see the file extension, please refer to How to change the file extension.Click the Start Scan button.Do not use the computer during the scanIf the scan completes with nothing found, click Close to exit.If malicious objects are found, they will show in the Scan results - Select action for found objects and offer three options.Ensure Cure (default) is selected, then click Continue > Reboot now to finish the cleaning process.A log file named TDSSKiller_version_date_time_log.txt (i.e. TDSSKiller.2.4.0.0_27.07.2010_09.o7.26_log.txt) will be created and saved to the root directory (usually Local Disk C:).Copy and paste the contents of that file in your next reply.Reboot into Safe Mode with Networking How to enter safe mode(XP/Vista)Using the F8 MethodRestart your computer. When the machine first starts again it will generally list some equi... Read more

Read other 3 answers
RELEVANCY SCORE 65.2

I've run numerous spyware and virus scans and still have this issue with the browser redirectingme sometimes, not always, to other sites, seemingly at random. Any help would save what is left of mysanity.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 12:52:20 PM, on 10/18/2009Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\csrss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\PROGRA~1\AVG\AVG8\avgwdsvc.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Bonjour\mDNSResponder.exeC:\WINDOWS\eHome\ehRecvr.exeC:\WINDOWS\eHome\ehSched.exeC:\PROGRA~1\AVG\AVG8\avgrsx.exeC:\PROGRA~1\AVG\AVG8\avgnsx.exeC:\Program Files\Spyware Doctor\pctsAuxs.exeC:\Program Files\Spyware Doctor\pctsSvc.exeC:\WINDOWS\... Read more

A:Browser redirects to random sites

hi mayr,

Sorry for the delay. If you still need help simply reply to the post and we will get started.

Read other 1 answers
RELEVANCY SCORE 65.2

Hello,
I think I have a virus. Whenever I do Google search and click on a link I get redirected to random sites.
I am able to access the right sites by double clicking the link. This happens in Firefox. I haven't tried other browsers (IE).
My operating system is Windows XP.
 
Thanks in advance for your help.
 
 
 
 

A:Google redirects to random sites.

I want you to check if IE is affected as well. Then...  Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2 SecurityCheck may produce some false warning(s), so leave the results reading to me. Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeClick Go and post the result. Download Malwarebytes' Anti-Malware (aka MBAM): http://www.malwarebytes.org/products/malwarebytes_free to your desktop.* Double-click mbam-setup.exe and follow the prompts to install the program.* At the e... Read more

Read other 7 answers
RELEVANCY SCORE 65.2

Hello - When I search on google using either Firefox or IE, the results redirect me to seemingly random sites. I've tried disabling any add-ons that I think are running, scanned my computer a bunch with MSSE, but none of that helped. My friends have tried their magic (malwarebytes scans, avast scans, even combofix I guess) - but they don't seem to have the fu you guys do. Thanks!

.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_29
Run by amlive at 3:09:57 on 2012-04-06
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.3935.2371 [GMT -5:00]
.
AV: Microsoft Security Essentials *Disabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}
SP: Microsoft Security Essentials *Disabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe ... Read more

A:Google redirects to random sites

Hello and Welcome to Bleeping Computer!!My name is Gringo and I'll be glad to help you with your computer problems.I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of usPlease do not run any tools unless instructed to do so.
We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.
Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.
Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.
A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE: At t... Read more

Read other 21 answers
RELEVANCY SCORE 65.2

I got the fake antivirus popup last week, and no I did not fall for it! It would not let me close it or even open task manager or anything for that matter. Force shutdown my comp and the virus is still here. Virtumonde is the name of it. Tried to clean it with AntiMalware and Spybot Search and Destroy, 3 times each, and it remains. I tried to run gmer, but towards the end of the scan, avast and lsass.exe take up all of my CPU and I am unable to save the file or do anything for that matter. (lsass.exe, with an L) So I'm sorry I could not provide that log. Thanks for your help!PS: I am unable to attach anything to this post. I cant even copy and paste the location of Attach.txt. When I hit browse, the icons on my desktop flash and nothing happens.DDS (Ver_10-03-17.01) - NTFSx86 Run by Owner at 0:42:37.31 on Sat 07/03/2010Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_13Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2038.902 [GMT -4:00]AV: avast! Antivirus *On-access scanning enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcssvchost.exesvchost.exeC:\Program Files\Alwil Software\Avast5\AvastSvc.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exesvchost.exeC: ... Read more

A:Google redirects me to random sites

Hello and welcome to Bleeping Computer. *Please Subscribe to this Thread to get immediate notification of replies. See HERE*It is important not to make any further changes or run any other tools/updates unless instructed to. This may hinder the cleaning process of your machine.*Please be patient, all Bleeping Computer helpers are volunteers and have lives outside this forum.*You must reply within 5 days otherwise this topic will be closed.Please run another DDS scan and post the latest DDS report. Also make sure to attach the attach.txt. Thanks.

Read other 24 answers
RELEVANCY SCORE 65.2

Hi Guys,

I am getting this problem for last 15 days. When I click on the search results link in google it's taking to random site. please help me on this.

any help will be greatly appreciated...

A:google link is taking to random sites

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/secu...oval-help.html

After running through all the steps, please post the requested logs.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Read other 3 answers
RELEVANCY SCORE 64.8

Hoping to get some help here. Thanks in advance.

About 2 days ago, I had to use internet explorer, clicked on a link I've been to before and from what I can only guess, a virus was downloaded to my computer through an advertisement. ESET Internet Security, not fully updated at the time seemed to catch it with it's real-time scanner and said it was quarantined but apparently it had slipped through the cracks.

I've since downloaded and run MBAM and a full computer scan with an updated ESET Internet Security. After MBAM, I received more redirects and even a popup with more viruses downloaded which ESET's real-time scanner again caught, but more pop-ups and redirects occurred afterward. I then made sure ESET was updated and ran it earlier today, it found a few infections and cleaned them. No popups or redirects since this morning but I don't know if my PC is completely clean.

Also, after running the ESET scan and restarting, I now get an error when windows boots up:

Could not load or run 'C:\...\AppData\Local\Temp\csrss.exe' specified in the registry. Make sure the file exists on your computer or remove the reference to it in the registry.

What should I do from here?

I normally use Firefox
Running Vista Business 32bit SP1

Read other answers
RELEVANCY SCORE 64.8

Hi everyone, every time I use google or yahoo to search for something, all the results redirect me to another search engine. This probably just started happening a couple days ago and I hope it's not too late to fix it.

But before this started happening my SuperAntiSpyWare program kept crashing at start up so I uninstalled that. Then I tried running MBAM, but after double clicking it, nothing happens. So I uninstalled MBAM and re-downloaded it. I tried running the install but nothing happened.

One last thing, every time I tried to go to this website it would say 'Failed to connect'. But clearly it's not the website.

I hope this isn't too many errors at once, I just thought they all might be related to one kind of problem.

This is starting to get really annoying so any help would be great.

Thanks.

A:Google link redirects me to some random search engine.

Try renaming the Malwarebytes setup file, mbam-setup.exe, to something else such as abcde.bat and then try installing it.

Read other 5 answers
RELEVANCY SCORE 64.8

Basically the title says it. I figured I must have some kind of malware or something because whenever i click on any link or anything like that, i get redirected to stupid ads and useless webpages.
Basically, when i click, the page changes and at first it loads the page, though nothing actually shows up, its just blank, then it will suddenly start loading the ad page. VERY annoying.

Please help?

DDS (Ver_09-12-01.01) - NTFSX64
Run by Ian at 21:24:02.78 on Fri 01/22/2010
Internet Explorer: 8.0.6001.18865 BrowserJavaVersion: 1.6.0_14
Microsoft? Windows Vista? Home Premium 6.0.6001.1.1252.1.1033.18.4094.2123 [GMT -5:00]

AV: Symantec Endpoint Protection *On-access scanning enabled* (Updated) {FB06448E-52B8-493A-90F3-E43226D3305C}
SP: Symantec Endpoint Protection *enabled* (Updated) {6C85A515-B91D-4D2B-AF18-40984A4A8493}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
SP: SUPERAntiSpyware *enabled* (Updated) {222A897C-5018-402e-943F-7E7AC8560DA7}
FW: Symantec Endpoint Protection *enabled* {BE898FE3-CD0B-4014-85A9-03DB9923DDB6}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k n... Read more

A:Clicking on any kind of link automatically redirects me to random ads.

Please help

Read other 7 answers
RELEVANCY SCORE 64.8

Basically the title says it. I figured I must have some kind of malware or something because whenever i click on any link or anything like that, i get redirected to stupid ads and useless webpages.
Basically, when i click, the page changes and at first it loads the page, though nothing actually shows up, its just blank, then it will suddenly start loading the ad page. VERY annoying. Please help? I have access to a Windows Install CD.


DDS (Ver_09-12-01.01) - NTFSx86
Run by HP_Administrator at 11:08:57.92 on Fri 01/08/2010
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1022.466 [GMT -8:00]


============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\Ati2evxx.exe
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\hphmon06.exe
C:\Program Files\Logitech\G-series Software\LCDMon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
svchost.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Pando Networks\Media Booster\PMB.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDMedia.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDClock.exe
C:\Program Files\LSI SoftM... Read more

A:Clicking on any kind of link automatically redirects me to random ad

Hello, and welcome to TSF.

My name is Gringo and I'll be glad to help you with your computer problems.The logs can take some time to research, so please be patient with me. I know that you need your computer working as quickly as possible, and I will work hard to help see that it happens.

Before we start: Please be aware that removing Malware is a potentially hazardous undertaking. I will take care not to knowingly suggest courses of action that might damage your computer. However it is impossible for me to foresee all interactions that may happen between the software on your computer and those we'll use to clear you of infection, and I cannot guarantee the safety of your system. It is possible that we might encounter situations where the only recourse is to re-format and re-install your operating system, or to necessitate you taking your computer to a repair shop.

Because of this, I advise you to backup any personal files and folders before you start.

Somethings to remember while we are working together.
1.Please do not run any other tool untill instructed to do so!
2.Please reply to this thread, do not start another!
3.Please tell me about any problems that have occurred during the fix.
4.Please tell me of any other symptoms you may be having as these can help also.
5.Please try as much as possible not to run anything while executing a fix.

Please subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this cli... Read more

Read other 9 answers
RELEVANCY SCORE 64.8

A few weeks ago, my PC became infected with a virus called AntivirusSoft. I used MalwareBytes to remove most of it and followed the instructions on http://www.2-spyware.com/remove-antispyware-soft.html to remove it fully, or so I thought. Soon after removing it, My computer has still been acting strange. While browsing the internet (Firefox 3.6.3), new tabs will randomly open and take me to sites that are usually advertisements. When I try to click a link on Google, usually I am redirected to one of the aforementioned sites. Also, after my PC has been running for a while, I become disconnected from the Internet, I am not able to execute programs, and sometimes the desktop disappears completely, leaving just my wallpaper.Here is my DDS.txt:DDS (Ver_10-03-17.01) - NTFSx86 Run by Ben at 23:41:07.70 on Thu 06/10/2010Internet Explorer: 6.0.2900.2180 BrowserJavaVersion: 1.6.0_18Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1535.1149 [GMT -4:00]============== Running Processes ===============C:\WINDOWS\system32\nvsvc32.exeC:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcssvchost.exesvchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\RUNDLL32.EXEC:\Program Files\iTunes\iTunesHelper.exeC:\WINDOWS\SOUNDMAN.EXEC:\Program Files\Common Files\Java\Java Update\jusche... Read more

A:Random popups/Google link redirects (might be AntivirusSoft)

GreetingsOne or more of the identified infections is a Backdoor Trojan. - TDSS rootkitThis could allow hackers to remotely control your computer, steal critical system information and download and execute files.I would counsel you to disconnect this PC from the Internet immediately. If you do any banking or other financial transactions on the PC or if it should contain any other sensitive information, please get to a known clean computer and change all passwords where applicable, and it would be wise to contact those same financial institutions to apprise them of your situation.Though the trojan has been identified and can be killed, because of it's backdoor functionality, your PC could be compromised and there is no way to be sure that your computer can ever again be trusted. Many experts in the security community believe that once infected with this type of trojan, the best course of action would be a reformat and reinstall of the OS. Please read these for more information:How Do I Handle Possible Identify Theft, Internet Fraud and CC Fraud?When Should I Format, How Should I ReinstallWe can still clean this machine but I can't guarantee that it will be 100% secure afterwards. "If you would like to continue, then follow the steps below, otherwise please let me know"I Would like you to do the following.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.Run Combofix:... Read more

Read other 5 answers
RELEVANCY SCORE 64.8

OS: Windows Vista, SP2
Symptoms:
1. Clicking on a link, redirects me to a random site, often appearing malicious in nature. This happens in both Firefox 3.6.3 and IE 8. It does not happen all the time. Clearing the Cache and Cookies makes the problem go away temporarily.
2. Unable to run Windows Update. I get the following error:
Code 80072EFE Windows Update encountered an unknown error.

Failed attempts at fixing this:
Malwarebytes 1.46 - quick scan
AVG Antivirus 9.0.829, virus DB version 271.1.1/2938 - Scan whole computer
Below is the HijackThis log:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:06:38 PM, on 6/14/2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18904)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Common Files\Bluebeam Software\Brewery\V45\Printer Support\BBPrint.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\Palm\Hotsync.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper... Read more

A:Random link redirects and Windows Update not working

Read other 14 answers
RELEVANCY SCORE 64.4

Recently purchased new laptop this thing has had next to none internet exposure however its seems i've still managed to pick somthing up....

Simply put everytime i open a new search in firefox i'm redirected to sites i've not searched for an example of would be searched facebook clicked on the link and found myself at ebay.. I have installed mcafee security center run a full scan and found nothing i have noticed there is another thread on the forum with the exact same problem so it nice to know i'm not the only person in this boat....

DDS (Ver_09-05-14.01) - NTFSx86
Run by Tim at 23:46:12.16 on 28/05/2009
Internet Explorer: 7.0.6001.18000
Microsoft? Windows Vista? Home Basic 6.0.6001.1.1252.44.1033.18.894.200 [GMT 1:00]

SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\rundll32.exe
C: ... Read more

A:Browser (firefox) Redirects to random sites.

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 2 answers
RELEVANCY SCORE 64.4

I have a problem where my browser re-directs me to different sites, when i get to these site sometimes the browser tries to download things labelled "S(1)" etc, i have tried to system restore to no avail and i have tried to download things to remove it to no avail.

After reading the stickied topic on what to do it tells us to download Hijackthis, it says "page not available" when i click the link, it also does this when i try to access anti-virus/malware/spyware sites.

My loading times for youtube etc have become sluggish and any help is appreciated

(PS: i dont understand most computer terminology so if its possible break it down for me, thanks)

edit 1: i can overcome the redirecting when i right click on the link then click "open in a new tab" and then it effectively opens the link to the place i waned to go to
 

A:Browser (mainly google) redirects me to random sites

Read other 16 answers
RELEVANCY SCORE 64.4

Dear Sirs,
Thanks very much in advance for the help. I think my computer is infected as everytime I do a search in Google, it redirects me to random sites.

Please let me know what I have to do solve this.

My DDS results are:



DDS (Ver_09-02-01.01) - NTFSx86
Run by Michael at 20:43:09.08 on 21/02/2009
Internet Explorer: 6.0.2900.5512 BrowserJavaVersion: 1.6.0_03
Microsoft Windows XP Home Edition 5.1.2600.3.1252.44.1033.18.1023.530 [GMT 0:00]

AV: AVG 7.5.552 *On-access scanning enabled* (Updated)
AV: Norton AntiVirus *On-access scanning enabled* (Updated)
FW: Norton Internet Security *enabled*
FW: ZoneAlarm Firewall *enabled*

============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Alias\Maya7.0\docs\wrapper.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\Tablet.exe
C:\Program Files\Alias\Maya7.0\docs\jre\bin\java.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.e... Read more

A:Every google search I do redirects me to random sites. Help please.

Howdy there Michael and welcome to TSF Forums

I'm Steve and I will be helping you thoughout this fix.

Before beginning the fix, read this post completely. If there's anything that you do not understand, kindly ask your questions before proceeding. It is IMPORTANT that you don't miss a step. Please perform everything in the correct order/sequence.

Please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription

Please note that the forum is very busy and if I don't hear from you within three days from this initial post then thread will be closed.

Please follow these directions in the order they are set out for you.

It appears that you have two antivirus programs installed and running, Norton AntiVirus and AVG 7.5. While I understand the frustrations of malware this may seem like a good idea to improve protection, but they can actually have the opposite effect and conflict with one another and cause system instability or even system hangs. Please choose one to keep and uninstall the other via Add or Remove Programs in your Control Panel.

We will begin with ComboFix.exe. Please visit this webpage for download links, and instructions for running the tool:

http://www.bleepingcomputer.com/comb...o-use-combofix

* Ensure you have disabled all anti virus and anti ma... Read more

Read other 6 answers
RELEVANCY SCORE 64.4

I'm running Vista, SP1.I got infected by AntiVirus Studio 2010 a few days ago. After some research, I was able to remove it with MalwareBytes Anti-Malware. Since then, my browsers have been hijacked -- all search results get redirected. In addition to MalwareBytes, I've run SuperAntiSpywarerkillComboFixFor combofix, I ran it with the following script file in the same directory:File::c:\windows\system32\winupdate.exec:\windows\system32\winhelper.dllc:\windows\system32\AVR09.exec:\Program Files\AdvancedVirusRemover\PAVRM.exeMy combofix log is attached. So far, nothing has worked. My hope is that some of you who know more than I can review this log and tell me what to do next. Many thanks, Bo Lasater

A:Problem with malicious redirects to random sites

Hello, Having run ComboFix we will need that log witha DDS log. You cannot attach the file here in this forum but can in the New one.Please go here....Preparation Guide ,do steps 6 - 9.Create a DDS log and post it in the new topic explained in step 9,which is here Virus, Trojan, Spyware, and Malware Removal Logs and not in this topic,thanks.If Gmer won't run,skip it and move on.Include the comboFix log.Let me know if that went well.

Read other 3 answers
RELEVANCY SCORE 64.4

Well, like the title says, Firefox keeps redirecting me to random sites. For instance I clicked on a wikipedia link and got sent to Travelocity.com. This just started happening earlier today, out of nowhere, and it's only Firefox that does this. The last things I remember downloading are Artweaver, Torsion, Notepad++, and Torsion, but that was all maybe over a week ago. I've used Malwarebytes' Anti-Malware and deleted four infected files. I've researched a few other threads but I'm still not exactly sure what I need to do. Can somebody please give me some direction? I'm using Windows XP by the way.
 

A:Mozilla Firefox Redirects to Random Sites

Read other 16 answers
RELEVANCY SCORE 64.4

Hey there,

I've searched around for quite a while to find the solution to this, but none of them have workd for me so here goes:

It started with random redirecting to this "you have a virus!!" site where there's a fake window showing there are viruses being detected and it makes you download some fake antivirus software (it was redirected from isohunt). I couldnt get off the page w/o clicking OK, so nod32 blocked the download and I clicked back and it was fine...I just assumed it was some aggressive ad. After a while I kept getting that ad more frequently (still on isohunt), then it appeared from some other site that I unfortunately can't remember. I'm not sure if that was related but now, whenever I click search results from google (and yahoo & bing too) all redirect to some random nonsense rubbish sites unless I click back and try again a few times--then the links work. It's on Firefox and IE both.

My nod32 detected some trojan on startup yesterday and i told the program to delete it and then also did a scan (on safe mode too) and deleted all the bad stuff. I scanned/cleaned today w/ malwarebytes and spybot but I still have the same problem. System restore always fails and nothing changes.

Post so long! sorry Here's my Hijackthis log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:31:47 AM, on 10/8/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16876)
Boot mode: Normal

Ru... Read more

A:Search engines redirects to random sites

If anyone can take a look at this I'd really appreciate it!
 

Read other 2 answers
RELEVANCY SCORE 64.4

Hi.  I apparently went someplace bad, and even though I had Windows Defender and the Firewall active, the following thing is happening:
1: When I click a link on a web page (any web page), about 90% of the time it sends me to a completely random retail site. 
2: If I hit "back", and try the same link again, it sends me where I wanted to go in the first place.
3. There is no 3.  That's all. 
 
So, what should I run, what logs should I post?  Already ran full Windows Defender scan and let it clean everything it found.  Already ran Spybot S&D, and removed everything it suggested.  Ready to talk to people who KNOW what they are talking about.  Thanks!

A:Random browser redirects to ad sites -- weird

Welcome Zenmaster..Run these next and tell me how it is.What is your browser?MiniToolBoxPlease download MiniToolBox, save it to your desktop and run it.Checkmark the following checkboxes:Flush DNSReport IE Proxy SettingsReset IE Proxy SettingsReport FF Proxy SettingsReset FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Users, Partitions and Memory size.Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run. Note: When using "Reset FF Proxy Settings" option Firefox should be closed.TDSSKillerDownload TDSSKiller and save it to your desktop.Extract (unzip) its contents to your desktop.Open the TDSSKiller folder and doubleclick on TDSSKiller.exe to run the application, then on Start Scan.If an infected file is detected, the default action will be Cure, click on Continue.If a suspicious file is detected, the default action will be Skip, click on Continue.It may ask you to reboot the computer to complete the process. Click on Reboot Now.If no reboot is required, click on Report. A log file should appear. Please copy and paste the contents of that file here.If a reboot is required, the report can also be found in your root directory (usually C:\ folder) in the form of TDSSKiller_xxxx_log.txt. Please copy and paste the contents of that file here.AdwCleanerPlease download AdwCleaner by Xplode and save to your Desktop.Double click on AdwCl... Read more

Read other 1 answers
RELEVANCY SCORE 64.4

This machine was infected with scareware / malware that popped up stuff about being infected with viruses. After following the relevant instructions here and running rkill.exe and mbam, that stuff seemed to get cleaned up. However, now whenever I click a link in IE it connects to some random site rather than the one I would expect. There is no proxy set in the connection settings for IE. Any help would be greatly appreciated!DDS (Ver_10-03-17.01) - NTFSx86 Run by Carla Nordstrom at 15:47:48.25 on Mon 08/23/2010Internet Explorer: 7.0.5730.13Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.383.64 [GMT -5:00]AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcssvchost.exesvchost.exeC:\Program Files\AVG\AVG9\avgchsvx.exeC:\Program Files\AVG\AVG9\avgrsx.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\AVG\AVG9\avgcsrvx.exesvchost.exeC:\Program Files\AVG\AVG9\avgwdsvc.exeC:\WINDOWS\system32\HPZipm12.exeC:\Program Files\AVG\AVG9\avgnsx.exeC:\Program Files\HP\HP Software Update\HPWuSchd2.exeC:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exeC... Read more

A:IE redirects to random sites when clicking on links

Hi halindrome,Welcome to Bleeping Computer!My name is mpascal, and I will be helping you fix your problem.Before we begin, I would like give a few guidelines so that we can fix your problem as quickly and efficiently as possible:Be sure to follow all my instructions carefully! If there is anything you don't understand, don't hesitate to ask.Please do not do anything or perform other steps unless I have asked you to do so.Please make sure you post all logs I ask you to, and make sure that the entire log gets posted.Don't attach any logs unless asked. Posting them in the forums will make them easier to analyze.If you are unsure of how to reply, or need help with anything regarding the website, please look here.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below I will ... Read more

Read other 3 answers
RELEVANCY SCORE 64

Hi,
A few months ago I did something pretty stupid (in hindsight I should say) and downloaded an application that promised to spoof IP addresses. I wanted to listen to Pandora again you see, and I can't anymore from the UK. Anyway, it seemed to work sort of OK, but very soon afterwards my gmail account was compromised and a spam mail was sent out from my account to my contacts list. This was pretty alarming for me, but I ran a computer scan which located a number of infections, and cleaned up my PC (or so I thought) and then uninstalled the dodgy application.
Things sort of seemed ok, but then I started to notice the every once in a while I would click on a link from Google, and I would go to a completely different site, quite often Myspace. I also began to notice that sometimes when I logged on to Windows, my Virgin PCGuard (virus/spyware checked provided by my ISP) would run, but then after this happened, everything would freeze, and I couldn't click on any icons, or anything.
Gradually, both these problems have become worse over time so that they are now unbearable, and I can't ignore them anymore. Quite often now, when I restart my laptop, it doesn't start up properly, it blue screens on me, and then I have to start it up in safe mode, and run a scan, delete the spyware that it finds, and then it starts up properly. And then it seems to be ok for a short while, but then the problems come back again and the cycle continues. And the google links redirecting is ubiquito... Read more

A:Google link redirects; random computer freeze and BSOD

hi

Welcome to TSF

You may wish to subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.

---------------------------------------------------------------------------

Please note that these fixes are not instantaneous. Most infections require more than one round to properly eradicate.

Please stay with me until given the 'all clear' even if symptoms seemingly abate.

Kindly follow my instructions and please do no fixing on your own or running of scanners unless requested by a helper.

--------------------------------------------------------------------------

I am sorry to inform you that one or more of the identified infections is a backdoor trojan.

This allows hackers to remotely control your computer, steal critical system information and download and execute files.

If you do any banking or other financial transactions on the PC or if it should contain any other sensitive information, please get to a known clean computer and change all passwords where applicable, and it would be wise to contact those same financial institutions to apprise them of your situation.

How Do I Handle Possible Identify Theft, Internet Fraud and CC Fraud?

-------------------------------------------------------------------------------------------------------------------

Before beginning the fix... Read more

Read other 7 answers
RELEVANCY SCORE 64

Hello there!

My problem sounds very much the same as the one I discovered here on the forum (solved):
http://forums.techguy.org/virus-oth...9-redirects-sound-files-playing-iexplore.html

Clicking links in Google on any web browser I try will sometimes redirrect to something random.

I also experience random sound files playing (rare occurance I think it's linked with web browsing), these will stack up layer upon layer and it's just weird and annoying. When I click on the sound mixer I see TCP/IP Ping is producing the sound and by killing PING.EXE with Process Hacker 2 I stop it but that's not fixing the overall problem.

Here is my HiJackThis Log:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:51:07 AM, on 20/06/2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16446)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Program Files\Steam\steam.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\Leech\Desktop\HijackThis.exe
R1 - HKCU\Software\Microso... Read more

A:Web link Redirects, TPC/IP Ping has random sound files playing

Read other 16 answers
RELEVANCY SCORE 64

Hi BleepingComputer! As you can see, I have a problem with my computer that doesn't seem much of a problem but it is annoying and maybe there is more damage done to my system than what appears. So basically the problem is that whenever I search something up on google.ca I will get the page with the results and stuff. But when I click on one of the results, I will get redirected to a random site. This random site may or may not have any relevance to what I actually searched up. For example, I searched up the term "bleeping computer". The result page shows up. I click on the Wikipedia entry of "bleeping computer". I can see already that I am going to get redirected because I can see at the bottom of my browser (a random IP address shows up or yourmagicserach.com or something shows up then a different website loads). If I were to right click on the "Back" button of my browser, I can "Wait a few second" page appear twice then the google results page. This is troublesome and annoying since I can't even search up something on google without going back click again and maybe going back again to click. The only temporary solution that I have found or maybe lower the chances of being redirected is if I clean out the cookies, cache and internet history. This would last about 3 searches before it starts appearing again. Also, the more I search, the worst it gets or so it seems. I ahve also tried a full scan with Malwarebytes but nothin... Read more

A:Google redirects me to random sites when I click on the result

Hello and welcome.. We'll do these and see what we get.Please read and follow all these instructions very carefully.Please download GooredFix and save it to your Desktop.Double-click GooredFix.exe to run it.A log will open, please post the contents of that log in your next reply (it can also be found on your desktop, called Goored.txt).We Need to check for Rootkits with RootRepealDownload RootRepeal from the following location and save it to your desktop.Direct Download (Recommended)Primary MirrorSecondary MirrorSecondary MirrorSecondary MirrorZip Mirrors (Recommended if you have a slower connection or if the Direct Download mirror is down)
Primary MirrorSecondary MirrorSecondary MirrorRar Mirrors - Only if you know what a RAR is and can extract it.
Primary MirrorSecondary MirrorSecondary MirrorExtract RootRepeal.exe from the archive (If you did not use the "Direct Download" mirror).Open on your desktop.Click the tab.Click the button.Check all seven boxes: Push OkCheck the box for your main system drive (Usually C:), and press Ok.Allow RootRepeal to run a scan of your system. This may take some time.Once the scan completes, push the button. Save the log to your desktop, using a distinctive name, such as RootRepeal.txt. Include this report in your next reply, please.

Read other 21 answers
RELEVANCY SCORE 64

Beginning this morning, clicking any search engine link results in a redirect page advising that:

"The previous page is sending you to hxxp://extratyper.com/fcgi-bin/?q=mercedes%20benz&se=google?tamp=Sat%20Nov%2014%2014:36:57%202009&n=1&url=http://www3.mercedes-benz.com/mbcom_v4/gb/en.html.

If you do not want to visit that page, you can return to the previous page"

For the sake of this example I was searching "Mercedes", content of the full extratyper link always reflects the search-topic.

About 20% of the time the redirect then occurs automatically after a few seconds, the other 80% of times the page waits for either the redirect or the return link to be clicked.

When the redirect link is clicked, about 33% of the time it opens the correct site, the other times it goes to a random site, often a shoping site though not always.

Return always takes me back to the search results page.

Using copy/paste I can enter links from a google list directly in to the address bar of a new IE window and go to the sites that way, and it was by doing that after googling "redirects" I found this to be a fairly widely known problem. I was hoping to discover a suitable fix, and might have been happy to take some initial steps myself but from what I was reading it seemed to be more significant than I had hoped and so I would be grateful if an Analyst would review the following logs and advise.

Thanks!




I do not have acces... Read more

A:Search engine redirects to random and shopping sites

BUMP please

Read other 19 answers
RELEVANCY SCORE 64

Have ran Malwarebytes and Spybot SD in safe mode: console only. Both come back clean. Have uninstalled firefox then ran CCleaner, and re-installed firefox.Antivirus - AVG Free 9Firewall - ZonealarmPlease take a look and see if you can help me out. ThanksHijack this logLogfile of Trend Micro HijackThis v2.0.4Scan saved at 6:45:25 PM, on 6/16/2010Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\AVG\AVG9\avgchsvx.exeC:\Program Files\AVG\AVG9\avgrsx.exeC:\Program Files\AVG\AVG9\avgcsrvx.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\ehome\ehtray.exeC:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exeC:\Program Files\Synaptics\SynTP\SynTPEnh.exeC:\Program Files\HP\QuickPlay\QPService.exeC:\Program Files\Hp\HP Software Update\HPWuSchd2.exeC:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exeC:\Program Files\Google\Google Talk\googletalk.exeC:\Progra... Read more

A:Google Redirects to random sites / no windows update

Hello dstribs,Sorry about the delay. If you still need help, please post a new HijackThis and/or DDS log to be sure nothing has changed and I'll be happy to look at it. Thanks,tea

Read other 12 answers
RELEVANCY SCORE 64

Greetings!

FF has been removed from computer
IE still has the redirecting errors: opens it own windows, redirects when links are clicked etc

Spybot Search and Destroy, Malwarebytes cannot find any files (ran both in regular and safe modes)(McAfee didn't find anything either)

Prep per guide has been completed (back-ups etc)
DeFogger ran

Attached are logs for DDS (X2) and GMER
RU42
DDS REPORT
DDS (Ver_10-11-10.01) - NTFSx86
Run by Owner at 17:01:44.89 on Wed 11/24/2010
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.510.145 [GMT -8:00]
============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Olympus\DeviceDetector\DM1Service.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\QuickTime\QTTask.e... Read more

A:Redirects from FF and IE links; tabs open to random sites

Hi ru42video,Welcome to Virus/Trojan/Spyware/Malware Removal (VTSMR) forum. I am going to assist you with your problem.Please refrain from making any changes to your system (scanning or running other tools, updating Windows, installing applications, removing files, etc.) from now on as it might interfere with our fixes. In case of making changes I shall assume my assistance is not needed any more.Please download TDSSKiller.exe and save it to your desktop.Run TDSSKiller.exe. Click Start scan.When it is finished the utility outputs a list of detected objects with description.
The utility automatically selects an action (Cure or Delete) for malicious objects.
The utility prompts the user to select an action to apply to suspicious objects (Skip, by default). Let the options as it is and click ContinueLet reboot if needed and tell me if the tool needed a reboot.Click on Report and post the contents of the text file that will open.

Note: By default, the utility outputs the log into system disk (it is usually the disk with installed operating system, C:\) root folder. The Log have a name like: TDSSKiller.Version_Date_Time_log.txt.Please download Malwarebytes' Anti-Malware from one of these locations:
malwarebytes.org
majorgeeks.comDouble Click mbam-setup.exe to install the application.Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.If an update is found, it will download and install ... Read more

Read other 2 answers
RELEVANCY SCORE 64

Hi,

I recently had a virus/rootkit or some type of malware installed on my computer. Basically because I accidentally clicked yes to one of those "you're computer is infected" links. I ran Malwarebytes and AD-Aware before hand and I thought I got rid of everything, unfortunately I did not as Firefox still opens random tabs.

I read the first steps, my logs are attached below. Unfortunately I do not have a Windows Install CD, I think it's forever lost somewhere.

I read the previous posts similar to mine but was not able to figure out what exactly to do. Any help would be greatly appreciated!




DDS (Ver_10-03-17.01) - NTFSx86
Run by Gov at 18:12:00.67 on Thu 05/13/2010
Internet Explorer: 7.0.6001.18000 BrowserJavaVersion: 1.6.0_18
Microsoft? Windows Vista? Home Premium 6.0.6001.1.1252.1.1033.18.3070.1727 [GMT -4:00]

AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
SP: AVG Anti-Virus Free *enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe ... Read more

A:Firefox opens random tabs / redirects sites

Hi ettes and welcome to TSF.

If you still require assistance and are not seeking help elsewhere, then please carry out my instructions.

Please subscribe to this thread so that you are notified when you receive a reply. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Add Subscription.

** Note: Please stick with me until I declare that your system is free from malware. Even though your system may not have any symptoms of malware, it may still be infected. **

--------------------------------------------------------------
Please visit this webpage for instructions for downloading and running ComboFix:

http://www.bleepingcomputer.com/comb...o-use-combofix

* Ensure you have disabled all anti virus and anti malware programs so they do not interfere with the running of ComboFix. You can find instructions HERE.

Reply back with the following: C:\ComboFix.txt

Read other 19 answers
RELEVANCY SCORE 64

Hello! I recently rid a virus using my antivirus software, but there is still a problem with my computer. Most of my Google searches are redirected to weird sites. I don't know what to do! Please help me! Thanks!EDIT: I keep getting a "Host Process for Windows Services Stopped Working" error and I cannot access Windows Update. Oh and I get a blue screen of death in the middle of the GMER scan right after a Host Process error. So here is the DDS stuff and my HiJackThis log

A:Malware redirects Google Searches to random sites

I really hate to bump, but this virus is still on here, randomly making the the computer crash. Please help!EDIT: Please be patient. There are over 450 unanswered topics in this forum at present and the current average wait time to receive help is 7 days. ~BPOh, 7 days? You guys are really busy! Thanks, Ill see you in 7 days, until then, I'll be playing Star Craft 2

Read other 10 answers
RELEVANCY SCORE 63.6

I'll go to Yahoo, type in a search topic, (i.e. "youtube") and when i go to click on the link for "youtube" it sometimes redirects me to random sites. Sometimes multiple sites in a row. It does it about 50% of the time with my searches. AVG Ant-Virus, Malwarebytes, and Ad-Aware all say I'm clean and can't find any viruses, malware, etc. I ran a CCleaner aswell. Sorry about the lack of information, but i can answer any questions. Thanks for your time -Jake

DDS (Ver_09-05-14.01) - NTFSx86
Run by Owner at 15:56:31.68 on Wed 06/03/2009
Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.5.0_12

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.yahoo.com
uSearch Page = hxxp://www.yahoo.com
uSearch Bar = hxxp://us.rd.yahoo.com/customize/ie/defaults/sb/msgr9/*http://www.yahoo.com/ext/search/search.html
mDefault_Search_URL = hxxp://us.rd.yahoo.com/customize/ie/defaults/su/msgr9/*http://www.yahoo.com
mSearch Page = hxxp://www.yahoo.com
mStart Page = hxxp://www.yahoo.com
mSearch Bar = hxxp://us.rd.yahoo.com/customize/ie/defaults/sb/msgr9/*http://www.yahoo.com/ext/search/search.html
uSearchURL,(Default) = hxxp://us.rd.yahoo.com/customize/ie/defaults/su/msgr9/*http://www.yahoo.com
BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File
BHO: AcroIEHlprObj Class: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\acrobat 6.0\reader\activex\AcroIEHelper.dll
BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-... Read more

A:After typing in search, clicking on link, i get redirected to random sites.

Hello and welcome to Bleeping Computer. Sorry for the delay the forums here at BC are alwaysvery busy and we do are best to keep up. If you no longer require any help could you let me no please, so this topic can be closed.My name is Syler, I will be helping you to solve your Malware issues. Whilst I am helping you, I wouldbe grateful if you would note the following: Please do not run other tools or scans unless I ask you to and follow all the steps I give you, in order.
If you don't know or understand something, please don't hesitate to say or ask before you proceed with my instructions.
Please continue to work with me, until I tell you your machine appears to be clean. Absence of symptoms does not mean that everything is clear.
If I do not hear back from you within 5 days of my last post, then this topic will be closed.First I would like to see a new log since alot could have changed since your origional post.Download random's system information tool (RSIT) by random/random from here and save it to your desktop.Double click on RSIT.exe to run RSIT.Click Continue at the disclaimer screen.Once it has finished, two logs will open. Please post the contents of both log.txt (<<will be maximized) and info.txt (<<will be minimized)Thanks

Read other 17 answers
RELEVANCY SCORE 63.2

Hi, almost every time I click on a search result in Google I am redirected to a page on a similar topic to the page I linked to but never to the actual site. Sometimes this links to adult orientated sites which has caused me to stop my children using the Net. Can anyone help please?
 

A:Solved: Google redirects links to similar but random sites

Read other 15 answers
RELEVANCY SCORE 63.2

Hello all.I would like some help and/or direction if you please.I am running xp pro sp3Firefox 3.5.8IE 7 (my kids)Security softwareAvast homeZonealarm freeSpybot S&D Malwarebytes2 days ago avast triggered on a threat so I quarantined and ran avast 4.8 home edition. Then I ran malwarebytes, spybot S&D and innoculated, CCleaner and rescanned with avast. Malwarebytes identified threats and I deleted as did Spybot (these were just cookies). Avast came up clean. All programs are running the latest updates. Unfortunately I think something was missed. Here's the problem, I will google a topic and click on the link and sometimes get to the link and other times go to a random site e.g.airsplat.com. If I use the back button I am unable to unless I use the drop down next to the back button when I get randomly redirected. Additionally before I was infected I had an add-on in Firefox for WOT results on google. That is now disabled because it was blocking every link I clicked on. Sometime when i click on a result it will begin to load and Avast will interrupt as if the site is malicious e.g. I was looking for info on the guardian 2010 malware for an infected laptop. On this PC I googled the malware, tried to go to bleeping computer and was blocked as it was "malicious". I backed up tried again and was able to visit the site. Here is a copy of my HiJackthis log I appreciate any help.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 11:27:45 PM, on 2/18/... Read more

A:Browser randomly redirects to random sites: sometimes avast blocks

Please download The Comedian.exe by Rorschach112 to your desktopPlease disable all of your antivirus/firewall before doing this step. Please visit HERE if you don't know how..Double click the program to run it. It will only take around several minutes to run.It will do a series of tasks and tell you when each one is finished.You will be prompted to press any key after each stepWhen it is done it will close and exit itself automatically.You can delete The_Comedian.exe once it is finishedSTOP! if you can't complete this step.. Tell me more about it..NEXTPlease download OTS by OldTimer and unzip it to your Desktop..Note: You must be logged on to the system with an account that has Administrator privileges to run this program.Close ALL OTHER PROGRAMS.Double-click on OTS to start the program (if you are running on Vista then right-click the program and choose Run as Administrator).At the top, tick on Scan All Users sectionAt File Age set it to 90 DaysIn the Processes, Modules, Services, Drivers and Registry section, please set on Safe List.In the Files Created Within and Files Modified Within section, set it to File AgeAt the bottom, tick on all Safe List and Use Company Name WhiteList optionUnder Additional Scans, tick on the "Extras" button and then click the checkboxes in front of the following items to select them:Reg - Disabled MS Config ItemsReg - Drivers32Reg - ExtReg - IE Explorer BarReg - NetSvcsReg - Safeboot MinimalReg - Safeboot NetworkFile - Lop CheckFile - Purity Sca... Read more

Read other 7 answers