Over 1 million tech questions and answers.

google links redirects to wrong place

Q: google links redirects to wrong place

Hi,
I need help getting rid of something that is redirecting my Google links to the wrong places.
I have copied and pasted the DDS logs below and will also attach them.
Thanks
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_09-06-26.01)

Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume2
Install Date: 5/8/2009 1:04:28 PM
System Uptime: 7/5/2009 12:23:40 AM (17 hours ago)

Motherboard: Dell Inc. | | 0MG532
Processor: Genuine Intel® CPU T2050 @ 1.60GHz | Microprocessor | 1596/133mhz

==== Disk Partitions =========================

C: is FIXED (NTFS) - 51 GiB total, 10.045 GiB free.
D: is CDROM ()

==== Disabled Device Manager Items =============

==== System Restore Points ===================

RP5: 5/8/2009 4:30:25 PM - Installed Windows XP KB923561.
RP6: 5/8/2009 5:35:23 PM - Removed Windows Installer Clean Up
RP7: 5/9/2009 9:43:40 AM - Removed HP Photo and Imaging 1.0 - Scanjet 3500c Series
RP8: 5/10/2009 11:16:12 PM - System Checkpoint
RP9: 5/12/2009 10:11:52 AM - System Checkpoint
RP10: 5/14/2009 10:18:36 PM - System Checkpoint
RP11: 5/15/2009 11:25:42 PM - System Checkpoint
RP12: 5/17/2009 10:17:48 AM - System Checkpoint
RP13: 5/18/2009 3:18:25 PM - System Checkpoint
RP14: 5/19/2009 3:41:38 PM - System Checkpoint
RP15: 5/20/2009 7:14:56 PM - System Checkpoint
RP16: 5/22/2009 12:28:32 PM - System Checkpoint
RP17: 5/24/2009 10:07:19 AM - System Checkpoint
RP18: 5/25/2009 2:35:24 PM - System Checkpoint
RP19: 5/26/2009 3:30:56 PM - System Checkpoint
RP20: 5/26/2009 5:59:25 PM - Installed Windows Media Player 11
RP21: 5/26/2009 6:02:52 PM - Installed Windows XP MSCompPackV1.
RP22: 5/27/2009 6:34:30 PM - System Checkpoint
RP23: 5/29/2009 12:01:43 PM - System Checkpoint
RP24: 5/30/2009 12:53:59 PM - System Checkpoint
RP25: 5/31/2009 1:46:20 PM - System Checkpoint
RP26: 6/2/2009 10:49:01 AM - System Checkpoint
RP27: 6/3/2009 11:22:39 AM - System Checkpoint
RP28: 6/4/2009 11:58:26 AM - System Checkpoint
RP29: 6/5/2009 12:04:26 PM - System Checkpoint
RP30: 6/6/2009 12:32:35 PM - System Checkpoint
RP31: 6/7/2009 1:17:23 PM - System Checkpoint
RP32: 6/8/2009 2:21:02 PM - System Checkpoint
RP33: 6/9/2009 2:32:51 PM - System Checkpoint
RP34: 6/10/2009 2:52:19 PM - System Checkpoint
RP35: 6/11/2009 3:49:41 PM - System Checkpoint
RP36: 6/12/2009 4:58:52 PM - System Checkpoint
RP37: 6/14/2009 9:51:51 AM - System Checkpoint
RP38: 6/15/2009 10:29:39 AM - System Checkpoint
RP39: 6/17/2009 11:25:50 AM - System Checkpoint
RP40: 6/18/2009 12:11:38 PM - System Checkpoint
RP41: 6/19/2009 3:49:54 PM - System Checkpoint
RP42: 6/20/2009 4:27:48 PM - System Checkpoint
RP43: 6/21/2009 4:36:46 PM - System Checkpoint
RP44: 6/22/2009 5:09:18 PM - System Checkpoint
RP45: 6/23/2009 7:05:31 PM - System Checkpoint
RP46: 6/24/2009 9:59:25 AM - Removed Bonjour
RP47: 6/24/2009 4:15:03 PM - Removed Creative WebCam Center
RP48: 6/24/2009 4:15:33 PM - Configured Engine Installer
RP49: 6/25/2009 5:08:57 PM - System Checkpoint
RP50: 6/26/2009 3:11:29 PM - Installed STOPzilla. Available with Windows Installer version 1.2 and later.
RP51: 6/27/2009 9:03:23 AM - Removed Get Yahoo! Messenger
RP52: 6/28/2009 10:38:46 AM - System Checkpoint
RP53: 6/29/2009 10:52:33 AM - System Checkpoint
RP54: 6/30/2009 11:04:27 AM - System Checkpoint
RP55: 7/1/2009 11:44:34 AM - System Checkpoint
RP56: 7/2/2009 11:48:55 AM - System Checkpoint
RP57: 7/3/2009 12:04:19 PM - System Checkpoint
RP58: 7/5/2009 2:30:39 PM - System Checkpoint

==== Installed Programs ======================

32 Bit HP CIO Components Installer
Adobe Bridge 1.0
Adobe Common File Installer
Adobe Flash Player 10 Plugin
Adobe Help Center 1.0
Adobe Photoshop CS2
Adobe Reader 9.1.1
Adobe Stock Photos 1.0
AOLIcon
Apple Mobile Device Support
Apple Software Update
Azureus
B44Inst
Backup Dell-Installed Programs
BlackBerry Desktop Software 4.3
Broadcom 440x Driver Installer
Canon Digital Camera USB WIA Driver
Canon Utilities EOS Utility
Conexant HDA D110 MDC V.92 Modem
CP_AtenaShokunin1Config
CP_CalendarTemplates1
CP_Package_Basic1
CP_Panorama1Config
Crystal Report ActiveX Viewer
CueTour
Daily Mugshot Windows Reminder
Dell CinePlayer
Dell Digital Jukebox Driver
Dell Driver Reset Tool
Dell ResourceCD
Dell System Restore
Dell Wireless WLAN Card
Destination Component
DeviceDiscovery
DeviceFunctionQFolder
Digital Content Portal
Digital Line Detect
DocProc
Earth 3D Space Tour screensaver v1.1
EarthLink setup files
Easy CD Creator 5 Basic
eFax Messenger
FullDPAppQFolder
Get High Speed Internet!
Google Desktop
Google Earth
Google Talk (remove only)
Google Toolbar for Internet Explorer
Google Updater
GoToMeeting 4.0.0.320
hp deskjet 3600
hp deskjet 9600 series
HP Image Zone 5.3
HP Imaging Device Functions 10.0
hpg4850QFolder
InstantShareDevices
Intel® Graphics Media Accelerator Driver
iTunes
Java 2 Runtime Environment, SE v1.4.2_03
K-Lite Codec Pack 2.71 Full
Learn2 Player (Uninstall Only)
LifeGlobe Sharks, Terrors of the Deep
Logitech QuickCam
Logitech QuickCam Driver Package
Lotus NotesSQL 3.01 driver
Lotus SmartSuite - English
Macromedia Flash Player
MCU
Mechanical Clock 3D Screensaver 1.0
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Hotfix (KB928366)
Microsoft .NET Framework 2.0 Service Pack 1
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Office Basic Edition 2003
Microsoft Office PowerPoint Viewer 2003
Microsoft Outlook Personal Folders Backup
Microsoft SQL Server 2005
Microsoft SQL Server 2005 Express Edition (NR2007)
Microsoft SQL Server Desktop Engine (MICROSOFTSMLBIZ)
Microsoft SQL Server Native Client
Microsoft SQL Server Setup Support Files (English)
Microsoft SQL Server VSS Writer
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 Redistributable
Mixer
Mobile Broadband Drivers
Modem Helper
Mozilla Firefox (3.0.11)
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 Parser and SDK
MSXML 6 Service Pack 2 (KB954459)
Musicmatch? Jukebox
Neat Business Cards Scanner Drivers
Neat Business Cards v2.1.0
Neat OCR15
NeatReceipts Database Controller
NetWaiting
NetZeroInstallers
overland
PanoStandAlone
PhotoGallery
Propalms Connection Manager
QuickBooks Product Listing Service
QuickSet
QuickTime
RandMap
RealPlayer Basic
Rosetta Stone V3
Roxio DLA
Roxio Media Manager
Roxio MyDVD LE
Roxio RecordNow Audio
Roxio RecordNow Copy
Roxio RecordNow Data
SBA
ScannerCopy
Search Assist
Security Update for Step By Step Interactive Training (KB898458)
Security Update for Step By Step Interactive Training (KB923723)
Security Update for Windows XP (KB923561)
ShareIns
SkinsHP1
Sonic Activation Module
Sonic Update Manager
Sonic_PrimoSDK
Sound Blaster Audigy ADVANCED MB Demo
Status
STOPzilla
SupportSoft Assisted Service
Synaptics Pointing Device Driver
TrayApp
URL Assistant
VC 9.0 Runtime
Viewpoint Media Player
VZAccess Manager
WebCyberCoach 3.2 Dell
WebEx
WebFldrs XP
Windows Genuine Advantage Notifications (KB905474)
Windows Installer 3.1 (KB893803)
Windows Internet Explorer 8 Release Candidate 1
Windows Media Format 11 runtime
Windows Media Player 11
Windows XP Service Pack 3
WinRAR archiver
ZoneAlarm
ZoneAlarm Spy Blocker

==== Event Viewer Messages From Past Week ========

6/29/2009 9:28:05 AM, error: Service Control Manager [7011] - Timeout (30000 milliseconds) waiting for a transaction response from the wuauserv service.
6/29/2009 8:12:11 PM, error: W32Time [17] - Time Provider NtpClient: An error occurred during DNS lookup of the manually configured peer 'time-a.nist.gov,0x1'. NtpClient will try the DNS lookup again in 15 minutes. The error was: A socket operation was attempted to an unreachable host. (0x80072751)
6/29/2009 7:56:23 PM, error: Service Control Manager [7023] - The HP CUE DeviceDiscovery Service service terminated with the following error: Unspecified error
6/29/2009 7:56:20 PM, error: Service Control Manager [7022] - The HP CUE DeviceDiscovery Service service hung on starting.
6/29/2009 7:38:02 PM, error: Service Control Manager [7011] - Timeout (30000 milliseconds) waiting for a transaction response from the Netman service.
6/29/2009 7:26:18 PM, error: Service Control Manager [7011] - Timeout (30000 milliseconds) waiting for a transaction response from the RasMan service.
6/29/2009 7:25:18 PM, error: Service Control Manager [7011] - Timeout (30000 milliseconds) waiting for a transaction response from the w32time service.
6/29/2009 7:24:48 PM, error: Service Control Manager [7011] - Timeout (30000 milliseconds) waiting for a transaction response from the SENS service.
6/29/2009 7:24:18 PM, error: Service Control Manager [7011] - Timeout (30000 milliseconds) waiting for a transaction response from the Schedule service.
6/29/2009 5:17:27 PM, error: Service Control Manager [7011] - Timeout (30000 milliseconds) waiting for a transaction response from the wscsvc service.
6/29/2009 5:16:57 PM, error: Service Control Manager [7011] - Timeout (30000 milliseconds) waiting for a transaction response from the ShellHWDetection service.
6/29/2009 5:16:27 PM, error: Service Control Manager [7011] - Timeout (30000 milliseconds) waiting for a transaction response from the BITS service.
6/29/2009 5:15:57 PM, error: Service Control Manager [7011] - Timeout (30000 milliseconds) waiting for a transaction response from the AudioSrv service.

==== End Of File ===========================

DDS (Ver_09-06-26.01) - NTFSx86
Run by James Gould at 17:43:33.07 on Sun 07/05/2009
Internet Explorer: 6.0.2900.5512
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1014.144 [GMT -7:00]

AV: ZoneAlarm Security Suite Antivirus *On-access scanning enabled* (Updated) {5D467B10-818C-4CAB-9FF7-6893B5B8F3CF}
FW: ZoneAlarm Security Suite Firewall *enabled* {829BDA32-94B3-44F4-8446-F8FCFF809F8B}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
C:\Program Files\Common Files\iS3\Anti-Spyware\SZServer.exe
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\system32\svchost.exe -k hpdevmgmt
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlservr.exe
C:\Program Files\Neat Business Cards\exec\NeatReceiptsDBController.exe
C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\WINDOWS\System32\svchost.exe -k imgsvc
C:\WINDOWS\Explorer.EXE
C:\Program Files\STOPzilla!\STOPzilla.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\Program Files\Hewlett-Packard\hp deskjet 9600 series\Toolbox\HPWITBX.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program Files\Logitech\QuickCam\Quickcam.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\stsystra.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
C:\Program Files\Google\Google Talk\googletalk.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Daily Mugshot Windows Reminder\DailyMugshot.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Tarantella Client\iqclntmgr.exe
C:\Program Files\eFax Messenger 4.4\J2GTray.exe
C:\PROGRA~1\ZONELA~1\ZONEAL~1\MAILFR~1\mantispm.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Desktop\dds.scr

============== Pseudo HJT Report ===============

uStart Page = hxxp://nytimes.com/
uSearch Page = hxxp://www.google.com
uSearch Bar = hxxp://www.google.com/ie
uDefault_Page_URL = www.google.com/ig/dell?hl=en&client=dell-usuk&channel=us
mDefault_Search_URL = hxxp://www.google.com/ie
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
mSearchAssistant = hxxp://www.google.com/ie
BHO: ZILLAbar Browser Helper Object: {1827766b-9f49-4854-8034-f6ee26fcb1ec} - c:\program files\stopzilla!\SZSG.dll
BHO: {2a9cf8d5-0e75-4691-ac5d-35daac47aa0d} - No File
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.1.1309.15642\swg.dll
BHO: STOPzilla Browser Helper Object: {e3215f20-3212-11d6-9f8b-00d0b743919d} - c:\program files\stopzilla!\SZIEBHO.dll
TB: ZoneAlarm Spy Blocker: {f0d4b239-da4b-4daf-81e4-dfee4931a4aa} - c:\program files\zonealarmsb\bar\1.bin\SPYBLOCK.DLL
TB: &Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar.dll
TB: STOPzilla: {98828ded-a591-462f-83ba-d2f62a68b8b8} - c:\program files\stopzilla!\SZSG.dll
EB: Real.com: {fe54fa40-d68c-11d2-98fa-00c0f0318afe} - c:\windows\system32\Shdocvw.dll
uRun: [googletalk] "c:\program files\google\google talk\googletalk.exe" /autostart
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [swg] c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe
uRun: [Creative WebCam Tray] "c:\program files\creative\shared files\CamTray.exe"
uRun: [ISUSPM] "c:\program files\common files\installshield\updateservice\ISUSPM.exe" -scheduler
uRun: [eFax 4.4] "c:\program files\efax messenger 4.4\J2GDllCmd.exe" /R
uRun: [MSMSGS] "c:\program files\messenger\msmsgs.exe" /background
mRun: [SunJavaUpdateSched] c:\program files\java\j2re1.4.2_03\bin\jusched.exe
mRun: [SynTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe
mRun: [DLA] c:\windows\system32\dla\DLACTRLW.EXE
mRun: [ISUSPM Startup] c:\progra~1\common~1\instal~1\update~1\ISUSPM.exe -startup
mRun: [ISUSScheduler] "c:\program files\common files\installshield\updateservice\issch.exe" -start
mRun: [Google Desktop Search] "c:\program files\google\google desktop search\GoogleDesktop.exe" /startup
mRun: [HPWITOOLBOX] c:\program files\hewlett-packard\hp deskjet 9600 series\toolbox\HPWITBX.exe "-i"
mRun: [AdaptecDirectCD] "c:\program files\roxio\easy cd creator 5\directcd\DirectCD.exe"
mRun: [HP Component Manager] "c:\program files\hp\hpcoretech\hpcmpmgr.exe"
mRun: [HPDJ Taskbar Utility] c:\windows\system32\spool\drivers\w32x86\3\hpztsb09.exe
mRun: [VF0060 STISvc] RunDLL32.exe V0060Pin.dll,RunDLL32EP 513
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [<NO NAME>]
mRun: [RoxWatchTray] "c:\program files\common files\roxio shared\9.0\sharedcom\RoxWatchTray9.exe"
mRun: [LogitechCommunicationsManager] "c:\program files\common files\logishrd\lcommgr\Communications_Helper.exe"
mRun: [LogitechQuickCamRibbon] "c:\program files\logitech\quickcam\Quickcam.exe" /hide
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [igfxtray] c:\windows\system32\igfxtray.exe
mRun: [igfxhkcmd] c:\windows\system32\hkcmd.exe
mRun: [igfxpers] c:\windows\system32\igfxpers.exe
mRun: [SigmatelSysTrayApp] stsystra.exe
mRun: [zzzHPSETUP] D:\Setup.exe
mRun: [Broadcom Wireless Manager UI] c:\windows\system32\WLTRAY.exe
mRun: [ZoneAlarm Client] "c:\program files\zone labs\zonealarm\zlclient.exe"
dRun: [<NO NAME>] c:\windows\temp\tzvwdk.exe
dRun: [uidenhiufgsduiazghs] c:\windows\temp\tzvwdk.exe
dRunOnce: [WUAppSetup] c:\program files\common files\logishrd\WUApp32.exe -v 0x046d -p 0x09a2 -f video -m logitech -d 11.70.1196.0
dRunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe
dRunOnce: [RunNarrator] Narrator.exe
StartupFolder: c:\docume~1\startm~1\programs\startup\adobeg~1.lnk - c:\program files\common files\adobe\calibration\Adobe Gamma Loader.exe
StartupFolder: c:\docume~1\startm~1\programs\startup\efax44~1.lnk - c:\program files\efax messenger 4.4\J2GTray.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\dailym~1.lnk - c:\program files\daily mugshot windows reminder\DailyMugshot.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\digita~1.lnk - c:\program files\digital line detect\DLG.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\hpdigi~1.lnk - c:\program files\hp\digital imaging\bin\hpqtra08.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\refres~1.lnk - c:\windows\installer\{ff2c0d82-66ee-4f08-9a26-5400c22f88fb}\IconFF2C0D82.exe
dPolicies-explorer: NoFolderOptions = 1 (0x1)
dPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
dPolicies-system: DisableRegistryTools = 1 (0x1)
dPolicies-system: DisableTaskMgr = 1 (0x1)
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {08B0E5C0-4FCB-11CF-AAA5-00401C608501}
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL
IE: {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - {FE54FA40-D68C-11d2-98FA-00C0F0318AFE} - c:\windows\system32\Shdocvw.dll
LSP: c:\program files\common files\is3\anti-spyware\iS3lsp.dll
Trusted Zone: aol.com\free
Trusted Zone: musicmatch.com\online
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/products/plugin/autodl/jinstall-142-windows-i586.cab
DPF: {CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA} - hxxp://java.sun.com/products/plugin/autodl/jinstall-142-windows-i586.cab
DPF: {F0642F3B-E7E7-438B-A457-050445B7DF36} - hxxp://e.brandwise.com/Setup/Brandwise.cab
Handler: cetihpz - {CF184AD3-CDCB-4168-A3F7-8E447D129300} - c:\program files\hp\hpcoretech\comp\hpuiprot.dll
Notify: igfxcui - igfxdev.dll
AppInit_DLLs: c:\progra~1\google\google~1\goec62~1.dll c:\windows\system32\finibona.dll,c:\windows\system32\hudivika.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
LSA: Authentication Packages = msv1_0 nwprovau
LSA: Notification Packages = scecli c:\windows\system32\hudivika.dll

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\jamesg~1\applic~1\mozilla\firefox\profiles\sr7tpuyo.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/ig?rls=ig&hl=en&source=iglk#restore
FF - component: c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll
FF - plugin: c:\documents and settings\james gould\application data\mozilla\firefox\profiles\sr7tpuyo.default\extensions\[email protected]\platform\winnt_x86-msvc\plugins\npmnqmp07076007.dll
FF - plugin: c:\program files\google\google updater\2.4.1536.6592\npCIDetect13.dll
FF - plugin: c:\program files\java\j2re1.4.2_03\bin\NPJava11.dll
FF - plugin: c:\program files\java\j2re1.4.2_03\bin\NPJava12.dll
FF - plugin: c:\program files\java\j2re1.4.2_03\bin\NPJava13.dll
FF - plugin: c:\program files\java\j2re1.4.2_03\bin\NPJava14.dll
FF - plugin: c:\program files\java\j2re1.4.2_03\bin\NPJava32.dll
FF - plugin: c:\program files\java\j2re1.4.2_03\bin\NPJPI142_03.dll
FF - plugin: c:\program files\java\j2re1.4.2_03\bin\NPOJI610.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npatgpc.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npOGAPlugin.dll
FF - plugin: c:\program files\mozilla firefox\plugins\NPZoneSB.dll
FF - plugin: c:\program files\viewpoint\viewpoint experience technology\npViewpoint.dll
FF - HiddenExtension: XUL Cache: No Registry Reference - c:\program files\mozilla firefox\extensions\{BD99F98C-15B6-4A88-A0C4-1500E7BC4AF3}

============= SERVICES / DRIVERS ===============

R0 szkg5;szkg;c:\windows\system32\drivers\SZKG.sys [2009-5-12 61328]
R1 KLIF;KLIF;c:\windows\system32\drivers\klif.sys [2009-6-23 148496]
R1 vsdatant;vsdatant;c:\windows\system32\vsdatant.sys [2008-11-15 353672]
R2 NeatReceipts Database Controller;NeatReceipts Database Controller;c:\program files\neat business cards\exec\NeatReceiptsDBController.exe [2007-6-13 231008]
R2 vsmon;TrueVector Internet Monitor;c:\windows\system32\zonelabs\vsmon.exe -service --> c:\windows\system32\zonelabs\vsmon.exe -service [?]
S3 GoogleDesktopManager-093007-112848;Google Desktop Manager 5.5.709.30344;c:\program files\google\google desktop search\GoogleDesktop.exe [2006-7-28 29744]
S3 MSSQL$NR2007;SQL Server (NR2007);c:\program files\microsoft sql server\mssql.1\mssql\binn\sqlservr.exe [2007-6-13 29178224]

=============== Created Last 30 ================

2009-07-03 06:58 1,448 a------- c:\windows\system32\drivers\kgpcpy.cfg
2009-06-26 16:21 16 a------- c:\windows\system32\drivers\fidbox.dat.szfi
2009-06-26 15:12 <DIR> --d----- c:\docume~1\alluse~1\applic~1\SITEguard
2009-06-26 15:11 <DIR> --d----- c:\program files\STOPzilla!
2009-06-26 15:11 <DIR> --d----- c:\program files\common files\iS3
2009-06-26 15:11 <DIR> --d----- c:\docume~1\alluse~1\applic~1\STOPzilla!
2009-06-23 18:45 180 ac------ C:\rollback.ini
2009-06-23 18:30 <DIR> --d----- c:\docume~1\jamesg~1\applic~1\MailFrontier
2009-06-23 18:05 <DIR> --d----- c:\program files\AskBarDis
2009-06-23 18:04 1,221,512 a------- c:\windows\system32\zpeng25.dll
2009-06-19 13:58 <DIR> --d----- c:\docume~1\jamesg~1\applic~1\Malwarebytes
2009-06-19 13:58 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Malwarebytes

==================== Find3M ====================

2009-07-05 17:41 1,170,371,360 a--sh--- c:\windows\system32\drivers\fidbox.dat
2009-07-03 06:58 0 a------- c:\windows\system32\drivers\lvuvc.hs
2009-07-03 06:58 0 a------- c:\windows\system32\drivers\logiflt.iad
2009-07-02 16:07 14,628,020 a--sh--- c:\windows\system32\drivers\fidbox.idx
2009-06-23 18:25 4,212 a---h--- c:\windows\system32\zllictbl.dat
2009-06-02 15:06 256 a------- c:\documents and settings\james gould\pool.bin
2009-05-28 14:16 17,408 a----r-- c:\windows\system32\SZIO5.dll
2009-05-28 14:15 294,912 a----r-- c:\windows\system32\SZBase5.dll
2009-05-28 14:14 540,672 a----r-- c:\windows\system32\SZComp5.dll
2009-05-12 14:13 61,328 a----r-- c:\windows\system32\drivers\SZKG.sys
2009-05-08 16:25 87,699 a------- c:\windows\pchealth\helpctr\offlinecache\index.dat
2009-05-08 12:45 23,428 a------- c:\windows\system32\emptyregdb.dat
2009-02-27 16:57 60,744 a------- c:\documents and settings\james gould\g2mdlhlpx.exe
2009-01-04 09:04 1,626,485 a------- c:\program files\gorilla-1.4.exe
2008-06-27 11:56 61,224 a------- c:\documents and settings\james gould\GoToAssistDownloadHelper.exe
2007-11-12 15:14 630,784 a------- c:\documents and settings\james gould\GoToAssist_chat2way__317_en.exe

============= FINISH: 17:44:47.37 ===============

RELEVANCY SCORE 200
Preferred Solution: google links redirects to wrong place

I recommend downloading and running DAP. It can help sort out any driver and firmware related issues on your system

It's worked out well for many of us in the past.

You can download it direct from this link http://downloaddap.org. (This link will open the download page of DAP so you can save a copy to your computer.)

A: google links redirects to wrong place

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Follow the instructions that pop up for posting the results.Close the program window, and delete the program from your desktop.Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet. Information on A/V control HERE

Read other 2 answers
RELEVANCY SCORE 116

My Google links are redirecting. can i get help?
what should i do next?

A:google links redirects to wrong place

Hi and welcome to BleepingComputer The process of cleaning your computer may require temporarily disabliling some security programs. If you are using SpyBot Search and Destroy, please refer to Note 2 at the bottom of this page.Please download Malwarebytes Anti-Malware and save it to your desktop.alternate download link 1alternate download link 2Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan.If an update is found, the program will automatically update itself.Press the OK button to close that box and continue.If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to install.On the Scanner tab:Make sure the "Perform Quick Scan" option is selected.Then click on the Scan button.If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button. The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Result... Read more

Read other 3 answers
RELEVANCY SCORE 84.8

I've been having this problem for a Month now. Every time I use Google or another search engine, sometimes when I click on a link from the search result to go to a desire website, I get re-directed to the wrong website often another search engine website. To bypass this I have to click the back button and try again or sometimes I double or triple click on the link to get to the correct website. However, that is not the only problem I have. Sometimes whenever I'm using a website such as twitter or norton website for example, the page goes blank on my firefox browser and on the bottom left corner of the firefox windows it says something like 'transfering data from gostats.com' and it just stays like that unless I hit the back button several times or refresh the page. However, that doesn't always work. My antivirus can remove the gotstats.com cookie but it regenerates itself.

I already created a topic before on this website, but the problems was unresolved after doing several steps.
Here is the original topic:
http://www.bleepingcomputer.com/forums/topic360651.html/page__p__2018292#entry2018292

I was refer to go here and seek help.

I was ask to post my DDS log:

DDS (Ver_10-11-10.01) - NTFSx86
Run by Julio at 11:42:01.07 on Fri 11/19/2010
Internet Explorer: 6.0.2900.5512 BrowserJavaVersion: 1.6.0_21
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.479.123 [GMT -8:00]
============== Running Processes ===============

C:\WINDOWS\s... Read more

A:Google Search Results Links Redirects To Wrong Website

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

Read other 15 answers
RELEVANCY SCORE 74.8

We own and operate an ISP and on our website we have a few secure links, one being to the a customers account management website and the link that allows some one to sign up online. No customers or other employee's have this problem, so it's not a site issue. But I have one inparticuler user that if she attempts to log into the Account Management screen, it pops us a domain login screen for her and forces her to use her network user/pass. On top of this, she was testing out some sign up information and up on completing the process she clicked on our Submit link and instead of taking her to the receipt page like it does everyone else, it redirects her to our internal secure website. I realize with out seeing this one it's hard to diagnose.. but again, taking the website out of being a factor as 50,000 customers use it just fine along with our other employee's. i've checked the hosts file, nothing there.. I've deleted cookies ect.. I've reset IE to defaults. Nothing. My only other option is to try and tear it down and re-install IE and i'm not sure this will fix it. Any ideas what could be going on here?

Read other answers
RELEVANCY SCORE 70.8

Hi, Whenever I google something and try to click on one of the links it opens it to a totally different page and sometimes it just goes to a random page without me clicking a link I have scanned my computer with avast antivirus and it found nothing. Im guessing its some type of virus I can't get rid of. I have Xp and I use firefox and Chrome it happens in both web browsers.
 

Read other answers
RELEVANCY SCORE 68.4

08/09/2016 - when I use browser on a Samsung table it get the warning "Mobile infections (4) dangerous viruses, because viewing porn sites?

Your phone has (13) serious viruses and we noticed that you phone is damaged (28.1%) It has 13 dangerous viruses from porn sites and you SIM card will be damaged as well as you contacts, photos and information"

It has a button to click to go get step by step instructions on how to remove these viruses. The only thing on the tablet are children's games that my kids downloaded, some pictures and that is about it. I did not click the button for the instructions as it seemed like a scam, but clearly the tablet has something on it.

first noticed it 08/09/2016 about 8pm cst when we used the tablet for a google search to see how many cities named minneaplolis there are in the US (3 btw). I ended up on a site called cha-cha or something like that. And when I scrolled down I got the pop up. I turned off the tablet and rebooted. did the same search and went to same website and got same warning. So can you help with a tablet? Is there a separate place/website for tablets that you know of?

I did a web search and they say it is malware and a scam (I am shocked). Anyway I was wondering on how to get rid of it and I could not see info on virus removal from tablets. Any ideas?
 

Read other answers
RELEVANCY SCORE 64.8

When I use any search engine and click on any link it doesn't take me to the right site, it just takes me to other sites.

Some of the links look like this

http://178.162.172.28/click.php?s=e...m4qAx0jzcwUsTszeIgoqzTS=http://searchbigs.com

What shoould I do to stop this? Do I have a virus? I used "Malwarebytes' Anti-Malware" and cleaned about 7 things but the problem is still there and "Malwarebytes' Anti-Malware" says my computer is clean.

I also used "Kaspersky" and it said it was clean.

I need help
 

A:Google links redirects. I need help.

Read other 16 answers
RELEVANCY SCORE 64.8

Hello all. Recently I've been having problems with the google search engine in firefox. Every link that I go to redirects me to a different website. I downloaded HiJackThis and scan my computer. Hopefully I can get some help so this can stop. For some reason I can't copy and paste my log files / upload on here without getting a busy connection error.

A:Google redirects links

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:26:09 AM, on 6/6/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\devldr32.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Creative\SBLive2k\Launcher\CTLauncher.exe
C:\Program Files\Creative\SBLive2k\Program\CTAvTray.EXE
C:\Program Files\Nero\Nero8\InCD\NBHGui.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\IObit\IObit SmartDefrag\IObit SmartDefrag.exe
C:\Program Files\McAfee.com\Agent\mcagent.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\McAfee\MBK\McAfeeDataBackup.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe
C:\WINDOWS\system32\CTSvcCDA.EXE
C:\WINDOWS\System32\inetsrv\inetinfo.exe
C:\Program Files\Nero\Nero8\InCD\InCDsrv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\P... Read more

Read other 2 answers
RELEVANCY SCORE 64.8

Greetings all,
I am working on cleaning up a friends laptop, and I have one(as far as I know) issue remaining. Whenever I search via google, bing, and presumably other mainstream search engines the links will be redirected to sites encouraging me to purchase antivirus/spyware programs. I've run several different virus scans hoping to at least yield a label that I could affix to the affliction, but they have all been fruitless.

DDS ran perfectly fine, but whenever I tried to run GMER it would BSOD.

The computer I am working on is a Compaq CQ60, with Windows Vista premium (SP 26.0.6002), Intel T4200 (Dual core 2.0ghz), 3.0gb RAM, and Intel integrated graphics(driver version 8.15.10.2202). Just some of the primary information, in case there's a known conflict with the drivers/updates and GMER.

I also have a hijackthis log available if requested.

Thank you all in advance, I greatly appreciate the time and knowledge it takes to go through all this information.

--J.

DDS (Ver_10-12-12.02) - NTFSx86
Run by Chapman at 12:20:14.41 on Sun 02/13/2011
Internet Explorer: 8.0.6001.19019
Microsoft? Windows Vista? Home Premium 6.0.6002.2.1252.1.1033.18.3002.1837 [GMT -8:00]

AV: Microsoft Security Essentials *Enabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}
SP: Microsoft Security Essentials *Enabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

============== Running Processes ========... Read more

A:Google Redirects Links

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.Do not run any other tool untill instructed to do so!Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.Run Combofix:You may be asked to install or update the Recovery Console (Win XP Only) if this happens please allow it to do so (you will need to be connected to the internet for this)Before you run Combofix I will need you to turn off any security software you have running, If you do not know how to do this you can find out >here< or >here<Combofix may need to reboot your computer more than once to do its job this is normal.You can download Combofix from one of these links.Link 1Link 2Link 3 1. Close any open browsers or any other programs that are open.2. Close/disable all anti virus and anti malware programs so they do not interfere with the r... Read more

Read other 12 answers
RELEVANCY SCORE 64.8

As the title says, every time I do a Google search for anything, I would click a link or a youtube video and it would redirect me to some weird website. I can copy paste the link into the address bar and it would go to the website, but I like to click the link since it's faster.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:19:46 PM, on 12/28/2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18999)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\ccSvcHst.exe
C:\hp\support\hpsysdrv.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files (x86)\Common Files\Pure Networks Shared\Platform\nmctxth.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\Logitech\GamePanel Software\Applets\LCDMedia.exe
C:\Program Files (x86)\Windows Media Player\wmplayer.exe
C:\hp\kbd\kbd.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=84&bd=Pavilion&pf=cndt
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http:/... Read more

Read other answers
RELEVANCY SCORE 64.4

I've had a problem with my browser since last night. Whenever I click on a Google link, I'm redirected to a random site (usually Russian, or an unknown search engine). I've tried running AVG antivirus, and Spybot cleaners, but nothing has worked successfully.

After reading your forums, I decided to install HijackThis and post my log here -- as a last-ditch attempt before doing a full system restore. I hope someone can help. Thank you.

---

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:40:02, on 26/01/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16945)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\Program Files\AVG\AVG9\avgrsx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\Program Files\AVG\AVG9\avgwdsvc.exe
C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\AVG\AVG9\avgnsx.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\samsung\Samsung Network Manager\SNMWLANService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\T-Mobile Mobile Broadband Manager\AssistantServices.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Samsung\Samsung EDS\EDSAg... Read more

Read other answers
RELEVANCY SCORE 64.4

Yep, that's right. You search for something on Google, or Bing, or you call it, and you click on the link provided and get redirected to other random web pages. It's becoming quite an annoyance. Spybot found nothing, malware bytes found nothing, mcfee found nothing, and yet; redirects abound.

It's worth noting that when I ran the gmer tool, after it completed, I clicked save and named it a .txt file. It locked up my pc. upon reboot, I re-ran it, and saved it as the requested .txt file. But then I received a hard blue screen error and I had to reboot again. Anyways, without further delay, here's the DDS text and the zipped attachment.


DDS (Ver_09-12-01.01) - NTFSx86
Run by Matt at 18:10:40.39 on Tue 12/29/2009
Internet Explorer: 7.0.5730.11
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1022.98 [GMT -6:00]

AV: McAfee VirusScan *On-access scanning enabled* (Updated) {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}
FW: McAfee Personal Firewall *enabled* {94894B63-8C7F-4050-BDA4-813CA00DA3E8}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Dell\Media Experience\DMXLauncher.exe
C:\WINDOWS\stsystra.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\Program Files\Common F... Read more

A:Redirects when clinking on Google links

Hi and welcome to TSF.

I am currently reviewing your log. Please note that this is under the supervision of an expert analyst, and I will be back with a fix for your problem as soon as possible.

You may wish to subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.

Please be patient with me during this time.

Read other 11 answers
RELEVANCY SCORE 64.4

Ok I know that other people have posted the same problem, but as each computer is different I will post my issue and specs. I use google chrome and whenever I search items on google and try to click on the link it will redirect me to random sites until I click on the same link a couple more times until the actual website pops up. Now I read on another website that they just changed the "Manage Search Engines" in the Settings to "http://www.google.com" instead of just "google.com" to fix the problem. Initially it seemed to work, but then I tried clicking on a second link and the random website or "click.livesearchnow.com" would appear instead. So the problem was not fixed.

Forgive me I have run both hijackthis (at the advice of my friend)and combofix beforehand. Below you will find the logs for each program.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:12:18 AM, on 1/4/2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
c:\Program Files\Microsoft Security Client\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EX... Read more

A:Google Chrome Redirects Links

Greetings and Welcome to The Forums!!My name is Gringo and I'll be glad to help you with your malware problems.I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of usPlease do not run any tools unless instructed to do so.
We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.
Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.
Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.
A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE: At the top o... Read more

Read other 25 answers
RELEVANCY SCORE 64.4

Hi, I've noticed recently that Google will redirect my links, many of which are redirected to btcar.com. I run McAfee and a rootkit Trojan shows up as NTOSKRNL -HOOK. Status says deleted, but it returns after the clean. Also, a Trojan in C:\Windows\System32\GXVXCHPONLNTKDXOSWCIRWPQTIXCUIQKJFRMT.DLL comes up, but the delete fails. I have run HijackThis, and my log is as follows....any help is greatly appreciated!

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:04:14 PM, on 4/28/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16827)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\McAfee\Common Framework\FrameworkService.exe
C:\Program Files\McAfee\VirusScan Enterprise\mcshield.exe
C:\Program Files\McAfee\VirusScan Enterprise\vstskmgr.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\system32\MsPMSPSv.exe
c:\WINDOWS\system32\ZuneBusEnum.exe
C:\Program Files\Creative\Sound Blaster Liv... Read more

Read other answers
RELEVANCY SCORE 64.4

I've been reading the forums about the Google redirecting links virus, and I've tried following the other threads steps to solving this problem with no luck, so I guess I need to step up and have you guys take a look! I've got HIJACK THIS, MALWAREBYTES, SPYBOT, SUPERANTISPYWARE, and McAFEE installed currently. My HIJACK THIS log is as follows:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:32:26 PM, on 2/24/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\mcshield.exe
C:\Program Files\Network Associates\VirusScan\vstskmgr.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\WINDOWS\Explorer.EXE
C:\windows\system\hpsysdrv.exe
C:\Program Files\HP\Digital Imaging\Unload\hpqcmon.exe
C:\WINDOWS\System32\hphm... Read more

A:Google Redirects Links, Need HELP ASAP!

Read other 16 answers
RELEVANCY SCORE 64.4

first of all, thank you so much for attempting to help me out with this! you guys are awesome for even going up against such a massive group of computer dummies!

well, i have tried a lot of things to get rid of this malware. skip to the bottom for the hijackthis log, or read on for a little background...

i used my flash drive at school and when i used it at home, i noticed that the usual grey hard disk icon next to it was now a folder icon. then i noticed several shortcuts (my pictures, my videos, my music, my documents...) that were in the root folder of the flash drive, as well as some foreign and strangely named files (one was .exe) yes, i double clicked one of the shortcuts : (
those shortcuts and files reappeared after deleting them. the next morning, i woke up my monitor to find that i had been infected with a few things. there were "antivirus 2009" programs installed and other crap. malware bytes would not initiate. reinstall did not help. i booted from backup and then connected original system drive to be scanned. malwarebytes found 60 some objects and removed them.
upon booting from original system drive again, i found that the problem was not eradicated. it reproduced. i installed and used ccleaner, then avast. avast scheduled a scan for next boot. it ran right before windows desktop was loaded. i deleted several files throughout the scan.
at this point, many symptoms were gone. i thought i had it. malwarebytes was back in working order (after re... Read more

A:malware that redirects google links

Hello and welcome to TSF.

HijackThis is no longer the preferred initial analysis tool in this forum.

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Read other 1 answers
RELEVANCY SCORE 64.4

Google search links are redirected in both IE 7 and Firefox 3.0.5. Redirect site is different but is usually a search or sales link. Also, when I click on Windows Update in the start menu, instead of going to http://update.microsoft.com/microsoftupdate, I get a Goolge error, server not found. Finally, I can no longer get AVG updates. I tried upgrading to version 8 but it still won't update the virus file. Have tried to run Kaspersky several times but the site always hangs when it tries to download the virus database. Gets stuck in a loop and times out. Hope you can help me. Thanks DDS (Ver_09-01-18.01) - NTFSx86 Run by Compaq_Owner at 20:31:04.79 on Tue 01/20/2009Internet Explorer: 7.0.5730.11Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.2046.1493 [GMT -5:00]AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated)============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchC:\WINDOWS\system32\svchost -k rpcssC:\WINDOWS\System32\svchost.exe -k netsvcsC:\WINDOWS\system32\svchost.exe -k WudfServiceGroupC:\WINDOWS\system32\svchost.exe -k NetworkServiceC:\WINDOWS\system32\svchost.exe -k LocalServiceC:\Program Files\Cisco Systems\SSL VPN Client\agent.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\HP\KBD\KBD.EXEC:\Program Files\Common Files\Apple\... Read more

A:Infected PC - redirects Google links

HiIf you still need help with this do following steps:Download and install TrendMicro HijackThis* Once installed open HijackThis by clicking Start > Programs > HijackThis and click the button labeled Do a system scan only* Click the scan button in the lower left hand corner of the interface and HijackThis will quickly scan your system.* Once the scan is complete the scan button will now read save log. Click this button to save the log file to your PC. Once you select where you would like to save the file it will open in your systems default text editor. Typically this application is Notepad. Post the log here.Download GMER and save it your desktop:Extract it to your desktop and double-click GMER.exeClick rootkit-tab and then scan.Don't check
Show All
box while scanning in progress!When scanning is ready, click Copy.This copies log to clipboardPost log in your reply.

Read other 2 answers
RELEVANCY SCORE 64.4

Hello everybody !
When i make search on Google, sometimes, some links being redirected to some useless pages...
My system is:
Windows Vista Home Premium, Firefox browser...

Thanks in advance !!!

A:Google search links redirects to somewhere else

Hello,Please follow the instructions in ==>This Guide<==. If you cannot complete a step, skip it and continue.Once the proper logs are created, then make a NEW TOPIC and post it ==>HERE<== Please include a description of your computer issues and what you have done to resolve them.If you can produce at least some of the logs, then please create the new topic and explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the topic and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.Orange Blossom

Read other 3 answers
RELEVANCY SCORE 64.4

About a week ago my computer got infected with the Windows Police Pro virus. I was able to remove it successfully (at least I think), but since then when I click on links in google search results I get redirected to spam search sites. Any help is greatly appreciated. Thanks.

Here's my HJT log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:42:19 PM, on 10/2/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Symantec AntiVirus\Smc.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\Program Files\Sectra\IDS5web\bin\viewer_service.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Intel\IntelDH\Intel(R) Quick Resume Technology Drivers\Elservice.exe
C:\WIND... Read more

Read other answers
RELEVANCY SCORE 64.4

Picked up the malware that sends you to sites other than the one you are trying to go to, when clicking on the links from a Google search. [Son used computer for weeks with no protection on it.] I installed AVG Free and removed a lot of adware, cookies, etc.. I also used CClearner just to get rid of unused items in the registry. Have also ATTEMPTED to use SUPERAntiSpyware (refused to install), Malwarebytes Anti-Malware (installed but won't run), ComboFix (installed but won't run), and I successfully ran MGtools to get a log from it. My DDS log is posted below, and attachment attached.

DDS (Ver_09-03-16.01) - NTFSx86
Run by thumper at 17:48:51.90 on Sun 03/29/2009
Internet Explorer: 7.0.5730.11
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1014.428 [GMT -6:00]

AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated)
FW: Norton Internet Worm Protection *disabled*

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\ctfmon.exe
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.ex... Read more

A:Have Malware that Redirects Google Links

Malware removed. Assistance no longer needed.

Read other 2 answers
RELEVANCY SCORE 64.4

The problem started a few days ago, and as this is a family computer I am not exactly sure as to what may have caused it. I do have a 17 year old son who may be the reason as to why.

My search result links always redirect me to other junk websites by opening a new window. I then have to click "back" on these new windows numerous times to get to the site that was originally linked from google.

Some sites that I am redirected to are:
hXXp://www.localdouble.com/yb/search.php?
hXXp://72.233.76.69/p/index.php?PHPSESSID=36dcf73e066432a0c66d42025702aa1cb937b187730f42f4cf8b981cfa39446fd968aef11f05
hXXp://r3.google.com/click?q

There are many more that I can not remember as of now.

Along with this problem I will get a random pop up that will show up when I am on the computer surfing the net. This pop up happens once in a while and it directs me to a site that has "google analytics" in the url. I believe the url is:
hXXp://www.google-analytics.com/ga.js

I have run a Virus scan using my McAfee Anti-Virus and another scan with Windows Essential.

I just recently purchased this desktop from Dell with the thoughts of not having problems, but my son seemed to figure out a way to screw it up.

The desktop is a Dell Studio with Windows 7 Home Premium 64 bit.

I greatly appreciate any help that you can possible give.

-hydro341




DDS (Ver_10-11-03.01) - NTFS_AMD64
Run by Milan at 0:41:01.66 on Thu 11/04/2010
Internet Explorer: 8.0.7600.16385
Microsoft W... Read more

A:Pop-ups and Redirects from Google search links

Hi,

Download OTL to your desktop.
Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
When the window appears, underneath Output at the top change it to Minimal Output.
Copy-paste following contents into custom scan -area:
netsvcs
drivers32
%SYSTEMDRIVE%\*.*
%systemroot%\*. /mp /s
CREATERESTOREPOINT
%systemroot%\System32\config\*.sav
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs
Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post it with your next reply. You may need two posts to fit them all in.

Read other 2 answers
RELEVANCY SCORE 64.4

Hi

I tried many softwares but ... no use.
1.Google search results redirects to Adverisement on my first click.
Then i clicked back button and clicked the same link ... it goes to the correct website.
2.Pictures are not displayed in my outlook e-mail, Internet explorer 8, Firefox 3.
3.Very slow Internet Access.
4.Booting takes 18-20 minutes.
5. CPU runs very slow.

I tried Malwarebytes, Spybot S&D,Windows Defender, Lava Soft Adware,Hijack This. Symantec antivirus scan, full system scan using Network associates software.

I will follow all your instructions and will do whatever you want. Please solve my issue.

BlaBla2020

A:Google Serach Links redirects.

Please update and rerun Malwarebytes following these instructions. On the Scanner tab:Make sure the "Perform Quick Scan" option is selected.Then click on the Scan button.If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button. The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".Click OK to close the message box and continue with the removal process.Back at the main Scanner screen:Click on the Show Results button to see a list of any malware that was found.Make sure that everything is checked, and click Remove Selected.When removal is completed, a log report will open in Notepad.The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.Copy and paste the contents of that report in your next reply and exit MBAM.Note:-- If MBAM encounters a file that is difficult to remove, you may be asked to reboot your computer so it can proceed with the disinfection process. Regardless if prompted to restart the computer or not, please do so immediately. Failure to reboot normally (not into safe mode) will prevent MBAM from removing all the malware. -- MBAM may make changes to your registry as part of its disinfection routine. If you're using other security programs that detect... Read more

Read other 3 answers
RELEVANCY SCORE 64

Hi,Got a problem with the links to the wrong page. I have copied the relevant HJT and DDD Logs below.Thanks for your helpTonLogfile of Trend Micro HijackThis v2.0.2Scan saved at 17:44:24, on 21/12/2009Platform: Windows Vista SP2 (WinNT 6.00.1906)MSIE: Internet Explorer v8.00 (8.00.6001.18865)Boot mode: NormalRunning processes:C:\Windows\system32\taskeng.exeC:\Windows\system32\Dwm.exeC:\Windows\Explorer.EXEc:\PROGRA~1\mcafee.com\agent\mcagent.exeC:\Program Files\Synaptics\SynTP\SynTPEnh.exeC:\Program Files\HP\QuickPlay\QPService.exeC:\Program Files\Windows Defender\MSASCui.exeC:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exeC:\Program Files\HP\HP Software Update\hpwuSchd2.exeC:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exeC:\Program Files\Java\jre1.6.0_05\bin\jusched.exeC:\Program Files\Windows Sidebar\sidebar.exeC:\Program Files\Hewlett-Packard\HP wireless Assistant\WiFiMsg.EXEC:\Program Files\Hewlett-Packard\Shared\HpqToaster.exeC:\Windows\System32\mobsync.exeC:\Program Files\Synaptics\SynTP\SynTPHelper.exeC:\Program Files\Trend Micro\HijackThis\HijackThis.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Progr... Read more

A:Google links to wrong page

Hi,Sorry for delayed response. Forums have been really busy. If you still need help with this do following, please.Download DDS and save it to your desktop from here or here or here.Disable any script blocker, and then double click dds.scr to run the tool. When done, DDS will open two (2) logs: DDS.txt Attach.txtSave both reports to your desktop. Post them back to your topic.Download GMER here by clicking download exe -button and then saving it your desktop:Double-click .exe that you downloadedClick rootkit-tab and then scan.Don't check
Show All
box while scanning in progress!When scanning is ready, click Copy.This copies log to clipboardPost log (if the log is long, archive it into a zip file and attach instead of posting) in your reply.

Read other 2 answers
RELEVANCY SCORE 64

DDS (Ver_09-07-30.01) - NTFSx86
Run by Owner at 18:17:44.00 on Sat 08/29/2009
Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_14
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.382.108 [GMT -4:00]

AV: Kaspersky Anti-Virus *On-access scanning disabled* (Updated) {2C4D4BC6-0793-4956-A9F9-E252435469C0}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
C:\WINDOWS\Explorer.EXE
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\avp.exe
C:\Program Files\Java\jre6\bin\jqs.exe
c:\WINDOWS\system32\ZuneBusEnum.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\avp.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\klwtblfs.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\Temporary Directory 1 for gmer.zip\gmer.exe
C:\Documents and Settings\Owner\Desktop\dds.scr

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.google.com/
uSearch Page = hxxp://www.google.com
uDefault_Page_URL = hxxp://us5.hpwis.com/
uDefault_Search_URL = hxxp://srch-us5.hpwis.com/
uSearch Bar = hxxp://www.google.com/ie
uSearchMigratedDefaultURL = hxxp://www.goog... Read more

A:Google links redirecting wrong

hi.

Welcome to TSF once again.

You may wish to subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe

-------------------------------------------------------------------------
Please note that these fixes are not instantaneous. Most infections require more than one round to properly eradicate.

Please stay with me until given the 'all clear' even if symptoms seemingly abate.

Kindly follow my instructions and please do no fixing on your own or running of scanners unless requested by a helper.

-----------------------------------------------------------------------
I am sorry to inform you that one or more of the identified infections is a backdoor trojan.

This allows hackers to remotely control your computer, steal critical system information and download and execute files.

If you do any banking or other financial transactions on the PC or if it should contain any other sensitive information, please get to a known clean computer and change all passwords where applicable, and it would be wise to contact those same financial institutions to apprise them of your situation.

How Do I Handle Possible Identify Theft, Internet Fraud and CC Fraud?

----------------------------------------------------------------------

Before beginning the fix, read this post completely. If there's any... Read more

Read other 13 answers
RELEVANCY SCORE 64

Hi guys,

I was asked to clean up a friend?s computer. However, I?m not very familiar with Windows. So the problem is that Google redirects to wrong webpages (including travel offers, porn, stocks). The virus software AntiVir doesn?t indicate anything, I cannot see wrong programs being installed.

The problem seems to be well known to you guys according to other posts, so your help is very much appreciated. Please find attached the beginner?s logs you told me to create.

Cheers




DDS.txt


DDS (Ver_10-03-17.01) - NTFSx86
Run by Kunz PC at 1849,16 on Fr 02.04.2010
Internet Explorer: 6.0.2800.1106 BrowserJavaVersion: 1.6.0_16
Microsoft Windows 2000 Professional 5.0.2195.4.1252.49.1031.18.255.124 [GMT 2:00]


============== Running Processes ===============

C:\WINNT\system32\spoolsv.exe
C:\Programme\AntiVir PersonalEdition Classic\sched.exe
C:\Programme\AntiVir PersonalEdition Classic\avguard.exe
C:\Programme\Java\jre6\bin\jqs.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\Explorer.EXE
C:\Programme\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
C:\Programme\Gemeinsame Dateien\DriveCleaner 2006 Free\sdrmon.exe
C:\Programme\Gemeinsame Dateien\DriveCleaner Free\udcwap.exe
C:\Programme\AntiVir PersonalEdition Classic\avgnt.exe
C:\Programme\Java\jre6\bin\jusched.exe
C:\dokumente und einstellungen\kunz pc\lokale einstellungen\anwendungsdaten\bdabxsoc.exe
C:\Programme\Logit... Read more

A:Please Help! Google redirects to wrong page.

Hi -

There's some really old malware entries in that log, as well as possibly newer. Something to note:

Support for Windows 2000 ends on July 13, 2010!

http://support.microsoft.com/ph/1131

Might be time to think about an upgrade. In the interim, we can clean this up, but first I'd like to know if you have the Windows 2000 installation CD. Malware removal being what it is today, it's prudent to have the Windows Recovery Console pre-installed on the machine, or access to the installation CD. We can proceed without it, but I'd like to know we have that safeguard, should something go wrong during malware removal efforts.

Read other 4 answers
RELEVANCY SCORE 64

Hi,I am totally messed up with this.Whenever i try to open any page from google. I have been always redirected to some wrong page like mediashifting or 95p.com or pioskweb or some stupid search engines. This kind of problem I am facing from 2 weeks and I am unable to solve this problem.my dds log is listed below as suggested in some old forum..DDS (Ver_2011-08-26.01) - NTFSx86 Internet Explorer: 6.0.2900.2180Run by Roshu at 22:45:06 on 2011-12-27Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.2012.1252 [GMT 5.5:30].AV: Quick Heal Total Security 12.00 *Enabled/Outdated* {05C1329D-F0E0-4B19-9D15-54F9BC3ADE87}FW: Quick Heal Firewall *Enabled* .============== Running Processes ===============.C:\Program Files\Faronics\Deep Freeze\Install C-0\DFServ.exeC:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcssvchost.exesvchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\explorer.exeC:\WINDOWS\system32\cisvc.exeC:\Program Files\Quick Heal\Quick Heal Total Security\EMLPROXY.EXEC:\Program Files\Quick Heal\Quick Heal Total Security\SAPISSVC.EXEC:\WINDOWS\system32\hkcmd.exeC:\WINDOWS\system32\igfxpers.exeC:\WINDOWS\system32\igfxsrvc.exeC:\Program Files\DellTPad\Apoint.exeC:\WINDOWS\system32\inetsrv\inetinfo.exeC:\Progra... Read more

A:Google redirects me to wrong page.

Hi,Please do the following:Please download aswMBR to your desktop.Double click the aswMBR.exe icon to run itWhen asked if you want to download Avast's virus definitions please select Yes.Click the Scan button to start the scanOn completion of the scan, click the save log button, save it to your desktop and post it in your next reply.You will also notice another file created on the desktop named MBR.dat. Right click that file and select Send To>Compressed (zipped) file. Attach that zipped file in your next reply as well

Read other 7 answers
RELEVANCY SCORE 64

when i search in google in redircts me to a wrong page in a tab, believ have virus here is my log

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:18:38 AM, on 6/9/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16827)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\stsystra.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Dell\Media Experience\DMXLauncher.exe
C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\Program Files\Dell Photo AIO Printer 924\dlccmon.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\Prog... Read more

A:google redirects me to wrong page

Hello and welcome to TSF.

HijackThis is no longer the preferred initial analysis tool in this forum

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Read other 1 answers
RELEVANCY SCORE 63.6

I use firefox exclusively as a web browser, but recently, I find that when I run a google search, clicking on the links redirects me to undesirable pages (btcar) instead of the url listed. This does not happen all the time, so I can eventually get the pages I want by hitting back and trying again (sometimes 2 or 3 times).

I would really like to have this problem fixed, but AVG anti-virus, AVG anti-spyware, SpyBot S&D, and Windows Defender all say I am clean. I am attaching the text file generated when I ran hijack this (since this seems to be the starting point for most things).

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 10:30:05, on 12/09/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
c:\program files\common files\logishrd\lvmvfm\LVPrcSrv.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program Files\Logitech\QuickCam10\QuickCam10.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Program Files\... Read more

A:Solved: Automatic redirects from Google links

Read other 9 answers
RELEVANCY SCORE 63.6

I have been using Mozzilla firefox for some time and I have been having this problem for some time and finally got enough of it. Everytime I click on a link from google, it redirects it to occasionally another search engine, and other times it leads to a series of blank pages. This thing is getting on my nerves now because I have to copy and paste each link EVERY SINGLE TIME! Can someone please help me!

A:Google links ALWAYS open in new tab and redirects randomly

Hello and welcome to TSF.

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Read other 1 answers
RELEVANCY SCORE 63.6

Ad-aware keeps opening at log on and runs scan autmatically but cannot remove spyware it finds either by quarantine or removal - have redirect when using search such as google and clicking results and sent to non related site - cannot open Spybot SD - it runs in background but I cannot open home page to access tools

DDS (Ver_09-03-16.01) - NTFSx86
Run by a Lori at 18:45:48.01 on Mon 04/27/2009
Internet Explorer: 7.0.5730.13
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.502.163 [GMT -7:00]


============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\Vongo\VongoService.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe
C:\Program Files... Read more

A:Cannot open Spybot SD and redirects when using Google links

Please visit this webpage for download links, and instructions for running combofix:

http://www.bleepingcomputer.com/comb...o-use-combofix

Note: Please rename combofix.exe to cfix.exe

* Ensure you have disabled all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

Please include the C:\ComboFix.txt in your next reply for further review.

Read other 11 answers
RELEVANCY SCORE 63.6

This is my first time posting, and I read the instruction post first so I hope I get this right. I apologize, but I'm not all that knowledgeable when it comes to the workings of my laptop.

About a month ago, I saw a pop-up window appear advertising some kind of make-money-from-home BS. When I clicked to close it, some verification message popped up about being sure that I wanted to navigate away from that page. When I clicked "OK", my laptop went all kinds of funky. Now, my internet runs painfully slow, AVG won't launch correctly on startup, my Google search links redirect to sites that I don't want, and occasionally the laptop will disconnect from my wireless network. When it disconnects, I go into manage network connections, but I get the message that network connections are operated by another program. When I restart the computer, I can usually get everything running again, albeit still very slow.

I have the reports ready. If I remember correctly, "attach" is the only one that is requested up front, and "DDS" should be on hand.

Thank you so much for your help, I rely on my laptop a lot for someone who isn't very tech savvy.

A:Virus that redirects Google search links

Hello and welcome to TSF.


Quote:




I have the reports ready. If I remember correctly, "attach" is the only one that is requested up front, and "DDS" should be on hand.




If you still need help, please post the DDS.txt and the Ark.txt (GMER log) in your next reply.

Read other 17 answers
RELEVANCY SCORE 63.6

When I click on a link returned by google search sometimes the link goes to a different website. I have the latest version of Norton and have run Anitivirus and spyware scan. I have attached the most recently run hijaack file on my computer below... Please help.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:10:18 PM, on 6/16/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16850)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\tcpsvcs.exe
C:\Program Files\Common Files\Sony Shared\WMPlugIn\SonicStageMonitoring.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Sony\VAIO Event Service\VESMgr.exe
C:\WIN... Read more

A:Google Search links redirects when clicked..

Hello and welcome to TSF.

HijackThis is no longer the preferred initial analysis tool in this forum

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Read other 1 answers
RELEVANCY SCORE 63.6

Hello again !
My problem is; When i make a search on Google, and click on links, redirects to unrelated web sites...
Sometimes works normal...I use only Firefox...

I have; Windows / Vista Home / Firefox...
When i was trying to do GMER Scan, windows shut down 2 times; first it said "PFN list Corrupt",
Second time it said "Dell wireless WLAN card Wireless Network Controller stopped working and was closed ".
Then, i turned OFF Virus Guard and Wireless...
And scan was completed...
Thank you in advance !!!
DDS (Ver_10-12-12.02) - NTFSx86
Run by Gloria at 17:27:28.53 on Sat 01/15/2011
Internet Explorer: 7.0.6001.18000
Microsoft? Windows Vista? Home Premium 6.0.6001.1.1252.1.1033.18.2037.1119 [GMT -5:00]

AV: AntiVir Desktop *Enabled/Updated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: AntiVir Desktop *Enabled/Updated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svcho... Read more

A:Google search links redirects somewher else

Please make sure you disable ALL of your Antivirus/Antispyware/Firewall before running ComboFix.. Please visit HERE if you don't know how.. Please re-enable them back after performing all steps given..Please download ComboFix by sUBs from HERE or HERE and save it to your Desktop.During the download, rename Combofix to Combo-Fix as follows:It is important you rename Combofix during the download, but not after.**NOTE: If you are using Firefox, make sure that your download settings are as follows:Tools->Options->Main tabSet to "Always ask me where to Save the files".After that, double-click and run Combo-Fix. Let it finish its job and post the log hereIf ComboFix asked you to install Recovery Console, please do so.. It will be your best interest..Note: DON'T do anything with your computer while ComboFix is running.. Let ComboFix finishes its job..

Read other 11 answers
RELEVANCY SCORE 63.6

Hi guys,

I use windows 7, 64 bit. For the last few weeks I've been getting lots of pop-ups as well as redirects, especially when I try to click on any links from the google search engine results. It's starting to get really frustrating! I do my banking on this computer and I am a little scared to do any more until I have this issued fixed.

I am a total newbie at computers, so hopefully I have attached the correct info you want below. If you need me to do anything else, please just let me know. I really appreciate any help I can get.

Thank you in advance,

Dee Eftee

.
DDS (Ver_11-03-05.01) - NTFS_AMD64
Run by DFT at 18:58:20.54 on Wed 13/04/2011
Internet Explorer: 8.0.7600.16385 BrowserJavaVersion: 1.6.0_24
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.61.1033.18.1788.875 [GMT 10:00]
.
AV: avast! Antivirus *Enabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
AV: Norton Internet Security *Enabled/Updated* {88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855}
SP: avast! Antivirus *Enabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Norton Internet Security *Disabled/Updated* {33A8BBD2-AA01-20A2-213B-0B8EB45B02E8}
FW: Norton Internet Security *Disabled* {B0F2DB13-C654-2E74-30D4-99C9310F0F2E}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Wi... Read more

A:redirects/popups after clicking google links

Hello, and welcome to TSF.

I am currently reviewing your log. I will be back with a fix for your problem as soon as possible.

Please subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.

Please be patient with me during this time.

Read other 15 answers
RELEVANCY SCORE 63.6

First, I want to say that RootRepeal doesn't work on 64-bit OS's, so I could not create Ark.txt. I hope it's not necessary.In Firefox, have not tried other browsers, sometimes when I click a link, particularly with google, it is redirecting me to a site full of ads rather than the site the link was supposed to lead to. I started having the issue a couple days ago, and thought it was something with the websites. I saw the domain "asklots.com" popping up a lot. However, even after blocking it in my hosts file, it's still happening, now from a domain "admarketplace.com" I think. Anyway, I am fairly sure it's some sort of malware on my machine that's doing it, because I doubt big sites like battle.net and microsoft.com have such ad redirection, but links to their domains have dropped me onto these ad pages.I will stop blabbering and get to the log... by the way, RootRepeal doesn't work on my 64 bit OS.DDS (Ver_09-12-01.01) - NTFSX64 Run by Gary at 6:18:31.01 on Wed 02/03/2010Internet Explorer: 8.0.7600.16385 BrowserJavaVersion: 1.6.0_17Microsoft Windows 7 Ultimate 6.1.7600.0.1252.1.1033.18.4094.2578 [GMT -6:00]SP: Spybot - Search and Destroy *disabled* (Updated) {ED588FAF-1B8F-43B4-ACA8-8E3C85DADBE9}============== Running Processes ===============C:\Windows\system32\wininit.exeC:\Windows\system32\lsm.exeC:\Windows\system32\svchost.exe -k DcomLaunchC:\Windows\system32\nv... Read more

A:Clicking links, usually on google, redirects to spam

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 19 answers
RELEVANCY SCORE 63.6

Both firefox and IE will redirect the google search result links. Below is the HijackThis log

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:08:34 PM, on 6/4/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
C:\Program Files\Common Files\Motive\McciCMService.exe
C:\Program Files\Common Files\McAfee\SystemCore\mfevtps.exe
C:\Program Files\McAfee Online Backup\MOBKbackup.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe
C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\McAfee.com\Agent\mcagent.exe
C:\Program Files\Verizon\McciTrayApp.exe
... Read more

A:Google Search Links Redirects to different sites

Read other 10 answers
RELEVANCY SCORE 63.6

When using IE, searches in google and bing will redirect from the intended link to bogus sites. The problem does not occur with firefox.

I have avast and running a scan did not correct the problem. I also ran ad-aware and that did not correct it either. Thanks in advance for assistance with this issue.

Info as requested in instructions for this forum:
_________________________________________

DDS (Ver_09-12-01.01) - NTFSx86
Run by Amy at 16:52:04.82 on Tue 12/08/2009
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_17
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2038.1082 [GMT -5:00]

AV: avast! antivirus 4.8.1368 [VPS 091205-1] *On-access scanning enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Prog... Read more

A:google/bing redirects search links

Hi and welcome to TSF.

I am currently reviewing your log. Please note that this is under the supervision of an expert analyst, and I will be back with a fix for your problem as soon as possible.

You may wish to subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.

Please be patient with me during this time.

Read other 17 answers
RELEVANCY SCORE 63.6

It's been like this for a few days. Tried a few virus scanners and that didn't get it. So I figured I'd post my hijackthis log for some help. :3Logfile of Trend Micro HijackThis v2.0.2Scan saved at 8:21:32 AM, on 1/2/2010Platform: Unknown Windows (WinNT 6.01.3504)MSIE: Unable to get Internet Explorer version!Boot mode: NormalRunning processes:C:\Windows\system32\taskhost.exeC:\Windows\system32\Dwm.exeC:\Windows\Explorer.EXEC:\Program Files\Google\Google Desktop Search\GoogleDesktop.exeC:\Program Files\Java\jre6\bin\jusched.exeC:\Program Files\Logitech\Logitech WebCam Software\LWS.exeC:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exeC:\Program Files\Windows Sidebar\sidebar.exeC:\Program Files\Windows Live\Messenger\msnmsgr.exeC:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exeC:\Program Files\Windows Live\Contacts\wlcomm.exeC:\Program Files\Skype\Phone\Skype.exeC:\Program Files\Skype\Plugin Manager\skypePM.exeC:\Program Files\Steam\Steam.exeC:\Program Files\Mozilla Firefox\firefox.exeC:\Program Files\Emerald Viewer\Emerald.exeC:\Program Files\Emerald Viewer\SLVoice.exeC:\Program Files\Trend Micro\HijackThis\HijackThis.exeR0 - HKLM\Softwa... Read more

A:Clicking Google links redirects to various ad sites.

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 2 answers
RELEVANCY SCORE 63.6

PC still running bleepty

I just ran combofix not sure if that fixed to problem so i'm posting anyways. Whenever I use google the links redirect to alternate websites. IE and firefox also keep crashing randomly. Also not sure if this is related but my audio does not work in firefox, only firefox. It works in IE and everywhere else, but if I try to play a video in firefox I get no audio even after fresh install. Thanks for any advice/help I appreciate it.

DDS (Ver_09-12-01.01) - NTFSx86
Run by HP_Owner at 19:46:34.54 on Sat 12/19/2009
Internet Explorer: 6.0.2900.5512
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.2551.1977 [GMT -8:00]

AV: avast! antivirus 4.8.1335 [VPS 090516-0] *On-access scanning disabled* (Outdated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
FW: COMODO Firewall Pro *enabled* {043803A3-4F86-4ef6-AFC5-F6E02A79969B}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\System32\wltrysvc.exe
C:\WINDOWS\System32\bcmwltry.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files�... Read more

A:Google Redirects Links. Browser keeps crashing

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below I will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Follow the instructions... Read more

Read other 2 answers
RELEVANCY SCORE 63.6

I have Norton on and scan it several times, but this problem is still persist. I'm not sure what to do, and I feel like crying from frustration.
 

A:Google redirects links to random websites

Here is what I have from using Gmer. What should I do next?

GMER 1.0.15.15163 - http://www.gmer.net
Rootkit scan 2009-10-25 01:46:09
Windows 6.0.6001 Service Pack 1
Running: gmer.exe
---- Registry - GMER 1.0.15 ----

Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\[email protected] 771343423
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\[email protected] 285507792
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\[email protected] 1
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\[email protected] C:\Program Files (x86)\Alcohol Soft\Alcohol 120\
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\[email protected] 0
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\[email protected] 0xA2 0x7D 0x45 0x39 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\[email protected] C:\Program Files (x86)\DAEMON Tools Lite\
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\[email protected] 0xA3 0x32 0x3B 0xC4 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\[email protected] 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf... Read more

Read other 2 answers
RELEVANCY SCORE 63.6

Hi

I tried many softwares but ... no use.
1.Google search results redirects to Adverisement on my first click.
Then i clicked back button and clicked the same link ... it goes to the correct website.
2.Pictures are not displayed in my outlook e-mail, Internet explorer 8, Firefox 3.
3.Very slow Internet Access.
4.Booting takes 18-20 minutes.
5. CPU runs very slow.

I tried Malwarebytes, Spybot S&D,Windows Defender, Lava Soft Adware,Hijack This. Symantec antivirus scan, full system scan using Network associates software.

I will follow all your instructions and will do whatever you want. Please solve my issue.

A:Google Serach Links redirects. Spy Ware.

Hello and Welcome to TSF.

Please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription.

Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.

If you're not receiving help elsewhere and still require assistance for this issue, please follow the process outlined here:

NEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help

After running through all the steps, you shall have a proper set of logs. Please post/attach as instructed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your next reply.

------------------------------------------------------

Read other 19 answers
RELEVANCY SCORE 63.6

Hello,

I have Windows XP SP3 and am seeing issues in Firefox 3.5.3 and Internet Explorer 8.0.6 that lead me to believe my [COLOR=#05408f! important][COLOR=#05408f! important]system[/COLOR][/COLOR] is compromised. The main problem is that when I click on non-sponsored links shown from a google search, Firefox and Internet Explorer redirect me to random websites. This happens mainly if I try to go to antivirus sites like AVG, Symantec, or Avast.

I've already run anti-virus and anti-malware scans (with updates applied) using Malwarebytes, SuperAntiSpyware, Avast, and AVG. The only result found from these scans is "l.exe" (Trojan Downloader) and subsequent scans showed no further results. However, even though these scans show "clean" results, I am still getting redirected to other sites when I click on non-sponsored google search results from either Firefox or Internet Explorer. Attached are my Malwarebytes log, SuperantiSpyware, and [COLOR=#05408f! important][COLOR=#05408f! important]Hijackthis[/COLOR][/COLOR] log to help with your research. Any help is greatly appreciated.

MalwareBytes Log:
****************************
Malwarebytes' Anti-Malware 1.41
Database version: 3031
Windows 5.1.2600 Service Pack 3
10/25/2009 3:39:28 PM
mbam-log-2009-10-25 (15-39-28).txt
Scan type: Full Scan (C:\|)
Objects scanned: 194476
Time elapsed: 3 hour(s), 2 minute(s), 34 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
R... Read more

A:Clicking Google links redirects me to other sites

Read other 13 answers
RELEVANCY SCORE 63.6

Hello, recently i contracted a virus. It was the Bankerfox A and win nuqel.e virus where AV security suite keeps popping up and asking you to install it. I managed to get rid of that and get everything else working, however afterwords I have the problem of most google searches when I click on the links it redirects me to a random site. Also random ad tabs will pop up every now and then. One thing I noticed is that most of the redirects information symbol in the address bar looks like a 2. I have ran multiple searches with malwarebytes and microsoft security suite and they have come up with nothing.

A:Random Redirects on links from google search

Hello and Welcome.

We want all our members to perform the steps outlined in the link I'll give you below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

---------------------------------------------------------------------------------------------

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

Read other 1 answers
RELEVANCY SCORE 63.6

Hi, everyone:

A friend directed me here as it seems I have a similar problem as a similar thread with the same name located here:

http://forums.techguy.org/malware-r...71687-clicking-google-links-redirects-me.html

Problem started today after somekind of popup started one of those fake virus scanners that I didn't install and which Malawarebytes deleted:

C:\Documents and Settings\Retired\Local Settings\Application Data\snwsql\iqebsysguard.exe (Trojan.FakeAlert)

MY PROBLEM: Clicking on links in Google redirect to other links. Also, when I open up Google sometimes another webpage will open up also besides the Google page. I just noticed when I tried to refresh this page that it refreshed the page, but another browser page also opened up with some kind of site: ft.com.

I've run Malawarebytes, Super AntiSpyware, Avira Antivirus, all kinds of stuff and the problem still continues. Here's my Hijack This log.

-------------------------
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:24:04 PM, on 11/28/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE... Read more

Read other answers
RELEVANCY SCORE 63.2

Hello,

My problem is that the results of a Google search direct to pages not related to the actual search. I use AVG Internet Security as firewall, anti-virus, ID Protection, etc. Two days ago AVG told me it had detected a threat by the name, I think, 'y.exe'. It quarantined/deleted the threat but asked for the computer to restart, as processes related to the threat might still be running. After the restart, the problem of the wrong directing web links existed. AVG does not seem able to detect what's causing this, as complete systems scans do not produce any detected threats. What can be done about this besides formatting? Thanks a lot in advance.


DDS (Ver_09-07-30.01) - NTFSx86
Run by Owner at 16:33:44.71 on Thu 08/27/2009
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.510.193 [GMT -4:00]

AV: AVG Internet Security *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
FW: AVG Firewall *enabled* {8decf618-9569-4340-b34a-d78d28969b66}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\acs.exe
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AVG\AVG8\IdentityProtection\agent\Bin\AVGIDSAgent.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\PROGRA~1\AVG\AVG8\avgtray.... Read more

A:Google links direct to wrong websites

Hello and Welcome. Please subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.

Before beginning the fix, read this post completely. If there's anything that you do not understand, kindly ask your questions before proceeding. Ensure that there aren't any opened browsers when you are carrying out the procedures below. Save the following instructions in Notepad as this webpage would not be available when you're carrying out the fix.

It is IMPORTANT that you don't miss a step & perform everything in the correct order/sequence.

---------------------------------------------------------------------------------------------

One or more of the identified infections is a backdoor trojan.

This type of infection allows hackers to remotely control your computer, steal critical system information and download and execute files without your knowledge.

If you do any banking or other financial transactions on the PC or if it should contain any other sensitive information, please get to a known clean computer and change all passwords where applicable, and it would be wise to contact those same financial institutions to apprise them of your situation.

You can read this: How Do I Handle Possible Identify Theft, Internet Fraud and CC Fraud?

--------------------------------------------------------... Read more

Read other 15 answers
RELEVANCY SCORE 63.2

When I do google searches on my pc the links that come up redirect me to different websites, I go back to previous page and then on the second attempt the right one comes up.Is someone able to help me through this problem or have a diagnosis for my problem ?I have attaches a Hijack this Log Report.Thanks in advance..... TroyLogfile of Trend Micro HijackThis v2.0.4Scan saved at 8:22:12 PM, on 21/05/2010Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Lavasoft\Ad-Aware\AAWService.exeC:\Program Files\Alwil Software\Avast5\AvastSvc.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Analog Devices\Core\smax4pnp.exeC:\WINDOWS\system32\CTXFIHLP.EXEC:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nTrayFw.exeC:\Program Files\Microsoft IntelliType Pro\type32.exeC:\Program Files\Microsoft IntelliPoint\point32.exeC:\WINDOWS\system32\rundll32.exeD:\Program Files\Winamp\winampa.exeC:\Program Files\CyberLink\PowerDVD\PDVDServ.exeC:\WINDO... Read more

A:Google search Links go to wrong website

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.1.Please do not run any other tool untill instructed to do so!2.Please reply to this thread, do not start another!3.Please tell me about any problems that have occurred during the fix.4.Please tell me of any other symptoms you may be having as these can help also.5.Please try as much as possible not to run anything while executing a fix.If you follow these instructions, everything should go smoothly.Please subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.I would like to get a better look at your system, please do the following so I can get some more detailed logs.DeFogger: Please download DeFogger to your desktop.Double click DeFogger to run the tool. The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will appear Click OKDeFogger may ask you to reboot the machine, if it does - click OKDo not re-enable these drivers until otherwise instructed.IMPORTANT! If you receive an error message while running DeFogger, please post the log defogger_disable which will appear on your desktop.Download DDS:Please download DDS by... Read more

Read other 12 answers