Windows Support Forum

Google Links Redirecting, Antiviruses Not Running, rkill Not Working

Q: Google Links Redirecting, Antiviruses Not Running, rkill Not Working

I use Windows Info For some time I have noticed that my Google links redirect me to AD sites such as STOPzilla and my efforts to stop whatever malware this is have failed Any anti-spyware I Links Not Antiviruses Running, Working Not rkill Redirecting, Google try to use fails IE Spybot S amp D won t open Malwarebytes glitches Bit Defender and Advanced System Protector freeze after a few minutes Google Links Redirecting, Antiviruses Not Running, rkill Not Working Also rKill failed to run It asked me what program I would like to open it with Tried exe scr and pif files to no avail eXplorer did not work either Tried to follow the Prep Guide and DDS would not run either the black Google Links Redirecting, Antiviruses Not Running, rkill Not Working window appears only for a second Here is RSIT log info Logfile of random s system information tool written by random random Run by mike at - - Microsoft Windows Home Premium System drive C has GB free of GBTotal RAM MB free Logfile of Trend Micro HijackThis v Scan saved at on Platform Windows WinNT MSIE Internet Explorer v Boot mode NormalRunning processes C Program Files x AIM aim exeC Program Files x Yahoo Search Protection SearchProtection exeC Program Files x Google GoogleToolbarNotifier GoogleToolbarNotifier exeC Users Mattie AppData Roaming Google Google Talk googletalk exeC Program Files x McAfee Security Scan SSScheduler exeC Program Files x Cyberlink Power Go CLMLSvc exeC Program Files x Gateway Photo Frame ButtonMonitor exeC Windows CNYHKey exeC Program Files x Common Files Java Java Update jusched exeC Program Files x AIM aolsoftware exeC Windows MHotkey exeC Windows ModLedKey exeC Program Files x Common Files Adobe ARM AdobeARM exeC Program Files x iTunes iTunesHelper exeC Program Files x Systweak Advanced System Protector ASP exeC Windows ChiFuncExt exeC Program Files x Yahoo Messenger ymsgr tray exeC Users Mattie Desktop RSIT exeC Program Files x trend micro mike exeR - HKCU Software Microsoft Internet Explorer Main Search Bar PreserveR - HKCU Software Microsoft Internet Explorer Main Search Page http us rd yahoo com customize ie defaul www yahoo comR - HKCU Software Microsoft Internet Explorer Main Start Page http www yahoo com R - HKLM Software Microsoft Internet Explorer Main Default Page URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Default Search URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Start Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Search SearchAssistant R - HKLM Software Microsoft Internet Explorer Search CustomizeSearch R - HKCU Software Microsoft Internet Explorer SearchURL Default http us rd yahoo com customize ie defaul www yahoo comR - HKLM Software Microsoft Internet Explorer Main Local Page C Windows SysWOW blank htmR - HKCU Software Microsoft Windows CurrentVersion Internet Settings ProxyOverride localR - HKCU Software Microsoft Internet Explorer Toolbar LinksFolderName O - Hosts localhostO - BHO amp Yahoo Toolbar Helper - D -C F - efb- B - ECA - C Program Files x Yahoo Companion Installs cpn yt dllO - BHO MHTBPos - C B -FD - a- E -D EE E F - C Program Files x Celebrity Toolbar tbcore dll file missing O - BHO AcroIEHelperStub - DF C-E AD- -A -FA C EBDC - C Program Files x Common Files Adobe Acrobat ActiveX AcroIEHelperShim dllO - BHO no name - C C A-E - b - D - CECB - no file O - BHO Windows Live ID Sign-in Helper - D - C - ABF- ECC- C - C Program Files x Common Files Microsoft Shared Windows Live WindowsLiveLogin dllO - BHO Google Toolbar Helper - AA ED - DD- d - -CF F - C Program Files x Google Google Toolbar GoogleToolbar dllO - BHO Google Toolbar Notifier BHO - AF DE - D - -B FA-CE B AD D - C Program Files x Google GoogleToolbarNotifier swg dllO - BHO McAfee SiteAdvisor BHO - B E -A B - A -B - CD E A FF - c PROGRA mcafee SITEAD mcieplg dllO - BHO Java Plug-In SSV Helper - DBC -A - b-BC - C C C A - C Program Files x Java jre bin jp ssv dllO - BHO SingleInstance Class - FDAD DA - A - FD - C - F AC - C Program Files x Yahoo Companion Installs cpn YTSingleInstance dllO - Toolbar BitDefender Toolbar - FFDE - - f -B D-FC A F C - quot C Program Files BitDefender BitDefender Antispam IEToolbar dll quot file missing O - Toolbar Yahoo Toolbar - EF BD -C FB- D - F- D F - C Program Files x Yahoo Companion Installs cpn yt dllO - Toolbar Google Toolbar - C B - - d - B - A CD F - C Program Files x Google Google Toolbar GoogleToolbar dllO - Toolbar Celebrity Toolbar - FD FD - F F- B -B -C F C BB - C Program Files x Celebrity Toolbar tbcore dll file missing O - Toolbar McAfee SiteAdvisor Toolbar - EBBBE -BAD - B C- E A- ABECAE - c PROGRA mcafee SITEAD mcieplg dllO - HKLM Run CLMLServer quot C Program Files x Cyberlink Power Go CLMLSvc exe quot O - HKLM Run Gateway Photo Frame quot C Program Files x Gateway Photo Frame ButtonMonitor exe quot -AO - HKLM Run LchDrvKey LchDrvKey exeO - HKLM Run LedKey CNYHKey exeO - HKLM Run SunJavaUpdateSched quot C Program Files x Common Files Java Java Update jusched exe quot O - HKLM Run YSearchProtection quot C Program Files x Yahoo Search Protection SearchProtection exe quot O - HKLM Run QuickTime Task quot C Program Files x QuickTime QTTask exe quot -atboottimeO - HKLM Run Adobe Reader Speed Launcher quot C Program Files x Adobe Reader Reader Reader sl exe quot O - HKLM Run Adobe ARM quot C Program Files x Common Files Adobe ARM AdobeARM exe quot O - HKLM Run iTunesHelper quot C Program Files x iTunes iTunesHelper exe quot O - HKLM Run Advanced System Protector quot C Program Files x Systweak Advanced System Protector ASP exe quot autorunO - HKCU Run Messenger Yahoo quot C PROGRA Yahoo MESSEN YahooMessenger exe quot -quietO - HKCU Run Search Protection C Program Files x Yahoo Search Protection SearchProtection exeO - HKCU Run swg quot C Program Files x Google GoogleToolbarNotifier GoogleToolbarNotifier exe quot O - HKCU Run msnmsgr quot C Program Files x Windows Live Messenger msnmsgr exe quot backgroundO - HKCU Run instanteyedropper quot C Program Files x InstantEyedropper InstantEyedropper exe quot O - HKUS S- - - Run Sidebar ProgramFiles Windows Sidebar Sidebar exe autoRun User LOCAL SERVICE O - HKUS S- - - RunOnce mctadmin C Windows System mctadmin exe User LOCAL SERVICE O - HKUS S- - - Run Sidebar ProgramFiles Windows Sidebar Sidebar exe autoRun User NETWORK SERVICE O - HKUS S- - - RunOnce mctadmin C Windows System mctadmin exe User NETWORK SERVICE O - HKUS S- - - - - - - Run Aim quot C Program Files x AIM aim exe quot d locale en-US ee aol imApp User Mattie O - HKUS S- - - - - - - Run Sidebar C Program Files Windows Sidebar sidebar exe autoRun User Mattie O - HKUS S- - - - - - - Run googletalk C Users Mattie AppData Roaming Google Google Talk googletalk exe autostart User Mattie O - HKUS S- - - - - - - Run Advanced System Protector quot C Program Files x Systweak Advanced System Protector ASP exe quot autorun User Mattie O - Global Startup McAfee Security Scan Plus lnk O - Extra context menu item Free YouTube to Mp Converter - C Users mike AppData Roaming DVDVideoSoftIEHelpers youtubetomp htmO - Extra button Blog This - C - CB - a-A C -D FCDDC D - C Program Files x Windows Live Writer WriterBrowserExtension dllO - Extra Tools menuitem amp Blog This in Windows Live Writer - C - CB - a-A C -D FCDDC D - C Program Files x Windows Live Writer WriterBrowserExtension dllO - Extra button Send to OneNote - A- - f c- - EE C C - C PROGRA MICROS Office ONBttnIE dllO - Extra Tools menuitem S amp end to OneNote - A- - f c- - EE C C - C PROGRA MICROS Office ONBttnIE dllO - Extra button no name - d f - f - d - - c a - C Windows bdoscandel exeO - Extra Tools menuitem Uninstall BitDefender Online Scanner - d f - f - d - - c a - C Windows bdoscandel exeO - Extra button Research - B - CC- C -B BE- C C A - C PROGRA MICROS Office REFIEBAR DLLO - Unknown file in Winsock LSP c program files x common files microsoft shared windows live wlidnsp dllO - Unknown file in Winsock LSP c program files x common files microsoft shared windows live wlidnsp dllO - DPF D DDB -BDF - B- E E-D F EE BDSCANONLINE Control - http download bitdefender com resources can oscan cabO - DPF D A- - C-BEE -AFECE D Facebook Photo Uploader Control - http upload facebook com controls oUploader cabO - DPF A FB - BE- BB-ACDC- FB B Photo Upload Plugin Class - http images pnimedia com ProductAssets veX Control cabO - DPF E E F- F- FB - -AC BF A - http platformdl adobe com NOS getPlusPlus gp cabO - Protocol dssrequest - F E- B- E - B - E CC - c PROGRA mcafee SITEAD mcieplg dllO - Protocol sacore - F E- B- E - B - E CC - c PROGRA mcafee SITEAD mcieplg dllO - Service Agere Modem Call Progress Audio AgereModemAudio - LSI Corporation - C Program Files LSI SoftModem agr svc exeO - Service SystemRoot system Alg exe - ALG - Unknown owner - C Windows System alg exe file missing O - Service Apple Mobile Device - Apple Inc - C Program Files x Common Files Apple Mobile Device Support AppleMobileDeviceService exeO - Service BitDefender Arrakis Server Arrakis - BitDefender S R L http www bitdefender com - C Program Files Common Files BitDefender BitDefender Arrakis Server bin arrakis exeO - Service Bonjour Service - Apple Inc - C Program Files x Bonjour mDNSResponder exeO - Service SystemRoot system efssvc dll - EFS - Unknown owner - C Windows System lsass exe file missing O - Service systemroot system fxsresm dll - Fax - Unknown owner - C Windows system fxssvc exe file missing O - Service FLEXnet Licensing Service - Unknown owner - C Program Files x Common Files Macrovision Shared FLEXnet Publisher FNPLicensingService exe file missing O - Service GameConsoleService - WildTangent Inc - C Program Files x Gateway Games Gateway Game Console GameConsoleService exeO - Service Google Update Service gupdate ca abf c b gupdate ca abf c b - Google Inc - C Program Files x Google Update GoogleUpdate exeO - Service Google Software Updater gusvc - Google - C Program Files x Google Common Google Updater GoogleUpdaterService exeO - Service InstallDriver Table Manager IDriverT - Macrovision Corporation - C Program Files x Common Files InstallShield Driver Intel IDriverT exeO - Service iPod Service - Apple Inc - C Program Files iPod bin iPodService exeO - Service keyiso dll - KeyIso - Unknown owner - C Windows system lsass exe file missing O - Service BitDefender Desktop Update Service LIVESRV - BitDefender S R L - C Program Files Common Files BitDefender BitDefender Update Service livesrv exeO - Service McAfee SiteAdvisor Service - McAfee Inc - c PROGRA mcafee SITEAD mcsacore exeO - Service comres dll - MSDTC - Unknown owner - C Windows System msdtc exe file missing O - Service SystemRoot System netlogon dll - Netlogon - Unknown owner - C Windows system lsass exe file missing O - Service systemroot system psbase dll - ProtectedStorage - Unknown owner - C Windows system lsass exe file missing O - Service systemroot system Locator exe - RpcLocator - Unknown owner - C Windows system locator exe file missing O - Service SystemRoot system samsrv dll - SamSs - Unknown owner - C Windows system lsass exe file missing O - Service SystemRoot system snmptrap exe - SNMPTRAP - Unknown owner - C Windows System snmptrap exe file missing O - Service systemroot system spoolsv exe - Spooler - Unknown owner - C Windows System spoolsv exe file missing O - Service SystemRoot system sppsvc exe - sppsvc - Unknown owner - C Windows system sppsvc exe file missing O - Service SystemRoot system ui detect exe - UI Detect - Unknown owner - C Windows system UI Detect exe file missing O - Service SystemRoot system vaultsvc dll - VaultSvc - Unknown owner - C Windows system lsass exe file missing O - Service SystemRoot system vds exe - vds - Unknown owner - C Windows System vds exe file missing O - Service Viewpoint Manager Service - Viewpoint Corporation - C Program Files x Viewpoint Common ViewpointService exeO - Service systemroot system vssvc exe - VSS - Unknown owner - C Windows system vssvc exe file missing O - Service BitDefender Virus Shield VSSERV - BitDefender S R L - C Program Files BitDefender BitDefender vsserv exeO - Service SystemRoot system Wat WatUX exe - WatAdminSvc - Unknown owner - C Windows system Wat WatAdminSvc exe file missing O - Service systemroot system wbengine exe - wbengine - Unknown owner - C Windows system wbengine exe file missing O - Service Systemroot system wbem wmiapsrv exe - wmiApSrv - Unknown owner - C Windows system wbem WmiApSrv exe file missing O - Service PROGRAMFILES Windows Media Player wmpnetwk exe - WMPNetworkSvc - Unknown owner - C Program Files x Windows Media Player wmpnetwk exe file missing O - Service Yahoo Updater YahooAUService - Yahoo Inc - C Program Files x Yahoo SoftwareUpdate YahooAUService exe--End of file - bytes Scheduled tasks folder C Windows tasks Google Software Updater jobC Windows tasks GoogleUpdateTaskMachineCore jobC Windows tasks GoogleUpdateTaskMachineUA job Registry dump HKEY LOCAL MACHINE SOFTWARE Microsoft Windows CurrentVersion Explorer Browser Helper Objects D -C F - efb- B - ECA amp Yahoo Toolbar Helper - C Program Files x Yahoo Companion Installs cpn yt dll - - HKEY LOCAL MACHINE SOFTWARE Microsoft Windows CurrentVersion Explorer Browser Helper Objects C B -FD - a- E -D EE E F MHTBPos Class - C Program Files x Celebrity Toolbar tbcore dll HKEY LOCAL MACHINE SOFTWARE Microsoft Windows CurrentVersion Explorer Browser Helper Objects DF C-E AD- -A -FA C EBDC Adobe PDF Link Helper - C Program Files x Common Files Adobe Acrobat ActiveX AcroIEHelperShim dll - - HKEY LOCAL MACHINE SOFTWARE Microsoft Windows CurrentVersion Explorer Browser Helper Objects C C A-E - b - D - CECB HKEY LOCAL MACHINE SOFTWARE Microsoft Windows CurrentVersion Explorer Browser Helper Objects D - C - ABF- ECC- C Windows Live ID Sign-in Helper - C Program Files x Common Files Microsoft Shared Windows Live WindowsLiveLogin dll - - HKEY LOCAL MACHINE SOFTWARE Microsoft Windows CurrentVersion Explorer Browser Helper Objects AA ED - DD- d - -CF F Google Toolbar Helper - C Program Files x Google Google Toolbar GoogleToolbar dll - - HKEY LOCAL MACHINE SOFTWARE Microsoft Windows CurrentVersion Explorer Browser Helper Objects AF DE - D - -B FA-CE B AD D Google Toolbar Notifier BHO - C Program Files x Google GoogleToolbarNotifier swg dll - - HKEY LOCAL MACHINE SOFTWARE Microsoft Windows CurrentVersion Explorer Browser Helper Objects B E -A B - A -B - CD E A FF McAfee SiteAdvisor BHO - c PROGRA mcafee SITEAD mcieplg dll - - HKEY LOCAL MACHINE SOFTWARE Microsoft Windows CurrentVersion Explorer Browser Helper Objects DBC -A - b-BC - C C C A Java Plug-In SSV Helper - C Program Files x Java jre bin jp ssv dll - - HKEY LOCAL MACHINE SOFTWARE Microsoft Windows CurrentVersion Explorer Browser Helper Objects FDAD DA - A - FD - C - F AC SingleInstance Class - C Program Files x Yahoo Companion Installs cpn YTSingleInstance dll - - HKEY LOCAL MACHINE SOFTWARE Microsoft Internet Explorer Toolbar FFDE - - f -B D-FC A F C - BitDefender Toolbar - C Program Files BitDefender BitDefender Antispam IEToolbar dll - - EF BD -C FB- D - F- D F - Yahoo Toolbar - C Program Files x Yahoo Companion Installs cpn yt dll - - C B - - d - B - A CD F - Google Toolbar - C Program Files x Google Google Toolbar GoogleToolbar dll - - FD FD - F F- B -B -C F C BB - Celebrity Toolbar - C Program Files x Celebrity Toolbar tbcore dll EBBBE -BAD - B C- E A- ABECAE - McAfee SiteAdvisor Toolbar - c PROGRA mcafee SITEAD mcieplg dll - - HKEY LOCAL MACHINE Software Microsoft Windows CurrentVersion Run quot CLMLServer quot C Program Files x Cyberlink Power Go CLMLSvc exe - - quot Gateway Photo Frame quot C Program Files x Gateway Photo Frame ButtonMonitor exe - - quot LchDrvKey quot C Windows LchDrvKey exe - - quot LedKey quot C Windows CNYHKey exe - - quot SunJavaUpdateSched quot C Program Files x Common Files Java Java Update jusched exe - - quot YSearchProtection quot C Program Files x Yahoo Search Protection SearchProtection exe - - quot QuickTime Task quot C Program Files x QuickTime QTTask exe - - quot Adobe Reader Speed Launcher quot C Program Files x Adobe Reader Reader Reader sl exe - - quot Adobe ARM quot C Program Files x Common Files Adobe ARM AdobeARM exe - - quot iTunesHelper quot C Program Files x iTunes iTunesHelper exe - - quot Advanced System Protector quot C Program Files x Systweak Advanced System Protector ASP exe - - HKEY CURRENT USER Software Microsoft Windows CurrentVersion Run quot Aim quot quot Messenger Yahoo quot C PROGRA Yahoo MESSEN YahooMessenger exe - - quot Search Protection quot C Program Files x Yahoo Search Protection SearchProtection exe - - quot swg quot C Program Files x Google GoogleToolbarNotifier GoogleToolbarNotifier exe - - quot msnmsgr quot C Program Files x Windows Live Messenger msnmsgr exe - - quot instanteyedropper quot C Program Files x InstantEyedropper InstantEyedropper exe - - C ProgramData Microsoft Windows Start Menu Programs StartupMcAfee Security Scan Plus lnk - C Program Files x McAfee Security Scan SSScheduler exe HKEY LOCAL MACHINE SOFTWARE Microsoft Windows CurrentVersion ShellServiceObjectDelayLoad WebCheck - E FB E -DE - CF- C - AA ED HKEY LOCAL MACHINE system currentcontrolset control securityproviders quot SecurityProviders quot credssp dll HKEY LOCAL MACHINE SYSTEM CurrentControlSet Control SafeBoot network AFD HKEY CURRENT USER Software Microsoft Windows CurrentVersion Policies System quot LogonHoursAction quot quot DontDisplayLogonHoursWarnings quot quot DisableTaskMgr quot HKEY LOCAL MACHINE Software Microsoft Windows CurrentVersion Policies System quot ConsentPromptBehaviorAdmin quot quot ConsentPromptBehaviorUser quot quot EnableUIADesktopToggle quot quot dontdisplaylastusername quot quot legalnoticecaption quot quot shutdownwithoutlogon quot quot undockwithoutlogon quot quot legalnoticetext quot HKEY CURRENT USER Software Microsoft Windows CurrentVersion Policies explorer quot NoDriveTypeAutoRun quot HKEY LOCAL MACHINE Software Microsoft Windows CurrentVersion Policies explorer quot NoActiveDesktop quot quot ForceActiveDesktopOn quot quot NoActiveDesktopChanges quot HKEY LOCAL MACHINE system currentcontrolset services sharedaccess parameters firewallpolicy standardprofile authorizedapplications list HKEY LOCAL MACHINE system currentcontrolset services sharedaccess parameters firewallpolicy domainprofile authorizedapplications list File associations js - edit - C Windows System Notepad exe js - open - C Windows System WScript exe quot quot List of files folders created in the last months - - ----D---- C Program Files x trend micro - - ----D---- C rsit - - ----A---- C Windows SysWOW shell dll - - ----D---- C Users mike AppData Roaming SPORE - - ----RHD---- C Users mike AppData Roaming SecuROM - - ----A---- C Windows SysWOW d dx dll - - ----D---- C Program Files x Electronic Arts List of files folders modified in the last months - - ----RD---- C Program Files x - - ----D---- C Windows Tasks - - ----D---- C Windows System - - ----D---- C Users mike AppData Roaming Systweak - - ----D---- C ProgramData Systweak - - ----D---- C Windows Temp - - ----D---- C Program Files x Malwarebytes Anti-Malware - - ----D---- C Windows SysWOW drivers - - ----D---- C Program Files x Spybot - Search amp Destroy - - ----D---- C ProgramData Spybot - Search amp Destroy - - ----D---- C Windows inf - - ----D---- C Program Files x McAfee Security Scan - - ----A---- C Windows ntbtlog txt - - ----A---- C bdlog txt - - ----D---- C Program Files x McAfee - - ----D---- C Windows Prefetch - - ----D---- C Windows winsxs - - ----D---- C Windows SysWOW - - ----SHD---- C System Volume Information - - ----SHD---- C Config Msi - - ----SHD---- C Windows Installer - - ----D---- C Program Files x iTunes - - ----RD---- C Program Files - - ----D---- C Program Files x Common Files Apple - - ----D---- C Program Files x Bonjour - - ----D---- C Program Files x Common Files DVDVideoSoft - - ----HD---- C Program Files x InstallShield Installation Information - - ----RSD---- C Windows assembly - - ----D---- C Windows Microsoft NET List of drivers R Running S Stopped Boot System Auto Demand Disabled R bdfsfltr bdfsfltr C Windows system DRIVERS bdfsfltr sys R iaStor Intel RAID Controller C Windows system DRIVERS iaStor sys R rdyboost ReadyBoost C Windows System drivers rdyboost sys R BdfNdisf BitDefender Firewall NDIS Filter Driver C Windows system DRIVERS BdfNdisf sys R bdftdif bdftdif C Program Files Common Files BitDefender BitDefender Firewall bdftdif sys - - R BDVEDISK BDVEDISK C Program Files BitDefender BitDefender bdvedisk sys - - R AgereSoftModem Agere Systems Soft Modem C Windows system DRIVERS agrsm sys R BDFM BDFM C Windows system DRIVERS bdfm sys R e yexpress Intel Gigabit Network Connections Driver C Windows system DRIVERS e y x sys R GEARAspiWDM GEAR ASPI Filter Driver C Windows system DRIVERS GEARAspiWDM sys R igfx igfx C Windows system DRIVERS igdkmd sys R IntcAzAudAddService Service for Realtek HD Audio WDM C Windows system drivers RTKVHD sys R IntcHdmiAddService Intel High Definition Audio HDMI C Windows system drivers IntcHdmi sys R usbscan USB Scanner Driver C Windows system DRIVERS usbscan sys S cpuz cpuz C Users mike AppData Local Temp cpuz cpuz x sys S pciide pciide C Windows system DRIVERS pciide sys S USBAAPL Apple Mobile USB Driver C Windows System Drivers usbaapl sys S WinUsb WinUsb C Windows system DRIVERS WinUsb sys List of services R Running S Stopped Boot System Auto Demand Disabled R AgereModemAudio Agere Modem Call Progress Audio C Program Files LSI SoftModem agr svc exe - - R Apple Mobile Device Apple Mobile Device C Program Files x Common Files Apple Mobile Device Support AppleMobileDeviceService exe - - R Bonjour Service Bonjour Service C Program Files x Bonjour mDNSResponder exe - - R LIVESRV BitDefender Desktop Update Service C Program Files Common Files BitDefender BitDefender Update Service livesrv exe - - R McAfee SiteAdvisor Service McAfee SiteAdvisor Service c PROGRA mcafee SITEAD mcsacore exe - - R Viewpoint Manager Service Viewpoint Manager Service C Program Files x Viewpoint Common ViewpointService exe - - R VSSERV BitDefender Virus Shield C Program Files BitDefender BitDefender vsserv exe - - R wlidsvc Windows Live ID Sign-in Assistant C Program Files Common Files Microsoft Shared Windows Live WLIDSVC EXE - - R YahooAUService Yahoo Updater C Program Files x Yahoo SoftwareUpdate YahooAUService exe - - R iPod Service iPod Service C Program Files iPod bin iPodService exe - - S clr optimization v Microsoft NET Framework NGEN v X C Windows Microsoft NET Framework v mscorsvw exe - - S clr optimization v Microsoft NET Framework NGEN v X C Windows Microsoft NET Framework v mscorsvw exe - - S gupdate ca abf c b Google Update Service gupdate ca abf c b C Program Files x Google Update GoogleUpdate exe - - S gusvc Google Software Updater C Program Files x Google Common Google Updater GoogleUpdaterService exe - - S Arrakis BitDefender Arrakis Server C Program Files Common Files BitDefender BitDefender Arrakis Server bin arrakis exe - - S FLEXnet Licensing Service FLEXnet Licensing Service C Program Files x Common Files Macrovision Shared FLEXnet Publisher FNPLicensingService exe S GameConsoleService GameConsoleService C Program Files x Gateway Games Gateway Game Console GameConsoleService exe - - S IDriverT InstallDriver Table Manager C Program Files x Common Files InstallShield Driver Intel IDriverT exe - - S odserv Microsoft Office Diagnostics Service C Program Files x Common Files Microsoft Shared OFFICE ODSERV EXE - - S ose Office Source Engine C Program Files x Common Files Microsoft Shared Source Engine OSE EXE - - S scan BitDefender Threat Scanner C Windows System svchost exe - - S WatAdminSvc SystemRoot system Wat WatUX exe - C Windows system Wat WatAdminSvc exe -----------------EOF-----------------Tried to run Gmer it claimed to have found nothing but Gave me a few error popups saying quot the process cannot access the file because it is being used by another process quot or quot The system cannot find the file specified quot Also a LOT of check marks were missing on the right hand side and I was unable to re-check them Only files services registry C and ADS were even allowed to be check-marked Thank you-Meechu

Relevancy 100%
Preferred Solution: Google Links Redirecting, Antiviruses Not Running, rkill Not Working

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/directdownload.php. (This link will automatically start a download of Reimage that you can save to your computer.)

A: Google Links Redirecting, Antiviruses Not Running, rkill Not Working

Welcome to the BleepingComputer Forums. Since it has been a few days since you scanned your computer with HijackThis, we will need a new HijackThis log. If you have not already downloaded Random's System Information Tool (RSIT), please download Random's System Information Tool (RSIT) by random/random which includes a HijackThis log and save it to your desktop. If you have RSIT already on your computer, please run it again. Double click on RSIT.exe to run RSIT. Click Continue at the disclaimer screen. Please post the contents of log.txt. Thank you for your patience.Please see Preparation Guide for use before posting about your potential Malware problem. If you have already posted this log at another forum or if you decide to seek help at another forum, please let us know. There is a shortage of helpers and taking the time of two volunteer helpers means that someone else may not be helped. Please post your HijackThis log as a reply to this thread and not as an attachment. I am always leery of opening attachments so I always request that HijackThis logs are to be posted as a reply to the thread. I do not think that you are attaching anything scary but others may do so. While we are working on your HijackThis log, please: Reply to this thread; do not start another! Do not make any changes on your computer during the cleaning process or download/add programs on your computer unless instructed to do so. Do not run any other tool until instructed to do so! Let me know if any of the links do not work or if any of the tools do not work. Tell me about problems or symptoms that occur during the fix. Do not run any other programs or open any other windows while doing a fix. Ask any questions that you have regarding the fix(es), the infection(s), the performance of your computer, etc.Thanks.

http://www.bleepingcomputer.com/forums/t/338494/google-links-redirecting-antiviruses-not-running-rkill-not-working/
Relevancy 87.29%

Long time reader first time poster I just recently removed some viruses via malwarebytes and avg scans but there seems to are redirecting running links slow. computer and Google be some remnants Google links are redirecting and computer running slow. of some infections as the computer has been running unusually slow and links from google search results redirect to what seems random websites Recent safemode malwarebytes and avg scans turn up clean Im usually pretty timid to mess with Google links are redirecting and computer running slow. registry stuff so i turn to you guys for help and see if you can help me out I have included the TSG log and a hijackthis log Here is my TSG log Tech Support Guy System Info Utility version OS Version Microsoft Windows Vista Home Premium Service Pack bit Processor Intel R Core TM Duo CPU T GHz x Family Model Stepping Processor Count RAM Mb Graphics Card Mobile Intel R Express Chipset Family Mb Hard Drives C Total - MB Free - MB D Total - MB Free - MB Motherboard Dell Inc UK K LMG CN G Antivirus McAfee VirusScan Updated and Enabled Here is a hijack this log Logfile of Trend Micro HijackThis v Scan saved at PM on Platform Windows Vista SP WinNT MSIE Internet Explorer v Boot mode Normal Running processes C Windows system Dwm exe C Windows system taskeng exe C Program Files DellTPad Apoint exe C Windows System hkcmd exe C Windows System igfxpers exe C Program Files Sigmatel C-Major Audio WDM sttray exe C Program Files AVG AVG avgtray exe C Program Files Common Files Java Java Update jusched exe C Windows system igfxsrvc exe C Program Files Dell Support Center bin sprtcmd exe C Windows ehome ehtray exe C Program Files Skype Phone Skype exe C Program Files Windows Media Player wmpnscfg exe C Program Files Dell QuickSet quickset exe C Windows ehome ehmsas exe C Program Files DellTPad ApMsgFwd exe C Program Files Motorola MotoConnectService MotoConnect exe C Program Files DellTPad HidFind exe C Program Files DellTPad Apntex exe C Program Files AVG AVG Identity Protection agent bin avgidsmonitor exe C Program Files Skype Plugin Manager skypePM exe c PROGRA mcafee com agent mcagent exe C Windows system wuauclt exe C Windows Explorer exe C Program Files Mozilla Firefox firefox exe C Program Files Mozilla Firefox plugin-container exe C Windows explorer exe C Users Pedro Desktop HijackThis exe R - HKLM Software Microsoft Internet Explorer Main Default Page URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Default Search URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Start Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Search SearchAssistant R - HKLM Software Microsoft Internet Explorer Search CustomizeSearch R - HKCU Software Microsoft Internet Explorer Main Window Title Internet Explorer provided by Dell R - HKCU Software Microsoft Internet Explorer Toolbar LinksFolderName O - Hosts localhost O - BHO Lexmark Toolbar - A C- F - -A D-EDD AC F - C Program Files Lexmark Toolbar toolband dll O - BHO AcroIEHelperStub - DF C-E AD- -A -FA C EBDC - C Program Files Common Files Adobe Acrobat ActiveX AcroIEHelperShim dll O - BHO McAfee Phishing Filter - B A- - A -B -BE AFE AB - c PROGRA mcafee msk mskapbho dll O - BHO RealPlayer Download and Record Plugin for Internet Explorer - C E -B - BC - - C CA - C ProgramData Real RealPlayer BrowserRecordPlugin IE rpbrowserrecordplugin dll O - BHO Increase performance and video formats for your HTML lt video gt - E D- - FD- C - A F - C Program Files DivX DivX Plus Web Player npdivx dll O - BHO WormRadar com IESiteBlocker NavFilter - CA F - F E- B -A E- E E C C - C Program Files AVG AVG avgssie dll O - BHO Use the DivX Plus Web Player to watch web videos with less interruptions and smoother playback on supported sites - DDEC - - cdd- E - DADAA E - C Program ... Read more

Relevancy 72.24%

When I click on links browser links Google redirecting opening search with new and Analytics? Google from a Google search it redirects or sometimes opens a new browser window with a blank page from http results google-analytics com Super Anti-Spyware does not detect anything Enclosing my hijackthis log Any help would be Google search links redirecting and opening new browser with Google Analytics? appreciated Logfile of Trend Google search links redirecting and opening new browser with Google Analytics? Micro HijackThis v Scan saved at PM on Platform Windows XP SP WinNT MSIE Internet Explorer v Boot mode Normal Running processes C WINDOWS System smss exe C WINDOWS system winlogon exe C WINDOWS system services Google search links redirecting and opening new browser with Google Analytics? exe C WINDOWS system lsass exe C WINDOWS system svchost exe C WINDOWS System svchost exe C WINDOWS system svchost exe C WINDOWS System WLTRYSVC EXE C WINDOWS System bcmwltry exe C Program Files AVG avgchsvx exe C Program Files AVG avgrsx exe C WINDOWS system spoolsv exe C WINDOWS system rundll exe C Program Files AVG avgcsrvx exe C Program Files Common Files Apple Mobile Device Support AppleMobileDeviceService exe C Program Files AVG avgwdsvc exe C Program Files BlueSoleil BlueSoleilCS exe C Program Files Bonjour mDNSResponder exe C WINDOWS system dlcxcoms exe C Program Files Nero Burning ROM Nero Nero InCD InCDsrv exe C Program Files Java jre bin jqs exe C Program Files AVG avgnsx exe C Program Files Common Files LogiShrd LVMVFM LVPrcSrv exe C Program Files Nero Burning ROM Nero Nero Nero BackItUp NBService exe C WINDOWS Explorer EXE C WINDOWS system svchost exe C WINDOWS system Pen Tablet exe C Garmin Spanner VspStartup exe C Program Files Common Files Pure Networks Shared Platform nmsrvc exe C WINDOWS system WTablet Pen TabletUser exe C WINDOWS system Pen Tablet exe C WINDOWS system hkcmd exe C WINDOWS system igfxpers exe C WINDOWS system WLTRAY exe C WINDOWS system igfxsrvc exe C Program Files Synaptics SynTP SynTPEnh exe C PROGRA AVG avgtray exe C Program Files BlueSoleil BsHelpCS exe C Program Files iTunes iTunesHelper exe C Program Files CursorXP CursorXP exe C WINDOWS system ctfmon exe C Program Files Digital Line Detect DLG exe C WINDOWS System svchost exe C Program Files iPod bin iPodService exe C WINDOWS system wuauclt exe C Program Files Mozilla Firefox firefox exe C Program Files Trend Micro HijackThis HijackThis exe R - HKCU Software Microsoft Internet Explorer Main Default Page URL www google com ig dell hl en amp client dell-usuk amp channel us amp ibd R - HKCU Software Microsoft Internet Explorer Main Start Page about blank R - HKLM Software Microsoft Internet Explorer Main Default Page URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Default Search URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Start Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Search Default Page URL www google com ig dell hl en amp client dell-usuk amp channel us amp ibd R - HKCU Software Microsoft Windows CurrentVersion Internet Settings ProxyOverride local O - BHO Adobe PDF Reader Link Helper - E F-C D - D -B D- B D BE B - C Program Files Common Files Adobe Acrobat ActiveX AcroIEHelper dll O - BHO WormRadar com IESiteBlocker NavFilter - CA F - F E- B -A E- E E C C - C Program Files AVG avgssie dll O - BHO Adobe PDF Conversion Toolbar Helper - AE CD -E - f- - EE - C Program Files Adobe Acrobat Acrobat AcroIEFavClient dll O - BHO Google Toolbar Notifier BHO - AF DE - D - -B FA-CE B AD D - C Program Files Google GoogleToolbarNotifier swg dll O - BHO Java tm Plug-In SSV Helper - DBC -A - b-BC - C C C A - C Program Files Java jre bin jp ssv dll O - BHO JQSIEStartDetectorImpl - E E F - CE- C -BC -EABFE F C - C Program Files Java jre lib de... Read more

https://forums.techguy.org/threads/google-search-links-redirecting-and-opening-new-browser-with-google-analytics.930612/
Relevancy 71.38%

Hi I have a couple of things going on Every now and then maybe one out of or clicks a google search result send me to a ad page Also my google image search yields sometimes one and sometimes two pages of image thumbs and then the following pages are blank squares Yahoo images and all other sites are normal as far as I can tell I have Windows XP SP and use Mozilla Firefox I have the free Avira Antivirus and it does not show any malware with a full scan Most recently it has been giving an error message when I shutdown or restart The message is as follows The top of the pop up says quot Avira AntiVir Personal - Free Antivirus - SysTray Avgnt exe Application Error The text states The instruction at quot x f quot referenced memory at quot x f quot links images google loading, not Google redirecting The memory could not be quot read quot Click ok to terminate the program I also ran a SuperAntiSpyware Google images not loading, google links redirecting scan and it found some adware cookies that I deleted but the problem persists Thanks for your help I really appreciate this site RHere are my DDS logs I will post GMER in the following reply DDS Ver - - - NTFSx Internet Explorer BrowserJavaVersion Run by Roman at on - - Microsoft Windows XP Professional GMT - AV AntiVir Desktop Enabled Updated AD - F - A-A -FDD C Running Processes C WINDOWS system Ati evxx exeC WINDOWS system svchost -k DcomLaunchsvchost exeC Program Files Trusteer Rapport bin RapportMgmtService exeC WINDOWS System svchost exe -k netsvcssvchost exesvchost exeC WINDOWS system spoolsv exeC WINDOWS system acs exeC Program Files Avira AntiVir Desktop sched exesvchost exeC WINDOWS system Ati evxx exeC WINDOWS Explorer EXEC Program Files Trusteer Rapport bin RapportService exeC Program Files Avira AntiVir Desktop avgnt exeC Program Files Synaptics SynTP SynTPEnh exeC Program Files Common Files Java Java Update jusched exeC Google images not loading, google links redirecting WINDOWS system ctfmon exeC Program Files Synaptics SynTP SynToshiba exeC Program Files Common Files Intuit QuickBooks QBUpdate qbupdate exeC Program Files SafeConnect scClient exeC Documents and Settings Roman Application Data Dropbox bin Dropbox exeC Program Files Avira AntiVir Desktop avguard exeC Program Files Common Files Apple Mobile Device Support AppleMobileDeviceService exeC Program Files Bonjour mDNSResponder exeC WINDOWS system DVDRAMSV exeC Program Files Java jre bin jqs exeC Program Files Avira AntiVir Desktop avshadow exeC Program Files Common Files Intuit QuickBooks QBCFMonitorService exeC Program Files SafeConnect scManager sysC WINDOWS System svchost exe -k imgsvcC Program Files Common Files Ulead Systems DVD ULCDRSvr exeC Program Files Microsoft Office Office WINWORD EXEC WINDOWS system wuauclt exeC Program Files Mozilla Firefox firefox exeC Program Files Mozilla Firefox plugin-container exeC Documents and Settings Roman Local Settings Application Data Google Google Talk Plugin googletalkplugin exeC Program Files Mozilla Firefox plugin-container exeC WINDOWS system rundll exe Pseudo HJT Report uStart Page hxxp www centurytel net mDefault Search URL hxxp toolbar ask com toolbarv askRedirect o amp gct amp gc amp q uSearchURL Default hxxp toolbar ask com toolbarv askRedirect o amp gct amp gc amp q suURLSearchHooks DefaultSearchHook Class c e b- - a - b- b befc db - c program files asksearch bin DefaultSearch dllBHO Adobe PDF Reader Link Helper e f-c d - d -b d- b d be b - c program files common files adobe acrobat activex AcroIEHelper dllBHO Adobe PDF Link Helper df c-e ad- -a -fa c ebdc - c program files common files adobe acrobat activex AcroIEHelperShim dllBHO Groove GFS Browser Helper - c - d -b f - bbc d a e - c progra micros office GRA E DLLBHO Java Plug-In SSV Helper dbc -a - b-bc - c c c a - c program files java jre bin jp ssv dllBHO JQSIEStartDetectorImpl Class e e f - ce- c -bc -eabfe f c - c program files java jre lib deploy jqs ie jqs plugin dllEB - a - b-a - c a a - No FileuRun ... Read more

A:Google images not loading, google links redirecting

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will appear Click OKDeFogger may ask you to reboot the machine, if it does - click OKDo not re-enable these drivers until otherwise instructed.Download DDS:Please download DDS by sUBs from one of the links below and save it to your desktop:
Download DDS and save it to your desktop

Link1
Link2
Link3

Please disable any anti-malware program that will block scripts from running before running DDS.

Double-Click on dds.scr and a command window will appear. This is normal.Shortly after two logs will appear:
DDS.txt Attach.txtA window will open instructing you save & post the logsSave the logs to a convenient place such as your desktopCopy the contents of both logs & post in your next replyScan With RKUnHookerPlease Download Rootkit Unhooker Save it to your desktop.Now double-click on RKUnhookerLE.exe to run it.Click the Report tab, then click Scan.Check (Tick) Drivers, Stealth,. Uncheck the rest. then Click OK.Wait till the scanner has finished and then click File, Save Report.Save the report somewhere where you can find it. Click Close.Copy the entire contents of the report and paste it in a reply here.Note** you may get this warning it is ok, just ignore"Rootkit Unhooker has detected a parasite inside itself!It is recommended to remove parasite, okay?""just click on Cancel, then Accept".information and logs:In your next post I need the following

.logs from DDSlog from RKUnHookerlet me know of any problems you may have hadGringo

http://www.bleepingcomputer.com/forums/t/406665/google-images-not-loading-google-links-redirecting/
Relevancy 71.38%

hey i ve had this problem before on another computer but when i search on google and click a google searches redirecting,spam google in links link it redirects to spam idk what to do here s a logfile Logfile of Trend Micro HijackThis v Scan saved at PM on Platform Windows XP SP WinNT MSIE Internet Explorer v SP Boot mode Normal Running processes C WINDOWS System smss exe C WINDOWS system winlogon exe C WINDOWS system services google redirecting,spam links in google searches exe C WINDOWS system lsass exe C WINDOWS system svchost exe C WINDOWS System svchost exe C WINDOWS System WLTRYSVC EXE C WINDOWS System bcmwltry exe C WINDOWS system spoolsv exe C WINDOWS Explorer EXE C Program Files DellTPad Apoint exe C WINDOWS RTHDCPL EXE C WINDOWS system rundll exe C WINDOWS system google redirecting,spam links in google searches RUNDLL EXE C WINDOWS system WLTRAY exe C Program Files Dell Dell Webcam Manager DellWMgr exe C Program Files Dell QuickSet quickset exe C Program Files DellTPad ApMsgFwd exe C WINDOWS system ctfmon exe C Program Files DellTPad HidFind exe C Program Files DellTPad Apntex exe C Program Files Microsoft Office Office ONENOTEM EXE C WINDOWS system svchost exe C WINDOWS system svchost exe C Program Files Common Files Intuit Update Service IntuitUpdateService exe C WINDOWS System svchost exe C WINDOWS system nvsvc exe C WINDOWS system DRIVERS o flash exe C WINDOWS System svchost exe C Program Files Microsoft Search Enhancement Pack SeaPort SeaPort exe C WINDOWS system svchost exe C WINDOWS system SearchIndexer exe C WINDOWS system wuauclt exe C WINDOWS Microsoft NET Framework v mscorsvw exe C Program Files Mozilla Firefox firefox exe C Program Files Mozilla Firefox plugin-container exe C WINDOWS system SearchProtocolHost exe C Program Files Trend Micro HiJackThis HiJackThis exe R - HKCU Software Microsoft Internet Explorer Main Search Page http search live com R - HKCU Software Microsoft Internet Explorer Main Start Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Default Page URL http www dell com R - HKLM Software Microsoft Internet Explorer Main Start Page http www dell com R - HKLM Software Microsoft Internet Explorer Search SearchAssistant http search live com sphome aspx R - HKLM Software Microsoft Internet Explorer Search Default Page URL http g msn com USSMB R - HKCU Software Microsoft Internet Connection Wizard ShellNext http g msn com USSMB R - HKCU Software Microsoft Internet Explorer Main Window Title Windows Internet Explorer provided by Microsoft O - BHO no name - D -C F - efb- B - ECA - no file O - BHO HP Print Enhancer - C E- - -BF - C - C Program Files HP Digital Imaging Smart Web Printing hpswp printenhancer dll O - BHO AcroIEHelperStub - DF C-E AD- -A -FA C EBDC - c Program Files Common Files Adobe Acrobat ActiveX AcroIEHelperShim dll O - BHO Search Helper - EBF - F- bff-A F-B E AAC B - C Program Files Microsoft Search Enhancement Pack Search Helper SEPsearchhelperie dll O - BHO Windows Live Sign-in Helper - D - C - ABF- ECC- C - C Program Files Common Files Microsoft Shared Windows Live WindowsLiveLogin dll O - BHO SkypeIEPluginBHO - AE - E C- ED - F B-F F A - C Program Files Skype Toolbars Internet Explorer skypeieplugin dll O - BHO Java Plug-In SSV Helper - DBC -A - b-BC - C C C A - C Program Files Java jre bin jp ssv dll O - BHO JQSIEStartDetectorImpl - E E F - CE- C -BC -EABFE F C - C Program Files Java jre lib deploy jqs ie jqs plugin dll O - BHO HP Smart BHO Class - FFFFFFFF-CF E- F B-BDC - E E A - C Program Files HP Digital Imaging Smart Web Printing hpswp BHO dll O - HKLM Run Apoint C Program Files DellTPad Apoint exe O - HKLM Run RTHDCPL RTHDCPL EXE O - HKLM Run Alcmtr ALCMTR EXE O - HKLM Run NvCplDaemon RUNDLL EXE C WINDOWS system NvCpl dll NvStartup O - HKLM Run nwiz nwiz exe installquiet O - HKLM Run NVHotkey rundll exe nvHotkey dll Start O - HKLM Run NvMediaCenter RUNDLL EXE C WINDOWS system NvMcTray dll NvTaskbarInit O - HKLM Run Broadcom Wir... Read more

A:google redirecting,spam links in google searches

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Please take note:If you have since resolved the original problem you were having, we would appreciate you letting us know. If you are unable to create a log because your computer cannot start up successfully please provide detailed information about your installed Windows Operating System including the Version, Edition and if it is a 32bit or a 64bit system.
If you are unsure about any of these characteristics just post what you can and we will guide you.Please tell us if you have your original Windows CD/DVD available.If you are unable to perform the steps we have recommended please try one more time and if unsuccessful alert us of such and we will design an alternate means of obtaining the necessary information.If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review your topic an do their best to resolve your issues.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.We need to see some information about what is happening in your machine. Please perform the following scan again:Download DDS by sUBs from one of the following links if you no longer have it available. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explanation about the tool. No input is needed, the scan is running.Notepad will open with the results.Follow the instructions that pop up for posting the results.Close the program window, and delete the program from your desktop.Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet. Information on A/V control HEREWe also need a new log from the GMER anti-rootkit Scanner. Please note that if you are running a 64-bit version of Windows you will not be able to run GMER and you may skip this step. Then proceed to run aswMbr.exe as noted below.Please first disable any CD emulation programs using the steps found in this topic:Why we request you disable CD Emulation when receiving Malware Removal AdviceThen create another GMER log and post it as an attachment to the reply where you post your new DDS log. Instructions on how to properly create a GMER log can be found here:How to create a GMER logNote:If you are unable to run a Gmer scan due the fact you are running a 64bit machine please run the following tool and post its log.Please download aswMBR ( 511KB ) to your desktop.Double click the aswMBR.exe icon to run itClick the Scan button to start the scanOn completion of the scan, click the save log button, save it to your desktop and post it in your next reply.Thanks and again sorry for the delay.

http://www.bleepingcomputer.com/forums/t/417444/google-redirectingspam-links-in-google-searches/
Relevancy 70.09%

I use a lot of Google's services but lately whenever I try to use search the links redirect and if I try to actually log in to any of their sites I get a white screen that says

"Not Found

The requested URL /accounts/ServiceLogin was not found on this server.
---------------------------------------------------------------
Apache/2.2.3 (CentOS) Server at www.google.com Port 443"

A friend told me to use HijackThis which also lead me to this forum. Please let me know what if any log(s) you need and any help you can give me will be GREATLY appreciated!

A:Google links redirecting; cannot log in to any Google sites

Hello,Please follow the instructions in ==>This Guide<== starting at step 6. If you cannot complete a step, skip it and continue.Once the proper logs are created, then post them in a reply to this topic by using the Add Reply button.If you can produce at least some of the logs, then please create the post and explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the reply and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.Please note that I am not a member of the Malware Removal Team and will not be assisting you in removing the infection. I'm simply helping you to post the information they need in order to assist you.If HelpBot replies to your topic, PLEASE follow Step One so it will report your topic to the team members.Orange Blossom

http://www.bleepingcomputer.com/forums/t/414645/google-links-redirecting;-cannot-log-in-to-any-google-sites/
Relevancy 70.09%

So this started about two weeks ago All the links on the google site kept going to another place here is the hijackthis log Scan saved at PM on Platform Windows Vista SP WinNT MSIE Internet Explorer v Boot mode Normal Running processes C Windows system Dwm exe C Windows system taskeng exe C Windows Explorer EXE C Windows System mobsync exe C Program Files Windows Defender MSASCui exe C hp support hpsysdrv exe C Program Files Hewlett-Packard On-Screen OSD Indicator OSD Google links redirecting exe C Windows RtHDVCpl exe C Program Files Common Files Symantec Shared ccApp exe C Program Files Java jre bin jusched exe C Program Files Microsoft Xbox Accessories XBoxStat exe C Program Files Zune ZuneLauncher exe C Windows System hkcmd exe C Windows Google links redirecting System igfxpers exe C Program Files HP HP Software Update hpwuSchd exe C Program Files iTunes Google links redirecting iTunesHelper exe C Windows system igfxsrvc exe C Program Files Lavasoft Ad-Aware AAWTray exe C Program Files Windows Sidebar sidebar exe C Windows ehome ehtray exe C Program Files Air Mouse Air Mouse Air Mouse exe C Program Files Windows Media Player wmpnscfg exe C Windows system wbem unsecapp exe C Windows ehome ehmsas exe C hp kbd kbd exe C Windows system taskeng exe C Program Files Internet Explorer ieuser exe C Program Files Internet Explorer iexplore exe C Program Files Trend Micro HijackThis HijackThis exe R - HKCU Software Google links redirecting Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Default Page URL http ie redirect hp com svs rdr TYPE amp tp iehome amp locale EN US amp c amp bd Pavilion amp pf desktop R - HKLM Software Microsoft Internet Explorer Main Default Search URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Start Page http ie redirect hp com svs rdr TYPE amp tp iehome amp locale EN US amp c amp bd Pavilion amp pf desktop R - HKLM Software Microsoft Internet Explorer Search SearchAssistant R - HKLM Software Microsoft Internet Explorer Search CustomizeSearch R - HKCU Software Microsoft Windows CurrentVersion Internet Settings ProxyOverride local R - HKCU Software Microsoft Internet Explorer Toolbar LinksFolderName O - Hosts localhost O - BHO Adobe PDF Reader Link Helper - E F-C D - D -B D- B D BE B - C Program Files Common Files Adobe Acrobat ActiveX AcroIEHelper dll O - BHO no name - E A - - D F-BEAE-D A C - c Program Files Common Files Symantec Shared coShared Browser NppBho dll O - BHO Java tm Plug-In SSV Helper - BB-D F - C-B EB-D DAF D D - C Program Files Java jre bin ssv dll O - BHO no name - E D - A- EC-A -BA D E E - no file O - BHO Java tm Plug-In SSV Helper - DBC -A - b-BC - C C C A - C Program Files Java jre bin jp ssv dll O - Toolbar Show Norton Toolbar - -F - -B -FBEE C B DF - c Program Files Common Files Symantec Shared coShared Browser UIBHO dll O - HKLM Run Windows Defender ProgramFiles Windows Defender MSASCui exe -hide O - HKLM Run hpsysdrv c hp support hpsysdrv exe O - HKLM Run KBD C HP KBD KbdStub EXE O - HKLM Run OsdMaestro quot C Program Files Hewlett-Packard On-Screen OSD Indicator OSD exe quot O - HKLM Run RtHDVCpl RtHDVCpl exe O - HKLM Run CCUTRAYICON FactoryMode O - HKLM Run SnapfishMediaDetector C Program Files Snapfish Media Detector SnapfishMediaDetector exe O - HKLM Run ccApp quot c Program Files Common Files Symantec Shared ccApp exe quot O - HKLM Run SunJavaUpdateSched quot C Program Files Java jre bin jusched exe quot O - HKLM Run Symantec PIF AlertEng quot C Program Files Common Files Symantec Shared PIF B E DD - - c -B F- F FCA A PIFSvc exe quot a m quot C Program Files Common Files Symantec Shared PIF B E DD - - c -B F- F FCA A AlertEng dll quot O - HKLM Run XboxStat quot C Program Files Microsoft Xbox Accessories XboxStat exe quot silentrun O - HKLM Run Zune Launcher ... Read more

Relevancy 70.09%

Most of the time when i click on a Google search it redirects me to some random site and i links redirecting Google have to keep hitting back Google links redirecting and clicking the link until i get the right page I've ran a scan with Malwarebytes Antimalware and Spybot S amp D with no luck here is my Hijackthis log please help Logfile of Trend Micro HijackThis v Scan saved at PM on Platform Windows XP SP WinNT MSIE Internet Explorer v Boot mode Normal Running processes C WINDOWS System smss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS system Ati evxx exe C WINDOWS system svchost exe C Program Files Windows Defender MsMpEng exe C WINDOWS System svchost exe C WINDOWS system spoolsv exe C WINDOWS system acs exe C Program Files Common Files Acronis Schedule schedul exe C Program Files Common Files Apple Mobile Device Support AppleMobileDeviceService exe C Program Files Bonjour mDNSResponder exe C Program Files TOSHIBA ConfigFree CFSvcs exe C WINDOWS system DVDRAMSV exe C WINDOWS System svchost exe C Program Files Java jre bin jqs exe C Program Files McAfee SiteAdvisor McSACore exe C PROGRA McAfee MSC mcmscsvc exe c PROGRA COMMON mcafee mna mcnasvc exe c PROGRA COMMON mcafee mcproxy mcproxy exe C PROGRA McAfee VIRUSS mcshield exe C Program Files McAfee MPF MPFSrv exe C WINDOWS system PnkBstrA exe C WINDOWS system Ati evxx exe C WINDOWS Explorer EXE C WINDOWS system PnkBstrB exe c PROGRA mcafee com agent mcagent exe C WINDOWS system svchost exe c TOSHIBA IVP swupdate swupdtmr exe C Program Files TOSHIBA TOSHIBA Applet TAPPSRV exe C Program Files ATI Technologies ATI Control Panel atiptaxx exe C Program Files Toshiba Toshiba Applet thotkey exe C Program Files Synaptics SynTP SynTPEnh exe C Program Files ltmoh Ltmoh exe C WINDOWS AGRSMMSG exe C Program Files TOSHIBA ConfigFree NDSTray exe C WINDOWS system TPSMain exe C Program Files Synaptics SynTP Toshiba exe C Program Files TOSHIBA Touch and Launch PadExe exe C Program Files TOSHIBA TOSHIBA Zooming Utility SmoothView exe C WINDOWS system dla DLACTRLW exe C toshiba ivp ism pinger exe C Program Files Toshiba Tvs TvsTray exe C Program Files TOSHIBA TOSHIBA Controls TFncKy exe C WINDOWS system TPSBattM exe C WINDOWS system TDispVol exe C WINDOWS RTHDCPL EXE C Program Files Acronis TrueImageEchoWorkstation TrueImageMonitor exe C Program Files Acronis TrueImageEchoWorkstation TimounterMonitor exe C Program Files Common Files Acronis Schedule schedhlp exe C Program Files Windows Defender MSASCui exe C Program Files Common Files InstallShield UpdateService issch exe C WINDOWS system taskswitch exe C Program Files QuickTime QTTask exe C Program Files Common Files Java Java Update jusched exe C Program Files iTunes iTunesHelper exe C Program Files DivX DivX Update DivXUpdate exe C Program Files TOSHIBA TOSCDSPD toscdspd exe C WINDOWS system ctfmon exe C Program Files Spybot - Search amp Destroy TeaTimer exe C PROGRA McAfee VIRUSS mcsysmon exe C Program Files Free Desktop Clock DesktopClock exe C Program Files Windows Media Player WMPNSCFG exe C WINDOWS system RAMASST exe C Program Files iPod bin iPodService exe C Program Files Software by Design Calendar exe C Documents and Settings user Application Data Dropbox bin Dropbox exe C Program Files Mozilla Firefox firefox exe C Program Files OpenOffice org program soffice exe C Program Files OpenOffice org program soffice bin C Program Files Windows Live Messenger msnmsgr exe C Program Files Windows Live Contacts wlcomm exe C WINDOWS system msiexec exe C Program Files Trend Micro HiJackThis HiJackThis exe R - HKCU Software Microsoft Internet Explorer Main Default Page URL http att net R - HKCU Software Microsoft Internet Explorer Main Start Page http att net R - HKLM Software Microsoft Internet Explorer Main Default Page URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Default Search URL http go microsoft com fwlink LinkId R - HKLM Software Microso... Read more

A:Google links redirecting

Please click on the following link to produce the requested logs and start a new thread in the Virus/Trojan/Spyware Help section, NOT BACK HERE. If you still require assistance AFTER your logs are declared clean please post back here.

Click here >>>>> First Steps

Follow the instructions carefully. If you cannot complete any of the steps, go on to the next but don't forget to mention your problem to the analyst.

You will need to be patient as this section is usually very busy but a security analyst will be along to assist you as soon as one is available.

http://www.techsupportforum.com/forums/f10/google-links-redirecting-491427.html
Relevancy 70.09%

Every time I click on a Google link, it keeps redirecting to random links, and my antivirus isn't picking it up. What should I do?

A:Google links redirecting

Moved from HJT to a more appropriate forum. Tw

http://www.bleepingcomputer.com/forums/t/255615/google-links-redirecting/
Relevancy 70.09%

I clicked on a shady website by accident on Google last night and my whole adress bar turned red and it said this was not a secure site I exited out right away and did not download anything either Then after that when I Links Google! Is Redirecting Something On clicked on links from Google it redirected me several times in a few seconds and finally loaded Something Is Redirecting Links On Google! to some random website I have been advised to get Malwarebytes and do a quick scan Which I did st off It found trojans which were quarenteened and then I deleted them After I was prompted to restart my computer and I did Then I did a full scan with Malwarebytes and another scan with my Trend Microvirus Both of those scans showed nothing I have also cleared my cookies and temporary internet files I am still having it redirect majority of the time though not always What else do I need to do I am no computer expert so you may walk me through step by step

A:Something Is Redirecting Links On Google!

Hello and welcome to TSF

We want all our members to perform the steps outlined in the link I'll give you below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

---------------------------------------------------------------------------------------------

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

http://www.techsupportforum.com/forums/f50/something-is-redirecting-links-on-google-385475.html
Relevancy 70.09%

my google links are redirecting me to strange and different pages have no clue why as this just started basically overnight i have included my hijacklog and hopes someone can give me a solution Logfile of Trend Micro HijackThis v Scan saved at AM on Platform Windows Vista SP WinNT MSIE Internet Explorer v Boot mode Normal Running processes C Windows system Dwm exe C Windows system taskeng exe C Windows Explorer EXE C Windows System rundll exe C Program Files Synaptics SynTP SynTPEnh exe C Program Files IDT WDM sttray exe C Program Files Intel Intel Matrix Storage Manager IAAnotif exe C Program Files HP QuickPlay QPService exe C Program Files Hewlett-Packard HP my google redirecting links :S Quick Launch Buttons QLBCTRL exe C Program Files Hewlett-Packard HP QuickTouch HPKBDAPP exe C Program Files HP Digital Imaging bin HpqSRmon exe C Program Files HP HP Software Update hpwuSchd exe C Program Files Hewlett-Packard HP Wireless Assistant HPWAMain exe C Program Files Common Files Symantec Shared ccSvcHst exe C Program Files iTunes iTunesHelper exe C Program Files Java jre bin jusched exe C Program Files Lavasoft Ad-Aware AAWTray exe C Program Files Common Files LightScribe LightScribeControlPanel exe C Windows ehome ehtray exe C Program Files Common Files Nero Lib google redirecting my links :S NMIndexStoreSvr exe C Program Files Windows Media Player wmpnscfg exe C Windows System Updater exe C Windows ehome ehmsas exe C Program Files Mozilla Firefox firefox exe C Program Files Synaptics SynTP SynTPHelper exe C Windows system wbem unsecapp exe C Program Files Hewlett-Packard HP wireless Assistant WiFiMsg EXE C Program Files Hewlett-Packard Shared HpqToaster exe C Program Files Mozilla Thunderbird thunderbird exe C Users Glen Downloads HiJackThis exe R - HKCU Software Microsoft Internet Explorer Main Default Page URL http ie redirect hp com svs rdr TYPE amp tp iehome amp locale en au amp c amp bd Pavilion amp pf cnnb R - HKCU Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKCU Software Microsoft Internet Explorer Main Start Page http ie redirect hp com svs rdr TYPE amp tp iehome amp locale en au amp c amp bd Pavilion amp pf cnnb R - HKLM Software Microsoft Internet Explorer Main Default Page URL http ie redirect hp com svs rdr TYPE amp tp iehome amp locale en au amp c amp bd Pavilion amp pf cnnb R - HKLM Software Microsoft Internet Explorer Main Default Search URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Start Page http ie redirect hp com svs rdr TYPE amp tp iehome amp locale en au amp c amp bd Pavilion amp pf cnnb R - HKLM Software Microsoft Internet Explorer Search SearchAssistant R - HKLM Software Microsoft Internet Explorer Search CustomizeSearch R - HKCU Software Microsoft Windows CurrentVersion Internet Settings ProxyOverride local R - HKCU Software Microsoft Internet Explorer Toolbar LinksFolderName O - Hosts localhost O - BHO Adobe PDF Reader Link Helper - E F-C D - D -B D- B D BE B - C Program Files Common Files Adobe Acrobat ActiveX AcroIEHelper dll O - BHO Skype add-on mastermind - BF B-C D - d - A -A F BA C - C Program Files Skype Toolbars Internet Explorer SkypeIEPlugin dll O - BHO no name - C C A-E - b - D - CECB - no file O - BHO NCO IE BHO - ADB E- AFF- - AA - DAC DFA - C Program Files Common Files Symantec Shared coShared Browser coIEPlg dll O - BHO Symantec Intrusion Prevention - D EC - AAE- -AEEE-F F C - C PROGRA COMMON SYMANT IDS IPSBHO dll O - BHO Groove GFS Browser Helper - - C - D -B F - BBC D A E - C Program Files Microsoft Office Office GrooveShellExtensions dll O - BHO Windows Live Sign-in Helper - D - C - ABF- ECC- C - C Program Files Common Files Microsoft Shared Windows Live WindowsLiveLogin dll O - BHO Java tm Plug-In SSV Helper - DBC -A - b-BC - C C C A - C Program Files Java jre bin jp ssv dll O - Toolbar Show No... Read more

Relevancy 70.09%

DDS did not produce a pop-up so i used hjt hope this is ok Logfile of Trend Micro HijackThis v Scan saved at PM on Platform Windows XP SP WinNT MSIE Internet Explorer v Boot mode google redirecting links NormalRunning processes C WINDOWS System smss exeC WINDOWS system winlogon exeC WINDOWS system services exeC WINDOWS system lsass exeC WINDOWS system svchost exeC WINDOWS google links redirecting system svchost exeC WINDOWS Explorer EXEC WINDOWS system spoolsv exeC Program Files Common Files Acronis Schedule schedul exeC Program Files Common Files Apple Mobile Device Support bin AppleMobileDeviceService exeC Program Files Bonjour mDNSResponder exeC WINDOWS system svchost exeC WINDOWS system lxdccoms exeC Program Files Common Files Microsoft Shared VS Debug mdm exeC Program Files Common Files New Boundary PrismXL PRISMXL SYSC WINDOWS system svchost exeC Program Files RealVNC VNC WinVNC exeC WINDOWS system Fast exeC Program Files Lexmark Series lxdcamon exeC Program Files iTunes iTunesHelper exeC Program Files Acronis TrueImageHome TrueImageMonitor exeC Program Files Acronis TrueImageHome TimounterMonitor exeC Program Files Common Files Acronis Schedule schedhlp exeC Program Files Digital Media Reader shwiconem exeC Program Files Microsoft IntelliPoint ipoint exeC WINDOWS system hkcmd exeC CTF ctfmon exeC WINDOWS system ctfmon exeC WINDOWS zHotkey exeC Program Files Weather Watcher Live ww exeC Program Files iPod bin iPodService exeC WINDOWS System svchost exeC Program Files Lavasoft Ad-Aware aawservice google links redirecting exeC Program Files Internet Explorer iexplore exeC Documents and Settings Owner Desktop dds scrC WINDOWS system cmd exeC Program Files Trend google links redirecting Micro HijackThis HijackThis exeR - HKLM Software Microsoft Internet Explorer Main Default Page URL http go microsoft com fwlink LinkId R - HKCU Software Microsoft Internet Connection Wizard ShellNext http www emachines com R - HKCU Software Microsoft Windows CurrentVersion Internet Settings ProxyOverride localO - BHO C WINDOWS system gsf iujid dll - D AB A - F - BD-F - BBC C - C WINDOWS system gsf iujid dllO - Toolbar Adobe PDF - -D C - - FA - E EAAC - C Program Files Adobe Acrobat Acrobat AcroIEFavClient dllO - HKLM Run KernelFaultCheck systemroot system dumprep -kO - HKLM Run lxdcmon exe quot C Program Files Lexmark Series lxdcmon exe quot O - HKLM Run lxdcamon quot C Program Files Lexmark Series lxdcamon exe quot O - HKLM Run QuickTime Task quot C Program Files QuickTime qttask exe quot -atboottimeO - HKLM Run iTunesHelper quot C Program Files iTunes iTunesHelper exe quot O - HKLM Run TrueImageMonitor exe C Program Files Acronis TrueImageHome TrueImageMonitor exeO - HKLM Run AcronisTimounterMonitor C Program Files Acronis TrueImageHome TimounterMonitor exeO - HKLM Run Acronis Scheduler Service quot C Program Files Common Files Acronis Schedule schedhlp exe quot O - HKLM Run SunKistEM C Program Files Digital Media Reader shwiconem exeO - HKLM Run IntelliPoint quot C Program Files Microsoft IntelliPoint ipoint exe quot O - HKLM Run HotKeysCmds C WINDOWS system hkcmd exeO - HKLM Run CTFMon C CTF ctfmon exeO - HKLM Run CoolSwitch C WINDOWS system taskswitch exeO - HKLM Run CHotkey zHotkey exeO - HKLM Run MSConfig C WINDOWS PCHealth HelpCtr Binaries MSConfig exe autoO - HKCU Run ctfmon exe C WINDOWS system ctfmon exeO - HKCU Run WeatherWatcherLive quot C Program Files Weather Watcher Live ww exe quot O - Global Startup NETGEAR WG v Smart Wizard lnk C Program Files NETGEAR WG v WG v exeO - Extra context menu item amp AOL Toolbar search - res C Program Files AOL Toolbar toolbar dll SEARCH HTMLO - Extra context menu item Convert link target to Adobe PDF - res C Program Files Adobe Acrobat Acrobat AcroIEFavClient dll AcroIECapture htmlO - Extra context menu item Convert link target to existing PDF - res C Program Files Adobe Acrobat Acrobat AcroIEFavClient dll AcroIEAppend htmlO - Extra context menu item Convert selected links to Adobe PDF - res C ... Read more

Relevancy 70.09%

Hey Google redirecting links. Guys Im new around this so be nice I got the same problem as many othersm I Google redirecting links. understand And I found out that it is specific to any comp what to do So i just wanted a little help Google redirects me to google and other sites mostly to google it self I cant see to find what ells has changes but just ask if you want to know more Here is my Log Logfile of Trend Micro HijackThis v Scan saved at on - - Platform Windows XP SP WinNT MSIE Internet Explorer v Boot mode Normal Running processes C WINDOWS System smss exe C WINDOWS system csrss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS system Ati evxx exe C WINDOWS system svchost exe C WINDOWS system svchost exe C WINDOWS System svchost exe C WINDOWS system svchost exe C WINDOWS system svchost exe C Programmer F lles filer Symantec Shared ccSvcHst exe C WINDOWS system Ati evxx exe C WINDOWS system LEXBCES EXE C WINDOWS system LEXPPS EXE C WINDOWS system spoolsv exe C WINDOWS Explorer EXE C Programmer Microsoft IntelliType Pro type exe C Programmer Microsoft IntelliPoint point exe C Programmer F lles filer Symantec Shared ccSvcHst exe C WINDOWS system svchost exe C Programmer Symantec LiveUpdate AluSchedulerSvc exe C WINDOWS system CTsvcCDA EXE C WINDOWS System svchost exe D Programmer Java jre bin jusched exe C WINDOWS system ctfmon exe C Programmer Windows Media Player WMPNSCFG exe C WINDOWS system svchost exe C WINDOWS System alg exe C PROGRA FLLESF SYMANT CCPD-LC symlcsvc exe C Programmer F lles filer Symantec Shared VAScanner comHost exe C Programmer Google Update GoogleUpdate exe C Programmer Internet Explorer iexplore exe C WINDOWS Microsoft NET Framework v Windows Communication Foundation infocard exe C Programmer Windows Live Messenger msnmsgr exe C Programmer Windows Live Contacts wlcomm exe C Programmer Trend Micro HijackThis HijackThis exe C WINDOWS system wbem wmiprvse exe R - HKCU Software Microsoft Internet Explorer Main Start Page http www google dk R - HKLM Software Microsoft Internet Explorer Main Default Page URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Default Search URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Start Page http go microsoft com fwlink LinkId R - HKCU Software Microsoft Internet Explorer Toolbar LinksFolderName Hyperlinks O - BHO AcroIEHelperStub - DF C-E AD- -A -FA C EBDC - C Programmer F lles filer Adobe Acrobat ActiveX AcroIEHelperShim dll O - BHO Java tm Plug-In SSV Helper - BB-D F - C-B EB-D DAF D D - D Programmer Java jre bin ssv dll O - BHO no name - E D - A- EC-A -BA D E E - no file O - BHO Windows Live Sign-in Helper - D - C - ABF- ECC- C - C Programmer F lles filer Microsoft Shared Windows Live WindowsLiveLogin dll O - BHO Java tm Plug-In SSV Helper - DBC -A - b-BC - C C C A - D Programmer Java jre bin jp ssv dll O - BHO JQSIEStartDetectorImpl - E E F - CE- C -BC -EABFE F C - D Programmer Java jre lib deploy jqs ie jqs plugin dll O - Toolbar Winamp Toolbar - EBF BA - - c a- B-BB F D DE - no file O - Toolbar Show Norton Toolbar - FEBEFE - B - - D -FFB D B CA - C Programmer F lles filer Symantec Shared coShared Browser CoIEPlg dll O - HKLM Run AtiPTA atiptaxx exe O - HKLM Run Resume copy copyfstq exe startup O - HKLM Run RTHDCPL RTHDCPL EXE O - HKLM Run type quot C Programmer Microsoft IntelliType Pro type exe quot O - HKLM Run IntelliPoint quot C Programmer Microsoft IntelliPoint point exe quot O - HKLM Run ISUSScheduler quot C Programmer F lles filer InstallShield UpdateService issch exe quot -start O - HKLM Run ccApp quot C Programmer F lles filer Symantec Shared ccApp exe quot O - HKLM Run osCheck quot D Programmer osCheck exe quot O - HKLM Run StartCCC quot C Programmer ATI Technologies ATI ACE Core-Static CLIStart exe quot MSRun O - HKLM Run Q... Read more

A:Google redirecting links.

Oh, yeah. I get a lot of anoying pop ups..
 

https://forums.techguy.org/threads/google-redirecting-links.811868/
Relevancy 70.09%

i have been look at a computer redirecting Links Google with the common hijacked links problem i have run hijack this log below i have also run a number of anti virus malware scan from i think all the usual recommended products i would consider myself an advanced user been Senior Network Systems engineer for the last years and have never been stumped by a virus before so help would be REALLY appreciated here hijack this log Logfile of Trend Micro Google Links redirecting HijackThis v Scan saved at on Platform Windows WinNT MSIE Internet Explorer v Boot mode Normal Running processes C Program Files x Intel Intel reg Rapid Storage Technology IAStorIcon exe C Program Files x SONY ISB Utility ISBMgr exe C Program Files x SONY PMB PMBVolumeWatcher exe C Program Files x SONY Marketing Tools MarketingTools exe C Program Files x HP HP Software Update hpwuSchd exe C Program Files x iTunes iTunesHelper exe C Program Files x TalkTalk Security Common FSM EXE C Program Files x HP Digital Imaging bin hpqtra exe C Program Files x Common Files Adobe ARM AdobeARM exe C Program Files x HP Digital Imaging bin hpqSTE exe C Program Files x HP Digital Imaging bin hpqbam exe C Program Files x HP Digital Imaging bin hpqgpc exe Google Links redirecting C Program Files WIDCOMM Bluetooth Software BluetoothHeadsetProxy exe C Program Files x Lavasoft Ad-Aware AAWTray exe C Windows SysWow Macromed Flash FlashUtil c exe C Program Files x Internet Explorer IELowutil exe C Program Files x Internet Explorer iexplore exe C Program Files x Internet Explorer iexplore exe C Users gem amp shaun Downloads HijackThis exe C Program Files x Internet Explorer iexplore exe C Program Files x Internet Explorer iexplore exe R - HKCU Software Microsoft Internet Explorer Main Search Bar Preserve R - HKCU Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKCU Software Microsoft Internet Explorer Main Start Page http www google co uk ig R - HKLM Software Microsoft Internet Explorer Main Default Page URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Default Search URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Start Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Search SearchAssistant R - HKLM Software Microsoft Internet Explorer Search CustomizeSearch R - HKLM Software Microsoft Internet Explorer Main Local Page C Windows SysWOW blank htm R - HKCU Software Microsoft Windows CurrentVersion Internet Settings ProxyOverride local R - HKCU Software Microsoft Internet Explorer Toolbar LinksFolderName F - REG system ini UserInit userinit exe O - BHO amp Yahoo Toolbar Helper - D -C F - efb- B - ECA - C Program Files x Yahoo Companion Installs cpn yt dll O - BHO HP Print Enhancer - C E- - -BF - C - C Program Files x HP Digital Imaging Smart Web Printing hpswp printenhancer dll O - BHO AcroIEHelperStub - DF C-E AD- -A -FA C EBDC - C Program Files x Common Files Adobe Acrobat ActiveX AcroIEHelperShim dll O - BHO Windows Live ID Sign-in Helper - D - C - ABF- ECC- C - C Program Files x Common Files Microsoft Shared Windows Live WindowsLiveLogin dll O - BHO LitmusBHO - C EB - - - F- CF AE DC C - C Program Files x TalkTalk Security NRS iescript baselitmus dll O - BHO Java Plug-In SSV Helper - DBC -A - b-BC - C C C A - C Program Files x Java jre bin jp ssv dll file missing O - BHO QuickNet - EA CA B - B C- -A A - B C BE - C Program Files x RegTweaker key dll file missing O - BHO SingleInstance Class - FDAD DA - A - FD - C - F AC - C Program Files x Yahoo Companion Installs cpn YTSingleInstance dll O - BHO HP Smart BHO Class - FFFFFFFF-CF E- F B-BDC - E E A - C Program Files x HP Digital Imaging Smart Web Printing hpswp BHO dll O - Toolbar Yahoo Toolbar - EF BD -C FB- D - F- D F - C Program Files x Yahoo Companion Installs cpn yt d... Read more

A:Google Links redirecting

Hello , And to the Bleeping Computer Malware Removal Forum. My name is Elise and I'll be glad to help you with your computer problems.I will be working on your malware issues, this may or may not solve other issues you may have with your machine.Please note that whatever repairs we make, are for fixing your computer problems only and by no means should be used on another computer.The cleaning process is not instant. Logs can take some time to research, so please be patient with me. I know that you need your computer working as quickly as possible, and I will work hard to help see that happen. Please reply using the Add/Reply button in the lower right hand corner of your screen. Do not start a new topic. The logs that you post should be pasted directly into the reply. Only attach them if requested or if they do not fit into the post.Unfortunately, if I do not hear back from you within 5 days, I will be forced to close your topic. If you still need help after I have closed your topic, send me or a moderator a personal message with the address of the thread or feel free to create a new one.You may want to keep the link to this topic in your favorites. Alternatively, you can click the button at the top bar of this topic and Track this Topic, where you can choose email notifications. The topics you are tracking are shown here.-----------------------------------------------------------If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.If you have already posted a log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Follow the instructions that pop up for posting the results.Close the program window, and delete the program from your desktop.Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet. Information on A/V control HERE-------------------------------------------------------------In the meantime please, do NOT install any new programs or update anything unless told to do so while we are fixing your problemIf you still need help, please include the following in your next replyA detailed description of your problemsA new DDS log (don't forget attach.txt)Thanks and again sorry for the delay.

http://www.bleepingcomputer.com/forums/t/390850/google-links-redirecting/
Relevancy 70.09%

Hi are Redirecting Google Links I notice that a whole Google Links are Redirecting bunch of people have the same problem and I was hoping you could help I have run malwarebytes full system scan and no malware was found Here is my hijackthis log Logfile of Trend Micro HijackThis v Scan saved at PM on Google Links are Redirecting Platform Windows XP SP WinNT MSIE Internet Explorer v Boot mode Normal Running processes C WINDOWS System smss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C Google Links are Redirecting WINDOWS system svchost exe C WINDOWS System svchost exe C WINDOWS system spoolsv exe C WINDOWS system svchost exe C Program Files Common Files Mcafee McSvcHost McSvHost exe C Program Files Common Files McAfee SystemCore mfevtps exe C WINDOWS System svchost exe C WINDOWS System svchost exe C WINDOWS system svchost exe C Program Files Common Files McAfee SystemCore mcshield exe C Program Files Common Files McAfee SystemCore mfefire exe C WINDOWS Explorer EXE C WINDOWS system rundll exe C Program Files McAfee com Agent mcagent exe C Program Files Mozilla Firefox firefox exe C WINDOWS system ctfmon exe C Documents and Settings Norma My Documents Downloads HiJackThis exe R - HKCU Software Microsoft Internet Explorer Main Search Bar http my juno com s search r minisearch R - HKCU Software Microsoft Internet Explorer Main Search Page http my juno com s search r minisearch R - HKCU Software Microsoft Internet Explorer Main Start Page http www ask com o amp l dis R - HKLM Software Microsoft Internet Explorer Main Default Page URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Default Search URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Start Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Search SearchAssistant http my juno com s search r minisearch R - HKCU Software Microsoft Internet Explorer SearchURL Default http my juno com s search r minisearch R - URLSearchHook UrlSearchHook Class - - E - FD - - F E FC - C Program Files Ask com GenericAskToolbar dll O - Hosts localhost O - BHO no name - D -C F - efb- B - ECA - no file O - BHO HP Print Enhancer - C E- - -BF - C - C Program Files HP Digital Imaging Smart Web Printing hpswp printenhancer dll O - BHO Adobe PDF Reader Link Helper - E F-C D - D -B D- B D BE B - C Program Files Common Files Adobe Acrobat ActiveX AcroIEHelper dll O - BHO SSVHelper Class - BB-D F - C-B EB-D DAF D D - C Program Files Java jre bin ssv dll O - BHO AOL Toolbar BHO - C - CB - A -B F - EA C F - C Program Files AOL AOL Toolbar aoltb dll O - BHO scriptproxy - DB D A - - E -B D- F C - C Program Files Common Files McAfee SystemCore ScriptSn dll O - BHO McAfee SiteAdvisor BHO - B E -A B - A -B - CD E A FF - c PROGRA mcafee siteadvisor mcieplg dll O - BHO Ask Toolbar BHO - D C F- A- -A AD- D - C Program Files Ask com GenericAskToolbar dll O - BHO HP Smart BHO Class - FFFFFFFF-CF E- F B-BDC - E E A - C Program Files HP Digital Imaging Smart Web Printing hpswp BHO dll O - Toolbar AOL Toolbar - DE C F- - A - B-AA ED D - C Program Files AOL AOL Toolbar aoltb dll O - Toolbar McAfee SiteAdvisor Toolbar - EBBBE -BAD - B C- E A- ABECAE - c PROGRA mcafee siteadvisor mcieplg dll O - Toolbar Ask Toolbar - D C F- A- -A AD- D - C Program Files Ask com GenericAskToolbar dll O - HKLM Run mcui exe quot C Program Files McAfee com Agent mcagent exe quot runkey O - HKCU Run ctfmon exe C WINDOWS system ctfmon exe O - Extra context menu item amp AOL Toolbar Search - C Documents and Settings All Users Application Data AOL ieToolbar resources en-US local search html O - Extra button no name - B E C - FCB- CF-AAA - C - C Program Files Java jre bin ssv dll O - Extra Tools menuitem Sun Java Console - B E C - FCB- CF-AAA - C - C Program Files Java jre bin ssv dll O - Extr... Read more

Relevancy 70.09%

Google lets me do a search, but when I click on the links it redirects me to ad sites and different search sites. I've also been getting redirected to a site that says I'v won an free Apple IPad. Sometimes my Internet Explorer says "Internet Explorer has stopped working and then reboots, but then it happens again right away and so on until I shut IE down. I've also been getting some pop up ads from time to time. Please help. I have AVG2011 and nothing is shown on the scans.

A:Google Links Redirecting

Hello and welcome. Please do these.post the logs and tell me how it is now.Please download the TDSS Rootkit Removing Tool (TDSSKiller.exe) and save it to your Desktop. <-Important!!!Be sure to download TDSSKiller.exe (v2.4.0.0) from Kaspersky's website and not TDSSKiller.zip which appears to be an older version 2.3.2.2 of the tool.Double-click on TDSSKiller.exe to run the tool for known TDSS variants.
Vista/Windows 7 users right-click and select Run As Administrator.If TDSSKiller does not run, try renaming it. To do this, right-click on TDSSKiller.exe, select Rename and give it a random name with the .com file extension (i.e. 123abc.com). If you do not see the file extension, please refer to How to change the file extension.Click the Start Scan button.Do not use the computer during the scanIf the scan completes with nothing found, click Close to exit.If malicious objects are found, they will show in the Scan results - Select action for found objects and offer three options.Ensure Cure (default) is selected, then click Continue > Reboot now to finish the cleaning process.A log file named TDSSKiller_version_date_time_log.txt (i.e. TDSSKiller.2.4.0.0_27.07.2010_09.o7.26_log.txt) will be created and saved to the root directory (usually Local Disk C:).Copy and paste the contents of that file in your next reply.TFC by OT (Temp File Cleaner)Please download TFC by Old Timer and save it to your desktop. alternate download linkSave any unsaved work. TFC will close ALL open programs including your browser! Double-click on TFC.exe to run it. If you are using Vista, right-click on the file and choose Run As Administrator. Click the Start button to begin the cleaning process and let it run uninterrupted to completion. Important! If TFC prompts you to reboot, please do so immediately. If not prompted, manually reboot the machine anyway to ensure a complete clean.Next run MBAM (MalwareBytes):Please download Malwarebytes Anti-Malware and save it to your desktop.Download Link 1Download Link 2MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.
For instructions with screenshots, please refer to the How to use Malwarebytes' Anti-Malware Guide.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan.If an update is found, the program will automatically update itself. Press the OK button to close that box and continue.If you encounter any problems while downloading the definition updates, manually download them from here and just double-click on mbam-rules.exe to install.On the Scanner tab:Make sure the "Perform Quick Scan" option is selected.Then click on the Scan button.If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button. The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".Click OK to close the message box and continue with the removal process.Back at the main Scanner screen:Click on the Show Results button to see a list of any malware that was found.Make sure that everything is checked, and click Remove Selected.When removal is completed, a log report will open in Notepad.The log is automatica... Read more

http://www.bleepingcomputer.com/forums/t/382354/google-links-redirecting/
Relevancy 70.09%

Here is my hijackthis log Any help will be appreciated Logfile of Trend Micro HijackThis v Scan saved at PM on Platform Windows XP SP redirecting google links WinNT MSIE Internet Explorer v Boot mode Normal Running processes C WINDOWS System smss exe C WINDOWS system csrss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS system svchost exe C WINDOWS system svchost exe C Program Files Windows Defender MsMpEng exe C WINDOWS System svchost exe C WINDOWS System svchost exe C WINDOWS System svchost exe C Program Files Lavasoft Ad-Aware aawservice exe C WINDOWS system spoolsv exe C PROGRA McAfee MSC mcmscsvc exe c program files common files mcafee mna mcnasvc exe c PROGRA COMMON mcafee mcproxy mcproxy exe C PROGRA McAfee google links redirecting VIRUSS mcshield exe C Program Files McAfee MPF MPFSrv exe C Program Files McAfee MSK MskSrver exe C WINDOWS System nvsvc exe C WINDOWS SYSTEM SPOOL DRIVERS W X HPZipm exe C PROGRA Dantz RETROS wdsvc exe C Program Files SiteAdvisor SAService exe C WINDOWS System alg exe C WINDOWS System svchost exe C PROGRA McAfee VIRUSS mcsysmon exe C PROGRA McAfee com Agent mcagent exe C WINDOWS Explorer EXE C Program Files HP HP Software Update HPWuSchd exe C WINDOWS system WDBtnMgr exe C Program Files WDC SetIcon exe C WINDOWS BCMSMMSG exe C Program Files SiteAdvisor SiteAdv exe C WINDOWS system dla tfswctrl exe C Program Files Offline Course Player OlpSynch exe C Program Files Windows Defender MSASCui exe C WINDOWS system ctfmon exe C Program Files HP Digital Imaging bin hpqtra exe C Program Files HP Digital Imaging bin hpqSTE exe C WINDOWS System svchost exe C Program Files Dantz Retrospect retrorun exe C Program Files Internet Explorer iexplore exe C Documents and Settings attend Desktop HiJackThis exe R - HKLM Software google links redirecting Microsoft Internet Explorer Main Default Page URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Default Search URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Start Page http go microsoft com fwlink LinkId O - BHO ICOOExternal Class - A C - A- cbc-BC -D EACD - C Program Files ICOO Loader addons icooue dll O - BHO Adobe PDF Reader Link Helper - E F-C D - D -B D- B D BE B - C Program Files Common Files Adobe Acrobat ActiveX AcroIEHelper dll O - BHO no name - FD D- B- FC- - AE - C Program Files SiteAdvisor SiteAdv dll O - BHO McAntiPhishingBHO - C E- F E- D C- F-F BD D CF - C Program Files McAfee MSK mcapbho dll O - BHO ICOODManager Class - A EC- E - fca-A A-E EC C - C Program Files ICOO Loader addons icoou dll O - BHO DriveLetterAccess - CA D E- - CF- E - - C WINDOWS system dla tfswshx dll O - BHO scriptproxy - DB D A - - E -B D- F C - C Program Files McAfee VirusScan scriptsn dll O - Toolbar McAfee SiteAdvisor - BF - F - - - FE E AA - C Program Files SiteAdvisor SiteAdv dll O - Toolbar Protection Bar - DF E A C-E - -B C -A FF - C Program Files Video ActiveX Access iesbpl dll file missing O - HKLM Run NvCplDaemon RUNDLL EXE C WINDOWS System NvCpl dll NvStartup O - HKLM Run HP Software Update C Program Files HP HP Software Update HPWuSchd exe O - HKLM Run WD Button Manager WDBtnMgr exe O - HKLM Run SetIcon Program Files WDC SetIcon exe O - HKLM Run BCMSMMSG BCMSMMSG exe O - HKLM Run SiteAdvisor C Program Files SiteAdvisor SiteAdv exe O - HKLM Run dla C WINDOWS system dla tfswctrl exe O - HKLM Run StorageGuard quot C Program Files Common Files Sonic Update Manager sgtray exe quot r O - HKLM Run OLPSYNCH C Program Files Offline Course Player OlpSynch exe O - HKLM Run Adobe Reader Speed Launcher quot C Program Files Adobe Reader Reader Reader sl exe quot O - HKLM Run mcagent exe C Program Files McAfee com Agent mcagent exe runkey O - HKLM Run Windows Defender quot C Program Files Windows Defender MSASCui exe quot -hide O - HKCU Run ctfmo... Read more

Relevancy 70.09%

ever since yesterday my google links have been redirecting to toseeka links google redirecting com and other sites and my computer has been running very slowly and freezes up alot and my windows media center will not open i have google links redirecting no idea if these are all connected somehow but any help would be appreciated nbsp Attach txt nbsp google links redirecting nbsp KB nbsp nbsp downloads dds log DDS Ver - - - NTFSx Run by HP Administrator at on Internet Explorer Microsoft Windows XP Professional GMT - AV Norton Internet Security On-access scanning enabled Outdated E A - - -B - C C F AV avast antivirus VPS - On-access scanning disabled Updated DB - F - A -B - A FD D FW Norton Internet Security enabled C A C -F F- AC -B -A E C F Running Processes C WINDOWS system svchost -k DcomLaunch svchost exe C WINDOWS System svchost exe -k netsvcs C WINDOWS system svchost exe -k WudfServiceGroup svchost exe svchost exe c Program Files Common Files Symantec Shared ccProxy exe c Program Files Common Files Symantec Shared ccSetMgr google links redirecting exe c Program Files Norton Internet Security ISSVC exe c Program Files Common Files Symantec Shared SNDSrvc exe c Program Files Common Files Symantec Shared SPBBC SPBBCSvc exe C WINDOWS Explorer EXE c Program Files Common Files Symantec Shared ccEvtMgr exe C Program Files Alwil Software Avast aswUpdSv exe C Program Files Lavasoft Ad-Aware AAWService exe C Program Files Alwil Software Avast ashServ exe C WINDOWS system spoolsv exe svchost exe C WINDOWS arservice exe C WINDOWS eHome ehRecvr exe C WINDOWS eHome ehSched exe C Program Files Intel Intel Matrix Storage Manager Iaantmon exe C Program Files Canon IJPLM IJPLMSVC EXE C Program Files Common Files LightScribe LSSrvc exe C Program Files Common Files Microsoft Shared VS DEBUG MDM EXE c Program Files Norton Internet Security Norton AntiVirus navapsvc exe C WINDOWS system nvsvc exe C WINDOWS System spool DRIVERS W X HPZIPM EXE svchost exe C WINDOWS system svchost exe -k imgsvc C Program Files Intel IntelDH Intel reg Quick Resume Technology ELService exe c Program Files Common Files Symantec Shared Security Center SymWSC exe C Program Files Alwil Software Avast ashMaiSv exe C Program Files Alwil Software Avast ashWebSv exe C WINDOWS system dllhost exe C WINDOWS ehome ehtray exe C WINDOWS ARPWRMSG EXE C Program Files Intel Intel Matrix Storage Manager Iaanotif exe C Program Files Lavasoft Ad-Aware AAWTray exe C WINDOWS eHome ehmsas exe C WINDOWS system rundll exe C Program Files HP HP Software Update HPWuSchd exe C WINDOWS VM STI EXE C Program Files Common Files Real Update OB realsched exe C WINDOWS system spool drivers w x hpztsb exe C PROGRA ALWILS Avast ashDisp exe C Program Files Java jre bin jusched exe C Program Files Canon MyPrinter BJMyPrt exe C Program Files Windows Live Messenger MsnMsgr Exe C WINDOWS system ctfmon exe C Program Files HP Digital Imaging bin hpqtra exe C Program Files Updates from HP Program Updates from HP exe C WINDOWS system ps exe C WINDOWS RTHDCPL EXE c windows system hpsysdrv exe C Program Files iTunes iTunesHelper exe C Program Files iPod bin iPodService exe C WINDOWS pchealth helpctr binaries helpctr exe C WINDOWS pchealth helpctr binaries helpctr exe C Program Files Internet Explorer iexplore exe C Program Files Internet Explorer iexplore exe C Program Files Internet Explorer Iexplore exe C Program Files Internet Explorer Iexplore exe C Program Files Internet Explorer iexplore exe C Documents and Settings HP Administrator Desktop dds scr Pseudo HJT Report uStart Page hxxp www swagbucks com uDefault Page URL hxxp ie redirect hp com svs rdr TYPE amp tp iehome amp locale EN CA amp c Q amp bd pavilion amp pf desktop uDefault Search URL hxxp ie redirect hp com svs rdr TYPE amp tp iesearch amp locale EN CA amp c Q amp bd pavilion amp pf desktop uSearch Bar hxxp ie redirect hp com svs rdr TYPE amp tp iesearch amp locale EN CA amp c Q amp bd pavilion amp pf desktop mSearch Bar hxxp ie redirect hp com sv... Read more

A:google links redirecting

Hello and welcome to Bleeping Computer.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.My name is Syler, I will be helping you to solve your Malware issues. Whilst I am helping you, I wouldbe grateful if you would note the following: Please do not run other tools or scans unless I ask you to and follow all the steps I give you, in order.
Copy and paste all logs requested in you reply, Do not attach them unless asked too.
If you don't know or understand something, please don't hesitate to say or ask before you proceed with my instructions.
Please continue to work with me, until I tell you your machine appears to be clean. Absence of symptoms does not mean that everything is clear.
If I do not hear back from you within 5 days of my last post, then this topic will be closed.Please download Malwarebytes' Anti-Malware from HereNote: If you already have Malwarebytes' Anti-Malware, just update then run it.Double Click mbam-setup.exe to install the application.Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.If an update is found, it will download and install the latest version.Once the program has loaded, select "Perform Full Scan", then click Scan (the scan may take some time to finish, so please be patient).When the scan is complete, click OK, then Show Results to view the results.Make sure that everything is checked, and click Remove Selected.When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.Copy and Paste the entire report in your next reply .Note: If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediatly.NextDownload random's system information tool (RSIT) by random/random from here and save it to your desktop.Double click on RSIT.exe to run RSIT.Click Continue at the disclaimer screen.Once it has finished, two logs will open. Please post the contents of both log.txt (<<will be maximized) and info.txt (<<will be minimized)Then please post back here with the following: MBAM log log.txt info.txtThanks

http://www.bleepingcomputer.com/forums/t/246317/google-links-redirecting/
Relevancy 70.09%

Hi I'm sure you get this alot but just Links Google Redirecting recently I discovered that when ever I use google to search something the links redirect me to Google Links Redirecting add sites I recently recovered my computer from the whole antivirus xp Google Links Redirecting thing but I think it left more stuff behind Additionally this problem occurs both in ie and ff but not in safari I cant even access this site in the other browsers Any help would be greatly appreciated hjt log Logfile of Trend Micro HijackThis v Scan saved at AM on Platform Windows XP SP WinNT MSIE Internet Explorer v Boot mode NormalRunning processes C WINDOWS System smss exeC WINDOWS system csrss exeC WINDOWS system winlogon exeC WINDOWS system services exeC WINDOWS system lsass exeC WINDOWS system svchost exeC WINDOWS system svchost exeC WINDOWS System svchost exeC WINDOWS System svchost exeC WINDOWS System svchost exeC WINDOWS system spoolsv exeC Program Files Common Files Apple Mobile Device Support bin AppleMobileDeviceService exeC WINDOWS System GEARSec exeC WINDOWS System svchost exeC Program Files Common Files Microsoft Shared VS DEBUG MDM EXEC WINDOWS system nvsvc exeC Program Files PC Tools AntiVirus PCTAVSvc exeC WINDOWS system HPZipm exeC Program Files Spyware Doctor pctsAuxs exeC Program Files Spyware Doctor pctsSvc exeC WINDOWS System svchost exeC Program Files Common Files Symantec Shared CCPD-LC symlcsvc exeC Program Files Windows Media Player WMPNetwk exeC Program Files Spyware Doctor pctsTray exeC WINDOWS System alg exeC WINDOWS System ezSP Px exeC WINDOWS SM BG EXEC WINDOWS system ICO EXEC Program Files Java jre bin jusched exeC Program Files SigmaTel C-Major Audio stacmon exeC Program Files iTunes iTunesHelper exeC Program Files HP HP Software Update HPWuSchd exeC Program Files Sony HotKey Utility HKserv exeC Program Files Sony HotKey Utility HKWnd exeC Program Files iPod bin iPodService exeC Program Files Apoint Apoint exeC WINDOWS system ctfmon exeC Program Files Windows Media Player WMPNSCFG exeC Program Files Apoint Apntex exeC WINDOWS explorer exeC Program Files Safari Safari exeC Program Files Trend Micro HijackThis HijackThis exeC WINDOWS system NOTEPAD EXEC Program Files Internet Explorer Iexplore exeC WINDOWS System wbem wmiprvse exeR - HKLM Software Microsoft Internet Explorer Main Default Page URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Default Search URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Start Page http go microsoft com fwlink LinkId R - HKCU Software Microsoft Internet Explorer Main Local Page R - HKLM Software Microsoft Internet Explorer Main Local Page R - HKCU Software Microsoft Internet Explorer Main Window Title Microsoft Internet ExplorerO - BHO AcroIEHlprObj Class - E F-C D - D -B D- B D BE B - C Program Files Adobe Acrobat ActiveX AcroIEHelper dllO - BHO SSVHelper Class - BB-D F - C-B EB-D DAF D D - C Program Files Java jre bin ssv dllO - HKLM Run ezShieldProtector for Px C WINDOWS System ezSP Px exeO - HKLM Run SM BG C WINDOWS SM BG EXEO - HKLM Run Mouse Suite Daemon ICO EXEO - HKLM Run VAIO Recovery C WINDOWS Sonysys VAIO Recovery PartSeal exeO - HKLM Run SunJavaUpdateSched quot C Program Files Java jre bin jusched exe quot O - HKLM Run SigmaTel StacMon C Program Files SigmaTel C-Major Audio stacmon exeO - HKLM Run QuickTime Task quot C Program Files QuickTime QTTask exe quot -atboottimeO - HKLM Run PCTAVApp quot C Program Files PC Tools AntiVirus PCTAV exe quot MONITORSCANO - HKLM Run NapsterShell C Program Files Napster napster exe systrayO - HKLM Run iTunesHelper quot C Program Files iTunes iTunesHelper exe quot O - HKLM Run ISTray quot C Program Files Spyware Doctor pctsTray exe quot O - HKLM Run HP Software Update C Program Files HP HP Software Update HPWuSchd exeO - HKLM Run HKSERV EXE C Program Files Sony H... Read more

A:Google Links Redirecting

Hi everyone,
I fixed the problem by downloading malwarebytes anti-malware program. It fount many infections of adware.websearch (probably what it was). All is ok so this topic can be closed

http://www.bleepingcomputer.com/forums/t/167384/google-links-redirecting/
Relevancy 70.09%

I have this problem on both my laptop and computer. I go to google, yahoo, bing etc . If I type in what i want to search for, for example facebook when i click the link it takes me to a completly different site. I have been able to get on some sites which tell me to remove TCSS which I cant find anywhere on my computer. Someone please help me its driving me crazy! Edit: Moved topic from Web Browsing/Email and Other Internet Applications to the more appropriate forum. ~ Animal

A:google links keep redirecting me PLEASE HELP.

Hello,And welcome to BleepingComputer.com, before we can assist you with your question of: Am I infected? You will need to perform the following tasks and post the logs of each if you can.Malwarebytes Anti-MalwareNOTEMalwarebytes is now offering a free trial of their program, if you want to accept it you will need to enter some billing information, so that at the end of the trial you would be charged the cost of the product. Please decline this offer, if you are unable to provide billing information. If you want to try it out, then provide the billing information.Please download Malwarebytes Anti-Malware and save it to your desktop.Download Link 1Download Link 2MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.
For instructions with screenshots, please refer to the How to use Malwarebytes' Anti-Malware Guide.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan.If an update is found, the program will automatically update itself. Press the OK button to close that box and continue.If you encounter any problems while downloading the definition updates, manually download them from here and just double-click on mbam-rules.exe to install.On the Scanner tab:Make sure the "Perform Full Scan" option is selected.Then click on the Scan button.If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".Click OK to close the message box and continue with the removal process.Back at the main Scanner screen:Click on the Show Results button to see a list of any malware that was found.Make sure that everything is checked, and click Remove Selected.When removal is completed, a log report will open in Notepad.The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.Copy and paste the contents of that report in your next reply. Be sure to post the complete log to include the top portion which shows MBAM's database version and your operating system.Exit MBAM when done.Note: If MBAM encounters a file that is difficult to remove, you will be asked to reboot your computer so MBAM can proceed with the disinfection process. If asked to restart the computer, please do so immediately. Failure to reboot normally (not into safe mode) will prevent MBAM from removing all the malware.SUPERAntiSpyware:Please download and scan with SUPERAntiSpyware FreeDouble-click SUPERAntiSypware.exe and use the default settings for installation.An icon will be created on your desktop. Double-click that icon to launch the program.If it will not start, go to Start > All Prgrams > SUPERAntiSpyware and click on Alternate Start.If asked to update the program definitions, click "Yes". If not, update the definitions before scanning by selecting "Check for Updates". (If you encounter any problems while downloading the updates, manually download them from here. Double-click on the hyperlink for Download Installer and save SASDEFINITIONS.EXE to your desktop. Then double-click on SASDEFINITIONS.EXE to install the definitions.)In the Main Menu, click the ... Read more

http://www.bleepingcomputer.com/forums/t/411187/google-links-keep-redirecting-me-please-help/
Relevancy 70.09%

Hi, just recently all the links on google searches have been redirecting mostly to click.livesearch among others. The browsers that are used by my family are firefox and chrome and this happens on both of them. I've tried malwarebytes but it hasn't found anything. Help would be much appreciated thanks.

A:Google links redirecting

Please download TDSSKiller from here and save it to your DesktopDoubleclick on TDSSKiller.exe to run the application, then click on Change parameters


Check Loaded Modules  and Detect TDLFS file system.  Do not check Verify file digital signatures (even though it is checked in the example)If you are asked to reboot because an "Extended Monitoring Driver is required" please click Reboot now


Click Start Scan and allow the scan process to run

If threats are detected select Skip for all of them unless I instruct you otherwiseClick Continue


Click Reboot computerPlease post the contents of  TDSSKiller.[Version]_[Date]_[Time]_log.txt found in your root directory (typically c:\)in your reply===================================================aswMBR--------------------Download aswMBR and save it to your desktop.
Please disable your real time protection of any Antivirus, Antispyware or Antimalware programs temporarily. They will interfere and may cause unexpected results.If you need help to disable your protection programs see here and here.Double click the aswMBR.exe file to run it. Please allow when you are asked to download AVAST antivirus engine defs.Wait until the AV update is done, then click on the Scan button to start. The program will launch a scan.

When done, you will see Scan finished successfully. Please click on Save log and save the file to your desktop.

Please post the contents of the log in your next reply.NOTE:  aswMBR will create MBR.dat file on your desktop. This is a copy of your MBR. Do NOT delete it.===================================================ESET Online Scanner--------------------I'd like us to scan your machine with ESET OnlineScan  This process may may take several hours, that is normalHold down Control and click on this link to open ESET OnlineScan in a new window.Click the   button.For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)

Click on esetsmartinstaller_enu.exe to download the ESET Smart Installer. Save it to your desktop.Double click on the icon on your desktop.
Check "YES, I accept the Terms of Use."Click the Start button.Accept any security warnings from your browser.Under scan settings, check "Scan Archives" and "Remove found threats" Click Advanced settings and select the following:

Scan potentially unwanted applicationsScan for potentially unsafe applicationsEnable Anti-Stealth technologyESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.When the scan completes, click List ThreatsCopy and paste the information in your next reply.   Note:  If no malware was found you will not get a log.Click the Back button.Click the Finish button.===================================================Things I would like to see in your next reply. Please be sure to copy and paste the information rather than send an attachment. TDSSKiller logaswMBR logESET results 

http://www.bleepingcomputer.com/forums/t/486042/google-links-redirecting/
Relevancy 70.09%

Hi I realize that other people have had this problem Whenever i click on a link it redirects me to an ad site I really have no clue what I m doin haha I am not great with computers I have Malwarebites and every time i run a scan it comes back clean I ran a Hijack this scan so heres the log sorry if I m not supposed to post it in the same post Logfile of Trend Micro HijackThis v Scan saved at PM on Platform Windows XP SP WinNT MSIE Internet Explorer v Boot redirecting Google links mode Normal Running processes C WINDOWS System smss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system Google links redirecting lsass exe C WINDOWS system svchost exe C WINDOWS System svchost exe C Program Files AVAST Software Avast AvastSvc exe C WINDOWS Explorer EXE C Program Files Intel Intel Matrix Storage Manager iaanotif exe C WINDOWS system igfxtray exe C WINDOWS system hkcmd exe C WINDOWS system igfxpers exe C WINDOWS RTHDCPL EXE C Program Files Synaptics SynTP SynTPEnh exe C PROGRA LAUNCH LManager exe C WINDOWS PLFSetL exe C Program Files McAfee com Agent mcagent exe C Program Files Common Files Java Java Update jusched exe C Program Files iTunes iTunesHelper exe C Program Files AVAST Software Avast avastUI exe C WINDOWS system ctfmon exe C WINDOWS system igfxsrvc exe C Program Files Mozilla Firefox firefox exe C WINDOWS system spoolsv exe C WINDOWS system igfxext exe C Program Files Common Files Apple Mobile Device Support AppleMobileDeviceService exe C Program Files Bonjour mDNSResponder exe C Program Files Intel Intel Matrix Storage Manager IAANTMon exe C Program Files Common Files InterVideo RegMgr iviRegMgr exe C Program Files Java jre bin jqs exe C Program Files McAfee SiteAdvisor McSACore exe C PROGRA McAfee MSC mcmscsvc exe c PROGRA COMMON mcafee mna mcnasvc exe c PROGRA COMMON mcafee mcproxy mcproxy exe C PROGRA McAfee VIRUSS mcshield exe C Program Files McAfee MPF MPFSrv exe C Program Files McAfee MSK MskSrver exe C Program Files Acer Acer VCM RS Service exe C WINDOWS system svchost exe C WINDOWS system rundll exe C Program Files WIDCOMM Bluetooth Software bin btwdins exe C Program Files iPod bin iPodService exe C Program Files Mozilla Firefox plugin-container exe C PROGRA McAfee VIRUSS mcsysmon exe C Program Files Common Files Java Java Update jucheck exe C Documents and Settings Ewers Desktop HijackThis exe R - HKCU Software Microsoft Internet Explorer Main Default Page URL http homepage acer com rdr aspx b ACAW amp l amp s amp o xph amp d amp m aspire one R - HKLM Software Microsoft Internet Explorer Main Default Page URL http homepage acer com rdr aspx b ACAW amp l amp s amp o xph amp d amp m aspire one R - HKLM Software Microsoft Internet Explorer Main Default Search URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Start Page http homepage acer com rdr aspx b ACAW amp l amp s amp o xph amp d amp m aspire one R - HKLM Software Microsoft Internet Explorer Search SearchAssistant R - HKCU Software Microsoft Internet Connection Wizard ShellNext http www findfemale org ac php aid amp sid direc R - URLSearchHook McAfee SiteAdvisor Toolbar - EBBBE -BAD - B C- E A- ABECAE - c PROGRA mcafee SITEAD mcieplg dll O - BHO no name - D -C F - efb- B - ECA - no file O - BHO AcroIEHelperStub - DF C-E AD- -A -FA C EBDC - C Program Files Common Files Adobe Acrobat ActiveX AcroIEHelperShim dll O - BHO McAfee Phishing Filter - B A- - A -B -BE AFE AB - c PROGRA mcafee msk mskapbho dll O - BHO no name - C C A-E - b - D - CECB - no file O - BHO scriptproxy - DB D A - - E -B D- F C - C Program Files McAfee VirusScan scriptsn dll O - BHO avast WebRep - E E -AD D- bf-AC D-D F D - C Program Files AVAST Software Avast aswWebRepIE dll O - BHO Windows Live Sign-in Helper - D - C - ABF- ECC- C - C Program Files Common Files Microsoft Shared Windows Live WindowsLiveLogin dll O - BHO Search Tool... Read more

Relevancy 70.09%

Like many others I m having the problem with Google search results taking me to ad sites intermittently I ve tried a number of possible solutions including those found on this site but nothing has helped so far Thanks in advance for the help I really appreciate it I m using a Dell XPS- running Vista My Hijackthis file Logfile of Trend Micro redirecting Another links me Google HijackThis v Scan saved at PM on Platform Windows Another Google links redirecting me Vista SP WinNT MSIE Internet Explorer v Boot Another Google links redirecting me mode Normal Running processes C Windows system taskeng exe C Another Google links redirecting me Windows system Dwm exe C Windows Explorer EXE C Program Files Windows Defender MSASCui exe C Windows WindowsMobile wmdc exe C Program Files Creative Sound Blaster X-Fi Volume Panel VolPanlu exe C Program Files Common Files InstallShield UpdateService issch exe C Program Files Dell Support Center bin sprtcmd exe C Program Files Microsoft Office Office GrooveMonitor exe C Windows System wpcumi exe C Windows System rundll exe C Windows System Ctxfihlp exe C Windows ehome ehtray exe C Program Files Dell QuickSet quickset exe C Windows SYSTEM CTXFISPI EXE C Users Sarah Johnson AppData Local Apps O WBYKHC H J WVXTZGD K O curs tion eee a b d e e CurseClient exe C Windows ehome ehmsas exe C Windows system wbem unsecapp exe C Program Files Mozilla Firefox firefox exe C Users Sarah Johnson Desktop HijackThis exe C Windows system SearchProtocolHost exe C Windows system SearchFilterHost exe R - HKCU Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Search CustomizeSearch R - HKCU Software Microsoft Internet Explorer Main Window Title Internet Explorer provided by Dell R - HKCU Software Microsoft Windows CurrentVersion Internet Settings ProxyOverride local R - HKCU Software Microsoft Internet Explorer Toolbar LinksFolderName R - URLSearchHook AIM Toolbar Search Class - f - dc - -bc - e fefafe - C Program Files AIM Toolbar aimtb dll O - Hosts localhost O - BHO AcroIEHelperStub - DF C-E AD- -A -FA C EBDC - C Program Files Common Files Adobe Acrobat ActiveX AcroIEHelperShim dll O - BHO Groove GFS Browser Helper - - C - D -B F - BBC D A E - C Program Files Microsoft Office Office GrooveShellExtensions dll O - BHO AIM Toolbar Loader - b cda -b - eef-a - a ac dbf - C Program Files AIM Toolbar aimtb dll O - BHO Browser Address Error Redirector - CA C - B - E-A -A C DB F - C Program Files Dell BAE BAE dll O - BHO Java tm Plug-In SSV Helper - DBC -A - b-BC - C C C A - C Program Files Java jre bin jp ssv dll O - Toolbar AIM Toolbar - ecd-cc - -a c- aaccbd - C Program Files AIM Toolbar aimtb dll O - HKLM Run Windows Defender ProgramFiles Windows Defender MSASCui exe -hide O - HKLM Run Windows Mobile Device Center windir WindowsMobile wmdc exe O - HKLM Run VolPanel quot C Program Files Creative Sound Blaster X-Fi Volume Panel VolPanlu exe quot r O - HKLM Run UpdReg C Windows UpdReg EXE O - HKLM Run ISUSScheduler quot C Program Files Common Files InstallShield UpdateService issch exe quot -start O - HKLM Run ISUSPM Startup C PROGRA COMMON INSTAL UPDATE ISUSPM exe -startup O - HKLM Run DellSupportCenter quot C Program Files Dell Support Center bin sprtcmd exe quot P DellSupportCenter O - HKLM Run GrooveMonitor quot C Program Files Microsoft Office Office GrooveMonitor exe quot O - HKLM Run WPCUMI C Windows system WpcUmi exe O - HKLM Run NvCplDaemon RUNDLL EXE C Windows system NvCpl dll NvStartup O - HKLM Run NvMediaCenter RUNDLL EXE C Windows system NvMcTray dll NvTaskbarInit O - HKLM Run CTxfiHlp CTXFIHLP EXE O - HKLM Run Adobe Reader Speed Launcher quot C Program Files Adobe Reader Reader Reader sl exe quot O - HKLM Run Adobe ARM quot C Program Files Common Files Adobe ARM AdobeARM exe quot O - HKCU Run DellSupportCenter quot C Program Fil... Read more

A:Another Google links redirecting me

Hello,

My name is SweetTech. I would be glad to take a look at your log and help you with solving any malware problems.

If you have already received help elsewhere please inform me so that this topic can be closed.

If you have not, please adhere to the guidelines below and then follow instructions as outlined further below:
Logs from malware removal programs (OTL is one of them) can take some time to analyze. I need you to be patient while I analyze any logs you post.
Please make sure to carefully read any instruction that I give you.
Reading too lightly will cause you to miss important steps, which could have destructive effects.
If you're not sure, or if something unexpected happens, do NOT continue! Stop and ask!
These instructions have been specifically tailored to your computer and the issues you are experiencing with your computer. It's important to note that these instructions are not suitable for any other computer, even if the issues are fairly similar.
Do not do things I do not ask for, such as running a spyware scan on your computer. The one thing that you should always do, is to make sure sure that your anti-virus definitions are up-to-date!
If I instruct you to download a specific tool in which you already have, please delete the copy that you have and re-download the tool. The reason I ask you to do this is because these tools are updated fairly regularly.
In Windows Vista and Windows 7, all tools need to be started by right clicking and selecting Run as Administrator!
Please do not use the Attachment feature for any log file. Do a Copy/Paste of the entire contents of the log file and submit it inside your post.
I am going to stick with you until ALL malware is gone from your system. I would appreciate it if you would do the same. From this point, we're in this together
Because of this, you must reply within three days failure to reply will result in the topic being closed!
Please do not PM me directly for help. If you have any questions, post them in this topic. The only time you can and should PM me is when I have not been replying to you for several days (usually around 3 days) and you need an explanation. If that's the case, just send me a message on here.
Lastly, I am no magician. I will try very hard to fix your issues, but no promises can be made. Also be aware that some infections are so severe that you might need to resort to reformatting and reinstalling your operating system.
Don't worry, this only happens in severe cases, but it sadly does happen. Be prepared to back up your data. Have means of backing up your data available.
____________________________________________________
OTL Custom Scan

Download OTL to your desktop.
Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
When the window appears, underneath Output at the top change it to Minimal Output.
Check the boxes beside LOP Check and Purity Check.
Under Custom Scan paste this in

netsvcs
drivers32 /all
%SYSTEMDRIVE%\*.*
%systemroot%\system32\Spool\prtprocs\w32x86\*.dll
%systemroot%\system32\*.wt
%systemroot%\system32\*.ruy
%systemroot%\Fonts\*.com
%systemroot%\Fonts\*.dll
%systemroot%\Fonts\*.ini
%systemroot%\Fonts\*.ini2
%systemroot%\system32\spool\prtprocs\w32x86\*.tmp
%systemroot%\*. /mp /s
CREATERESTOREPOINT
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\user32.dll /md5
%systemroot%\system32\ws2_32.dll /md5
%systemroot%\system32\ws2help.dll /md5
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs

Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the sa... Read more

https://forums.techguy.org/threads/another-google-links-redirecting-me.933370/
Relevancy 70.09%

Basically every time I click a google link it redirects to random websites This is very annoying and any help would be greatly appreciated Here is my Hijackthis log Logfile of Trend Micro HijackThis v Scan saved at PM on Platform Windows XP SP WinNT MSIE Internet Explorer v Boot mode Normal Running processes C WINDOWS System smss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS system Ati evxx exe C WINDOWS system svchost exe C WINDOWS System svchost exe C WINDOWS system Ati evxx exe C WINDOWS system spoolsv exe C WINDOWS Explorer EXE C WINDOWS RTHDCPL EXE C Program Files ATI Technologies ATI ACE Core-Static MOM exe C Program Files ASUS EPU- Engine SixEngine exe C Program Files Java jre bin jusched Redirecting Links Google exe C WINDOWS system LVCOMSX EXE C Program Files Logitech Video LogiTray exe C Program Files Ask amp Record Toolbar FLVSrvc exe C PROGRA AVG AVG avgtray exe C Program Files Common Files Apple Mobile Device Support bin AppleMobileDeviceService exe C Program Files Logitech Video FxSvr exe C PROGRA Google Links Redirecting AVG AVG avgwdsvc exe C Program Files Bonjour mDNSResponder exe C Program Files Java jre bin jqs exe C WINDOWS system svchost exe Google Links Redirecting C Program Files iTunes iTunesHelper exe C WINDOWS system rundll exe C Documents and Settings Evelyn Local Settings Application Data Google Update GoogleUpdate exe C Program Files ASUS SmartDoctor SmartDoctor exe C WINDOWS system ctfmon exe C Program Files Spybot - Search amp Destroy TeaTimer exe C Program Files Google GoogleToolbarNotifier GoogleToolbarNotifier exe C Program Files Electronic Arts EADM Core exe C Program Files Veoh Networks VeohWebPlayer veohwebplayer exe C Program Files Hewlett-Packard Digital Imaging bin hpobnz exe C Program Files Hewlett-Packard Digital Imaging bin hpotdd exe C Program Files Viewpoint Common ViewpointService exe C PROGRA AVG AVG avgrsx exe C Program Files iPod bin iPodService exe C Program Files Hewlett-Packard Digital Imaging bin hpoevm exe C Program Files ATI Technologies ATI ACE Core-Static ccc exe C Program Files Hewlett-Packard Digital Imaging Bin hpoSTS exe C PROGRA AVG AVG avgnsx exe C Program Files MSN Messenger usnsvc exe C Program Files iTunes iTunes exe C Program Files Last fm LastFM exe C Program Files Mozilla Firefox firefox exe C Program Files AVG AVG avgui exe C Program Files AVG AVG avgcsrvx exe C Program Files Trend Micro HijackThis HijackThis exe R - HKCU Software Microsoft Internet Explorer Main Start Page http google ca R - HKLM Software Microsoft Internet Explorer Main Default Page URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Default Search URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Start Page http go microsoft com fwlink LinkId R - HKCU Software Microsoft Windows CurrentVersion Internet Settings ProxyOverride localhost local O - BHO WormRadar com IESiteBlocker NavFilter - CA F - F E- B -A E- E E C C - C Program Files AVG AVG avgssie dll O - BHO no name - C C A-E - b - D - CECB - no file O - BHO no name - E D - A- EC-A -BA D E E - no file O - BHO AVG Security Toolbar - A A -BACC- D - - A E E - C PROGRA AVG AVG AVGTOO DLL O - Toolbar Veoh Web Player Video Finder - FBB -D D - f a-A E - B BFC - C Program Files Veoh Networks VeohWebPlayer VeohIEToolbar dll O - Toolbar Ask Toolbar - d e-fd b- e -b - d b f - C Program Files AskBarDis bar bin askBar dll O - Toolbar AVG Security Toolbar - A A -BACC- D - - A E E - C PROGRA AVG AVG AVGTOO DLL O - HKLM Run StartCCC quot C Program Files ATI Technologies ATI ACE Core-Static CLIStart exe quot MSRun O - HKLM Run RTHDCPL RTHDCPL EXE O - HKLM Run Alcmtr ALCMTR EXE O - HKLM Run Six Engine quot C Program Files ASUS EPU- Engine SixEngine exe quot -r O - HKLM Run Adobe Reader Speed Launcher quot C Program Files Adob... Read more

https://forums.techguy.org/threads/google-links-redirecting.823260/
Relevancy 70.09%

Hi guys Im having problems in all of my browsers with google When I click on a link it redirects to another website such as http dc e e ra com click php s amp k amp pub rather than the website it should link to The websites it redirects google Links redirecting on to are usually Links on google redirecting full of adverts etc Also in google images no images actually load either the page tries to load for ever or Links on google redirecting the page loads but the thumbnail images do not Also I dont know if this is related but shockwave plugin keeps crashing here is my HijackThis log Logfile of Trend Micro HijackThis v Scan saved at on Platform Windows XP SP WinNT MSIE Internet Explorer v Boot mode Normal Running processes C WINDOWS System smss exe C WINDOWS system csrss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS system svchost exe C WINDOWS system svchost exe C WINDOWS System svchost exe C WINDOWS system svchost exe C WINDOWS system svchost exe C Program Files Common Files Symantec Shared ccProxy exe C Program Files Common Files Symantec Shared ccSetMgr exe C WINDOWS Explorer EXE C Program Files Norton Internet Security ISSVC exe C Program Files Common Files Symantec Shared ccEvtMgr exe C WINDOWS System wltrysvc exe C WINDOWS System bcmwltry exe C WINDOWS system spoolsv exe C WINDOWS system svchost exe C Program Files Symantec LiveUpdate ALUSchedulerSvc exe C Program Files Dell NICCONFIGSVC NICCONFIGSVC exe C WINDOWS system svchost exe C WINDOWS system wbem wmiprvse exe C Program Files QuickTime qttask exe C Program Files Common Files Real Update OB realsched exe C WINDOWS system ctfmon exe C Program Files DellSupport DSAgnt exe C Program Files Google GoogleToolbarNotifier GoogleToolbarNotifier exe C WINDOWS System alg exe C Program Files Symantec LiveUpdate AUpdate exe C PROGRA Symantec LIVEUP LUCOMS EXE C Program Files Symantec LiveUpdate LuCallbackProxy exe C Program Files Symantec LiveUpdate LuCallbackProxy exe C Program Files Symantec LiveUpdate LuCallbackProxy exe C Program Files Symantec LiveUpdate LuCallbackProxy exe c WINDOWS Microsoft NET Framework v Windows Communication Foundation infocard exe C Program Files Mozilla Firefox firefox exe C Program Files CCleaner CCleaner exe C Program Files Trend Micro HijackThis HijackThis exe C WINDOWS system wbem wmiprvse exe R - HKCU Software Microsoft Internet Explorer Main Default Page URL http www dell co uk myway R - HKCU Software Microsoft Internet Explorer Main Start Page http login live com login srf wa e com default aspx amp lc amp id amp mkt en-gb R - HKLM Software Microsoft Internet Explorer Main Default Page URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Default Search URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Start Page http go microsoft com fwlink LinkId R - URLSearchHook UrlSearchHook Class - - E - FD - - F E FC - C Program Files Ask com GenericAskToolbar dll O - BHO no name - D -C F - efb- B - ECA - no file O - BHO Browser Defender BHO - A F D B- - FF -B - CCE E - no file O - BHO RealPlayer Download and Record Plugin for Internet Explorer - C E -B - BC - - C CA - c program files real realplayer rpbrowserrecordplugin dll O - BHO Google Toolbar Helper - AA ED - DD- d - -CF F - C Program Files Google Google Toolbar GoogleToolbar dll O - BHO Google Toolbar Notifier BHO - AF DE - D - -B FA-CE B AD D - C Program Files Google GoogleToolbarNotifier swg dll O - BHO Google Dictionary Compression sdch - C D FE-E D- -BB - C E E C E - C Program Files Google Google Toolbar Component fastsearch B C AC BB E dll O - BHO Ask Toolbar BHO - D C F- A- -A AD- D - C Program Files Ask com GenericAskToolbar dll O - Toolbar Norton Internet Security - B EAC - D - b e- B -A C A A - C Program Files Common Files Symantec Shared AdBlocking NISShExt d... Read more

https://forums.techguy.org/threads/links-on-google-redirecting.904477/
Relevancy 70.09%

Ok I know there are other threads floating around about Google links redirecting to adverts and random sites I read about people with a similar issue to this and other forums but I couldnt find a solution that worked for me I am using Firefox now and most times but I was at a blog using redirecting Google Links Tab + New Pop-ups IE when it started acting crazy going slow some pop-ups etc I tried to CTRL ALT DEL but I got this quot Task manager is disabled by your administrator quot error and ballons that keept saying quot Click here to get rid of spyware quot quot You may have a trojan quot etc in the corner and center of my computer Google Links redirecting + New Tab Pop-ups screen even when web browsers were closed I initially also had an issue that disabled Task Manager and made an icon of Red circle with a white X in my tray but after doing MalwareBytes and Avast and resetting TCP IP I fixed those issues But I still had the Google search link redirect and new tabs randomly showing up problems I am currently still having this Google redirect problem plus random New Tabs Popping up without clicking anything I ran MalwareBytes removed some items restarted etc I ran Spybot S amp D removed I think items restarted etc I dl ed and ran Avast Free Antivirus and although some part of the Norton Symantec trial wont delete from my machine so Avast tells me that I have Norton as incompatible program it did find a few items and I deleted them restarted I downloaded and started Spyware Blaster But I still have this darn Google search link redirect and new tabs randomly showing up problems What can I do without having to buy some program or eek a new computer-neither of which I can afford Here is my most recent Hijack this log Logfile of HijackThis v Scan saved at AM on Platform Windows XP SP WinNT MSIE Internet Explorer v Running processes C WINDOWS System smss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS system svchost exe C WINDOWS System svchost exe C Program Files Common Files Symantec Shared ccProxy exe C Program Files Common Files Symantec Shared ccSetMgr exe C Program Files Alwil Software Avast AvastSvc exe C WINDOWS system spoolsv exe C WINDOWS system CTsvcCDA exe C Program Files Creative Shared Files CTDevSrv exe C Program Files Common Files LightScribe LSSrvc exe c program files mcafee com agent mcdetect exe c PROGRA mcafee com agent mctskshd exe C Program Files Norton Internet Security Norton AntiVirus navapsvc exe C Program Files Common Files New Boundary PrismXL PRISMXL SYS C WINDOWS system svchost exe C Program Files Viewpoint Common ViewpointService exe C WINDOWS system winlogon exe C WINDOWS Explorer EXE C Program Files Common Files Symantec Shared ccApp exe C WINDOWS system hkcmd exe C PROGRA mcafee com agent mcagent exe C Program Files HP HP Software Update HPWuSchd exe C Program Files Java jre bin jusched exe C Program Files QuickTime QTTask exe C PROGRA ALWILS Avast avastUI exe C Program Files Creative Creative Media Lite CTZDetec exe C Documents and Settings Owner Local Settings Application Data Google Update GoogleCrashHandler exe C Program Files HP Digital Imaging bin hpqgalry exe C Documents and Settings Owner My Documents My Pictures hijackthis HijackThis exe C Program Files Mozilla Firefox firefox exe R - HKLM Software Microsoft Internet Explorer Main Default Page URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Default Search URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Start Page http go microsoft com fwlink LinkId R - HKCU Software Microsoft Internet Connection Wizard ShellNext quot C Program Files Outlook Express msimn exe quot O - BHO Adobe PDF Reader Link Helper - E F-C D - D -B D- B D BE B - C Program Files Common Files Adobe Acrobat ActiveX AcroIEHelper dll O - BHO ... Read more

https://forums.techguy.org/threads/google-links-redirecting-new-tab-pop-ups.904478/
Relevancy 70.09%

I links Redirecting from Google am Redirecting from Google links being redirected to various ad sites when I click Redirecting from Google links on my google search results in Firefox I haven t tried IE It doesn t happen everytime I have Redirecting from Google links Avira firewall up Should I switch it to the Windows firewall I have attached the files requested on the preparation guide page DDS Ver - - - NTFSx Internet Explorer BrowserJavaVersion Run by Administrator at on - - Microsoft Windows XP Professional GMT - AV AntiVir Desktop Enabled Updated -E FC- BEE-BB -EC C F FW Avira FireWall Enabled Running Processes C WINDOWS system svchost exe -k DcomLaunch svchost exe C WINDOWS System svchost exe -k netsvcs svchost exe svchost exe C WINDOWS system spoolsv exe C Program Files Avira AntiVir Desktop sched exe C WINDOWS Explorer EXE svchost exe C WINDOWS ehome ehtray exe C Program Files Digital Media Reader readericon G exe C WINDOWS system rundll exe C Program Files Avira AntiVir Desktop avgnt exe C Program Files Common Files Real Update OB realsched exe C Program Files iTunes iTunesHelper exe C Program Files Common Files Ahead Lib NMBgMonitor exe C Documents and Settings Administrator Local Settings Application Data AbacastDistributedOnDemand Node AbacastDistributedOnDemand exe C WINDOWS system ctfmon exe C Program Files Avira AntiVir Desktop avfwsvc exe C Program Files Avira AntiVir Desktop avguard exe C Program Files Common Files Apple Mobile Device Support bin AppleMobileDeviceService exe C Program Files Bonjour mDNSResponder exe C Program Files Wave Systems Corp Common DataServer exe C WINDOWS eHome ehRecvr exe C Program Files Avira AntiVir Desktop avshadow exe C WINDOWS eHome ehSched exe C Program Files Java jre bin jqs exe C WINDOWS system nvsvc exe C Program Files Common Files New Boundary PrismXL PRISMXL SYS C WINDOWS system lzexpand exe svchost exe C WINDOWS system svchost exe -k imgsvc C Program Files NTRU Cryptosystems NTRU Hybrid TSS v bin tcsd win exe C Program Files Intel IntelDH Intel reg Quick Resume Technology Drivers Elservice exe C Program Files Avira AntiVir Desktop avmailc exe C Program Files Avira AntiVir Desktop AVWEBGRD EXE C Program Files iPod bin iPodService exe C WINDOWS system dllhost exe C WINDOWS system ptpusb exe C Documents and Settings Administrator Desktop dds scr C WINDOWS system WSCRIPT exe Pseudo HJT Report uStart Page hxxp yahoo sbc com dsl uSearchMigratedDefaultURL hxxp www google com search q searchTerms amp sourceid ie amp rls com microsoft en-US amp ie utf amp oe utf uInternet Connection Wizard ShellNext hxxp www gateway com g startpage html Ch Consumer amp Br GTW amp Loc ENG US amp Sys DTP amp M FX S uInternet Settings ProxyOverride local uSearchAssistant hxxp www google com ie uSearchURL Default hxxp www google com search q s BHO df f - ad - - caf- d d - c windows system atmpvcno dll BHO Adobe PDF Link Helper df c-e ad- -a -fa c ebdc - c program files common files adobe acrobat activex AcroIEHelperShim dll BHO SSVHelper Class bb-d f - c-b eb-d daf d d - c program files java jre bin ssv dll BHO c a ae e - f - c- d - cbb b fc b - c windows system MPG DECD dll BHO Skype Plug-In ae - e c- ed - f b-f f a - c program files skype toolbars internet explorer skypeieplugin dll BHO CBrowserHelperObject Object ca c - b - e-a -a c db f - c windows system BAE dll BHO Java Plug-In SSV Helper dbc -a - b-bc - c c c a - c program files java jre bin jp ssv dll BHO JQSIEStartDetectorImpl Class e e f - ce- c -bc -eabfe f c - c program files java jre lib deploy jqs ie jqs plugin dll TB B EAC - D - B E- B -A C A A - No File TB CDD BF- FFB- - AD - DF B D - No File uRun Power GoExpress NA uRun BgMonitor E - C C- d f- C - D A B AA quot c program files common files ahead lib NMBgMonitor exe quot uRun AbacastDistributedOnDemand c documents and settings administrator local settings application data abacastdistributedondemand node AbacastDistributedOnDemand exe -r -x uRun ctfmon exe c windows system ctfmon exe mR... Read more

A:Redirecting from Google links

Hello and welcome to the forums!My secret agent name on the forums is SweetTech (you can call me ST for short), it's a pleasure to meet you. I am very sorry for the delay in responding, but as you can see we are at the moment being flooded with logs which, when paired with the never-ending shortage of helpers, resulted in the delayed responding to your thread.I would be glad to take a look at your log and help you with solving any malware problems.If you have since resolved the issues you were originally experiencing, or have received help elsewhere, please inform me so that this topic can be closed. If you have not, please adhere to the guidelines below and then follow instructions as outlined further below:Logs from malware removal programs (OTL is one of them) can take some time to analyze. I need you to be patient while I analyze any logs you post. Please remember, I am a volunteer, and I do have a life outside of these forums.
Please make sure to carefully read any instruction that I give you. Attention to detail is important! Since I cannot see or directly interact with your computer I am dependent on you to "be my eyes" and provide as much information as you can regarding the current state of your computer.
If you're not sure, or if something unexpected happens, do NOT continue! Stop and ask!
In Windows Vista and Windows 7, all tools need to be started by right clicking and selecting Run as Administrator!
If I instruct you to download a specific tool in which you already have, please delete the copy that you have and re-download the tool. The reason I ask you to do this is because these tools are updated fairly regularly.
Do not do things I do not ask for, such as running a spyware scan on your computer. The one thing that you should always do, is to make sure sure that your anti-virus definitions are up-to-date!
Please do not use the Attachment feature for any log file. Do a Copy/Paste of the entire contents of the log file and submit it inside your post.
I am going to stick with you until ALL malware is gone from your system. I would appreciate it if you would do the same. From this point, we're in this together ;)
Because of this, you must reply within three days failure to reply will result in the topic being closed!
Please do not PM me directly for help. If you have any questions, post them in this topic.
Lastly, I am no magician. I will try very hard to fix your issues, but no promises can be made. Also be aware that some infections are so severe that you might need to resort to reformatting and reinstalling your operating system.
Don't worry, this only happens in severe cases, but it sadly does happen. Be prepared to back up your data. Have means of backing up your data available.____________________________________________________Rootkit UnHooker (RkU)Please download Rootkit Unhooker from one of the following links and save it to your desktop.Link 1 (.exe file)Link 2 (zipped file)Link 3 (.rar file)In order to use this tool if you downloaded from either of the second two links, you will need to extract the RKUnhookerLE.exe file using a program capable of extracing ZIP and RAR compressed files. If you don't have an extraction program, you can downlaod, install and use the free 7-zip utility.Double-click on RKUnhookerLE.exe to start the program.
Vista/Windows 7 users right-click and select Run As Administrator.Click the Report tab, then click Scan.Check Drivers, Stealth Code, and uncheck the rest.Click OK.Wait until it's finished and then go to File > Save Report.Save the report to your Desktop.Copy and paste the contents of the report into your next reply.-- Note: You may get this warning...just ignore it, click OK and continue: "Rootkit Unhooker has detected a parasite inside itself! It is recommended to remove parasite, okay?".NEXT:Running OTLWe need to create a FULL OTL ReportPlea... Read more

http://www.bleepingcomputer.com/forums/t/400432/redirecting-from-google-links/
Relevancy 70.09%

Hi I am having a problem where after doing a google search clicking on a google result link may redirect me to some other ad or site I then must skip back a few pages to get back to the results page and clicking the same link may take me to the correct site This does not happen all the time I pretty much Google Redirecting Links exclusively use Firefox but I tested it out with Internet Explorer since I heard it might help rule some things out and it occurs there as well Everything also seems more sluggish at least in the browsers since this redirect problem Google Links Redirecting started up Oh and I m not certain if its related but a few days ago I believe something called nxe exe got blocked by one of my programs and afterward quot task manager quot kept asking for permission and I kept denying and it would continuously pop up neverending Here Google Links Redirecting is the HiJackThis log Logfile of Trend Micro HijackThis v Scan saved at PM on Platform Windows WinNT MSIE Internet Explorer v Boot mode Safe mode Running processes C Program Files x Trend Micro HiJackThis HiJackThis exe R - HKCU Software Microsoft Internet Explorer Main Search Bar Preserve R - HKCU Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKCU Software Microsoft Internet Explorer Main Start Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Default Page URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Default Search URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Google Links Redirecting Main Search Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Start Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Search SearchAssistant R - HKLM Software Microsoft Internet Explorer Search CustomizeSearch R - HKLM Software Microsoft Internet Explorer Main Local Page C Windows SysWOW blank htm R - HKCU Software Microsoft Internet Explorer Toolbar LinksFolderName O - BHO AcroIEHelperStub - DF C-E AD- -A -FA C EBDC - C Program Files x Common Files Adobe Acrobat ActiveX AcroIEHelperShim dll O - BHO RealPlayer Download and Record Plugin for Internet Explorer - C E -B - BC - - C CA - C ProgramData Real RealPlayer BrowserRecordPlugin IE rpbrowserrecordplugin dll O - BHO Spybot-S amp D IE Protection - - F - D - - D F - C PROGRA SPYBOT SDHelper dll O - BHO Java tm Plug-In SSV Helper - DBC -A - b-BC - C C C A - C Program Files x Java jre bin jp ssv dll O - HKLM Run avgnt quot C Program Files x Avira AntiVir Desktop avgnt exe quot min O - HKLM Run TkBellExe quot C Program Files x Common Files Real Update OB realsched exe quot -osboot O - HKLM Run DivXUpdate quot C Program Files x DivX DivX Update DivXUpdate exe quot CHECKNOW O - HKLM Run SunJavaUpdateSched quot C Program Files x Common Files Java Java Update jusched exe quot O - HKLM Run Adobe Reader Speed Launcher quot C Program Files x Adobe Reader Reader Reader sl exe quot O - HKLM Run Adobe ARM quot C Program Files x Common Files Adobe ARM AdobeARM exe quot O - HKLM Run MaxMenuMgr quot C Program Files x Seagate SeagateManager FreeAgent Status StxMenuMgr exe quot O - HKLM Run Malwarebytes Anti-Malware quot C Program Files x Malwarebytes Anti-Malware mbamgui exe quot starttray O - HKLM Run TrojanScanner C Program Files x Trojan Remover Trjscan exe boot O - HKCU Run Steam quot C Program Files x Steam steam exe quot -silent O - HKCU Run Sidebar C Program Files Windows Sidebar sidebar exe autoRun O - HKCU Run Aim quot C Program Files x AIM aim exe quot d locale en-US O - HKCU Run Google Update quot C Users ANguyen Home AppData Local Google Update GoogleUpdate exe quot c O - HKCU Run AnyDVD C Program Files x SlySoft AnyDVD AnyDVDtray exe O - HKCU Run AutoStartNPSAgent C Program Files x Samsung Samsung New PC Studio NPSAgent exe O - HKCU Run ctfmon exe C WINDOWS system ctfmon exe O - HKC... Read more

Relevancy 70.09%

HiMy symantic antivirus program found a few trojans today xpre tmp prun tmp and rasesnet tmp They have been placed in quarantine but i checked the task manager and noticed a new process running called quot B EXE quot which was eating up resources I found it on my C drive redirecting google links and deleted it along with quot a exe quot and quot c exe quot After restarting firefox a new error popped up jqsnotify exe - Entry Point google redirecting links Not FoundThe procedure entry point V YAXPAX Z could not be located in the dynamic link library msvcrt dll I reinstalled Java and disabled quot Java quick starter quot under firefox add-ons and it seemed to clear up the error But now when i click links i am redirected to search ad sites When i mouse-over links i noticed the address starts with quot google-redirect com quot followed by a jumbled up version of the original link address PLEASE HELP Heres my HJT log Logfile of Trend Micro HijackThis v Scan saved at PM on Platform Windows XP SP WinNT MSIE Internet Explorer v SP Boot mode NormalRunning processes C WINDOWS System smss exeC WINDOWS system winlogon exeC WINDOWS system services exeC WINDOWS system lsass exeC WINDOWS system svchost exeC WINDOWS System svchost exeC WINDOWS system svchost exeC WINDOWS Explorer EXEC WINDOWS system sys filesystem sys DRMServer exeC Program Files Common Files Apple Mobile Device Support bin AppleMobileDeviceService exeC Program Files Bonjour mDNSResponder exeC WINDOWS CDProxyServ exeC PROGRA SYMANT SYMANT DefWatch exeC WINDOWS system svchost exeC WINDOWS System svchost exeC PROGRA SYMANT SYMANT Rtvscan exeC WINDOWS Mixer exeC PROGRA SYMANT SYMANT vptray exeC WINDOWS system nvsvc exeC WINDOWS System svchost exeC WINDOWS System DLA DLACTRLW EXEC WINDOWS system RUNDLL EXEC Program Files Microsoft Office Office GrooveMonitor exeC Program Files HP HP Software Update HPWuSchd exeC Program Files iTunes iTunesHelper exeC Program Files Adobe Acrobat Distillr acrotray exeC Program Files iPod bin iPodService exeC Program Files HP Digital Imaging bin hpqSTE exeC Program Files HP Digital Imaging bin hpqbam exeC Program Files HP Digital Imaging bin hpqgpc exeC WINDOWS system WISPTIS EXEC WINDOWS System TuneUpDefragService exeC Program Files DAP DAP exeC WINDOWS system spoolsv exeC Program Files Internet Explorer iexplore exeC WINDOWS system rundll exeC Program Files Java jre bin jusched exeC Program Files Java jre bin jqs exeD Apps HiJackThis exeR - HKCU Software Microsoft Internet Explorer Main Start Page www google com R - HKCU Software Microsoft Internet Connection Wizard ShellNext http windowsupdate microsoft com R - HKCU Software Microsoft Windows CurrentVersion Internet Settings ProxyOverride localO - BHO HP Print Enhancer - C E- - -BF - C - C Program Files HP Digital Imaging Smart Web Printing hpswp printenhancer dllO - BHO AcroIEHlprObj Class - E F-C D - D -B D- B D BE B - C Program Files Adobe Acrobat ActiveX AcroIEHelper dllO - BHO RealPlayer Download and Record Plugin for Internet Explorer - C E -B - BC - - C CA - C Program Files Real RealPlayer rpbrowserrecordplugin dllO - BHO XML module - BCA - A - eaf- - C B D - C WINDOWS system msxml dllO - BHO DriveLetterAccess - CA D E- - CF- E - - C WINDOWS System DLA DLASHX W DLLO - BHO Groove GFS Browser Helper - - C - D -B F - BBC D A E - C PROGRA MICROS Office GRA E DLLO - BHO AcroIEToolbarHelper Class - AE CD -E - f- - EE - C Program Files Adobe Acrobat Acrobat AcroIEFavClient dllO - BHO Java Plug-In SSV Helper - DBC -A - b-BC - C C C A - C Program Files Java jre bin jp ssv dllO - BHO FlashFXP Helper for Internet Explorer - E A B-D - -AD - B EE - C PROGRA FlashFXP IEFlash dllO - BHO JQSIEStartDetectorImpl - E E F - CE- C -BC -EABFE F C - C Program Files Java jre lib deploy jqs ie jqs plugin dllO - BHO HP Smart BHO Class - FFFFFFFF-CF E- F B-BDC - E E A - C Program Files HP Digital Imaging Smart Web Printing hpswp BHO dllO - Toolbar Adobe PDF - -D C - - FA - E EAAC - C Program Files Adobe Acrobat Acrob... Read more

A:google redirecting links

Please make sure you disable ALL of your Antivirus/Antispyware/Firewall before running ComboFix.. Please visit HERE if you don't know how.. Please re-enable them back after performing all steps given..Please download ComboFix by sUBs from one of the locations below, and save it to your Desktop.Link 1Link 2Link 3Double click combofix.exe and follow the prompts. Please, never rename Combofix unless instructed.If ComboFix asked you to install Recovery Console, please do so.. It will be your best interest..When finished, it shall produce a log for you. Post that log and a fresh HijackThis log in your next reply..Note: DON'T do anything with your computer while ComboFix is running.. Let ComboFix finishes its job..------------------------------------------------------------------------------------------------------------------NOTE: IMPORTANT! To other lurkers who see this topic, if you ever want to use ComboFix, please have a look at below tutorial.. You have been warned!http://www.bleepingcomputer.com/combofix/how-to-use-combofixYou should not run ComboFix unless you are specifically asked to by a helper. Also, due to the power of this tool it is strongly advised that you do not attempt to act upon any of the information displayed by ComboFix without supervision from someone who has been properly trained. If you do so, it may lead to problems with the normal functionality of your computer.

http://www.bleepingcomputer.com/forums/t/239437/google-redirecting-links/
Relevancy 70.09%

I use Firefox almost exclusively but I also tried IE after I ran into this problem and it seems to effect that as well When I try to open a link in a google search it redirects the results and opens what appears to be random pages not related to my search or the link I am trying to open I downloaded Chrome and I cannot even get it to open up the google home page I see others with very similar problems but I don t want to assume that what their problem or what their fix is is going to be the same for me Let me post my logs info redirecting links Google and we can go from there DDS Ver - Google links redirecting - - NTFSx Run by Tom at on Sun Internet Explorer BrowserJavaVersion Microsoft Windows XP Home Edition GMT - Running Processes C WINDOWSsystem Ati evxx exeC WINDOWSsystem svchost -k DcomLaunchsvchost Google links redirecting exeC WINDOWSSystem svchost exe -k netsvcssvchost exesvchost exeC Program FilesLavasoftAd-AwareAAWService exeC Google links redirecting WINDOWSsystem Ati evxx exeC WINDOWSExplorer EXEC WINDOWSsystem spoolsv exesvchost exeC WINDOWSsystem E S RP EXEC Program FilesJavajre binjqs exeC Program FilesCommon FilesLogiShrdLVCOMSERLVComSer exeC Program FilesCommon FilesLogiShrdLVMVFMLVPrcSrv exeC WINDOWSsystem svchost exe -k imgsvcC Program FilesCommon FilesLogiShrdLVCOMSERLVComSer exeC Program FilesCommon FilesLogiShrdLComMgrCommunications Helper exeC WINDOWSsystem wscntfy exeC Program FilesLogitechQuickCamQuickcam exeC WINDOWSSystem spoolDRIVERSW X E FATIAEA EXEC Program FilesCommon FilesJavaJava Updatejusched exeC WINDOWSsystem ctfmon exeC Program FilesSpybot - Search amp DestroyTeaTimer exeC Program FilesATI TechnologiesATI ACECore-StaticMOM exeC Program FilesCommon FilesLogishrdLQCVFXCOCIManager exeC Program FilesATI TechnologiesATI ACECore-Staticccc exeC Program FilesMozilla Firefoxfirefox exeC Program FilesLavasoftAd-AwareAAWTray exeF Downloadsdds scr C WINDOWSsystem WBEMWMIADAP EXE Pseudo HJT Report uStart Page hxxp www google com BHO C C A-E - b - D - CECB - No FileBHO Windows Live Sign-in Helper d - c - abf- ecc- c - c program filescommon filesmicrosoft sharedwindows liveWindowsLiveLogin dllBHO Java Plug-In SSV Helper dbc -a - b-bc - c c c a - c program filesjavajre binjp ssv dllBHO JQSIEStartDetectorImpl Class e e f - ce- c -bc -eabfe f c - c program filesjavajre libdeployjqsiejqs plugin dlluRun ctfmon exe c windowssystem ctfmon exeuRun SpybotSD TeaTimer c program filesspybot - search amp destroyTeaTimer exemRun LogitechCommunicationsManager quot c program filescommon fileslogishrdlcommgrCommunications Helper exe quot mRun LogitechQuickCamRibbon quot c program fileslogitechquickcamQuickcam exe quot hidemRun RTHDCPL RTHDCPL EXEmRun SkyTel SkyTel EXEmRun Alcmtr ALCMTR EXEmRun MARTUCCIEPSON Stylus CX Series c windowssystem spooldriversw x e fatiaea exe p quot martucciEPSON Stylus CX Series quot O quot USB quot M quot Stylus CX quot mRun EnableDCOM NmRun Six Engine quot c program filesasusepu- engineFourEngine exe quot -bmRun SunJavaUpdateSched quot c program filescommon filesjavajava updatejusched exe quot mRun StartCCC quot c program filesati technologiesati acecore-staticCLIStart exe quot MSRunmRunServices Secure Driver c docume tomlocals tempmjf exedRunOnce WUAppSetup c program filescommon fileslogishrdWUApp exe -v x d -p x d -f video -m logitech -d IE e e dd -d - - b -f ba - windir Network Diagnosticxpnetdiag exeIE FB F -F - d -BB E- C F - c program filesmessengermsmsgs exeDPF AD C - E- D -B E - F D - hxxp java sun com update jinstall- -windows-i cabDPF CAFEEFAC- - - -ABCDEFFEDCBA - hxxp java sun com update jinstall- -windows-i cabDPF CAFEEFAC- - - -ABCDEFFEDCBA - hxxp java sun com update jinstall- -windows-i cabDPF CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA - hxxp java sun com update jinstall- -windows-i cabTCP C A A- - A -AE - F EA C CF TCP A B - D D- CB -B - CE C Notify AtiExtEvent - Ati evxx dllSSODL WPDShServiceObj - AAA BA- A C- B - D - D DB - c windowssystem wpdshserviceobj dllHosts www spywareinfo ... Read more

A:Google links redirecting

Hi marduc,Welcome to Virus/Trojan/Spyware/Malware Removal (VTSMR) forum. I am going to assist you with your problem.Please refrain from making any changes to your system (scanning or running other tools, updating Windows, installing applications, removing files, etc.) from now on as it might interfere with our fixes. Please let me know in your next reply if you agree with this.You have the program Spybot S&D (Teatimer option) running on your machine. We need to disable TeaTimer so it does not interfere with the fixes we are about to do. This will only take a few seconds.First disable TeaTimer:Run Spybot-S&DGo to the Mode menu, and make sure Advanced Mode is selectedOn the left hand side, choose Tools -> ResidentUncheck Resident TeaTimer and OK any promptsRestart your computer.Instruction is also here: How to disable TeaTimer during HijackThis CleanupNote:If teatimer gives you a warning afterwards that some changes were made, allow this instead of blocking it.Then download ResetTeaTimer.exe to your desktop.Doubleclick ResetTeaTimer.exe and let it run.Note: The Teatimer should be kept disabled until I give you the clean sign.Please uninstall both Daemon Tools and Alchol 120 as they interfere with our tools and lead to false positive. You may install them again when we are done.Reboot at least once after uninstalling the above tools.Please download MBR.EXE by GMER. Save the file in your Windows directory (C:\Windows).Download http://download.bleepingcomputer.com/farbar/TDLfix.exe and save it to your desktop.Close all the open windows.Double-click TDLfix.exe to run the tool.Type (or copy the following and right-click to paste) in the command window and press Enter:mbrA log file will open, please post the content of it to your reply.

http://www.bleepingcomputer.com/forums/t/317188/google-links-redirecting/
Relevancy 70.09%

On my other computer, every time I click a link in a search engine result I get redirected to a random spam site. How can I fix this? The computer is running Windows XP.
 

Relevancy 70.09%

Hi I think I have some sort of malware on my PC Most of the time google links are redirecting to some unknown site Also google links Google redirecting search is running very slow Here is the log as requested DDS Ver - - - NTFSx Run by Sonny at on Wed Internet Explorer Microsoft Windows Home Premium GMT Google links redirecting Running Processes Google links redirecting C windows system wininit exe C Program Files AVG AVG avgchsvx exe C Program Files AVG AVG avgrsx exe C windows system lsm exe C Program Files AVG AVG avgcsrvx exe C windows system svchost exe -k DcomLaunch C windows system svchost exe -k RPCSS C windows System svchost exe -k LocalServiceNetworkRestricted C windows System svchost exe -k LocalSystemNetworkRestricted C windows system svchost exe -k netsvcs C windows system svchost exe -k LocalService C windows system svchost exe -k NetworkService C windows System spoolsv exe C windows system svchost exe -k LocalServiceNoNetwork C Program Files Common Files Apple Mobile Device Support AppleMobileDeviceService exe C Program Files AVG AVG avgwdsvc exe C Program Files Microsoft Small Business Business Contact Manager BcmSqlStartupSvc exe C Program Files Bonjour mDNSResponder exe C windows system svchost exe -k LocalServiceAndNoImpersonation C windows system svchost exe -k hpdevmgmt c Program Files Microsoft SQL Server MSSQL MSSQL Binn sqlservr exe C windows System svchost exe -k HPZ C windows System svchost exe -k HPZ c Program Files Microsoft SQL Server Shared sqlwriter exe C Program Files TeamViewer Version TeamViewer Service exe C windows system TODDSrv exe C Program Files TOSHIBA Power Saver TosCoSrv exe C Program Files TOSHIBA TECO TecoService exe C Program Files AVG AVG avgnsx exe C windows system svchost exe -k HPService C Program Files LSI SoftModem agrsmsvc exe C Program Files TOSHIBA ConfigFree CFIWmxSvcs exe C Program Files TOSHIBA ConfigFree CFSvcs exe C Program Files TOSHIBA RSelect RSelSvc exe C windows System svchost exe -k secsvcs C Program Files Windows Media Player wmpnetwk exe C windows system SearchIndexer exe C windows system taskhost exe C windows system Dwm exe C windows Explorer EXE C Windows System igfxtray exe C Windows System igfxpers exe C windows system igfxsrvc exe C Program Files TOSHIBA Utilities KeNotify exe C Program Files TOSHIBA Power Saver TPwrMain exe C Program Files TOSHIBA SmoothView SmoothView exe C Program Files TOSHIBA FlashCards TCrdMain exe C Program Files Realtek Audio HDA RtHDVCpl exe C Program Files Synaptics SynTP SynTPEnh exe C Program Files TOSHIBA TECO TEco exe C Program Files TOSHIBA TOSHIBA Service Station ToshibaServiceStation exe C Program Files TOSHIBA BulletinBoard TosNcCore exe C Program Files TOSHIBA ReelTime TosReelTimeMonitor exe C Program Files AVG AVG avgtray exe C Program Files HP HP Software Update hpwuSchd exe C Program Files DivX DivX Update DivXUpdate exe C Program Files Common Files Adobe ARM AdobeARM exe C windows system svchost exe -k imgsvc C Program Files iTunes iTunesHelper exe C Program Files Common Files Java Java Update jusched exe C Program Files Microsoft Office Office GrooveMonitor exe C Program Files Google GoogleToolbarNotifier GoogleToolbarNotifier exe C Program Files Veoh Networks VeohWebPlayer veohwebplayer exe C Program Files Common Files InstallShield UpdateService ISUSPM exe C Program Files HP Digital Imaging bin hpqtra exe C Program Files Synaptics SynTP SynTPHelper exe C Program Files OpenOffice org program soffice exe C Program Files OpenOffice org program soffice bin C windows system igfxext exe C Program Files iPod bin iPodService exe C windows System svchost exe -k LocalServicePeerNet C Program Files HP Digital Imaging bin hpqSTE exe C Program Files HP Digital Imaging bin hpqbam exe C Program Files Internet Explorer iexplore exe C Program Files Internet Explorer iexplore exe C Program Files HP Digital Imaging bin hpqgpc exe C Program Files HP Digital Imaging smart web printing hpswp clipbook exe C Program Files Google Google... Read more

A:Google links redirecting

Hello and Welcome to TSF.

Please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription.

Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.

------------------------------------------------------

I need to see a gmer log in order to help you.

http://www.techsupportforum.com/f50/...lp-305963.html

------------------------------------------------------

http://www.techsupportforum.com/forums/f100/google-links-redirecting-530764.html
Relevancy 70.09%

I have been having an issue with google redirecting any link to completely unrelated sites. I can look up the grand canyon and it will take me to a yellow pages site. I have done scans with McAfee, CW shredder, and Malyware Bytes Anti-malware. None of them find anything, but google continues not to take me to the correct link. This is more than annoying. Please help if you can!

Thanks!

A:Google Redirecting Links

Hello and welcome to TSF.

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

http://www.techsupportforum.com/forums/f100/google-redirecting-links-456202.html
Relevancy 70.09%

Hello Recently I've been having a issue with Google link redirecting I've run antivirus scans and removed any malware the programs found but links redirecting! Google the main problem persists other than this the computer performance seems to be all Google links redirecting! right Any help would be greatly appreciated Here are the DDS logs and much thanks Google links redirecting! in advance DDS Ver - - - NTFSx Run by Compaq Owner at on Mon Internet Explorer Microsoft Windows XP Home Edition GMT - AV AVG Anti-Virus Free On-access scanning enabled Outdated DDD - FF- F- E B- D D BF Running Processes C WINDOWS system svchost -k DcomLaunch svchost exe C WINDOWS System svchost exe -k netsvcs svchost exe svchost exe C WINDOWS Explorer EXE C Program Files Lavasoft Ad-Aware AAWService exe C WINDOWS system spoolsv exe C Program Files Common Files Apple Mobile Device Support bin AppleMobileDeviceService exe C PROGRA AVG AVG avgwdsvc exe C Program Files Bonjour mDNSResponder exe C Program Files Common Files Microsoft Shared VS DEBUG MDM EXE C WINDOWS system HPZipm exe C WINDOWS system svchost exe -k imgsvc C PROGRA AVG AVG avgrsx exe C PROGRA AVG AVG avgnsx exe C WINDOWS system wscntfy exe C Program Files Java j re bin jusched exe C windows system hpsysdrv exe C WINDOWS AGRSMMSG exe C HP KBD KBD EXE C WINDOWS ALCXMNTR EXE C Program Files ANI ANIWZCS Service WZCSLDR exe C Program Files D-Link D-Link Wireless N DWA- AirNCFG exe C Program Files QuickTime QTTask exe C Program Files iTunes iTunesHelper exe C PROGRA AVG AVG avgtray exe C WINDOWS system ctfmon exe C Program Files Compaq Connections Program Compaq Connections exe C Program Files iPod bin iPodService exe C WINDOWS system wuauclt exe C Program Files Lavasoft Ad-Aware AAWTray exe C Program Files InterMute SpySubtract SpySub exe C WINDOWS system notepad exe C Program Files Mozilla Firefox firefox exe C Documents and Settings Compaq Owner Desktop dds scr Pseudo HJT Report uStart Page hxxp www ask com o amp l dis uSearch Page hxxp ie redirect hp com svs rdr TYPE amp tp iesearch amp locale EN US amp c Q amp bd presario amp pf desktop uDefault Page URL hxxp ie redirect hp com svs rdr TYPE amp tp iehome amp locale EN US amp c Q amp bd presario amp pf desktop uDefault Search URL hxxp ie redirect hp com svs rdr TYPE amp tp iesearch amp locale EN US amp c Q amp bd presario amp pf desktop uSearch Bar hxxp ie redirect hp com svs rdr TYPE amp tp iesearch amp locale EN US amp c Q amp bd presario amp pf desktop mDefault Page URL hxxp ie redirect hp com svs rdr TYPE amp tp iehome amp locale EN US amp c Q amp bd presario amp pf desktop mDefault Search URL hxxp toolbar ask com toolbarv askRedirect o amp gct amp gc amp q mSearch Page hxxp ie redirect hp com svs rdr TYPE amp tp iesearch amp locale EN US amp c Q amp bd presario amp pf desktop mStart Page hxxp ie redirect hp com svs rdr TYPE amp tp iehome amp locale EN US amp c Q amp bd presario amp pf desktop mSearch Bar hxxp ie redirect hp com svs rdr TYPE amp tp iesearch amp locale EN US amp c Q amp bd presario amp pf desktop uInternet Connection Wizard ShellNext hxxp ie redirect hp com svs rdr TYPE amp tp iehome amp locale EN US amp c Q amp bd presario amp pf desktop uInternet Settings ProxyOverride local uSearchURL Default hxxp toolbar ask com toolbarv askRedirect o amp gct amp gc amp q s uURLSearchHooks AVG Security Toolbar BHO a bc a - f - -aa - d c - c program files avg avg toolbar IEToolbar dll uURLSearchHooks H - No File uURLSearchHooks H - No File BHO AcroIEHlprObj Class e f-c d - d -b d- b d be b - c program files adobe acrobat reader activex AcroIEHelper dll BHO AskBar BHO f d - - d - c -aa e ed - c program files askbardis bar bin askBar dll BHO AVG Safe Search ca f - f e- b -a e- e e c c - c program files avg avg avgssie dll BHO AVG Security Toolbar BHO a bc a - f - -aa - d c - c program files avg avg toolbar IEToolbar dll TB Ask Toolbar d e-fd b- e -b - d b f - c program files askbardis bar bin askBar dll TB AVG Security Tool... Read more

A:Google links redirecting!

Hello

Apologize for the delay in response we get overwhelmed at times but we are trying our best to keep up.
If you have since resolved the original problem you were having would appreciate you letting us know If not please perform the following below so I can have a look at the current condition of your machine.

Thanks and again sorry for the delay.

Before we can continue, please post a fresh DDS logs back here

http://www.bleepingcomputer.com/forums/t/248450/google-links-redirecting/
Relevancy 70.09%

I have a problem where google images and even regular links are redirecting me to random websites Malwarebytes and spybot come up clean so im stumped and cannot solve this myself Here is my Highjack this log any Google Links Redirecting help is appreciated Logfile of Trend Micro HijackThis v Scan saved at PM on Platform Windows WinNT MSIE Internet Explorer v Boot mode Normal Running processes C Program Google Links Redirecting Files x Google Links Redirecting Windows Live Messenger msnmsgr exe C Users Robert AppData Roaming Octoshape Octoshape Streaming Services OctoshapeClient exe C Program Files x Xfire Xfire exe C Program Files x Logitech G G exe C Program Files x Winamp winampa exe C Program Files x iTunes iTunesHelper exe C Program Files x Windows Media Player wmplayer exe C Program Files x Windows Live Contacts wlcomm exe C Program Files x Mozilla Firefox firefox exe C Program Files x Mozilla Firefox plugin-container exe C Program Files x Trend Micro HiJackThis HiJackThis exe C Windows SysWOW DllHost exe R - HKCU Software Microsoft Internet Explorer Main Search Bar Preserve R - HKCU Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKCU Software Microsoft Internet Explorer Main Start Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Default Page URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Google Links Redirecting Explorer Main Default Search URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Start Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Search SearchAssistant R - HKLM Software Microsoft Internet Explorer Search CustomizeSearch R - HKLM Software Microsoft Internet Explorer Main Local Page C Windows SysWOW blank htm R - HKCU Software Microsoft Windows CurrentVersion Internet Settings ProxyOverride local R - HKCU Software Microsoft Internet Explorer Toolbar LinksFolderName F - REG win ini load C Windows svc exe O - Hosts www com O - BHO WormRadar com IESiteBlocker NavFilter - CA F - F E- B -A E- E E C C - C Program Files x AVG AVG avgssie dll file missing O - BHO no name - C C A-E - b - D - CECB - no file O - BHO Windows Live Sign-in Helper - D - C - ABF- ECC- C - C Program Files x Common Files Microsoft Shared Windows Live WindowsLiveLogin dll O - BHO SkypeIEPluginBHO - AE - E C- ED - F B-F F A - C Program Files x Skype Toolbars Internet Explorer skypeieplugin dll O - BHO Java tm Plug-In SSV Helper - DBC -A - b-BC - C C C A - C Program Files x Java jre bin jp ssv dll O - HKLM Run CTxfiHlp CTXFIHLP EXE O - HKLM Run AsioThk Reg REGSVR EXE S CTASIO DLL O - HKLM Run CTHelper CTHELPER EXE O - HKLM Run SunJavaUpdateSched quot C Program Files x Common Files Java Java Update jusched exe quot O - HKLM Run Logitech G C Program Files x Logitech G G exe O - HKLM Run WinampAgent quot C Program Files x Winamp winampa exe quot O - HKLM Run QuickTime Task quot C Program Files x QuickTime QTTask exe quot -atboottime O - HKLM Run iTunesHelper quot C Program Files x iTunes iTunesHelper exe quot O - HKCU Run msnmsgr quot C Program Files x Windows Live Messenger msnmsgr exe quot background O - HKCU Run Octoshape Streaming Services quot C Users Robert AppData Roaming Octoshape Octoshape Streaming Services OctoshapeClient exe quot -inv bootrun O - HKCU Run uTorrent quot C Program Files x uTorrent uTorrent exe quot O - HKLM Policies Explorer Run cmjc C Users Robert AppData Local Temp exe O - HKLM Policies Explorer Run obw u C Users Robert AppData Local Temp d x hdf exe O - HKLM Policies Explorer Run apps C Windows fonts services exe O - HKUS S- - - Run Sidebar ProgramFiles Windows Sidebar Sidebar exe autoRun User LOCAL SERVICE O - HKUS S- - - RunOnce mctadmin C Windows System mctadmin exe User LOCAL SERVICE O - HKUS S- - - Run Sidebar ProgramFiles... Read more

A:Google Links Redirecting

DDS LOG
DDS (Ver_09-09-29.01) - NTFSx86
Run by Robert at 18:30:44.47 on Fri 09/10/2010
Internet Explorer: 8.0.7600.16385 BrowserJavaVersion: 1.6.0_20
Microsoft Windows 7 Professional 6.1.7600.0.1252.1.1033.18.3007.1774 [GMT -4:00]

AV: Defense Center *On-access scanning enabled* (Outdated) {28e00e3b-806e-4533-925c-f4c3d79514b9}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\WUDFHost.exe
C:\Windows\system32\WUDFHost.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files (x86)\Bonjour\mDNSResponder.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe
C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe
C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
C:\Users\Robert\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe
C:\Program Files (x86)\Xfire\Xfire.exe
C:\Program Files (x86)\Logitech\G35\G35.exe
C:\Program Files (x86)\Winamp\winampa.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Xfire\xfire64.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Windows Media Player\WMPSideShowGadget.exe
C:\Program Files (x86)\Windows Media Player\wmplayer.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
C:\Program Files (x86)\Xfire\xfire64.exe
C:\Windows\system32\taskhost.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe
C:\Windows\SysWOW64\NOTEPAD.EXE
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\DllHost.exe
C:\Users\Robert\Desktop\dds.com
C:\Windows\system32\conhost.exe
C:\Windows\system32\wbem\wmiprvse.exe

============== Pseudo HJT Report ===============

uSearch Bar = Preserve
mLocal Page = c:\windows\syswow64\blank.htm
uInternet Settings,ProxyOverride = *.local
uWindows: load=c:\windows\svc.exe
BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files (x86)\avg\avg9\avgssie.dll
BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files (x86)\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Skype add-on for Internet Explorer: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - c:\program files (x86)\skype\toolbars\internet explorer\skypeieplugin.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files (x86)\java\jre6\bin\jp2ssv.dll
TB: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
uRun: [msnmsgr] "c:\program files (x86)\windows live\messenger\msnmsgr.exe" /background
uRun: [Octoshape Streaming Services] "c:\users\robert\appdata\roaming\octoshape\octoshape streaming services\OctoshapeClient.exe" -inv:bootrun
uRun: [uTorrent] "c:\program files (x86)\utorrent\uTorrent.exe"
mRun: [... Read more

https://forums.techguy.org/threads/google-links-redirecting.949164/
Relevancy 70.09%

Hi I've been noticing lately that some google links redirect me to other sites when I click on them - ad sites and sites for anti-virus software I've been watching streaming tv shows on links redirecting google the internet which I google links redirecting suspect has something to do with it I ran malwarebytes anti-malware which removed a few trojans but it's still happening I do not have a windows boot cd Thanks so so much for your help here's my dds file DDS Ver - - - NTFSx Run by Julia Sheng at on Sat Internet Explorer BrowserJavaVersion Microsoft Windows XP Home Edition GMT - Running Processes C WINDOWS system Ati evxx exe C WINDOWS system svchost -k DcomLaunch svchost exe C WINDOWS System svchost exe -k netsvcs C Program Files Intel Wireless Bin EvtEng exe C Program Files Intel Wireless Bin S EvMon exe C Program Files Intel Wireless Bin ZcfgSvc exe C Program Files Intel Wireless Bin WLKeeper exe C WINDOWS system Ati evxx exe C WINDOWS Explorer EXE svchost exe svchost exe C WINDOWS system spoolsv exe svchost exe C Program Files Common Files Apple Mobile Device Support bin AppleMobileDeviceService exe C Program Files Bonjour mDNSResponder exe C Program Files Java jre bin jqs exe C Program Files Dell QuickSet NICCONFIGSVC exe C Program Files Intel Wireless Bin RegSrvc exe C Program Files Dell Support Center bin sprtsvc exe C WINDOWS system svchost exe -k imgsvc C Program Files Smith Micro StuffIt ArcNameService exe C Program Files Apoint Apoint exe C Program Files Intel Wireless Bin ifrmewrk exe C Program Files Dell Media Experience PCMService exe C WINDOWS system dla tfswctrl exe C Program Files Common Files InstallShield UpdateService issch exe C Program Files Google Gmail Notifier gnotify exe C Program Files CyberLink PowerDVD DVDLauncher exe C Program Files Hewlett-Packard HP Software Update HPWuSchd exe C Program Files HP hpcoretech hpcmpmgr exe C WINDOWS system spool drivers w x hpztsb exe C WINDOWS system wscntfy exe C PROGRA Intel Wireless Bin XConfig exe C Program Files Common Files Real Update OB realsched exe C Program Files AirPort APAgent exe C Program Files iTunes iTunesHelper exe C Program Files Dell QuickSet Quickset exe C Program Files DellSupport DSAgnt exe C Program Files Google Google Talk googletalk exe C WINDOWS system ctfmon exe C Program Files Digital Line Detect DLG exe C Program Files Apoint Apntex exe C Program Files iPod bin iPodService exe C WINDOWS system wbem wmiapsrv exe C Program Files Mozilla Firefox firefox exe C WINDOWS system wuauclt exe C Documents and Settings Julia Sheng Desktop dds scr Pseudo HJT Report uStart Page hxxp www dell me com myway uSearch Page hxxp www google com uDefault Page URL hxxp www dell me com myway uSearch Bar hxxp mysearch myway com jsp dellsidebar jsp p DE mDefault Page URL hxxp www dell me com myway mStart Page hxxp www dell me com myway uInternet Connection Wizard ShellNext iexplore uSearchURL Default hxxp www google com keyword s mSearchAssistant hxxp www google com ie uURLSearchHooks amp Yahoo Toolbar ef bd -c fb- d - f- d f - BHO AcroIEHlprObj Class e f-c d - d -b d- b d be b - c program files adobe acrobat reader activex AcroIEHelper dll BHO DriveLetterAccess ca d e- - cf- e - - c windows system dla tfswshx dll BHO Java tm Plug-In SSV Helper bb-d f - c-b eb-d daf d d - c program files java jre bin ssv dll BHO JQSIEStartDetectorImpl Class e e f - ce- c -bc -eabfe f c - c program files java jre lib deploy jqs ie jqs plugin dll TB amp Yahoo Toolbar ef bd -c fb- d - f- d f - EB Real com fe fa -d c- d - fa- c f afe - c windows system Shdocvw dll uRun MSMSGS quot c program files messenger msmsgs exe quot background uRun DellSupport quot c program files dellsupport DSAgnt exe quot startup uRun DellSupportCenter quot c program files dell support center bin sprtcmd exe quot P DellSupportCenter uRun googletalk quot c program files google google talk googletalk exe quot autostart uRun ctfmon exe c windows system ctfmon exe mRun Apoint c program files apoint Apoint exe... Read more

A:google links redirecting

Hi,

Please do the following:

Download ComboFix from one of the following locations:
Link 1
Link 2

VERY IMPORTANT !!! Save ComboFix.exe to your Desktop

* IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here Double click on ComboFix.exe & follow the prompts.
As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.
**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.


Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:


Click on Yes, to continue scanning for malware.
When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply.
Notes:
1. Do not mouse-click Combofix's window while it is running. That may cause it to stall.
2. Do not "re-run" Combofix. If you have a problem, reply back for further instructions.


Please make sure you include the combo fix log in your next reply as well as describe how your computer is running now

http://www.techsupportforum.com/forums/f100/google-links-redirecting-427437.html
Relevancy 70.09%

Hello everyone I recently downloaded a video codec that turned out to be a virus I've run Spybot search and destroy google me redirecting links as well as AVG Free scans Spybot picked up a few things and I hit the heal button on spybot to deal with them AVG didn't pick up anything after the scan with spybot but I'm still having issues with search links in google and yahoo The problem only occurs in Opera Firefox and Internet Explorer I recently installed Chrome and I'm having no issues with any google searches or any links with that google links redirecting me browser Is it possible that the virus is still on my computer I'm not sure how to deal with this problem I was also wondering I have a new operating system that I want to install if google links redirecting me I just wipe the hard drive and install the new operating system will this get rid of the virus permanently or do I run the risk of it coming back Also is it save to make backups of anything on the computer right now Thanks in advance for any help

A:google links redirecting me

Hello, aznkid8919 and welcome to TSF.


Quote:




I have a new operating system that I want to install, if I just wipe the hard drive and install the new operating system, will this get rid of the virus permanently or do I run the risk of it coming back?




In most cases, yes, this will take care of any infection.


Quote:




Also, is it save to make backups of anything on the computer right now?




In most cases, yes, it is safe to make back ups.

I say in most cases because there are certain file infectors out there which can make a backup of certain file types unwise. In most cases, backups of documents and pictures would not be affected.

If you want to try to clean it instead, or help identifying the infection present to determine if backups would be more likely to be safe....


We want all our members to perform the steps outlined in the link I'll give you below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

---------------------------------------------------------------------------------------------

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed. I currently have as many open topics as I can effectively handle; this will have you back in queue with the proper logs so an available helper would be able to assist.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

http://www.techsupportforum.com/forums/f100/google-links-redirecting-me-440313.html
Relevancy 70.09%

So I ve got this problem with being redirected to random sites I ve looked links Google Redirecting at other topics here and I have followed instructions and ran both MBAM Google Redirecting links and RootRepeal and have logs for both here are both of the logs Please help MBAMMalwarebytes Anti-Malware Database version Windows Service Pack Internet Explorer PMmbam-log- - - - - txtScan type Quick ScanObjects scanned Time elapsed minute s second s Memory Processes Infected Memory Modules Infected Registry Keys Infected Registry Values Infected Registry Data Items Infected Folders Infected Files Infected Memory Processes Infected No malicious items detected Memory Modules Infected No malicious items detected Registry Keys Infected HKEY CURRENT USER SOFTWARE NeoChronos Trojan FakeAlert - gt Quarantined and deleted successfully HKEY CURRENT USER SOFTWARE XML Trojan FakeAlert - gt Quarantined and deleted successfully HKEY CURRENT USER SOFTWARE Margotte Trojan FakeAlert - gt Quarantined and deleted successfully Registry Values Infected No malicious items detected Registry Data Items Infected HKEY CURRENT USER SOFTWARE Microsoft Windows CurrentVersion Explorer Advanced Start ShowSearch Hijack StartMenu - gt Bad Good - gt Quarantined and deleted successfully Folders Infected No malicious items detected Files Infected C Windows Tasks BA B- E - b - C- CC E E E job Trojan Downloader - gt Quarantined and deleted successfully C Windows Tasks DC -A - d -B C -FD CA A C job Trojan Downloader - gt Quarantined and deleted successfully RootRepealROOTREPEAL AD - Scan Start Time Program Version Version Windows Version Windows Vista SP Drivers-------------------Name dump atapi sysImage Path C Windows System Drivers dump atapi sysAddress x E B Size File Visible No Signed -Status -Name dump dumpata sysImage Path C Windows System Drivers dump dumpata sysAddress x E Size File Visible No Signed -Status -Name kymmx sysImage Path C Windows System drivers kymmx sysAddress x A AB Size File Visible No Signed -Status -Name rootrepeal sysImage Path C Windows system drivers rootrepeal sysAddress xA B Size File Visible No Signed -Status -Name splv sysImage Path C Windows System Drivers splv sysAddress x A Size File Visible No Signed -Status -Name sptdImage Path Driver sptdAddress x Size File Visible No Signed -Status -Hidden Locked Files-------------------Path C RECYCLE BINStatus Visible to the Windows API but not on disk Path C - logStatus Visible to the Windows API but not on disk Path C jagex cache Status Visible to the Windows API but not on disk Path C AcerStatus Visible to the Windows API but not on disk Path C ATIStatus Visible to the Windows API but not on disk Path C autoexec batStatus Visible to the Windows API but not on disk Path C bdlog txtStatus Visible to the Windows API but not on disk Path C BookStatus Visible to the Windows API but not on disk Path C BootStatus Visible to the Windows API but not on disk Path C bootmgrStatus Visible to the Windows API but not on disk Path C BOOTSECT BAKStatus Visible to the Windows API but not on disk Path C CLMS logStatus Visible to the Windows API but not on disk Path C config sysStatus Visible to the Windows API but not on disk Path C Cucu Video log txtStatus Visible to the Windows API but not on disk Path C data uhaStatus Visible to the Windows API but not on disk Path C data uhaStatus Visible to the Windows API but not on disk Path C Documents and SettingsStatus Visible to the Windows API but not on disk Path C DRVStatus Visible to the Windows API but not on disk Path C dvdsantaStatus Visible to the Windows API but not on disk Path C FrapsStatus Visible to the Windows API but not on disk Path C IntelStatus Visible to the Windows API but not on disk Path C IO SYSStatus Visible to the Windows API but not on disk Path C IPH PHStatus Visible to the Windows API but not on disk Path C KeysStatus Visible to the Windows API but not on disk Path C MDisc logStatus Visible to the Windows API but not on disk Path C MDR l... Read more

Relevancy 70.09%

Every time I do a google search in Google Chrome, I keep getting redirected.  Sometimes chrome will block the page and say "suspicious malware", other times I get redirected to some sort of product advertisement page (example: http://www.gamefront.com/next-gen-consoles-2013/?utm_source=advertise&D10&utm_medium=CPC&utm_campaign=Tmobile-A0016711-advertise), and other times it will take me to another search page with new links (the search page is called "buzz" and has an icon of a bee in the upper left corner).  I am concerned that I may have several viruses/malwares that are putting my information at risk and I need to clean things up!! I have tried using McAfee and Avast, and neither have picked up anything.  Please help!

A:Google links keep redirecting - HELP!

Welcome aboard   Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2 SecurityCheck may produce some false warning(s), so leave the results reading to me. Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeClick Go and post the result. Download Malwarebytes' Anti-Malware (aka MBAM): http://www.malwarebytes.org/products/malwarebytes_free to your desktop.* Double-click mbam-setup.exe and follow the prompts to install the program.* At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.* If an update is found, it will download and install the latest version.* Once the program has loaded, select Perform quick scan, then click Scan.* When the scan is complete, click OK, then Show Results to view the results.* Be sure that everything is checked, and click Remove Selected.* When completed, a log will open in Notepad.* Post the log back here.Be sure to restart the computer.The log can also be found here:C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txtOr at C:\Program Files\Malwarebytes' Anti-Malware\Logs\log-date.txtDownload Malwarebytes Anti-Rootkit from HERE to your Desktop.Unzip downloaded file.Open the folder where the contents were unzipped and run mbar.exeFollow the instructions in the wizard to update and allow the program to scan your computer for threats.DO NOT click on the Cleanup button. Simply exit the program.When done, please post the two logs produced they will be in the MBAR folder..... mbar-log-xxxxx.txt and system-log.txt Please download Rkill (courtesy of BleepingComputer.com) to your desktop.There are 2 different versions. If one of them won't run then download and try to run the other one.You only need to get one of these to run, not all of them. You may get warnings from your antivirus about this tool, ignore them or shutdown your antivirus.rKill.exe: http://www.bleepingcomputer.com/download/rkill/dl/10/iExplore.exe (renamed rKill.exe): http://www.bleepingcomputer.com/download/rkill/dl/11/Double-click on the Rkill desktop icon to run the tool.If using Vista or Windows 7 right-click on it and choose Run As Administrator.A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.If not, delete the file, then download and use the one provided in Link 2.Do not reboot until instructed.If the tool does not run from any of the links provided, please let me know.If normal mode still doesn't work, run the tool from safe mode.When the scan is done Notepad will open with rKill log.Post it in your next reply.NOTE. rKill.txt log will also be present on your desktop.NOTE Do NOT wrap your logs in "quote" or "code" brackets.

http://www.bleepingcomputer.com/forums/t/514052/google-links-keep-redirecting-help/
Relevancy 70.09%

Hi Please do the following Please download aswMBR exe and save it to your desktop Double click aswMBR exe to start redirecting on links Google the tool When asked if you want to download Avast s virus Google redirecting on links definitions please select Yes Click Scan Upon completion of the scan click Save log and save it to your desktop and post that log in your next reply for review Note - do NOT attempt any Fix yet You will also notice another file created on the desktop named MBR dat Right click that file and select Send To gt Compressed zipped file Attach that zipped file in your next reply as well NEXTPlease download TDSSKiller zipExtract it to your desktopDouble click TDSSKiller exewhen the window opens click on Change Parametersunder Additional options put a check mark in the box next to Detect TDLFS File System click OK Press Start Scan As we are only looking for a log of what is on the machine right now gt choose to skip whatever is foundThen click Continue gt Reboot nowCopy and paste the log in your next reply A copy of the log will be saved automatically to the root of the drive typically C

A:Google redirecting on links

Thank you so much. Here is what you've requested:
aswMBR version 0.9.9.1649 Copyright© 2011 AVAST Software
Run date: 2012-03-12 20:27:48
-----------------------------
20:27:48.984 OS Version: Windows 5.1.2600 Service Pack 3
20:27:48.984 Number of processors: 1 586 0x7F02
20:27:48.984 ComputerName: MATT-9A02033ADE UserName: Administrator
20:27:53.656 Initialize success
20:32:32.765 AVAST engine defs: 12031200
23:52:33.796 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Scsi\nvgts1Port0Path0Target0Lun0
23:52:33.812 Disk 0 Vendor: ST332081 HP22 Size: 305245MB BusType: 3
23:52:33.812 Device \Driver\nvgts -> DriverStartIo SCSIPORT.SYS f72c140e
23:52:33.875 Disk 0 MBR read successfully
23:52:33.875 Disk 0 MBR scan
23:52:33.906 Disk 0 Windows XP default MBR code
23:52:33.937 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 292958 MB offset 63
23:52:34.000 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 12284 MB offset 599979555
23:52:34.046 Disk 0 scanning sectors +625137345
23:52:34.484 Disk 0 scanning C:\WINDOWS\system32\drivers
23:52:38.984 File: C:\WINDOWS\system32\drivers\afd.sys **INFECTED** Win32:Sirefef-PL [Rtk]
23:53:20.906 Disk 0 trace - called modules:
23:53:20.968 ntkrnlpa.exe CLASSPNP.SYS disk.sys >>UNKNOWN [0xef7c3fc0]<<
23:53:20.968 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x8a378030]
23:53:20.968 3 CLASSPNP.SYS[f74c7fd7] -> nt!IofCallDriver -> [0x8a0db828]
23:53:20.968 \Driver\00001733[0x89686da0] -> IRP_MJ_CREATE -> 0xef7c3fc0
23:53:23.718 AVAST engine scan C:\WINDOWS
23:55:16.406 AVAST engine scan C:\WINDOWS\system32
00:11:18.750 AVAST engine scan C:\WINDOWS\system32\drivers
00:11:23.468 File: C:\WINDOWS\system32\drivers\afd.sys **INFECTED** Win32:Sirefef-PL [Rtk]
00:13:54.750 AVAST engine scan C:\Documents and Settings\Administrator
00:37:14.906 File: C:\Documents and Settings\Administrator\My Documents\Downloads\ESET\ESET Fix v4.30A.exe **INFECTED** Win32:AutoIt-AMC [Trj]
00:49:00.234 AVAST engine scan C:\Documents and Settings\All Users
00:58:13.406 Scan finished successfully
08:41:29.328 Disk 0 MBR has been saved successfully to "C:\Documents and Settings\Administrator\Desktop\MBR.dat"
08:41:29.328 The log file has been saved successfully to "C:\Documents and Settings\Administrator\Desktop\aswMBR.txt"

08:43:47.0312 0696 TDSS rootkit removing tool 2.7.20.0 Mar 9 2012 17:10:43
08:43:47.0609 0696 ============================================================
08:43:47.0609 0696 Current date / time: 2012/03/13 08:43:47.0609
08:43:47.0609 0696 SystemInfo:
08:43:47.0609 0696
08:43:47.0609 0696 OS Version: 5.1.2600 ServicePack: 3.0
08:43:47.0609 0696 Product type: Workstation
08:43:47.0609 0696 ComputerName: MATT-9A02033ADE
08:43:47.0609 0696 UserName: Administrator
08:43:47.0609 0696 Windows directory: C:\WINDOWS
08:43:47.0609 0696 System windows directory: C:\WINDOWS
08:43:47.0609 0696 Processor architecture: Intel x86
08:43:47.0609 0696 Number of processors: 1
08:43:47.0609 0696 Page size: 0x1000
08:43:47.0609 0696 Boot type: Normal boot
08:43:47.0609 0696 ============================================================
08:44:00.0656 0696 Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000058
08:44:00.0687 0696 \Device\Harddisk0\DR0:
08:44:00.0703 0696 MBR used
08:44:00.0703 0696 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x23C2F5E4
08:44:00.0703 0696 \Device\Harddisk0\DR0 ... Read more

http://www.bleepingcomputer.com/forums/t/446007/google-redirecting-on-links/
Relevancy 70.09%

I have been searching and attempting to apply other fixes to no avail so I think I links Google redirecting need help When I google search I can't click on a Google redirecting links link and get the page that I should Google redirecting links be getting I get search engines ads and random pages MBAM has not found any virus spyware at all The computer is Google redirecting links pretty clean though I just got it on Feb so I haven't had the opportunity to mess it up It's a Firefox issue from what I can tell I do have access to the recovery disks I burnt upon receiving the laptop Here is my DDS report DDS Ver - - - NTFSx Run by Canada Computers at on Internet Explorer BrowserJavaVersion Microsoft Windows Vista Home Premium GMT - SP Windows Defender enabled Updated D DDC A- F- FAE- E -DA C ACF Running Processes C Windows system wininit exe C Windows system lsm exe C Windows system svchost exe -k DcomLaunch C Windows system svchost exe -k rpcss C Windows system Ati evxx exe C Windows System svchost exe -k LocalServiceNetworkRestricted C Windows System svchost exe -k LocalSystemNetworkRestricted C Windows system svchost exe -k netsvcs C Windows system SLsvc exe C Windows system svchost exe -k LocalService C Windows system svchost exe -k NetworkService C Windows system Dwm exe C Windows system Ati evxx exe C Windows Explorer EXE C Windows system taskeng exe C Windows System spoolsv exe C Windows system svchost exe -k LocalServiceNoNetwork C Program Files McAfee com Agent mcagent exe C Program Files Realtek Audio HDA RtHDVCpl exe C Windows PLFSetI exe C Program Files Synaptics SynTP SynTPEnh exe C Program Files Acer Acer ePower Management ePowerTray exe C Program Files Launch Manager LManager exe C Program Files Windows Media Player wmpnscfg exe C Program Files ATI Technologies ATI ACE Core-Static MOM exe C Program Files AIM aim exe C Users CANADA AppData Local Temp RtkBtMnt exe C Program Files Acer Acer ePower Management ePowerSvc exe C Windows system svchost exe -k HsfXAudioService C Program Files McAfee SiteAdvisor McSACore exe c PROGRA COMMON mcafee mcproxy mcproxy exe C PROGRA McAfee VIRUSS mcshield exe C Windows system rundll exe C Program Files McAfee MPF MPFSrv exe C Program Files McAfee MSK MskSrver exe C Program Files EgisTec MyWinLocker x MWLService exe C Program Files NewTech Infosystems Acer Backup Manager IScheduleSvc exe C Program Files NewTech Infosystems NTI Backup Now SchedulerSvc exe C Windows system svchost exe -k NetworkServiceNetworkRestricted C Windows System svchost exe -k WerSvcGroup C Windows system SearchIndexer exe C Program Files Windows Media Player wmpnetwk exe C PROGRA McAfee MSC mcmscsvc exe C Windows system taskeng exe C Program Files Synaptics SynTP SynTPHelper exe C Program Files ATI Technologies ATI ACE Core-Static CCC exe C PROGRA McAfee VIRUSS mcsysmon exe c PROGRA COMMON mcafee mna mcnasvc exe C Windows system ctfmon exe C Program Files Adobe Reader Reader Eula exe C Program Files Real RealPlayer RealPlay exe C PROGRA FREEDO fdm exe C Program Files Mozilla Firefox firefox exe C Program Files Lavasoft Ad-Aware AAWService exe C Windows system wbem unsecapp exe C Windows system wbem wmiprvse exe C Program Files Lavasoft Ad-Aware AAWTray exe C Program Files Common Files Real Update OB realsched exe C Windows system taskeng exe C Windows system SearchProtocolHost exe C Windows system SearchFilterHost exe C Downloads Software dds com C Windows system conime exe C Windows system wbem wmiprvse exe Pseudo HJT Report uStart Page hxxp homepage acer com rdr aspx b ACAW amp l amp s amp o vp amp d amp m aspire uDefault Page URL hxxp homepage acer com rdr aspx b ACAW amp l amp s amp o vp amp d amp m aspire mStart Page hxxp homepage acer com rdr aspx b ACAW amp l amp s amp o vp amp d amp m aspire mDefault Page URL hxxp homepage acer com rdr aspx b ACAW amp l amp s amp o vp amp d amp m aspire uURLSearchHooks AIM Toolbar Search Class f - dc - -bc - e fefafe - c program files aim toolbar aimtb dll uURLSearchHooks... Read more

A:Google redirecting links

Hi,

Please do the following:

Download GMER Rootkit Scanner from here to your desktop. Double click the exe file. If asked to allow gmer.sys driver to load, please consent .
If it gives you a warning about rootkit activity and asks if you want to run scan...click on NO.



Click the image to enlarge it


In the right panel, you will see several boxes that have been checked. Uncheck the following ... Sections
IAT/EAT
Drives/Partition other than Systemdrive (typically C:\)
Show All (don't miss this one)

Then click the Scan button & wait for it to finish.
Once done click on the [Save..] button, and in the File name area, type in "Gmer.txt" or it will save as a .log file which cannot be uploaded to your post.
Save it where you can easily find it, such as your desktop, and post it in reply.

**Caution**
Rootkit scans often produce false positives. Do NOT take any action on any "<--- ROOKIT" entries

http://www.techsupportforum.com/forums/f284/google-redirecting-links-463824.html
Relevancy 70.09%

I Google redirecting links am using Firefox and whenever I click on the links that come up in my Google searches they are redirected to other unwanted sites Here are Google redirecting links my HJT and uninstall logs HJT log Logfile of Trend Micro HijackThis v Scan saved at PM on Platform Windows Vista SP WinNT MSIE Internet Explorer v Boot mode NormalRunning processes C Windows system taskeng exeC Windows Explorer EXEC Windows system igfxsrvc exeC Program Files Apoint K Apoint exeC Program Files Intel Intel Matrix Storage Manager IAAnotif exeC Program Files HP QuickPlay QPService exeC Program Files Hewlett-Packard HP Quick Launch Buttons QLBCTRL exeC Program Files Windows Defender MSASCui exeC Program Files HP Digital Imaging bin HpqSRmon exeC Program Files Cisco Cisco NAC Agent NACAgentUI exeC Program Files Hewlett-Packard HP Wireless Assistant HPWAMain exeC Program Files McAfee Common Framework UdaterUI exeC Program Files Lexmark - Series lxdxmon exeC Program Files Lexmark - Series ezprint exeC Program Files HP HP Software Update hpwuSchd exeC Program Files Lexmark Series lxdemon exeC Program Files Lexmark Series lxdeamon exeC Program Files Microsoft Office Office GrooveMonitor exeC Windows System hkcmd exeC Windows System igfxpers exeC Program Files Java jre bin jusched exeC Program Files Zune ZuneLauncher exeC Program Files Google GoogleToolbarNotifier GoogleToolbarNotifier exeC Windows ehome ehtray exeC Program Files Spybot - Search amp Destroy TeaTimer exeC Program Files DAEMON Tools Lite daemon exeC Program Files Windows Media Player wmpnscfg exeC Program Files McAfee Common Framework McTray exeC Windows ehome ehmsas exeC Program Files Logitech MouseWare system em exec exeC Program Files Apoint K ApMsgFwd exeC Program Files Apoint K Apntex exeC Program Files Hewlett-Packard HP wireless Assistant WiFiMsg EXEC Program Files Hewlett-Packard Shared HpqToaster exeC Windows system wbem unsecapp exeC Program Files Java jre bin jucheck exeC Windows system svchost exeC Windows system Dwm exeC Program Files SpeedBit Video Accelerator VideoAccelerator exeC Program Files Spybot - Search amp Destroy SpybotSD exeC Windows system wuauclt exeC Program Files Mozilla Firefox firefox exeC Windows system SearchFilterHost exeC Program Files Trend Micro HijackThi Trend Micro HiJackThis HiJackThis exeR - HKCU Software Microsoft Internet Explorer Main Default Page URL http ie redirect hp com svs rdr TYPE a o amp pf laptopR - HKCU Software Microsoft Internet Explorer Main Start Page http www ask com web amp o amp l dis amp q R - HKLM Software Microsoft Internet Explorer Main Default Page URL http ie redirect hp com svs rdr TYPE a o amp pf laptopR - HKLM Software Microsoft Internet Explorer Main Default Search URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Start Page http ie redirect hp com svs rdr TYPE a o amp pf laptopR - HKLM Software Microsoft Internet Explorer Search SearchAssistant R - HKLM Software Microsoft Internet Explorer Search CustomizeSearch R - HKCU Software Microsoft Internet Explorer Toolbar LinksFolderName R - URLSearchHook AIM Toolbar Search Class - f - dc - -bc - e fefafe - C Program Files AIM Toolbar aimtb dllR - URLSearchHook Yahoo Toolbar - EF BD -C FB- D - F- D F - C Program Files Yahoo Companion Installs cpn yt dllR - URLSearchHook no name - CA EB - F - -AA -B C CE - no file O - Hosts localhostO - BHO amp Yahoo Toolbar Helper - D -C F - efb- B - ECA - C Program Files Yahoo Companion Installs cpn yt dllO - BHO Adobe PDF Reader Link Helper - E F-C D - D -B D- B D BE B - C Program Files Common Files Adobe Acrobat ActiveX AcroIEHelper dllO - BHO Lexmark Toolbar - A C- F - -A D-EDD AC F - C Program Files Lexmark Toolbar toolband dllO - BHO SBCONVERT - FB E- A - - C - EC FB F - C Program Files SpeedBit Video Downloader Toolbar tbcore dllO - BHO SBCONVERT - B F D- BC - B-B D - EAB B FC ... Read more

A:Google redirecting links

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below I will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Follow the instructions that pop up for posting the results.Close the program window, and delete the program from your desktop.Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet. Information on A/V control HEREAndPlease download DeFogger to your desktop.Double click DeFogger to run the tool. The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will appear Click OK DeFogger will now ask to reboot the machine - click OKIMPORTANT! If you receive an error message while running DeFogger, please post the log defogger_disable which will appear on your desktop.ThenPlease download GMER from one of the following locations and save it to your desktop:Main MirrorThis version will download a randomly named file (Recommended)Zipped MirrorThis version will download a zip file you will need to extract first. If you use this mirror, please extract the zip file to your desktop.Disconnect from the Internet and close all running programs.Temporarily disable any real-time active protection so your security programs will not conflict with gmer's driver.Double-click on the randomly named GMER file (i.e. n7gmo46c.exe) and allow the gmer.sys driver to load if asked.Note: If you downloaded the zipped version, extract the file to its own folder such as C:\gmer and then double-click on gmer.exe.GMER will open to the Rootkit/Malware tab and perform an automatic quick scan when first run. (do not use the computer while the scan is in progress)If you receive a WARNING!!! about rootkit activity and are asked to fully scan your system...click NO.Now click the Scan button. If you see a rootkit warning window, click OK.When the scan is finished, click the Save... button to save the scan results to your Desktop. Save the file as gmer.log.Click the Copy button and paste the results into your next reply.Exit GMER and re-enable all active protection when done.-- If you encounter any problems, try running GMER in Safe Mode.

http://www.bleepingcomputer.com/forums/t/321556/google-redirecting-links/
Relevancy 70.09%

Thanks in advance for your assistance Laptop T IBM Redirecting from links google almost years old XP IE Infected with Trojan FakeAV - used Malwarebytes and Symantec to remove- both scans report no infections - message did read clean quarantine Redirecting links from google and access denied for some of the files Have followed Techsupport first step instructions remove all spyware fix software except Symantec Thanks again n DDS and GMER - attached zip dds Redirecting links from google text included DDS Ver - - - NTFSx Run by Dwwestco at on Thu Internet Explorer Microsoft Windows XP Professional GMT - Running Processes C WINDOWS System ibmpmsvc exe C Program Files ThinkPad Utilities TpKmapMn exe C Program Files ThinkPad Utilities TpKmapMn exe C WINDOWS System Ati evxx exe C WINDOWS system svchost -k DcomLaunch svchost exe C WINDOWS System svchost exe -k netsvcs svchost exe C WINDOWS System svchost exe -k eapsvcs svchost exe C WINDOWS System svchost exe -k dot svc C WINDOWS system spoolsv exe svchost exe C Program Files Common Files Apple Mobile Device Support bin AppleMobileDeviceService exe C Program Files Cisco Systems VPN Client cvpnd exe C PROGRA SYMANT SYMANT DefWatch exe C WINDOWS system dldfcoms exe C Program Files Common Files Intuit Update Service IntuitUpdateService exe C Program Files Novell ZENworks nalntsrv exe C Program Files Linksys Wireless-G Notebook Adapter NICServ exe C PROGRA SYMANT SYMANT Rtvscan exe C Program Files PatchLink Update Agent GravitixService exe C Program Files Novell ZENworks RemoteManagement RMAgent WolSerNT exe C WINDOWS system PSIService exe C WINDOWS System QCONSVC EXE C Program Files Novell ZENworks RemoteManagement RMAgent ZenRem exe C WINDOWS System svchost exe -k imgsvc C Program Files Novell ZENworks wm exe C WINDOWS system wuauclt exe C WINDOWS system fxssvc exe C Program Files Novell ZENworks WMRUNDLL EXE C WINDOWS system Ati evxx exe C Program Files Synaptics SynTP SynTPLpr exe C Program Files Synaptics SynTP SynTPEnh exe C PROGRA ThinkPad PkgMgr HOTKEY TPHKMGR exe C WINDOWS system RunDll exe C Program Files ThinkPad ConnectUtilities QCWLICON EXE C Program Files ThinkPad Utilities TpKmapMn exe C PROGRA ThinkPad UTILIT EzEjMnAp Exe C WINDOWS AGRSMMSG exe C WINDOWS system dla tfswctrl exe C WINDOWS System dpmw exe C WINDOWS system NWTRAY EXE C PROGRA SYMANT SYMANT vptray exe C WINDOWS System iprntctl exe C Program Files Common Files InstallShield UpdateService issch exe C PROGRAM FILES PATCHLINK UPDATE AGENT pddm exe C Program Files Dell AIO Printer dldfmon exe C Program Files Dell AIO Printer memcard exe C Program Files ThinkPad PkgMgr HOTKEY TPONSCR exe C Program Files ThinkPad PkgMgr HOTKEY TpScrex exe C Program Files iTunes iTunesHelper exe C WINDOWS tsnpstd exe C WINDOWS vsnpstd exe C Program Files Google Quick Search Box GoogleQuickSearchBox exe C Program Files Google GoogleToolbarNotifier GoogleToolbarNotifier exe C WINDOWS system ctfmon exe C Program Files Adobe Acrobat Distillr AcroTray exe C Program Files Novell ZENworks NALDESK EXE C Program Files Microsoft Office Office OSA EXE C Program Files iPod bin iPodService exe C WINDOWS Explorer exe C WINDOWS System svchost exe -k HTTPFilter C Documents and Settings Dwwestco Desktop dds scr Pseudo HJT Report uStart Page hxxp www google com ig hl en amp source iglk uSearch Page hxxp www google com uSearchMigratedDefaultURL hxxp www google com search q searchTerms amp sourceid ie amp rls com microsoft en-US amp ie utf amp oe utf uDefault Page URL hxxp www msn com uSearchAssistant hxxp www google com ie uSearchURL Default hxxp www google com search q s mSearchAssistant hxxp www google com ie uURLSearchHooks tw search Toolbar e b fb - de - - bd- de e d - c program files twitter search tbtwi dll mWinlogon System ziswin exe BHO E F-C D - D -B D- B D BE B - No File BHO C C A-E - b - D - CECB - No File BHO DriveLetterAccess ca d e- - cf- e - - c windows system dla tfswshx dll BHO SSVHelper Class bb-d f - c-b eb-d daf d d - c program files ... Read more

A:Redirecting links from google

Howdy there cjmcclure and welcome to TSF Forums

I'm Steve and I will be helping you throughout this fix.

Before beginning the fix, read this post completely. If there's anything that you do not understand, kindly ask your questions before proceeding. It is IMPORTANT that you don't miss a step. Please perform everything in the correct order/sequence.

Vista users please make sure you all run commands with administrator rights (right click icon - run as administrator)

Please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription

Please note that the forum is very busy and if I don't hear from you within three days from this initial posting then the thread will be closed.

We will begin with ComboFix.exe. Please visit this webpage for download links, and instructions for running the tool:

http://www.bleepingcomputer.com/comb...o-use-combofix

* Ensure you have disabled all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

Please include the C:\ComboFix.txt in your next reply for further review.

http://www.techsupportforum.com/forums/f100/redirecting-links-from-google-454188.html
Relevancy 70.09%

I just started experiening this problem with google Sometimes it is intermittent and I can get to real links and others everything gets redirected I ran HijackThis and got the following Logfile of Trend Micro HijackThis v Scan saved at PM on Platform Windows Vista SP WinNT MSIE Internet Explorer v Boot mode Normal Running processes C Windows system taskeng exe C Windows system Dwm links redirecting ads google to exe C Windows Explorer google redirecting links to ads EXE C hp support hpsysdrv exe C Program Files Hewlett-Packard On-Screen OSD Indicator OSD exe C Windows RtHDVCpl exe C Program Files HP HP Software Update hpwuSchd exe C Program Files Picasa PicasaMediaDetector exe C Program Files Acronis TrueImageHome TrueImageMonitor exe C Program Files Acronis TrueImageHome TimounterMonitor exe C Program Files Common Files Acronis Schedule schedhlp exe C Program Files Java jre bin jusched exe C Windows System rundll exe C Program Files Microsoft Office Office GrooveMonitor exe C Program Files AVG AVG avgtray exe C Program Files Simpo PDF Creator Lite SpcLiteSrv exe C Program Files Hewlett-Packard HP Advisor HPAdvisor exe C Program Files Common Files Ahead Lib NMBgMonitor exe C Windows system wbem unsecapp exe C Windows ehome ehtray exe C Program Files Windows Sidebar sidebar exe C Program Files Common Files InstallShield UpdateService ISUSPM exe C Users User AppData Local Google Chrome Application chrome exe C Program Files HP HP Officejet Pro Bin ScanToPCActivationApp exe C Program Files HP Digital Imaging bin hpqtra exe C Users User AppData Roaming Dropbox bin Dropbox exe C Program Files Microsoft Office Office ONENOTEM EXE C Windows ehome ehmsas exe C Program Files Common Files Ahead Lib NMIndexStoreSvr exe C Program Files HP Digital Imaging bin hpqSTE exe C Program Files HP Digital Imaging bin hpqbam exe C Program Files HP HP Officejet Pro Bin HPNetworkCommunicator exe C hp kbd kbd exe C Windows system wuauclt exe C Program Files Common Files Apple Internet Services iCloudServices exe C Program Files AVG AVG avgui exe C Program Files AVG AVG avgscanx exe C Program Files AVG AVG avgcsrvx exe C Program Files Mozilla Firefox firefox exe C Program Files Mozilla Firefox plugin-container exe C Users User Downloads HiJackThis exe R - HKLM Software Microsoft Internet Explorer Main Default Page URL http ie redirect hp com svs rdr TYPE amp tp iehome amp locale EN US amp c amp bd Pavilion amp pf desktop R - HKLM Software Microsoft Internet Explorer Main Default Search URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Start Page http ie redirect hp com svs rdr TYPE amp tp iehome amp locale EN US amp c amp bd Pavilion amp pf desktop R - HKLM Software Microsoft Internet Explorer Search SearchAssistant R - HKLM Software Microsoft Internet Explorer Search CustomizeSearch R - HKCU Software Microsoft Windows CurrentVersion Internet Settings ProxyOverride local R - HKCU Software Microsoft Internet Explorer Toolbar LinksFolderName O - Hosts localhost O - BHO Yahoo Toolbar Helper - D -C F - EFB- B - ECA - C Program Files Yahoo Companion Installs cpn yt dll O - BHO AcroIEHelperStub - DF C-E AD- -A -FA C EBDC - C Program Files Common Files Adobe Acrobat ActiveX AcroIEHelperShim dll O - BHO no name - E A - - D F-BEAE-D A C - no file O - BHO WormRadar com IESiteBlocker NavFilter - CA F - F E- B -A E- E E C C - C Program Files AVG AVG avgssie dll O - BHO Groove GFS Browser Helper - - C - D -B F - BBC D A E - C PROGRA MICROS Office GRA E DLL O - BHO AOL Toolbar Loader - C - CB - A -B F - EA C F - C Program Files AOL Toolbar aoltb dll O - BHO Java Plug-In SSV Helper - DBC -A - b-BC - C C C A - C Program Files Java jre bin jp ssv dll O - Toolbar Yahoo Toolbar - EF BD -C FB- D - F- D F - C Program Files Yahoo Companion Installs cpn yt dll O - Toolbar AOL Toolbar - DE C F- - A - B-AA ED D - C Program Files AOL Toolbar... Read more

A:google redirecting links to ads

Hello and Welcome to the forums!My name is Gringo and I'll be glad to help you with your computer problems.Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger:Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will appear Click OKDeFogger may ask you to reboot the machine, if it does - click OKDo not re-enable these drivers until otherwise instructed.Download DDS:Please download DDS by sUBs from one of the links below and save it to your desktop:
Download DDS and save it to your desktop

Link1
Link2
Link3

Please disable any anti-malware program that will block scripts from running before running DDS.

Double-Click on dds.scr and a command window will appear. This is normal.Shortly after two logs will appear:
DDS.txt Attach.txtA window will open instructing you save & post the logsSave the logs to a convenient place such as your desktopCopy the contents of both logs & post in your next replyinformation and logs:In your next post I need the following

.logs from DDSlet me know of any problems you may have hadGringo

http://www.bleepingcomputer.com/forums/t/443578/google-redirecting-links-to-ads/
Relevancy 70.09%

So I ve got that pesky problem where clicking on any Google link redirects me to ads rather than the actual link I scanned my harddrive with both Spybot S amp D and Malwarebytes and neither has been able to fix whatever the problem is My HijackThis log is below Let me know if you need any more info from me at all and thanks in advance for helping me fix this Logfile of Trend Micro HijackThis v BETA Scan saved at PM on Platform Windows XP SP WinNT MSIE Internet Explorer v Boot mode Normal Running processes C WINDOWS System smss exe C WINDOWS system csrss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS system Ati evxx exe C WINDOWS system svchost exe C WINDOWS system svchost exe C WINDOWS System svchost exe C Program Files Intel Wireless Bin EvtEng exe C Program Files Intel Wireless Bin ZcfgSvc exe C WINDOWS system Ati evxx exe C Program Files Intel Wireless Bin S EvMon exe C WINDOWS Explorer EXE C Program Files Intel Wireless Bin WLKeeper exe C Ads Redirecting Links Google to WINDOWS system svchost exe C WINDOWS system svchost exe C WINDOWS system spoolsv exe C PROGRA Intel Wireless Bin XConfig exe C WINDOWS system svchost exe C PROGRA COMMON AOL ACS AOLacsd exe Google Links Redirecting to Ads C Program Files Common Files Apple Mobile Device Support bin AppleMobileDeviceService exe C Program Files Bonjour mDNSResponder exe C WINDOWS eHome ehRecvr exe C WINDOWS eHome ehSched exe C PROGRA McAfee MSC mcmscsvc exe c program files common files mcafee mna mcnasvc exe c PROGRA COMMON mcafee mcproxy mcproxy exe C PROGRA McAfee VIRUSS mcshield exe C Program Files Common Files Microsoft Shared VS DEBUG MDM EXE C Google Links Redirecting to Ads Program Files McAfee MPF MPFSrv exe C Program Files McAfee MSK MskSrver exe C Program Files Dell NICCONFIGSVC NICCONFIGSVC exe C oracle ora bin omtsreco exe C Program Files Intel Wireless Bin RegSrvc exe C PROGRA McAfee com Agent mcagent exe C Program Files Spyware Doctor pctsAuxs exe C Program Google Links Redirecting to Ads Files Spyware Doctor pctsSvc exe C Program Files Spyware Doctor pctsTray exe C Program Files SiteAdvisor SAService exe C WINDOWS system svchost exe C WINDOWS system svchost exe C WINDOWS ehome mcrdsvc exe C WINDOWS system dllhost exe C WINDOWS system wbem wmiprvse exe C WINDOWS System alg exe C WINDOWS system wuauclt exe C Program Files Google Google Desktop Search GoogleDesktop exe C Program Files iTunes iTunesHelper exe C WINDOWS system ctfmon exe C Program Files Messenger msmsgs exe C PROGRA McAfee VIRUSS mcsysmon exe C Program Files Spybot - Search amp Destroy TeaTimer exe C Program Files Google GoogleToolbarNotifier GoogleToolbarNotifier exe C Program Files Toshiba Bluetooth Toshiba Stack TosBtMng exe C Program Files Digital Line Detect DLG exe C Program Files Nikon PictureProject NkbMonitor exe C Program Files WinZip WZQKPICK EXE C Program Files iTunes iTunes exe C Program Files iPod bin iPodService exe c PROGRA mcafee msc mcuimgr exe C WINDOWS system wscntfy exe C Program Files Mozilla Firefox firefox exe C Program Files Malwarebytes Anti-Malware mbam exe C WINDOWS system msiexec exe C Program Files TrendMicro HiJackThis HiJackThis exe C WINDOWS system wbem wmiprvse exe R - HKLM Software Microsoft Internet Explorer Main Default Page URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Default Search URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Start Page http go microsoft com fwlink LinkId R - HKCU Software Microsoft Internet Connection Wizard ShellNext http us mcafee com root campaign asp cid R - HKCU Software Microsoft Windows CurrentVersion Internet Settings ProxyOverride local O - BHO Adobe PDF Reader Link Helper - E F-C D - D -B D- B D BE B - C Program Files Common Files Adobe Acrobat ActiveX AcroIEHelper dll O - BHO no name - FD D- ... Read more

A:Google Links Redirecting to Ads

Hi,

Please do the following:
Please download DDS from either of these links

LINK 1
LINK 2

and save it to your desktop.


[*]Disable any script blocking protection

[*] Double click dds.pif to run the tool.

[*]When done, two DDS.txt's will open.

[*]Save both reports to your desktop.
---------------------------------------------------
Please include the contents of the following in your next reply:

DDS.txt
Attach.txt.
NEXT

Download GMER Rootkit Scanner from here or here.


[*] Extract the contents of the zipped file to desktop.

[*] Double click GMER.exe. If asked to allow gmer.sys driver to load, please consent .

[*] If it gives you a warning about rootkit activity and asks if you want to run scan...click on NO.


Click the image to enlarge it
[*] In the right panel, you will see several boxes that have been checked. Uncheck the following ...
[*] Sections

[*] IAT/EAT

[*] Drives/Partition other than Systemdrive (typically C:\)

[*] Show All (don't miss this one)


[*] Then click the Scan button & wait for it to finish.

[*] Once done click on the [Save..] button, and in the File name area, type in "Gmer.txt" or it will save as a .log file which cannot be uploaded to your post.
[*]Save it where you can easily find it, such as your desktop, and post it in your next reply.


**Caution**
Rootkit scans often produce false positives. Do NOT take any action on any "<--- ROOKIT" entries
 

https://forums.techguy.org/threads/google-links-redirecting-to-ads.914677/
Relevancy 70.09%

my antivirus found a few trojans on my machine and has since quarantined the links Redirecting Google files However now whenever I search on google about - of the links redirect to advertisement sites Any help will be greatly appreciated ----------------------------- DDS Report ----------------------------- DDS Ver - - - NTFSx Run by Chris at on Internet Explorer BrowserJavaVersion Microsoft Windows Professional GMT SP Spybot - Search and Destroy enabled Updated ED FAF- B F- B -ACA - E C DADBE Running Processes C Windows system wininit exe C Windows system lsm exe C Windows system svchost exe Google links Redirecting -k DcomLaunch C Google links Redirecting Windows system nvvsvc exe C Windows system svchost exe -k RPCSS C Google links Redirecting Windows System svchost exe -k LocalServiceNetworkRestricted C Windows System svchost exe -k LocalSystemNetworkRestricted C Windows system svchost exe -k netsvcs C Windows system svchost exe -k LocalService C Windows system nvvsvc exe C Windows system svchost exe -k NetworkService C Windows System spoolsv exe C Windows system svchost exe -k LocalServiceNoNetwork C Windows system svchost exe -k apphost C Program Files Common Files Apple Mobile Device Support bin AppleMobileDeviceService exe C Program Files Bonjour mDNSResponder exe C Program Files ESET ESET Smart Security ekrn exe C Windows system svchost exe -k LocalServiceAndNoImpersonation C Program Files NVIDIA Corporation NetworkAccessManager bin nSvcAppFlt exe C Windows system svchost exe -k HsfXAudioService C Program Files Common Files LightScribe LSSrvc exe C Program Files Microsoft SQL Server MSSQL SQLEXPRESS MSSQL Binn sqlservr exe C Program Files MySQL MySQL Server bin mysqld exe C Program Files Microsoft SQL Server Shared sqlwriter exe C Windows system svchost exe -k iissvcs C Program Files NVIDIA Corporation NetworkAccessManager bin nSvcIp exe C Windows system svchost exe -k NetworkServiceNetworkRestricted C Windows System svchost exe -k secsvcs C Program Files Windows Media Player wmpnetwk exe C Windows system SearchIndexer exe C Windows system Dwm exe C Windows Explorer EXE C Windows system taskhost exe C Program Files Synaptics SynTP SynTPEnh exe C Program Files iTunes iTunesHelper exe C Program Files ESET ESET Smart Security egui exe C Program Files Microsoft Office Office GrooveMonitor exe C Windows system AUDIODG EXE C Program Files Microsoft Online Services Sign In SignIn exe C Program Files Java jre bin jusched exe C Program Files Skype Phone Skype exe C Program Files Windows Sidebar sidebar exe C ProgramData Skype Plugins Plugins E D F E A B A F AB F InnerPassFileSharing exe C Program Files iPod bin iPodService exe C Program Files Synaptics SynTP SynTPHelper exe C Program Files Skype Plugin Manager skypePM exe C Windows System svchost exe -k LocalServicePeerNet C Windows Microsoft Net Framework v WPF PresentationFontCache exe C Program Files iTunes iTunes exe C Program Files Internet Explorer iexplore exe C Program Files Internet Explorer iexplore exe C Windows system Macromed Flash FlashUtil c exe C Program Files BitLord BitLord exe C Windows system NOTEPAD EXE C Program Files Internet Explorer iexplore exe C Program Files Internet Explorer iexplore exe C Windows system msiexec exe C Program Files Trend Micro HijackThis HijackThis exe C PROGRA MICROS Office OUTLOOK EXE C Windows system NOTEPAD EXE C Windows system consent exe C Users Chris AppData Local Microsoft Windows Temporary Internet Files Content IE M VGTN dds scr C Windows system conhost exe C Windows system wbem wmiprvse exe Pseudo HJT Report uStart Page hxxp www google co uk BHO Adobe PDF Link Helper df c-e ad- -a -fa c ebdc - c program files common files adobe acrobat activex AcroIEHelperShim dll BHO Skype add-on mastermind bf b-c d - d - a -a f ba c - c program files skype toolbars internet explorer SkypeIEPlugin dll BHO Spybot-S amp D IE Protection - f - d - - d f - c progra spybot SDHelper dll BHO Groove GFS Browser Helper - c - d -b f - bbc d a e - ... Read more

A:Google links Redirecting

Hi Drunkenseer,Were you able to run RootRepeal (step 7 in preparation tutorial >here)?

http://www.bleepingcomputer.com/forums/t/267853/google-links-redirecting/
Relevancy 70.09%

Hi I'm sorry to have to do this but I'm all out of ideas Search links in Google haven't tried other search engines yet are redirecting to other sites but only the first time I click on them This is happening Firefox and hasn't appeared to be happening in Chrome None of my usual scans are catching anything that will stop it So here I am I ran DDS as instructed but not GMER since I'm on a bit system Thanks in Google Links Redirecting for your help DDS Ver - - - NTFS AMD Run by Ken-Shing Law at on Thu Internet Explorer BrowserJavaVersion Microsoft Windows Professional GMT - Running Processes C Windows system wininit exe C Windows system lsm exe C Windows system svchost exe -k DcomLaunch C Windows system nvvsvc exe C Windows system svchost exe -k RPCSS C Windows system atiesrxx exe C Windows System svchost exe -k LocalServiceNetworkRestricted C Windows System svchost exe -k LocalSystemNetworkRestricted Links in Google Redirecting C Windows system svchost exe -k netsvcs C Windows system svchost exe -k LocalService C Windows system svchost exe -k NetworkService C Windows system atieclxx exe C Windows system nvvsvc exe C Windows System spoolsv exe C Windows system svchost exe -k LocalServiceNoNetwork C Program Files x Common Files Acronis Schedule schedul exe C Program Files x Common Files Acronis CDP afcdpsrv exe C Program Files x Common Files Apple Mobile Device Support AppleMobileDeviceService exe C Program Files x Bonjour mDNSResponder exe C Windows system svchost exe -k LocalServiceAndNoImpersonation C Windows SysWOW svchost exe -k hpdevmgmt C Program Files x Common Files Nero Nero BackItUp NBService exe C Windows System svchost exe -k HPZ C Windows System svchost exe -k HPZ C Program Files x NVIDIA Corporation D Vision nvSCPAPISvr exe C Windows system svchost exe -k imgsvc C Windows system taskhost exe C Windows system Dwm exe C Windows Explorer EXE C Windows system WUDFHost exe C Windows system taskeng exe C Program Files x Common Files Acronis Schedule schedhlp exe C Program Files Realtek Audio HDA RAVCpl exe C Program Files Logitech SetPointP SetPoint exe C Program Files Windows Sidebar sidebar exe C Program Files x SecCopy SecCopy exe C Program Files Common Files LogiShrd KHAL KHALMNPR EXE C Program Files x Acronis TrueImageHome TrueImageMonitor exe C Program Files x Air Mouse Air Mouse Air Mouse exe C Program Files x HP Digital Imaging bin hpqtra exe C Program Files x iTunes iTunesHelper exe C Users Ken-Shing Law AppData Roaming Dropbox bin Dropbox exe C Program Files iPod bin iPodService exe C Windows system SearchIndexer exe C Windows system svchost exe -k NetworkServiceNetworkRestricted C Program Files Windows Media Player wmpnetwk exe C Program Files x HP Digital Imaging bin hpqSTE exe C Program Files x HP Digital Imaging bin hpqbam exe C Windows System svchost exe -k LocalServicePeerNet C Users Ken-Shing Law Downloads CoreTemp Core Temp exe C Program Files x HP Digital Imaging smart web printing hpswp clipbook exe C Program Files Microsoft Security Essentials MsMpEng exe C Program Files Microsoft Security Essentials msseces exe C Program Files x Google Chrome Application chrome exe C Program Files x Google Chrome Application chrome exe C Program Files x Google Chrome Application chrome exe C Program Files x Google Chrome Application chrome exe C Windows system SearchProtocolHost exe C Windows system SearchFilterHost exe C Windows system DllHost exe C Windows system DllHost exe C Users Ken-Shing Law Desktop dds scr C Windows system conhost exe C Windows system wbem wmiprvse exe Pseudo HJT Report uInternet Settings ProxyOverride local mWinlogon Userinit userinit exe BHO HP Print Enhancer internal links font-family Arial Helvetica sans-serif font-size px - C Program Files x HP Digital Imaging Smart Web Printing hpswp printenhancer dll BHO Java tm Plug-In SSV Helper internal links font-family Arial Helvetica sans-serif font-size px - C Program Files x Java jre bin jp ssv dll BHO HP Smart BHO Class internal links font-fami... Read more

A:Links in Google Redirecting

Hi

Please do the following:

Download OTL and save it to your desktop.
Double click on the icon to run it.
Make sure all other windows are closed and to let it run uninterrupted.
When the window appears, underneath Output at the top, make sure Standard output is selected.
Under the Extra Registry section, check Use SafeList
Download the following file scan.txt to your Desktop. Click here to download it. You may need to right click on it and select "Save"
Double click inside the Custom Scan box at the bottom
A window will appear saying "Click Ok to load a custom scan from a file or Cancel to cancel"
Click the Ok button and navigate to the file scan.txt which we just saved to your desktop
Select scan.txt and click Open. Writing will now appear under the Custom Scan box
Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time and post them in your topic

http://www.techsupportforum.com/forums/f100/links-in-google-redirecting-529695.html
Relevancy 70.09%

I have what seems to be a fairly common problem of google Redirecting Google Links links redirecting me to spam websites I run Malwarebytes frequently but Google Links Redirecting it Google Links Redirecting has Google Links Redirecting been unable to remove the problem Attached are my HijackThis Log and my DDS txt log Any help is much appreciated DDS Ver - - - NTFSx Run by HP Owner at on Wed Internet Explorer BrowserJavaVersion Microsoft Windows XP Home Edition GMT - AV AVG Anti-Virus Free On-access scanning enabled Updated DDD - FF- F- E B- D D BF FW COMODO Firewall Pro enabled A - F - ef -AFC -F E A B Running Processes C WINDOWS system svchost -k DcomLaunchsvchost exeC WINDOWS System svchost exe -k netsvcsC WINDOWS system svchost exe -k WudfServiceGroupsvchost exesvchost exeC Program Files Lavasoft Ad-Aware aawservice exeC WINDOWS system spoolsv exesvchost exeC PROGRA AVG AVG avgwdsvc exeC Program Files Java jre bin jqs exec Program Files Common Files LightScribe LSSrvc exeC Program Files Common Files Microsoft Shared VS DEBUG MDM EXEC PROGRA AVG AVG avgrsx exeC WINDOWS system svchost exe -k imgsvcC WINDOWS Explorer EXEC Program Files Java jre bin jusched exeC windows system hpsysdrv exeC WINDOWS AGRSMMSG exeC WINDOWS system hphmon exeC HP KBD KBD EXEC Program Files iTunes iTunesHelper exeC WINDOWS SOUNDMAN EXEC WINDOWS ALCWZRD EXEC WINDOWS ALCMTR EXEC PROGRA AVG AVG avgtray exeC Program Files HP hpcoretech hpcmpmgr exeC Program Files iPod bin iPodService exeC Program Files Spybot - Search amp Destroy TeaTimer exeC WINDOWS system ctfmon exeC Program Files Updates from HP Program Updates from HP exeC Program Files HP hpcoretech comp hptskmgr exeC Program Files Common Files Real Update OB realsched exeC WINDOWS system wuauclt exeC Program Files BitLord BitLord exeC Program Files Mozilla Firefox firefox exeC Documents and Settings HP Owner Desktop dds scr Pseudo HJT Report uStart Page hxxp ie redirect hp com svs rdr TYPE amp tp iehome amp locale EN US amp c Q amp bd pavilion amp pf desktopuSearch Page hxxp ie redirect hp com svs rdr TYPE amp tp iesearch amp locale EN US amp c Q amp bd pavilion amp pf desktopuDefault Page URL hxxp ie redirect hp com svs rdr TYPE amp tp iehome amp locale EN US amp c Q amp bd pavilion amp pf desktopuDefault Search URL hxxp ie redirect hp com svs rdr TYPE amp tp iesearch amp locale EN US amp c Q amp bd pavilion amp pf desktopuSearch Bar hxxp ie redirect hp com svs rdr TYPE amp tp iesearch amp locale EN US amp c Q amp bd pavilion amp pf desktopmSearch Bar hxxp ie redirect hp com svs rdr TYPE amp tp iesearch amp locale EN US amp c Q amp bd pavilion amp pf desktopuURLSearchHooks Winamp Search Class bca fa- dbb- a -b - c f b - c program files winamp toolbar winamptb dllmURLSearchHooks Winamp Search Class bca fa- dbb- a -b - c f b - c program files winamp toolbar winamptb dllBHO AcroIEHlprObj Class e f-c d - d -b d- b d be b - c program files adobe acrobat reader activex AcroIEHelper dllBHO AVG Safe Search ca f - f e- b -a e- e e c c - c program files avg avg avgssie dllBHO Spybot-S amp D IE Protection - f - d - - d f - c progra spybot SDHelper dllBHO Java Plug-In SSV Helper dbc -a - b-bc - c c c a - c program files java jre bin jp ssv dllBHO JQSIEStartDetectorImpl Class e e f - ce- c -bc -eabfe f c - c program files java jre lib deploy jqs ie jqs plugin dllTB HP view b e - d d- deb- b - d bcf f - c program files hp digital imaging bin HPDTLK dlluRun SpybotSD TeaTimer c program files spybot - search amp destroy TeaTimer exeuRun ctfmon exe c windows system ctfmon exemRun SunJavaUpdateSched quot c program files java jre bin jusched exe quot mRun hpsysdrv c windows system hpsysdrv exemRun High Definition Audio Property Page Shortcut HDAudPropShortcut exemRun HotKeysCmds c windows system hkcmd exemRun AGRSMMSG AGRSMMSG exemRun HPHUPD c program files hp aac fc - f - - dd -ebc c d hphupd exemRun HPHmon c windows system hphmon exemRun KBD c hp kbd KBD EXEmRun TkBellExe quot c program files common files real u... Read more

A:Google Links Redirecting

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Follow the instructions that pop up for posting the results.Close the program window, and delete the program from your desktop.Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet. Information on A/V control HERE

http://www.bleepingcomputer.com/forums/t/241853/google-links-redirecting/
Relevancy 70.09%

I have the virus or malware that redirects any link I click on in google to another page I did not intend to go to. My computer is also freezing and jamming up while I try to post this topic. I've got no idea what to do to fix this, or how to prevent it. I've got AVG, Malware Bytes, and SuperAntiSpyware which is why I'm frustrated. I don't understand what more I can or could have done to prevent this. If there's any help you guy can offer to correct this annoyance and perhaps educate me on how to avoid this in the future I'd be very grateful.

Thanks for your time,

Kristen

http://www.bleepingcomputer.com/forums/t/298546/google-redirecting-my-links/
Relevancy 70.09%

Hi need some help with this It's been driving me nuts for a while now and I just couldn't find the root of the problem so Links Redirecting Google hopefully you guys can help DDS Ver - - - NTFSx Run by Mo at on Sun Internet Explorer Microsoft Windows Vista Home Premium GMT - AV Google Redirecting Links AntiVir Desktop On-access scanning disabled Updated AD - F - A-A -FDD C SP AntiVir Desktop disabled Updated AD - F - A-A -FDD C SP Google Redirecting Links Windows Defender disabled Updated D DDC A- F- FAE- E -DA C ACF Running Processes C Windows system wininit exe C Windows system lsm exe C Windows system svchost exe -k DcomLaunch C Windows system svchost exe -k rpcss C Windows System svchost exe -k LocalServiceNetworkRestricted C Windows System svchost exe -k LocalSystemNetworkRestricted C Windows system svchost exe -k netsvcs C Windows system SLsvc exe C Windows system svchost exe -k LocalService C Windows system svchost exe -k NetworkService C Program Files Protector Suite QL upeksvr exe C Windows System spoolsv exe C Program Files Avira AntiVir Desktop sched exe C Windows system svchost exe -k LocalServiceNoNetwork C Windows system Dwm exe C Windows Explorer EXE C Program Files Avira AntiVir Desktop avguard exe C Program Files Common Files Apple Mobile Device Support bin AppleMobileDeviceService exe C Program Files Bonjour mDNSResponder exe C Windows system svchost exe -k NetworkServiceNetworkRestricted C Program Files Toshiba Bluetooth Toshiba Stack TosBtSrv exe C Windows System svchost exe -k WerSvcGroup C Windows system SearchIndexer exe C Windows system DRIVERS xaudio exe C Windows system taskeng exe C Windows system taskeng exe C Program Files iTunes iTunesHelper exe C Program Files Avira AntiVir Desktop avgnt exe C Program Files Apoint Apoint exe C Windows System igfxtray exe C Windows System igfxpers exe C Program Files Google GoogleToolbarNotifier GoogleToolbarNotifier exe C Program Files Windows Live Messenger msnmsgr exe C Program Files Apoint ApMsgFwd exe C Windows ehome ehtray exe C Program Files Toshiba Bluetooth Toshiba Stack TosBtMng exe C Program Files Protector Suite QL psqltray exe C Windows ehome ehmsas exe C Program Files Apoint Apntex exe C Program Files iPod bin iPodService exe C Program Files Toshiba Bluetooth Toshiba Stack TosA dp exe C Program Files Internet Download Manager IEMonitor exe C Program Files Toshiba Bluetooth Toshiba Stack TosBtHid exe C Program Files Toshiba Bluetooth Toshiba Stack TosBtHsp exe C Program Files Toshiba Bluetooth Toshiba Stack TosAVRC exe C Windows system wuauclt exe C Program Files Toshiba Bluetooth Toshiba Stack tosOBEX exe C Program Files Toshiba Bluetooth Toshiba Stack TosBtProc exe C Windows system SearchProtocolHost exe C Windows system SearchFilterHost exe C Windows system DllHost exe C Windows system DllHost exe C Users Mo Desktop dds scr C Windows system wbem wmiprvse exe Pseudo HJT Report uStart Page hxxp google com BHO IDMIEHlprObj Class c - - b-a bf- b c a a - c program files internet download manager IDMIECC dll BHO Adobe PDF Link Helper df c-e ad- -a -fa c ebdc - c program files common files adobe acrobat activex AcroIEHelperShim dll BHO AVG Safe Search ca f - f e- b -a e- e e c c - c program files avg avg avgssie dll BHO C C A-E - b - D - CECB - No File BHO Windows Live Sign-in Helper d - c - abf- ecc- c - c program files common files microsoft shared windows live WindowsLiveLogin dll BHO Google Toolbar Helper aa ed - dd- d - -cf f - c program files google google toolbar GoogleToolbar dll BHO Google Toolbar Notifier BHO af de - d - -b fa-ce b ad d - c program files google googletoolbarnotifier swg dll BHO Google Dictionary Compression sdch c d fe-e d- -bb - c e e c e - c program files google google toolbar component fastsearch A FB BD dll TB Google Toolbar c b - - d - b - a cd f - c program files google google toolbar GoogleToolbar dll uRun swg c program files google googletoolbarnotifier GoogleToolbarNotifier exe uRun msnmsgr quot c program files windows ... Read more

A:Google Redirecting Links

Hello, and welcome to TSF.

My name is Gringo and I'll be glad to help you with your computer problems.The logs can take some time to research, so please be patient with me. I know that you need your computer working as quickly as possible, and I will work hard to help see that it happens.

Before we start: Please be aware that removing Malware is a potentially hazardous undertaking. I will take care not to knowingly suggest courses of action that might damage your computer. However it is impossible for me to foresee all interactions that may happen between the software on your computer and those we'll use to clear you of infection, and I cannot guarantee the safety of your system. It is possible that we might encounter situations where the only recourse is to re-format and re-install your operating system, or to necessitate you taking your computer to a repair shop.

Because of this, I advise you to backup any personal files and folders before you start.

Somethings to remember while we are working together.
1.Please do not run any other tool untill instructed to do so!
2.Please reply to this thread, do not start another!
3.Please tell me about any problems that have occurred during the fix.
4.Please tell me of any other symptoms you may be having as these can help also.
5.Please try as much as possible not to run anything while executing a fix.

Please subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.

If you follow these instructions, everything should go smoothly.

I am currently reviewing your log. I will be back with a fix for your problem as soon as possible.

Please be patient with me during this time.

Gringo

http://www.techsupportforum.com/forums/f100/google-redirecting-links-380990.html
Relevancy 70.09%

Well I think someone else posted the same problem somewhere else but anyway Whenever I do a Google search the results links redirect redirecting! Google keep links to some other random site such as shopping sites crappy search engine result pages and other random stuff I found tons of spyware with Spyware Doctor and got rid of a lot and my computer got a bit Google links keep redirecting! faster but the problem unfortunately persists So Here are the logs DDS Ver - - - NTFSx Run by hyun seok at on ThuInternet Explorer BrowserJavaVersion Microsoft Windows XP Professional GMT - AV avast Antivirus On-access scanning disabled Updated DB - F - A -B - A FD D Running Processes C WINDOWS system svchost -k DcomLaunchsvchost exeC WINDOWS System svchost exe -k netsvcssvchost exesvchost exeC Program Files Alwil Software Avast AvastSvc exeC WINDOWS system spoolsv exeC Program Files Google Update GoogleUpdate exesvchost exeC WINDOWS Explorer EXEC Program Files Common Files Apple Mobile Device Support AppleMobileDeviceService exeC Program Files Bonjour mDNSResponder exeC Program Files Spyware Doctor BDT BDTUpdateService exeC WINDOWS system svchost exe -k hpdevmgmtC Program Files Java jre bin jqs exeC WINDOWS system svchost Google links keep redirecting! exe -k imgsvcC PROGRA ALWILS Avast avastUI exeC Program Files Yahoo Common YMailAdvisor exeC WINDOWS system ctfmon exeC WINDOWS System svchost exe -k HTTPFilterC Program Files Internet Explorer iexplore exeC Documents and Settings hyun seok Desktop dds scrC WINDOWS system conime exe Pseudo HJT Report uStart Page hxxp www google com uSearch Page uSearchMigratedDefaultURL hxxp www google com search q searchTerms amp sourceid ie amp rls com microsoft en-US amp ie utf amp oe utf uSearch Bar mDefault Page URL hxxp www yahoo com mDefault Search URL hxxp us rd yahoo com customize ie defaults su msgr http www yahoo commSearch Page hxxp us rd yahoo com customize ie defaults sp msgr http www yahoo commStart Page hxxp www yahoo com mSearch Bar hxxp us rd yahoo com customize ie defaults sb msgr http www yahoo com ext search search htmluInternet Connection Wizard ShellNext iexploreuInternet Settings ProxyOverride localuSearchURL Default hxxp us rd yahoo com customize ie defaults su msgr http www yahoo comuURLSearchHooks Yahoo Toolbar ef bd -c fb- d - f- d f - c program files yahoo companion installs cpn yt dlluURLSearchHooks H - No FileBHO amp Yahoo Toolbar Helper d -c f - efb- b - eca - c program files yahoo companion installs cpn yt dllBHO PC Tools Browser Guard BHO a f d b- - ff -b - cce e - c program files spyware doctor bdt PCTBrowserDefender dllBHO c -ab - d -a d - e d e - UrlHelper ClassBHO C C A-E - b - D - CECB - No FileBHO MediaBar abb b b-ab d- ed - - fd aa f f - MediaBarBHO SingleInstance Class fdad da - a - fd - c - f ac - c program files yahoo companion installs cpn YTSingleInstance dllTB DAEMON Tools Toolbar aac-c - - e a- e a e - TB Yahoo Toolbar ef bd -c fb- d - f- d f - c program files yahoo companion installs cpn yt dllTB Searchme Toolbar d e e - - b -b b - f b - mscoree dllTB Ask Toolbar d e-fd b- e -b - d b f - TB MediaBar abb b b-ab d- ed - - fd aa f f - TB Causes d b f -cc - - ab -be e eb - TB Google Toolbar c b - - d - b - a cd f - TB PC Tools Browser Guard ea- a- b-adf - d e cc - c program files spyware doctor bdt PCTBrowserDefender dllTB D A - D - D - - E A - No FileTB BC A- - D - AC -E B A BA C - No FileuRun DownloadAccelerator quot c program files dap DAP EXE quot STARTUPuRun ctfmon exe c windows system ctfmon exeuRunOnce Shockwave Updater c windows system adobe shockwave SwHelper exe -Update - - quot Mozilla compatible MSIE Windows NT GTB Mozilla compatible MSIE Windows NT SV NET CLR NET CLR NET CLR NET CLR quot - quot http www miniclip com games table-tennis en quot mRun avast c progra alwils avast avastUI exe noguimRun YMailAdvisor quot c program files yahoo common YMailAdvisor exe quot dRun ctfmon exe c windows system ctfmon exeStartupFolder c docume hyunse start... Read more

A:Google links keep redirecting!

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. Please include a clear description of the problems you're having, along with any steps you may have performed so far.Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.Even if you have already provided information about your PC, we need a new log to see what has changed since you originally posted your problem.We need to create an OTL ReportPlease download OTL from one of the following mirrors:This is THE MirrorSave it to your desktop.Double click on the icon on your desktop.Click the "Scan All Users" checkbox.In the custom scan box paste the following:CODEmsconfigsafebootminimalactivexdrivers32netsvcs%SYSTEMDRIVE%\*.exe/md5starteventlog.dllscecli.dllnetlogon.dllcngaudit.dllsceclt.dllntelogon.dlllogevent.dlliaStor.sysnvstor.sysatapi.sysIdeChnDr.sysviasraid.sysAGP440.sysvaxscsi.sysnvatabus.sysviamraid.sysnvata.sysnvgts.sysiastorv.sysViPrt.syseNetHook.dllahcix86.sysKR10N.sysnvstor32.sysahcix86s.sysnvrd32.syssymmpi.sysadp3132.sysmv61xx.sysnvraid.sys/md5stop%systemroot%\*. /mp /s%systemroot%\system32\*.dll /lockedfiles%systemroot%\Tasks\*.job /lockedfiles%systemroot%\system32\drivers\*.sys /lockedfiles%systemroot%\System32\config\*.sav%systemroot%\system32\drivers\*.sys /90Push the button.Two reports will open, copy and paste them in a reply here:OTL.txt <-- Will be openedExtra.txt<--Will be minimizedIn the upper right hand corner of the topic you will see a button called Options. If you click on this in the drop-down menu you can choose Track this topic. I suggest you do this and select Immediate E-Mail notification and click on Proceed. This way you will be advised when we respond to your topic and facilitate the cleaning of your machine.After 5 days if a topic is not replied to we assume it has been abandoned and it is closed.regards myrti

http://www.bleepingcomputer.com/forums/t/316863/google-links-keep-redirecting/
Relevancy 70.09%

So lately when i search on google it usually redirects me to a different link than which i clicked I have searched for fixes on google and couldn't find any which have worked My anti-virus and spyware programs doesn't show any problems Please help DDS Ver - - - NTFSx Run by HP Administrator at on Thu Internet Explorer Microsoft Windows XP Professional GMT - AV links google redirecting McAfee VirusScan On-access scanning enabled Updated FW McAfee Personal google redirecting links Firewall enabled Running Processes C WINDOWS system svchost google redirecting links -k DcomLaunch svchost exe C WINDOWS System svchost exe -k netsvcs svchost exe svchost exe C WINDOWS system spoolsv exe C Program Files Common Files Apple Mobile Device Support bin AppleMobileDeviceService exe C WINDOWS arservice exe C Program Files Bonjour mDNSResponder exe C WINDOWS eHome ehRecvr exe C WINDOWS eHome ehSched exe C Program Files Common Files LightScribe LSSrvc exe C Program Files McAfee SiteAdvisor McSACore exe C PROGRA McAfee MSC mcmscsvc exe c PROGRA COMMON mcafee mna mcnasvc exe c PROGRA COMMON mcafee mcproxy mcproxy exe C PROGRA McAfee VIRUSS mcshield exe C Program Files Common Files Microsoft Shared VS DEBUG MDM EXE C Program Files McAfee MPF MPFSrv exe C WINDOWS system nvsvc exe C WINDOWS System spool DRIVERS W X HPZIPM EXE svchost exe C WINDOWS system svchost exe -k imgsvc C PROGRA COMMON Stardock SDMCP exe C WINDOWS Explorer EXE C Program Files DisplayFusion DisplayFusion exe C WINDOWS system ctfmon exe C Program Files NETGEAR WPN WPN exe C Program Files Nike Utility Nike Utility exe C Program Files Updates from HP Program Updates from HP exe C Program Files Stardock ObjectDock ObjectDock exe c PROGRA mcafee com agent mcagent exe C PROGRA Stardock OBJECT DesktopX dxwidget exe C PROGRA Stardock OBJECT DesktopX dxwidget exe C DOCUME HP ADM LOCALS Temp EA-AB A- D C-AA E-AA FE C C Foundation Clock exe C WINDOWS system dllhost exe C WINDOWS System svchost exe -k HTTPFilter C HP KBD KBD EXE C PROGRA McAfee VIRUSS mcsysmon exe C WINDOWS ALCXMNTR EXE c windows system hpsysdrv exe C Program Files Java jre bin jusched exe C Program Files iTunes iTunesHelper exe C Program Files iPod bin iPodService exe C Program Files iTunes iTunes exe C Program Files Mozilla Firefox firefox exe C Documents and Settings HP Administrator Desktop dds scr Pseudo HJT Report uStart Page hxxp ie redirect hp com svs rdr TYPE amp tp iehome amp locale EN US amp c Q amp bd pavilion amp pf desktop uDefault Search URL hxxp ie redirect hp com svs rdr TYPE amp tp iesearch amp locale EN US amp c Q amp bd pavilion amp pf desktop mSearch Bar hxxp ie redirect hp com svs rdr TYPE amp tp iesearch amp locale EN US amp c Q amp bd pavilion amp pf desktop uInternet Connection Wizard ShellNext hxxp ie redirect hp com svs rdr TYPE amp tp iehome amp locale EN US amp c Q amp bd pavilion amp pf desktop uInternet Settings ProxyOverride local BHO AcroIEHlprObj Class e f-c d - d -b d- b d be b - c program files adobe acrobat activex AcroIEHelper dll BHO scriptproxy db d a - - e -b d- f c - c program files mcafee virusscan scriptsn dll BHO Google Toolbar Helper aa ed - dd- d - -cf f - c program files google googletoolbar dll BHO hpWebHelper Class aaae a- fff- - c f- d dcb - c windows pchealth helpctr vendors cn hewlett-packard l cupertino s ca c us plugin WebHelper dll BHO McAfee SiteAdvisor BHO b e -a b - a -b - cd e a ff - c progra mcafee sitead mcieplg dll TB amp Google c b - - d - b - a cd f - c program files google googletoolbar dll TB McAfee SiteAdvisor Toolbar ebbbe -bad - b c- e a- abecae - c progra mcafee sitead mcieplg dll uRun DisplayFusion quot c program files displayfusion DisplayFusion exe quot uRun ctfmon exe c windows system ctfmon exe mRun HPBootOp quot c program files hewlett-packard hp boot optimizer HPBootOp exe quot run mRun NvCplDaemon RUNDLL EXE c windows system NvCpl dll NvStartup StartupFolder c docume hp adm startm programs startup animat lnk - c documents and settings hp adminis... Read more

Relevancy 70.09%

I m so glad I found this site I Google Links Redirecting m excited to be a Google Links Redirecting member Thanks in advance for any assistance Recently when I search for something on Google using FireFox and click on the resulting links I m redirected to a different ad page - not the page that I wanted Also my computer seems to be running slower and I ve had critical errors that have caused the computer to shut down completely There isn t enough time to read the actual error message I use Trend Micros PC-cillin Virus scans don t report anything I downloaded and ran Trend Micro s CW Shredder and it turned up nothing I also ran hijackthis The log is posted below I m using a Dell Insipiron m running Windows XP My web browser is Mozilla FireFox Thanks Logfile of Trend Micro HijackThis v Scan saved at AM on Platform Windows XP SP WinNT MSIE Internet Explorer v Boot mode Normal Running processes Google Links Redirecting C WINDOWS System smss Google Links Redirecting exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS system Ati evxx exe C WINDOWS system svchost exe C WINDOWS System svchost exe C WINDOWS System wltrysvc exe C WINDOWS system Ati evxx exe C WINDOWS System bcmwltry exe C WINDOWS Explorer EXE C WINDOWS system spoolsv exe C Program Files Adobe Photoshop Elements PhotoshopElementsFileAgent exe C Program Files Common Files Intuit Update Service IntuitUpdateService exe C Program Files Trend Micro Internet Security TMAS OE TMAS OEMon exe C WINDOWS system ctfmon exe C Program Files Java jre bin jqs exe C Program Files Maxtor Sync SyncServices exe C Program Files Common Files Microsoft Shared VS DEBUG MDM EXE C Program Files Dell NICCONFIGSVC NICCONFIGSVC exe C PROGRA TRENDM INTERN PcCtlCom exe C Program Files Clearwire Connection Manager DeviceLaunchSvc exe C WINDOWS system svchost exe C PROGRA TRENDM INTERN Tmntsrv exe C PROGRA TRENDM INTERN tmproxy exe C PROGRA TRENDM INTERN TmPfw exe C PROGRA TRENDM INTERN PccGuide exe C Program Files Mozilla Firefox firefox exe C WINDOWS system wuauclt exe C WINDOWS system msiexec exe C Program Files Trend Micro HiJackThis HiJackThis exe R - HKCU Software Microsoft Internet Explorer Main Start Page http www ask com o amp l dis R - HKLM Software Microsoft Internet Explorer Main Default Page URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Default Search URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Search Bar http us rd yahoo com customize ie defaults sb msgr http www yahoo com ext search search html R - HKLM Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Start Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Search SearchAssistant R - HKCU Software Microsoft Internet Explorer Main Local Page R - HKLM Software Microsoft Internet Explorer Main Local Page R - HKCU Software Microsoft Internet Connection Wizard ShellNext http go microsoft com fwlink LinkId F - REG system ini UserInit C WINDOWS system userinit exe C WINDOWS system sdra exe O - BHO Adobe PDF Reader Link Helper - E F-C D - D -B D- B D BE B - C Program Files Common Files Adobe Acrobat ActiveX AcroIEHelper dll O - BHO AcroIEHelperStub - DF C-E AD- -A -FA C EBDC - C Program Files Common Files Adobe Acrobat ActiveX AcroIEHelperShim dll O - BHO CBrowserHelperObject Object - CA C - B - E-A -A C DB F - c Program Files GoogleAFE GoogleAE dll O - BHO Java tm Plug-In SSV Helper - DBC -A - b-BC - C C C A - C Program Files Java jre bin jp ssv dll O - BHO JQSIEStartDetectorImpl - E E F - CE- C -BC -EABFE F C - C Program Files Java jre lib deploy jqs ie jqs plugin dll O - HKLM Run Opidasazasa rundll exe quot C WINDOWS ufokogevusu dll quot Startup O - HKLM Run LXCJCATS rundll C WINDOWS System spool DRIVERS W X LXCJtime dll email protected O - HKCU Run OE OEM quot C Program Files Tr... Read more

Relevancy 70.09%

Everytime I search somthing on google when i click on one of the search links it will redirect me to some random website I need some help about how to fix this issue Any help would be greatly links HELP redirecting google PLEASE all appreciated THANKS Here is a log I saved from google redirecting all links HELP PLEASE ComboFix - - - - ----a-w- c windows system drivers mbamswissarmy sys - - - - -------- d-----w- c documents and settings All Users Application Data Malwarebytes - - - - ----a-w- c windows system drivers mbam sys - - - - -------- d-----w- c program files Malwarebytes Anti-Malware - - - - -------- d-----w- c windows system winrm - - - - -------- d-----w- c windows system GroupPolicy - - - - -------- dc-h--w- c windows Uinstall KB - - - - -------- d-----w- c program files OCS Inventory Agent - - - - -------- d-----w- C ocs-ng - - - - -------- d-----w- c program files iPod - - - - -------- d-----w- c program files iTunes - - - - ----a-w- c windows system drivers usbaapl sys - - - - ----a-w- c windows system usbaaplrc dll - - - - -------- d-----w- c program files Bonjour - - - - -------- d-----w- c windows Sun - - - - ----a-w- c windows system Upgrd exe - - - - -------- d-sh--w- c documents and settings LocalService IETldCache - - - - -------- d-----w- c documents and settings NetworkService Local Settings Application Data Adobe - - - - -------- d-----w- C Quarantine - - - - ----a-w- c program files Mozilla Firefox components Scriptff dll - - - - ----a-w- c windows system drivers mfeavfk sys - - - - ----a-w- c windows system drivers mfeapfk sys - - - - ----a-w- c windows system mfevtps exe - - - - ----a-w- c windows system drivers mferkdet sys - - - - ------w- c windows system drivers mfetdik sys - - - - ----a-w- c windows system drivers mfebopk sys - - - - -------- d-----w- c windows SchCache - - - - -------- d-----w- c program files Common Files New Boundary - - - - -------- d-----w- c documents and settings All Users Application Data Prism Pack Find M Report - - - - ----a-w- c windows system rpcnetp exe - - - - ----a-w- c windows system rpcnet dll - - - - ------w- c windows system rpcnet exe - - - - ----a-w- c windows system rpcnetp dll - - - - ----a-w- c windows system dnssd dll - - - - ----a-w- c windows system jdns sd dll - - - - ----a-w- c windows system dnssdX dll - - - - ----a-w- c windows system dns-sd exe - - - - ----a-w- c windows apppatch aclayers dll - - - - ----a-w- c windows system inetcomm dll - - - - ----a-w- c windows system vbscript dll - - - - ----a-w- c windows system win k sys - - - - ----a-w- c windows system inetcpl cpl - - - - ----a-w- c windows system wininet dll - - - - ----a-w- c windows system licmgr dll - - - - ----a-w- c windows system html iec - - - - ----a-w- c program files mozilla firefox components Scriptff dll Reg Loading Points Note empty entries amp legit default entries are not shown REGEDIT HKEY LOCAL MACHINE SOFTWARE Microsoft Windows CurrentVersion Run quot StartCCC quot quot c program files ATI Technologies ATI ACE Core-Static CLIStart exe quot - - quot SmartAudio quot quot c program files CONEXANT SAII SAIICpl exe quot - - quot ACTray quot quot c program files ThinkPad ConnectUtilities ACTray exe quot - - quot ACWLIcon quot quot c program files ThinkPad ConnectUtilities ACWLIcon exe quot - - quot PWRMGRTR quot quot c progra ThinkPad UTILIT PWRMGRTR DLL quot - - quot TPFNF quot quot c program files Lenovo NPDIRECT TPFNF SP exe quot - - quot TPHOTKEY quot quot c program files Lenovo HOTKEY TPOSDSVC exe quot - - quot LenovoAutoScrollUtility quot quot c program files Lenovo VIRTSCRL virtscrl exe quot - - quot TpShocks quot quot TpShocks exe quot - - quot TVT Scheduler Proxy quot quot c program files Common Files Lenovo Scheduler scheduler proxy exe quot - - quot NWTRAY quot quot NWTRAY EXE quot - - quot SynTPEnh quot quot c program files Synaptics SynTP SynTPEnh exe quot - - quot iPrint Tray quot quot c windows system iprntctl exe quot - - quot iPrint Event Monitor quot quot c ... Read more

A:google redirecting all links HELP PLEASE

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will appear Click OKDeFogger may ask you to reboot the machine, if it does - click OKDo not re-enable these drivers until otherwise instructed.Download DDS:Please download DDS by sUBs from one of the links below and save it to your desktop:
Download DDS and save it to your desktop

Link1
Link2
Link3

Please disable any anti-malware program that will block scripts from running before running DDS.

Double-Click on dds.scr and a command window will appear. This is normal.Shortly after two logs will appear:
DDS.txt Attach.txtA window will open instructing you save & post the logsSave the logs to a convenient place such as your desktopCopy the contents of both logs & post in your next replyScan With RKUnHookerPlease Download Rootkit Unhooker Save it to your desktop.Now double-click on RKUnhookerLE.exe to run it.Click the Report tab, then click Scan.Check (Tick) Drivers, Stealth,. Uncheck the rest. then Click OK.Wait till the scanner has finished and then click File, Save Report.Save the report somewhere where you can find it. Click Close.Copy the entire contents of the report and paste it in a reply here.Note** you may get this warning it is ok, just ignore"Rootkit Unhooker has detected a parasite inside itself!It is recommended to remove parasite, okay?""just click on Cancel, then Accept".information and logs:In your next post I need the following

.logs from DDSlog from RKUnHookerlet me know of any problems you may have hadGringo

http://www.bleepingcomputer.com/forums/t/398787/google-redirecting-all-links-help-please/
Relevancy 70.09%

Google is redirecting my links seems to be a common malware problem on ups pop and google redirecting links the forums when i click the link fe a r google is site it goes to as well as it says jump occasionally on the page name right before google redirecting links and pop ups it goes to another site Here are my logs Thanks MikeMicrosoft Windows Vista Home Premium Boot Device Device HarddiskVolume Install Date AMSystem Uptime PM hours ago Motherboard ASUSTeK Computer INC BerkeleyProcessor Intel reg Core Duo CPU E GHz CPU mhz Disk Partitions C is FIXED NTFS - GiB total GiB free D is FIXED NTFS - GiB total GiB free E is CDROM F is RemovableG is RemovableH is RemovableI is google redirecting links and pop ups Removable Disabled Device Manager Items System Restore Points RP PM - Removed HP Total Care AdvisorRP PM - Scripted restoreRP PM google redirecting links and pop ups - Installed Serif WebPlus X RP PM - Installed Java Update Installed Programs Activation Assistant for the Microsoft Office suitesAdobe Flash Player ActiveXAdobe Flash Player ActiveXAdobe Reader Enhanced Multimedia Keyboard SolutionGoogle ChromeHardware Diagnostic ToolsHitman Pro HP Customer Experience EnhancementsHP Customer FeedbackHP Easy Setup - FrontendHP On-Screen Cap Num Scroll Lock IndicatorHP Photosmart Essential HP Photosmart Essential HP Picasso Media Center Add-InHP UpdateIntel reg PRO Network Connections DriversIntel Viiv Softwareiolo technologies System MechanicJava Auto UpdaterJava Update LightScribe Microsoft Office Excel MUI English Microsoft Office Home and Student Microsoft Office OneNote MUI English Microsoft Office PowerPoint MUI English Microsoft Office Proof English Microsoft Office Proof French Microsoft Office Proof Spanish Microsoft Office Proofing English Microsoft Office Shared MUI English Microsoft Office Shared Setup Metadata MUI English Microsoft Office Word MUI English Microsoft Visual C RedistributableMicrosoft Worksmuvee autoProducer My HP GamesNVIDIA DriversPSSWCOREPython RealPlayerRealtek High Definition Audio DriverRhapsodyRhapsody Player EngineRoxio Activation ModuleRoxio Creator AudioRoxio Creator Basic v Roxio Creator CopyRoxio Creator DataRoxio Creator EasyArchiveRoxio Creator ToolsRoxio Express Labeler Roxio MyDVD Basic v Serif WebPlus X Snapfish Media DetectorSoft Data Fax Modem with SmartCPYahoo Toolbar for Internet Explorer Event Viewer Messages From Past Week PM Error Service Control Manager - The Internet Connection Sharing ICS service hung on starting PM Error Service Control Manager - The PEVSystemStart service is marked as an interactive service However the system is configured to not allow interactive services This service may not function properly PM Error Service Control Manager - The XAudioService service terminated unexpectedly It has done this time s PM Error Service Control Manager - The following boot-start or system-start driver s failed to load i prt End Of File GMER - http www gmer netRootkit scan - - Windows Harddisk DR - gt Device Ide IdeDeviceP T L - Hitachi HDT VLA rev V COA BARunning gmer exe Driver C Users Michael AppData Local Temp uxrdifow sys---- Kernel code sections - GMER ---- C Users Michael AppData Local Temp mbr sys The system cannot find the file specified ---- User code sections - GMER ---- text C Users Michael AppData Local Google Chrome Application chrome exe ntdll dll NtCreateFile F A Bytes text C Users Michael AppData Local Google Chrome Application chrome exe ntdll dll NtCreateFile B F F Byte E text C Users Michael AppData Local Google Chrome Application chrome exe ntdll dll NtMapViewOfSection FB A Byte text C Users Michael AppData Local Google Chrome Application chrome exe ntdll dll NtMapViewOfSection FB A Bytes text C Users Michael AppData Local Google Chrome Application chrome exe ntdll dll NtMapViewOfSection B FB F Byte E text C Users Michael AppData Local Google Chrome Application chrome exe ntdll dll NtOpenFile FBFA Bytes text C Users Michael AppData Local Google Chrome Applic... Read more

A:google redirecting links and pop ups

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will appear Click OKDeFogger may ask you to reboot the machine, if it does - click OKDo not re-enable these drivers until otherwise instructed.Download DDS:Please download DDS by sUBs from one of the links below and save it to your desktop:
Download DDS and save it to your desktop

Link1
Link2
Link3

Please disable any anti-malware program that will block scripts from running before running DDS.

Double-Click on dds.scr and a command window will appear. This is normal.Shortly after two logs will appear:
DDS.txt Attach.txtA window will open instructing you save & post the logsSave the logs to a convenient place such as your desktopCopy the contents of both logs & post in your next replyScan With RKUnHookerPlease Download Rootkit Unhooker Save it to your desktop.Now double-click on RKUnhookerLE.exe to run it.Click the Report tab, then click Scan.Check (Tick) Drivers, Stealth,. Uncheck the rest. then Click OK.Wait till the scanner has finished and then click File, Save Report.Save the report somewhere where you can find it. Click Close.Copy the entire contents of the report and paste it in a reply here.Note** you may get this warning it is ok, just ignore"Rootkit Unhooker has detected a parasite inside itself!It is recommended to remove parasite, okay?""just click on Cancel, then Accept".information and logs:In your next post I need the following

.logs from DDSlog from RKUnHookerlet me know of any problems you may have hadGringo

http://www.bleepingcomputer.com/forums/t/387959/google-redirecting-links-and-pop-ups/
Relevancy 70.09%

Hey all. For about a month now I've been dealing with problems on my Toshiba Satellite. I'm running windows 7. It all started off with that stupid win7 2011 security virus. I removed that but now i'm having problems because my google links keep redirecting me, and some other sites do as well. I've ran MalwareBytes, Spybot Search and Destroy, Spyware Blaster, CCleaner, AVG, and Avira. I'm running out of ideas. System Restore didn't work either. Please Help!
Thank you ,
Brad

A:Help please, google links keep redirecting me

Hi -

I suggest that you have your system reviewed by a Security Analyst to assure the infection is gone.

Please follow these steps - NEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help - Tech Support Forum

Regards. . .

jcgriff2

`

http://www.techsupportforum.com/forums/f217/help-please-google-links-keep-redirecting-me-576721.html
Relevancy 70.09%

Hello ive been having problems with Google and other search engines when I search for something and click on a link i get redirected to an unrelated site and the only way i can get to the site i wanted is to copy paste the url I googled this problem and found that its Google Links Redirecting caused by like a vundo or malware or something so i downloaded Hijackthis and ran a scan heres the results Logfile of Trend Micro HijackThis v Scan saved at PM on Platform Windows XP SP WinNT MSIE Internet Explorer v SP Boot mode Normal Running processes C WINDOWS System smss exe C WINDOWS system winlogon exe C WINDOWS system services exe Google Links Redirecting C WINDOWS system lsass exe C WINDOWS system svchost exe C Program Files Windows Defender MsMpEng exe C WINDOWS System svchost exe C WINDOWS system svchost exe C Program Files STOPzilla szntsvc exe C WINDOWS system spoolsv exe C Program Files Common Files Apple Mobile Device Support bin AppleMobileDeviceService exe C PROGRA AVG AVG avgwdsvc exe C Program Files Bonjour mDNSResponder exe C WINDOWS system svchost exe C Program Files Compact Wireless-G USB Adapter Wireless Network Monitor WLService exe C Program Files Compact Wireless-G USB Adapter Wireless Network Monitor WUSB GC exe c WINDOWS system ZuneBusEnum exe C PROGRA AVG AVG avgemc exe C PROGRA AVG AVG avgrsx exe C PROGRA AVG AVG avgnsx exe C Program Files AVG AVG avgcsrvx exe C WINDOWS system wscntfy exe C WINDOWS Explorer EXE C Program Files Windows Defender MSASCui exe C Program Files Zune ZuneLauncher exe C WINDOWS SOUNDMAN EXE C WINDOWS system VTTimer exe C WINDOWS system wuauclt exe C WINDOWS system VTtrayp exe C Program Files Java jre bin jusched exe C Program Files iTunes iTunesHelper exe C PROGRA AVG AVG avgtray exe C Program Files STOPzilla Stopzilla exe C WINDOWS system ctfmon exe C Program Files iPod bin iPodService exe C Program Files Mozilla Firefox firefox exe C WINDOWS System svchost exe C Program Files Trend Micro HijackThis HijackThis exe O - BHO Adobe PDF Reader Link Helper - E F-C D - D -B D- B D BE B - C Program Files Common Files Adobe Acrobat ActiveX AcroIEHelper dll O - BHO AskBar BHO - f d - - d - c -aa e ed - C Program Files AskBarDis bar bin askBar dll O - BHO WormRadar com IESiteBlocker NavFilter - CA F - F E- B -A E- E E C C - C Program Files AVG AVG avgssie dll O - BHO SSVHelper Class - BB-D F - C-B EB-D DAF D D - C Program Files Java jre bin ssv dll O - BHO STOPzilla Browser Helper Object - E F - - D - F B- D B D - C WINDOWS system StopzillaBHO dll O - Toolbar Ask Toolbar - d e-fd b- e -b - d b f - C Program Files AskBarDis bar bin askBar dll O - HKLM Run Windows Defender quot C Program Files Windows Defender MSASCui exe quot -hide O - HKLM Run Zune Launcher quot c Program Files Zune ZuneLauncher exe quot O - HKLM Run SoundMan SOUNDMAN EXE O - HKLM Run VTTimer VTTimer exe O - HKLM Run VTTrayp VTtrayp exe O - HKLM Run SunJavaUpdateSched quot C Program Files Java jre bin jusched exe quot O - HKLM Run QuickTime Task quot C Program Files QuickTime QTTask exe quot -atboottime O - HKLM Run iTunesHelper quot C Program Files iTunes iTunesHelper exe quot O - HKLM Run AVG TRAY C PROGRA AVG AVG avgtray exe O - HKLM Run Adobe Reader Speed Launcher quot C Program Files Adobe Reader Reader Reader sl exe quot O - HKLM Run STOPzilla quot C Program Files STOPzilla Stopzilla exe quot autorun O - HKCU Run ctfmon exe C WINDOWS system ctfmon exe O - Startup Adobe Gamma lnk C Program Files Common Files Adobe Calibration Adobe Gamma Loader exe O - Global Startup Microsoft Office lnk C Program Files Microsoft Office Office OSA EXE O - Extra context menu item E amp xport to Microsoft Excel - res C PROGRA MICROS Office EXCEL EXE O - Extra button Messenger - FB F -F - d -BB E- C F - C Program Files Messenger msmsgs exe O - Extra 'Tools' menuitem Windows Messenger - FB F -F - d -BB E- C F - C Program Files Messenger msmsgs exe O - HKLM System CCS Services Tcpip ECB - DAC- DED-AA - ED B NameServer O - HKLM System CCS Servic... Read more

A:Google Links Redirecting

Hello afl0ck0fg0ats,Please download Malwarebytes' Anti-Malware from one of these places:http://www.majorgeeks.com/Malwarebytes_Ant...ware_d5756.htmlhttp://www.besttechie.net/mbam/mbam-setup.exeDouble Click mbam-setup.exe to install the application. * Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish. * If an update is found, it will download and install the latest version. * Once the program has loaded, select "Perform Quick Scan", then click Scan. * The scan may take some time to finish,so please be patient. * When the scan is complete, click OK, then Show Results to view the results. * Make sure that everything is checked, and click Remove Selected. * When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note) * The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM. * Copy&Paste the entire report in your next reply along with a fresh HijackThis log.Extra Note:If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediately.Thanks,tea

http://www.bleepingcomputer.com/forums/t/215117/google-links-redirecting/
Relevancy 70.09%

Hi all When I go to a search engine such as Google and run a search all of the links redirect through http lightmediamcn com q whatisearchedforI've seen other Redirecting Links Google posts about this problem but it seems like the solutions provided are individual computer-specific I can't seem to find the pin point of the problem so if anyone could help me through this it would be a great help Running XP Home Firefox I have included my DDS log and HijackThis log with attach txt attached These were run just minutes before posting If I need to include anything else please let me know I will be as compliant as possible Thanks SarahDDS Ver - - - NTFSx Run by Sarah Beth at on Sun Internet Explorer BrowserJavaVersion Microsoft Google Redirecting Links Windows XP Professional GMT - AV PC-cillin Internet Security - Virus Protection On-access scanning enabled Outdated D BC- CC- - E- E AF FW PC-cillin Internet Security - Firewall disabled E E E- A D- -A F - EC F EB Running Processes C WINDOWS system svchost -k DcomLaunchsvchost exeC WINDOWS System svchost exe -k netsvcsC Program Files Intel Wireless Bin EvtEng exeC Program Files Intel Wireless Bin S EvMon exeC Program Files Intel Wireless Bin WLKeeper exesvchost exesvchost exeC WINDOWS system spoolsv exeC Program Files Common Files ArcSoft Connection Service Bin ACService exeC Program Files Common Files Apple Mobile Device Support bin AppleMobileDeviceService exeC Program Files Bonjour mDNSResponder exeC Program Files WIDCOMM Bluetooth Software bin btwdins exeC Program Files Dell Network Assistant hnm svc exeC WINDOWS system svchost exe -k hpdevmgmtC Program Files McAfee SiteAdvisor McSACore exeC Program Files Common Files Microsoft Shared VS DEBUG MDM EXEC WINDOWS System svchost exe -k HPZ C WINDOWS System svchost exe -k HPZ C WINDOWS system svchost exe -k podmenaC Program Files Intel Wireless Bin RegSrvc exeC WINDOWS system svchost exe -k imgsvcC WINDOWS system DRIVERS WtSrv exeC WINDOWS Explorer EXEC Program Files Intel Wireless bin ZCfgSvc exeC WINDOWS stsystra exeC Program Files Synaptics SynTP SynTPEnh exeC WINDOWS system dla tfswctrl exeC WINDOWS system igfxpers exeC WINDOWS system igfxsrvc exeC WINDOWS system WService EXEC Program Files Common Files Real Update OB realsched exeC Program Files Common Files ArcSoft Connection Service Bin ACDaemon exeC Program Files HP HP Software Update HPWuSchd exeC WINDOWS System svchost exe -k HTTPFilterC Program Files Java jre bin jusched exeC WINDOWS system ctfmon exeC PROGRA Intel Wireless Bin Dot XCfg exeC WINDOWS system wuauclt exeC Program Files Mozilla Firefox firefox exeC Program Files Trend Micro HijackThis HijackThis exeC WINDOWS system NOTEPAD EXEC Documents and Settings Sarah Beth Desktop dds scr Pseudo HJT Report uStart Page hxxp www google com uSearch Page hxxp www google com hws sb dell-usuk-rel en side html channel usuSearch Bar hxxp www google com hws sb dell-usuk-rel en side html channel usuDefault Page URL www google com ig dell hl en amp client dell-usuk-rel amp channel us amp ibd mDefault Page URL hxxp www dell commStart Page hxxp www dell comuInternet Connection Wizard ShellNext iexploreuInternet Settings ProxyOverride localmSearchAssistant hxxp searchingforwebsite info search php q s amp a v -auURLSearchHooks H - No FilemWinlogon Userinit c windows system userinit exe c windows system twext exe BHO HP Print Enhancer c e- - -bf - c - c program files hp smart web printing hpswp printenhancer dllBHO HP Print Clips f -dc - -a c- f d c - c program files hp smart web printing hpswp framework dllBHO Adobe PDF Reader Link Helper e f-c d - d -b d- b d be b - c program files adobe acrobat activex AcroIEHelper dllBHO Spybot-S amp D IE Protection - f - d - - d f - c program files spybot - search amp destroy SDHelper dllBHO DriveLetterAccess ca d e- - cf- e - - c windows system dla tfswshx dllBHO XBTB Class fcb - a - af- - d d a c e - c program files ietoolbar search w google search search dllBHO SSVHelper Class bb-d f - c-b eb-d daf... Read more

A:Google Redirecting Links

Hello! My name is Sam and I will be helping you. In order to see what's going on with your computer I will ask for you to post various logs from the tools that we will use to resolve your issue. Please also share with me any information about how your computer is reacting and behaving each step of the way as we work through this process.We need to create an OTL ReportPlease download OTL from hereSave it to your desktop.Double click on the icon on your desktop.Click the "Scan All Users" checkbox.Push the "Run Scan" button.The scan should take just a few minutes.Copy the log that opens up and paste it back here in your next reply.=============The next log will show us any hidden files that are present.Download GMER from here:Unzip it to the desktop.Open the program and click on the Rootkit tab.Make sure all the boxes on the right of the screen are checked, EXCEPT for ?Show All?.Click on Scan.When the scan has run click Copy and paste the results (if any) into this thread.

http://www.bleepingcomputer.com/forums/t/233968/google-redirecting-links/
Relevancy 70.09%

I ve been having a problem when trying to access sites via google Generally after using a google seach if I try to keep redirecting Google links access a site Google links keep redirecting via the link on the search results page I get redirected to a site that I m not trying to access In most cases I m redirected to advertisements A few months ago my PC started accessing web pages on its own When it was on but no-one was using it the Google links keep redirecting browser history would show loads of web pages being accessed At other times pages would start to open on screen on their own McAfee didn t find anything when scanning but Malwarebytes found and removed some infections which solved the initial problem Since then however the google problem has emerged and any scans I ve performed have come up blank The DDS log is below Any help would be appreciated Cheers Tom DDS Ver - - - NTFSx Run by Tom at on Internet Explorer BrowserJavaVersion Microsoft Windows XP Home Edition GMT AV McAfee VirusScan Disabled Updated B EE - - CDE-A A-DD BA FAD FW McAfee Personal Firewall Enabled Running Processes C WINDOWS system Ati evxx exe C WINDOWS system svchost -k DcomLaunch svchost exe C WINDOWS System svchost exe -k netsvcs svchost exe C WINDOWS system rundll exe C WINDOWS system spoolsv exe svchost exe C Program Files Common Files ArcSoft Connection Service Bin ACService exe C Program Files Common Files Apple Mobile Device Support AppleMobileDeviceService exe C Program Files Bonjour mDNSResponder exe C Program Files Java jre bin jqs exe C Program Files McAfee SiteAdvisor McSACore exe C PROGRA McAfee MSC mcmscsvc exe c PROGRA COMMON mcafee mna mcnasvc exe c PROGRA COMMON mcafee mcproxy mcproxy exe C PROGRA McAfee VIRUSS mcshield exe C Program Files McAfee MPF MPFSrv exe C Program Files McAfee MSK MskSrver exe C WINDOWS system svchost exe -k imgsvc C WINDOWS system UAService exe C Program Files Yahoo SoftwareUpdate YahooAUService exe C WINDOWS System svchost exe -k HTTPFilter C WINDOWS Explorer EXE C WINDOWS system rundll exe c PROGRA mcafee com agent mcagent exe C WINDOWS stsystra exe C Program Files Intel Modem Event Monitor IntelMEM exe C Program Files CyberLink PowerDVD DVDLauncher exe C Program Files Dell Media Experience DMXLauncher exe C Program Files Common Files InstallShield UpdateService issch exe C PROGRA Yahoo browser ybrwicon exe C Program Files Dell Photo AIO Printer dlbxmon exe C PROGRA Yahoo browser ycommon exe C Program Files Adobe Photoshop Album Starter Edition Apps apdproxy exe C WINDOWS system dla tfswctrl exe C WINDOWS system dlbxcoms exe C Program Files Common Files Real Update OB realsched exe C Program Files Common Files ArcSoft Connection Service Bin ACDaemon exe C Program Files Common Files ArcSoft Connection Service Bin ArcCon ac C Program Files iTunes iTunesHelper exe C WINDOWS system ctfmon exe C Program Files Dell Support DSAgnt exe C Program Files Messenger msmsgs exe C Program Files Spybot - Search amp Destroy TeaTimer exe C Program Files BT Home Computing BTHomeComputing exe C PROGRA Yahoo MESSEN ymsgr tray exe C Program Files iPod bin iPodService exe C Program Files Internet Explorer iexplore exe C Program Files Internet Explorer iexplore exe C Program Files Internet Explorer iexplore exe C Documents and Settings Tom Desktop dds scr Pseudo HJT Report uStart Page hxxp www sky com uSearch Page hxxp uk red clientapps yahoo com customize btyahoo defaults sp http uk search yahoo com uWindow Title Internet Explorer Provided By Sky Broadband uSearch Bar hxxp uk red clientapps yahoo com customize btyahoo defaults sb http uk docs yahoo com info bt side html uDefault Page URL hxxp www sky com mDefault Search URL hxxp uk red clientapps yahoo com customize btyahoo defaults su http uk search yahoo com mSearch Page hxxp uk red clientapps yahoo com customize btyahoo defaults sp http uk search yahoo com mSearch Bar hxxp uk red clientapps yahoo com customize btyahoo defaults sb http uk docs yahoo com info bt side html uInt... Read more

A:Google links keep redirecting

Hello and welcome to Bleeping Computer.My name is km2357 and I will be helping you to remove any infection(s) that you may have.I will be giving you a series of instructions that need to be followed in the order in which I give them to you.If for any reason you do not understand an instruction or are just unsure then please do not guess, simply post back with your questions/concerns and we will go through it again.Please do not start another thread or topic, I will assist you at this thread until we solve your problems.Lastly the fix may take several attempts and my replies may take some time but I will stick with it if you do the same.Sorry for the delay in replying, the forum is very busy. If you still need help, please do the following:Step # 1 Download and run DDSDownload DDS and save it to your desktop from here or here or hereDisable any script blocker, and then double click dds.scr to run the tool. When done, DDS will open two (2) logs: DDS.txt Attach.txtSave both reports to your desktop. Post them back to your topic.Step # 2: Download and Run GmerPlease download gmer.zip from Gmer and save it to your desktop.***Please close any open programs ***Double-click gmer.exe. The program will begin to run.**Caution**These types of scans can produce false positives. Do NOT take any action on any "<--- ROOTKIT" entries unless advised by a trained Security AnalystIf possible rootkit activity is found, you will be asked if you would like to perform a full scan. Click No. If you do not receive notice about possible rootkit activity remain on the Rootkit/Malware tab & make sure that the 'Sections' button is ticked and the 'Show All' button is unticked. Click the Scan button and let the program do its work. GMER will produce a log.
Once the scan is complete, you may receive another notice about rootkit activity. Click OK.
GMER will produce a log. Click on the Save button, and save the log as gmer.txt somewhere you can easily find it, such as your desktop.DO NOT touch the PC at ALL for Whatever reason/s until it has 100% completed its scan, or attempted scan in case of some error etc !Please post the results from the GMER scan in your reply.In your next post/reply, I need to see the following:1. The two DDS Logs (DDS and Attach.txt)2. The GMER LogUse multiple posts if you can't fit everything into one post

http://www.bleepingcomputer.com/forums/t/385740/google-links-keep-redirecting/
Relevancy 70.09%

I have no idea how this started but it is really irritating me especially since I have younger siblings who use this computer Any help would be much obliged Logfile of Google Redirecting Links Trend Micro HijackThis v Scan saved at on Platform Windows Vista SP WinNT MSIE Internet Explorer v Boot mode NormalRunning processes C Windows system Dwm exeC Windows system taskeng exeC Windows Explorer EXEC Program Files Windows Defender MSASCui exeC Windows RtHDVCpl exeC Program Files SiS VGA Utilities SiSTray exeC Program Files iTunes iTunesHelper exeC Program Files Java jre bin jusched exeC Program Files MyWebSearch bar bin M SRCHMN EXEC Program Files MyWebSearch bar bin MWSOEMON EXEC Windows system wbem unsecapp exeC Windows system wuauclt exeC Program Files Mozilla Firefox Google Redirecting Links firefox exeC Windows system SearchFilterHost exeC Program Files Trend Micro HijackThis HijackThis exeR - HKCU Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Default Search URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Search Google Redirecting Links SearchAssistant R - HKLM Software Microsoft Internet Explorer Search CustomizeSearch R - HKCU Software Google Redirecting Links Microsoft Windows CurrentVersion Internet Settings ProxyOverride localR - HKCU Software Microsoft Internet Explorer Toolbar LinksFolderName R - URLSearchHook Yahoo Toolbar - EF BD -C FB- D - F- D F - C Program Files Yahoo Companion Installs cpn yt dllR - URLSearchHook no name - A FAF - E- cf- - F A D - C Program Files MyWebSearch bar bin MWSSRCAS DLLO - Hosts localhostO - BHO MyWebSearch Search Assistant BHO - A FAF - E- cf- - F A D - C Program Files MyWebSearch bar bin MWSSRCAS DLLO - BHO Yahoo Toolbar Helper - D -C F - EFB- B - ECA - C Program Files Yahoo Companion Installs cpn yt dllO - BHO Adobe PDF Reader Link Helper - E F-C D - D -B D- B D BE B - C Program Files Common Files Adobe Acrobat ActiveX AcroIEHelper dllO - BHO mwsBar BHO - B EA -A - -B BB- DE CCA - C Program Files MyWebSearch bar bin MWSBAR DLLO - BHO Java Plug-In SSV Helper - BB-D F - C-B EB-D DAF D D - C Program Files Java jre bin ssv dllO - BHO no name - E D - A- EC-A -BA D E E - no file O - BHO Windows Live Sign-in Helper - D - C - ABF- ECC- C - C Program Files Common Files Microsoft Shared Windows Live WindowsLiveLogin dllO - BHO Google Toolbar Notifier BHO - AF DE - D - -B FA-CE B AD D - C Program Files Google GoogleToolbarNotifier swg dllO - BHO Java Plug-In SSV Helper - DBC -A - b-BC - C C C A - C Program Files Java jre bin jp ssv dllO - Toolbar Yahoo Toolbar - EF BD -C FB- D - F- D F - C Program Files Yahoo Companion Installs cpn yt dllO - Toolbar My Web Search - B EA -A - -B BB- DE CCA - C Program Files MyWebSearch bar bin MWSBAR DLLO - Toolbar Veoh Web Player Video Finder - FBB -D D - f a-A E - B BFC - C Program Files Veoh Networks VeohWebPlayer VeohIEToolbar dllO - HKLM Run Windows Defender ProgramFiles Windows Defender MSASCui exe -hideO - HKLM Run RtHDVCpl RtHDVCpl exeO - HKLM Run SiSTray ProgramFiles SiS VGA Utilities SiSTray exeO - HKLM Run QuickTime Task quot C Program Files QuickTime QTTask exe quot -atboottimeO - HKLM Run iTunesHelper quot C Program Files iTunes iTunesHelper exe quot O - HKLM Run SunJavaUpdateSched quot C Program Files Java jre bin jusched exe quot O - HKLM Run MyWebSearch Plugin rundll C PROGRA MYWEBS bar bin M PLUGIN DLL UPFO - HKLM Run My Web Search Bar Search Scope Monitor quot C PROGRA MYWEBS bar bin m SrchMn exe quot m wO - HKLM Run MyWebSearch Email Plugin C PROGRA MYWEBS bar bin mwsoemon exeO - HKCU Run MyWebSearch Email Plugin C PROGRA MYWEBS bar bin mwsoemon exeO - HKCU Run VeohPlugin quot C Program Files Veoh Networks VeohWebPlayer veohwebplayer exe quot O - HKUS S- - - Run Sidebar ProgramFiles Windows Sidebar Sidebar exe dete... Read more

A:Google Redirecting Links

Also, my MalwareBytes will not run, this thing is realy screwing me over, any help?

http://www.bleepingcomputer.com/forums/t/221452/google-redirecting-links/
Relevancy 70.09%

hey i ve had this problem before on another computer but when i search on google and click a link it redirects to spam idk what to do here s a logfile Logfile of Trend Micro HijackThis v Scan saved at PM on Platform Windows XP SP WinNT MSIE Internet Explorer v SP Boot mode Normal Running processes C WINDOWS System google redirecting links smss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS system svchost exe C WINDOWS System svchost exe C WINDOWS System WLTRYSVC EXE C WINDOWS System bcmwltry exe C WINDOWS system spoolsv exe C WINDOWS Explorer EXE C Program Files DellTPad Apoint exe C WINDOWS RTHDCPL EXE C WINDOWS system rundll exe C WINDOWS system RUNDLL EXE C WINDOWS system WLTRAY exe C Program Files Dell Dell Webcam Manager DellWMgr exe C Program Files Dell QuickSet quickset exe C Program Files DellTPad ApMsgFwd exe C WINDOWS system ctfmon exe C Program Files DellTPad HidFind exe C Program Files DellTPad Apntex exe C Program Files Microsoft Office Office ONENOTEM EXE C WINDOWS system svchost exe C WINDOWS system svchost exe C Program Files Common Files Intuit Update Service IntuitUpdateService exe C WINDOWS System svchost exe C WINDOWS system nvsvc exe C WINDOWS system DRIVERS o flash exe C WINDOWS System svchost exe C Program Files Microsoft Search Enhancement Pack SeaPort SeaPort exe C WINDOWS system svchost exe C WINDOWS system SearchIndexer exe C WINDOWS system wuauclt exe C WINDOWS Microsoft NET Framework v mscorsvw exe C Program Files Mozilla Firefox firefox exe C Program Files Mozilla Firefox plugin-container exe C WINDOWS system SearchProtocolHost exe C google redirecting links Program Files Trend Micro HiJackThis HiJackThis exe R - HKCU Software Microsoft Internet Explorer Main Search Page http search live com R - HKCU Software Microsoft Internet google redirecting links Explorer Main Start google redirecting links Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Default Page URL http www dell com R - HKLM Software Microsoft Internet Explorer Main Start Page http www dell com R - HKLM Software Microsoft Internet Explorer Search SearchAssistant http search live com sphome aspx R - HKLM Software Microsoft Internet Explorer Search Default Page URL http g msn com USSMB R - HKCU Software Microsoft Internet Connection Wizard ShellNext http g msn com USSMB R - HKCU Software Microsoft Internet Explorer Main Window Title Windows Internet Explorer provided by Microsoft O - BHO no name - D -C F - efb- B - ECA - no file O - BHO HP Print Enhancer - C E- - -BF - C - C Program Files HP Digital Imaging Smart Web Printing hpswp printenhancer dll O - BHO AcroIEHelperStub - DF C-E AD- -A -FA C EBDC - c Program Files Common Files Adobe Acrobat ActiveX AcroIEHelperShim dll O - BHO Search Helper - EBF - F- bff-A F-B E AAC B - C Program Files Microsoft Search Enhancement Pack Search Helper SEPsearchhelperie dll O - BHO Windows Live Sign-in Helper - D - C - ABF- ECC- C - C Program Files Common Files Microsoft Shared Windows Live WindowsLiveLogin dll O - BHO SkypeIEPluginBHO - AE - E C- ED - F B-F F A - C Program Files Skype Toolbars Internet Explorer skypeieplugin dll O - BHO Java Plug-In SSV Helper - DBC -A - b-BC - C C C A - C Program Files Java jre bin jp ssv dll O - BHO JQSIEStartDetectorImpl - E E F - CE- C -BC -EABFE F C - C Program Files Java jre lib deploy jqs ie jqs plugin dll O - BHO HP Smart BHO Class - FFFFFFFF-CF E- F B-BDC - E E A - C Program Files HP Digital Imaging Smart Web Printing hpswp BHO dll O - HKLM Run Apoint C Program Files DellTPad Apoint exe O - HKLM Run RTHDCPL RTHDCPL EXE O - HKLM Run Alcmtr ALCMTR EXE O - HKLM Run NvCplDaemon RUNDLL EXE C WINDOWS system NvCpl dll NvStartup O - HKLM Run nwiz nwiz exe installquiet O - HKLM Run NVHotkey rundll exe nvHotkey dll Start O - HKLM Run NvMediaCenter RUNDLL EXE C WINDOWS system NvMcTray dll NvTaskbarInit O - HKLM Run Broadcom Wireless Manager UI C WINDOWS system WLTRAY exe O ... Read more

A:google redirecting links

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.Do not run any other tool untill instructed to do so!Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.I would like to get a better look at your system, please do the following so I can get some more detailed logs.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will appear Click OKDeFogger may ask you to reboot the machine, if it does - click OKDo not re-enable these drivers until otherwise instructed.IMPORTANT! If you receive an error message while running DeFogger, please post the log defogger_disable which will appear on your desktop.Download DDS:Please download DDS by sUBs from one of the links below and save it to your desktop:
Download DDS and save it to your desktop

Link1
Link2
Link3

Please disable any anti-malware program that will block scripts from running before running DDS.

Double-Click on dds.scr and a command window will appear. This is normal.Shortly after two logs will appear:
DDS.txt Attach.txtA window will open instructing you save & post the logsSave the logs to a convenient place such as your desktopCopy the contents of both logs & post in your next replyScan With RKUnHookerPlease Download Rootkit Unhooker Save it to your desktop.Now double-click on RKUnhookerLE.exe to run it.Click the Report tab, then click Scan.Check (Tick) Drivers, Stealth,. Uncheck the rest. then Click OK.Wait till the scanner has finished and then click File, Save Report.Save the report somewhere where you can find it. Click Close.Copy the entire contents of the report and paste it in a reply here.Note** you may get this warning it is ok, just ignore"Rootkit Unhooker has detected a parasite inside itself!It is recommended to remove parasite, okay?""just click on Cancel, then Accept".information and logs:In your next post I need the following1.logs from DDS2.RKUnHooker3.let me know of any problems you may have had[/list]Gringo

http://www.bleepingcomputer.com/forums/t/417349/google-redirecting-links/
Relevancy 70.09%

It seems to happen in spurts... like it will redirect me continually for a bit. Then Ill use my computer a couple hours later and It wont do it again. So far I have ran Spybot, MalwareBytes, AVG, SUPERanti, ccleaner as well as Microsoft security essentials.. To no avail. And now that I notice it it seems that everyday even though I have recently run a scan using Microsoft security essentials it still goes back to saying I haven't...
Thanks in advance!

A:Google links Redirecting me

Welocome to BC.Please download MiniToolBox, save it to your desktop and run it. Checkmark the following checkboxes: Flush DNS Report IE Proxy Settings Reset IE Proxy Settings Report FF Proxy Settings Reset FF Proxy Settings List content of Hosts List IP configuration List Winsock Entries List last 10 Event Viewer log List Installed Programs List Users, Partitions and Memory size. List Minidump FilesClick Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run. Note: When using "Reset FF Proxy Settings" option Firefox should be closed.Please follow our Removal Guide here How to remove Google Redirects. You will move to the Automated Removal InstructionsIf it finds something make sure Cure is selectedNext click Continue then Reboot nowA log file should be created on your C: drive named "TDSSKiller.txt" please copy and paste the contents in your next reply.Rerun MBAM (MalwareBytes) like this:Open MBAM in normal mode and click Update tab, select Check for Updates,when doneclick Scanner tab,select Quick scan and scan (normal mode).After scan click Remove Selected, Post new scan log and Reboot into normal mode.Please ask any needed questions,post logs and Let us know how the PC is running now.

http://www.bleepingcomputer.com/forums/t/424068/google-links-redirecting-me/
Relevancy 70.09%

A few weeks ago I had issues with google search results taking me to ad sites It seems to have stopped for the moment but I m worried it ll reappear so I want to be sure Running Vista on an Advent Laptop Thanks for any help HijackThis Log Logfile of Trend Micro HijackThis v Scan saved at on Platform Windows Vista SP WinNT MSIE Internet Explorer v Boot mode Normal Running processes C Windows system Dwm exe C Windows Explorer EXE C Windows system taskeng exe C redirecting Google links Program Files AVG Google links redirecting AVG avgtray exe C Program Files Spybot - Search amp Destroy TeaTimer exe C Windows system wbem unsecapp exe C Program Files AVG AVG Identity Protection agent bin avgidsmonitor exe C Program Files Windows Media Player wmpnscfg exe C Program Files Trusteer Rapport bin RapportService exe C Program Files Windows Media Player wmplayer exe C Users Gordie AppData Local Google Update GoogleUpdate exe C Program Files Internet Explorer IELowutil exe C Windows system SearchFilterHost exe C Users Gordie Desktop HijackThis exe R - HKCU Software Microsoft Internet Explorer Main Start Page http www bing com R - HKLM Software Microsoft Internet Explorer Main Default Page URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Default Search URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId O - BHO AcroIEHelperStub - DF C-E AD- -A -FA C EBDC - C Program Files Common Files Adobe Acrobat ActiveX AcroIEHelperShim dll O - BHO WormRadar com IESiteBlocker NavFilter - CA F - F E- B -A E- E E C C - C Program Files AVG AVG avgssie dll O - BHO Spybot-S amp D IE Protection - - F - D - - D F - C PROGRA SPYBOT SDHelper dll O - BHO AVG Security Toolbar BHO - A BC A - F - -AA - D C - C Program Files AVG AVG Toolbar IEToolbar dll O - BHO Java tm Plug-In SSV Helper - DBC -A - b-BC - C C C A - C Program Files Java jre bin jp ssv dll O - Toolbar AVG Security Toolbar - CCC A -B CA- -B A - F DD - C Program Files AVG AVG Toolbar IEToolbar dll O - HKLM Run AVG TRAY C Program Files AVG AVG avgtray exe O - HKCU Run SpybotSD TeaTimer C Program Files Spybot - Search amp Destroy TeaTimer exe O - Extra button Send to OneNote - A- - f c- - EE C C - C PROGRA MICROS Office ONBttnIE dll O - Extra Tools menuitem S amp end to OneNote - A- - f c- - EE C C - C PROGRA MICROS Office ONBttnIE dll O - Extra button WH GBP Casino - -C A - -A CE-CFE E DF A - no file O - Extra Tools menuitem WH GBP Casino - -C A - -A CE-CFE E DF A - no file O - Extra button Research - B - CC- C -B BE- C C A - C PROGRA MICROS Office REFIEBAR DLL O - Extra button no name - DFB A - F - C -A - CAB FD A - C PROGRA SPYBOT SDHelper dll O - Extra Tools menuitem Spybot - Search amp Destroy Configuration - DFB A - F - C -A - CAB FD A - C PROGRA SPYBOT SDHelper dll O - Extra button WH GBP Casino - -C A - -A CE-CFE E DF A - no file HKCU O - Extra Tools menuitem WH GBP Casino - -C A - -A CE-CFE E DF A - no file HKCU O - Protocol avgsecuritytoolbar - F DDE B - - A - D -E E B C - C Program Files AVG AVG Toolbar IEToolbar dll O - Protocol linkscanner - F C- F - D -A D -FBDDE F D - C Program Files AVG AVG avgpp dll O - Service Adobe Active File Monitor V AdobeActiveFileMonitor - Unknown owner - C Program Files Adobe Photoshop Elements PhotoshopElementsFileAgent exe O - Service AVG Security Toolbar Service - Unknown owner - C Program Files AVG AVG Toolbar ToolbarBroker exe O - Service AVGIDSAgent - AVG Technologies CZ s r o - C Program Files AVG AVG Identity Protection Agent Bin AVGIDSAgent exe O - Service AVG WatchDog avgwd - AVG Technologies CZ s r o - C Program Files AVG AVG avgwdsvc exe O - Service FLEXnet Licensing Service - Macrovision Europe Ltd - C Program Files Common Files Macrovision Shared FLEXnet Publisher FNPLicensingService exe O - Service Google Update Service gupdate gupdate - Google Inc - C Program Files Google Update GoogleUpdate exe O - Service InstallDriver T... Read more

https://forums.techguy.org/threads/google-links-redirecting.972483/
Relevancy 70.09%

PROBLEM Upon doing any Google search most of the time the first time I click on a result link I get redirected to random sites nothing pornographic or anything and really nothing of consistency Seemingly these redirects are Google Redirecting Links purely random When I hit the back button once or twice going back to my original Google search results if I click on the exact same link it works fine which means I am Redirecting Google Links not redirected WHAT I HAVE DONE I have AVG Redirecting Google Links running I have used Malware Spybot TrendMicro and a couple others Redirecting Google Links that skip my memory and they have all been unsuccessful in finding anything and correcting this problem HijackThis LOG Logfile of Trend Micro HijackThis v Scan saved at PM on Platform Windows XP SP WinNT MSIE Internet Explorer v Boot mode Normal Running processes C WINDOWS System smss exe C PROGRA AVG AVG avgchsvx exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS system Ati evxx exe C WINDOWS system svchost exe C WINDOWS System svchost exe C WINDOWS system svchost exe C WINDOWS system Ati evxx exe C WINDOWS System WLTRYSVC EXE C WINDOWS System bcmwltry exe C WINDOWS system spoolsv exe C Program Files Common Files ArcSoft Connection Service Bin ACService exe C Program Files Common Files Apricorn Schedule schedul exe C Program Files Common Files Apple Mobile Device Support AppleMobileDeviceService exe C WINDOWS system authServer exe C Program Files AVG AVG avgwdsvc exe C Program Files Bonjour mDNSResponder exe C WINDOWS System spool DRIVERS W X OPHALDCS EXE C Program Files EPSON Projector EMP NS Connection V EMP NSWLSV exe C Program Files LogMeIn Hamachi hamachi- exe C Program Files Java jre bin jqs exe C Program Files LogMeIn x LMIGuardianSvc exe C Program Files LogMeIn x RaMaint exe C Program Files LogMeIn x LogMeIn exe C WINDOWS system LxrSII s exe C Program Files Common Files Microsoft Shared VS DEBUG MDM EXE C Program Files Dell QuickSet NICCONFIGSVC exe C Program Files Apricorn SMART-ER SMART-ER Service exe C WINDOWS system svchost exe C Program Files AVG AVG Identity Protection Agent Bin AVGIDSAgent exe C Program Files AVG AVG avgnsx exe C WINDOWS Explorer EXE C WINDOWS system WLTRAY exe C Program Files ATI Technologies ATI ACE CLI EXE C Program Files Synaptics SynTP SynTPEnh exe C Program Files Dell QuickSet quickset exe C Program Files LogMeIn x LogMeInSystray exe C WINDOWS System DLA DLACTRLW EXE C Program Files Common Files InstallShield UpdateService issch exe C WINDOWS tsnp std exe C WINDOWS vsnp std exe C WINDOWS FixCamera exe C Program Files AVG AVG avgtray exe C Program Files CE nmSvc exe C Program Files iTunes iTunesHelper exe C Program Files PCPitstop Info Center InfoCenter exe C Program Files AVG AVG Identity Protection agent bin avgidsmonitor exe C Program Files CE nmFlt exe C WINDOWS system ctfmon exe C Documents and Settings Michael Ortell Application Data SanDisk Sansa Updater SansaDispatch exe C Program Files Logitech SetPoint SetPoint exe C Program Files LogMeIn Hamachi hamachi- -ui exe C Documents and Settings Michael Ortell Application Data Dropbox bin Dropbox exe C Program Files iPod bin iPodService exe C Program Files Common Files Logishrd KHAL KHALMNPR EXE C Program Files ATI Technologies ATI ACE cli exe C Program Files Mozilla Thunderbird thunderbird exe C PROGRA AVG AVG avgrsx exe C Program Files AVG AVG avgcsrvx exe C Program Files Mozilla Firefox firefox exe C Program Files Mozilla Firefox plugin-container exe C Documents and Settings Michael Ortell Desktop TEMPORARY Laptop Malware Fix HijackThis exe R - HKCU Software Microsoft Internet Explorer Main Start Page http www pulaskifmc com R - HKLM Software Microsoft Internet Explorer Main Default Page URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Default Search URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Search Page htt... Read more

A:Redirecting Google Links

Hello and welcome to Tech Support Guy.

My name is km2357 and I will be helping you to remove any infection(s) that you may have.

I will be giving you a series of instructions that need to be followed in the order in which I give them to you.

If for any reason you do not understand an instruction or are just unsure then please do not guess, simply post back with your questions/concerns and we will go through it again.

Please do not start another thread or topic, I will assist you at this thread until we solve your problems.

Lastly the fix may take several attempts and my replies may take some time but I will stick with it if you do the same.

Sorry for the delay in replying, the forum is very busy. If you still need help, please do the following:

Step # 1 Download and run DDS

Download DDS and save it to your desktop from here or here or here
Disable any script blocker, and then double click dds.scr to run the tool.
When done, DDS will open two (2) logs:
DDS.txt
Attach.txt

Save both reports to your desktop. Post them back to your topic.
Step # 2: Download and Run Gmer

Please download gmer.zip from Gmer and save it to your desktop.

***Please close any open programs ***

Double-click gmer.exe. The program will begin to run.

**Caution**
These types of scans can produce false positives. Do NOT take any action on any "<--- ROOTKIT" entries unless advised by a trained Security Analyst

If possible rootkit activity is found, you will be asked if you would like to perform a full scan. Click No.

If you do not receive notice about possible rootkit activity remain on the Rootkit/Malware tab & make sure that the 'Sections' button is ticked and the 'Show All' button is unticked.
Click the Scan button and let the program do its work. GMER will produce a log.

Once the scan is complete, you may receive another notice about rootkit activity.
Click OK.

GMER will produce a log. Click on the Save button, and save the log as gmer.txt somewhere you can easily find it, such as your desktop.

DO NOT touch the PC at ALL for Whatever reason/s until it has 100% completed its scan, or attempted scan in case of some error etc !

Please post the results from the GMER scan in your reply.
In your next post/reply, I need to see the following:

1. The two DDS Logs (DDS and Attach.txt)
2. The GMER Log

Use multiple posts if you can't fit everything into one post.
 

https://forums.techguy.org/threads/redirecting-google-links.1004471/
Relevancy 70.09%

Whenever I click something on google it redirects to a random site I ve tried Spybot S amp D and Avira AntiVir but when I scan it with those everything comes up clean Besides keep Links HELP! Google redirecting, the google issue nothing else seems to be wrong with my computer Here s the Hijack This log Logfile of Trend Micro HijackThis v Scan saved at PM on Platform Windows XP SP WinNT MSIE Internet Google Links keep redirecting, HELP! Explorer v SP Boot mode Normal Running processes C WINDOWS System smss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS Google Links keep redirecting, HELP! system lsass exe C WINDOWS system svchost exe C WINDOWS System svchost exe C WINDOWS system spoolsv exe C Program Files Avira AntiVir Desktop sched exe C Program Files Avira AntiVir Desktop avguard exe C Program Files Common Files Apple Mobile Device Support bin AppleMobileDeviceService exe C Program Files Bonjour mDNSResponder exe C Program Files System Control Manager MSIService exe C WINDOWS system svchost ex C Program Files Toshiba Bluetooth Toshiba Stack TosBtSrv exe C Program Files Viewpoint Common ViewpointService exe C WINDOWS Explorer EXE C WINDOWS system igfxtray exe C WINDOWS system hkcmd exe C WINDOWS system igfxpers exe C WINDOWS RTHDCPL EXE C WINDOWS system igfxsrvc exe C Program Files System Control Manager MGSysCtrl exe C Program Files iTunes iTunesHelper exe C Program Files Java jre bin jusched exe C Program Files Avira AntiVir Desktop avgnt exe C Program Files Spybot - Search amp Destroy TeaTimer exe C Program Files Toshiba Bluetooth Toshiba Stack TosBtMng exe C WINDOWS system wbem unsecapp exe C Program Files Stardock ObjectDock ObjectDock exe C Program Files OpenOffice org program soffice exe C Program Files OpenOffice org program soffice bin C Program Files Toshiba Bluetooth Toshiba Stack TosA dp exe C Program Files Toshiba Bluetooth Toshiba Stack TosBtHid exe C Program Files iPod bin iPodService exe C Program Files Toshiba Bluetooth Toshiba Stack TosBtHsp exe C Program Files Toshiba Bluetooth Toshiba Stack TosAVRC exe C Program Files Mozilla Firefox firefox exe C Program Files Trend Micro HijackThis HijackThis exe R - HKCU Software Microsoft Internet Explorer Main Start Page http www msi com tw R - HKLM Software Microsoft Internet Explorer Main Default Page URL http www msi com tw R - HKCU Software Microsoft Internet Connection Wizard ShellNext http www msi com tw R - HKCU Software Microsoft Windows CurrentVersion Internet Settings ProxyOverride local O - BHO Adobe PDF Reader Link Helper - E F-C D - D -B D- B D BE B - C Program Files Common Files Adobe Acrobat ActiveX AcroIEHelper dll O - BHO Spybot-S amp D IE Protection - - F - D - - D F - C PROGRA SPYBOT SDHelper dll O - BHO SSVHelper Class - BB-D F - C-B EB-D DAF D D - C Program Files Java jre bin ssv dll O - HKLM Run IgfxTray C WINDOWS system igfxtray exe O - HKLM Run HotKeysCmds C WINDOWS system hkcmd exe O - HKLM Run Persistence C WINDOWS system igfxpers exe O - HKLM Run RTHDCPL RTHDCPL EXE O - HKLM Run Alcmtr ALCMTR EXE O - HKLM Run Adobe Reader Speed Launcher quot C Program Files Adobe Reader Reader Reader sl exe quot O - HKLM Run MGSysCtrl C Program Files System Control Manager MGSysCtrl exe O - HKLM Run ITSecMng ProgramFiles TOSHIBA Bluetooth Toshiba Stack ItSecMng exe START O - HKLM Run QuickTime Task quot C Program Files QuickTime QTTask exe quot -atboottime O - HKLM Run iTunesHelper quot C Program Files iTunes iTunesHelper exe quot O - HKLM Run SunJavaUpdateSched quot C Program Files Java jre bin jusched exe quot O - HKLM Run avgnt quot C Program Files Avira AntiVir Desktop avgnt exe quot min O - HKCU Run SpybotSD TeaTimer C Program Files Spybot - Search amp Destroy TeaTimer exe O - HKUS S- - - RunOnce RunNarrator Narrator exe User SYSTEM O - HKUS DEFAULT RunOnce RunNarrator Narrator exe User Default user O - Startup OpenOffice org lnk C Program Files OpenOffice org program quickstart exe O - Startup Stardock ObjectDock lnk C Progra... Read more

A:Google Links keep redirecting, HELP!

can someone please help? this seems to be happening to a lot of people but the solutions seem user-specific. its extremely hard to do work when you can't research. thanks again!!
 

https://forums.techguy.org/threads/google-links-keep-redirecting-help.836893/
Relevancy 70.09%

Hi, and thanks in advance for any help.

Recently most Google links have been redirecting through various search engines (and occasionally ending up at Ebay).

I have run Spybot, SUPERAntiSpyware and MalwareBytes, and although I have removed several suspect items the problem persists.

Any help would be much appreciated!

Oh, I haven't posted any logs as the rules said not to unless asked

Matt.

A:Google Links Redirecting

Hi Matt and welcome to BC

Please update and rerun Malwarebytes.. Post the fresh log. Thanks

http://www.bleepingcomputer.com/forums/t/244828/google-links-redirecting/
Relevancy 70.09%

Hello When I do a Links Google Redirecting search on Google and click on the links that show up in the Google Links Redirecting results my browser is being redirected to sites unrelated to that of my search query For example if I use Google to search for quot NFL Football quot the links will take me to sites such as Yahoo Jobs Juggle Lucky Results etc I m using Windows XP Here is Google Links Redirecting a copy of my Hijack This log Logfile of Trend Micro HijackThis v Scan saved at PM on Platform Windows XP SP WinNT MSIE Internet Explorer v Boot mode Normal Running processes C WINDOWS System smss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS system svchost exe C WINDOWS System svchost exe C WINDOWS system spoolsv exe C WINDOWS Explorer EXE C PROGRA AVG AVG avgtray exe C WINDOWS system ctfmon exe C Program Files Spybot - Search amp Destroy TeaTimer exe C Program Files AVG AVG avgwdsvc exe C Program Files Bonjour mDNSResponder exe C Program Files Java jre bin jqs exe C Program Files AVG AVG avgnsx exe C WINDOWS system svchost exe C Program Files Weather Pulse TDClient exe C Program Files Raxco PerfectDisk PDSched exe C Program Files AVG AVG avgchsvx exe C Program Files AVG AVG avgrsx exe C Program Files AVG AVG avgcsrvx exe C Program Files Mozilla Firefox firefox exe C Program Files Trend Micro HijackThis HijackThis exe R - HKCU Software Microsoft Internet Explorer Main Start Page http www wxdx com main html R - HKLM Software Microsoft Internet Explorer Main Default Page URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Default Search URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Start Page http go microsoft com fwlink LinkId R - HKCU Software Microsoft Windows CurrentVersion Internet Settings ProxyOverride local O - BHO AcroIEHelperStub - DF C-E AD- -A -FA C EBDC - C Program Files Common Files Adobe Acrobat ActiveX AcroIEHelperShim dll O - BHO WormRadar com IESiteBlocker NavFilter - CA F - F E- B -A E- E E C C - C Program Files AVG AVG avgssie dll O - BHO Spybot-S amp D IE Protection - - F - D - - D F - C PROGRA SPYBOT SDHelper dll O - BHO Java tm Plug-In SSV Helper - BB-D F - C-B EB-D DAF D D - C Program Files Java jre bin ssv dll O - BHO Java tm Plug-In SSV Helper - DBC -A - b-BC - C C C A - C Program Files Java jre bin jp ssv dll O - BHO JQSIEStartDetectorImpl - E E F - CE- C -BC -EABFE F C - C Program Files Java jre lib deploy jqs ie jqs plugin dll O - HKLM Run Windows Defender quot C Program Files Windows Defender MSASCui exe quot -hide O - HKLM Run AVG TRAY C PROGRA AVG AVG avgtray exe O - HKLM Run Malwarebytes Anti-Malware reboot quot C Program Files Malwarebytes Anti-Malware mbam exe quot runcleanupscript O - HKCU Run ctfmon exe C WINDOWS system ctfmon exe O - HKCU Run SpybotSD TeaTimer C Program Files Spybot - Search amp Destroy TeaTimer exe O - HKCU RunOnce FlashPlayerUpdate C WINDOWS system Macromed Flash NPSWF FlashUtil exe -p O - Extra context menu item E amp xport to Microsoft Excel - res C PROGRA MICROS Office EXCEL EXE O - Extra button no name - DFB A - F - C -A - CAB FD A - C PROGRA SPYBOT SDHelper dll O - Extra Tools menuitem Spybot - Search amp Destroy Configuration - DFB A - F - C -A - CAB FD A - C PROGRA SPYBOT SDHelper dll O - Extra button no name - e e dd -d - - b -f ba - C WINDOWS Network Diagnostic xpnetdiag exe O - Extra Tools menuitem xpsp res dll - - e e dd -d - - b -f ba - C WINDOWS Network Diagnostic xpnetdiag exe O - Extra button Messenger - FB F -F - d -BB E- C F - C Program Files Messenger msmsgs exe O - Extra Tools menuitem Windows Messenger - FB F -F - d -BB E- C F - C Program Files Messenger msmsgs exe O - DPF CCA D- A - E -B - DEE D - http upload facebook com controls v FacebookPhotoUploader cab O - DPF ED - B- DA -BF -BE C EC - http cdn scan onecare live ... Read more

Relevancy 70.09%

I have a problem on my Vista pc it seems every link that i click on from google redirects to an advertisement site and i can't stop it After reading a few forums i think i have the go google com problem the other forums have said to use various programs such as 'spyware doctor' 'malwarebytes antimalware' and 'hijackthis' I have tried links redirecting to ads Google all of these with the latest updates yet i still have the problem 'Spyware doctor' finds several 'malicious files' and clears them for me however google links still get redirected and when Google links redirecting to ads i scan again they come back What do i do ----------------------------- Hijack this log Logfile of Trend Micro HijackThis v Scan saved at on Platform Windows Vista WinNT MSIE Internet Explorer v Boot mode Normal Running processes c Program Files Bioscrypt VeriSoft Bin AsGHost exe C Windows system Dwm exe C Windows SYSTEM WISPTIS EXE C Windows system taskeng exe C Program Files Common Files microsoft shared ink TabTip exe C Windows Explorer EXE C Program Files Windows Defender MSASCui exe C Program Files Motorola SMSERIAL sm hlpr exe C Program Files Synaptics SynTP SynTPEnh exe C WINDOWS RtHDVCpl exe C Program Files HP QuickPlay QPService exe C Program Files HP HP Software Update hpwuSchd exe C Program Files Hewlett-Packard HP Quick Launch Buttons QLBCTRL exe C Program Files Hewlett-Packard HP Wireless Assistant WiFiMsg exe C Program Files Hewlett-Packard HP Wireless Assistant HPWAMain exe C Program Files Java jre bin jusched exe C Program Files Microsoft Office Office GrooveMonitor exe C Program Files iTunes iTunesHelper exe C Program Files AVG AVG avgtray exe C WINDOWS System rundll exe C Program Files WIDCOMM Bluetooth Software BTTray exe C Program Files Ovi Files Ovi Files agent exe C Program Files Connect AutoUpdateSrv exe C PROGRA HEWLET Shared HPQTOA EXE C Program Files WIDCOMM Bluetooth Software BtStackServer exe C Program Files Common Files Microsoft Shared Ink InputPersonalization exe C Program Files Orange Mobile Partner Orange Mobile Partner exe C Program Files Internet Explorer iexplore exe C Windows System mobsync exe C Program Files Trend Micro HijackThis HijackThis exe R - HKCU Software Microsoft Internet Explorer Main Start Page http www google co uk R - HKLM Software Microsoft Internet Explorer Search SearchAssistant R - HKLM Software Microsoft Internet Explorer Search CustomizeSearch R - HKCU Software Microsoft Internet Explorer Toolbar LinksFolderName O - Hosts localhost O - BHO Adobe PDF Reader Link Helper - E F-C D - D -B D- B D BE B - C Program Files Common Files Adobe Acrobat ActiveX AcroIEHelper dll O - BHO WormRadar com IESiteBlocker NavFilter - CA F - F E- B -A E- E E C C - C Program Files AVG AVG avgssie dll O - BHO Groove GFS Browser Helper - - C - D -B F - BBC D A E - C PROGRA MICROS Office GRA E DLL O - BHO SSVHelper Class - BB-D F - C-B EB-D DAF D D - C Program Files Java jre bin ssv dll O - BHO VeriSoft Access Manager - DF F DB- C - D - -B D EC - c Program Files Bioscrypt VeriSoft Bin ItIEAddIn dll O - HKLM Run Windows Defender ProgramFiles Windows Defender MSASCui exe -hide O - HKLM Run SMSERIAL C Program Files Motorola SMSERIAL sm hlpr exe O - HKLM Run SynTPEnh C Program Files Synaptics SynTP SynTPEnh exe O - HKLM Run RtHDVCpl RtHDVCpl exe O - HKLM Run QPService quot C Program Files HP QuickPlay QPService exe quot O - HKLM Run HP Software Update C Program Files Hp HP Software Update HPWuSchd exe O - HKLM Run NapsterShell C Program Files Napster napster exe systray O - HKLM Run QlbCtrl ProgramFiles Hewlett-Packard HP Quick Launch Buttons QlbCtrl exe Start O - HKLM Run HP Health Check Scheduler C Program Files Hewlett-Packard HP Health Check HPHC Scheduler exe O - HKLM Run WAWifiMessage ProgramFiles Hewlett-Packard HP Wireless Assistant WiFiMsg exe O - HKLM Run hpWirelessAssistant ProgramFiles Hewlett-Packard HP Wireless Assistant HPWAMain exe O - HKLM Run SunJavaUpdateSched quot C Program Files Java jre bin jusched ex... Read more

A:Google links redirecting to ads

hi and welcome to the forum the first place to go is here http://www.techsupportforum.com/f50/...lp-305963.html the folks there can help you check for and get rid of any malware

http://www.techsupportforum.com/forums/f217/google-links-redirecting-to-ads-406150.html
Relevancy 69.23%

When I search something Links Search Redirecting Google on Google Search Links Redirecting google with Flock Firefox Internet Explorer and get all the results and I click on a link it redirects me to another website My computer randomly locks up from time-to-time when I open up internet explorer only ie and it also locked up on me today after I clicked control panel Also I have a router Linksys WRT N that seems to only allow internet connection to my infected computer It blocks my laptop using wifi and my other computers from connecting to the internet It says they're connected to the router but no internet If I go to my router setup it says that the only computer connected to the router is the infected computer All my restore points were erased aswell I most likely got this infection while downloading something from a torrent The torrent gave me over malwares I've been able to remove multiple trojans malware such as Zlob DNSChanger and Agent Backdoor Trojan There were also a few rogue viruses that I got rid of Even after all the removal I knew there was still something I believe this is the work of the gaopdxserv sys virus after looking at GMER Rootkit scanner DDS txt log DDS Ver - - - NTFSx Run by Owner at on Mon Internet Explorer Microsoft Windows XP Home Edition GMT - AV ZoneAlarm Security Suite Antivirus On-access scanning enabled Updated FW ZoneAlarm Security Suite Firewall enabled Running Processes C WINDOWS system svchost -k DcomLaunch svchost exe C WINDOWS System svchost exe -k netsvcs svchost exe svchost exe C WINDOWS Explorer EXE C WINDOWS system spoolsv exe C Program Files GIGABYTE EnergySaver GSvr exe C Program Files Nero Nero InCD InCDsrv exe C Program Files Java jre bin jqs exe C WINDOWS system nvsvc exe C Program Files CyberLink Shared Files RichVideo exe C WINDOWS System dmadmin exe C Program Files Java jre bin jusched exe C Program Files Nero Nero InCD NBHGui exe C Program Files CyberLink PowerDVD PDVDServ exe C Program Files lg fwupdate fwupdate exe C Program Files Nero Nero InCD InCD exe C WINDOWS RTHDCPL EXE C WINDOWS SOUNDMAN EXE C WINDOWS system RUNDLL EXE C WINDOWS System svchost exe -k HTTPFilter C WINDOWS system ctfmon exe C Program Files Zone Labs ZoneAlarm zlclient exe C WINDOWS system ZoneLabs vsmon exe C PROGRA ZONELA ZONEAL MAILFR mantispm exe C PROGRA FLOCK FLOCK EXE C Program Files Internet Explorer iexplore exe C Program Files Internet Explorer iexplore exe C WINDOWS system taskmgr exe C Documents and Settings Owner Desktop dds scr Pseudo HJT Report uStart Page hxxp google ca BHO FD A - B - B- - F FAB A - No File BHO C C A-E - b - D - CECB - No File BHO Windows Live Sign-in Helper d - c - abf- ecc- c - c program files common files microsoft shared windows live WindowsLiveLogin dll BHO Java tm Plug-In SSV Helper dbc -a - b-bc - c c c a - c program files java jre bin jp ssv dll BHO JQSIEStartDetectorImpl Class e e f - ce- c -bc -eabfe f c - c program files java jre lib deploy jqs ie jqs plugin dll TB FBB -D D - f a-A E - B BFC - No File uRun ctfmon exe c windows system ctfmon exe uRun msnmsgr quot c program files windows live messenger msnmsgr exe quot background mRun SunJavaUpdateSched quot c program files java jre bin jusched exe quot mRun SecurDisc c program files nero nero incd NBHGui exe mRun RemoteControl quot c program files cyberlink powerdvd PDVDServ exe quot mRun nwiz nwiz exe install mRun NvCplDaemon RUNDLL EXE c windows system NvCpl dll NvStartup mRun NeroFilterCheck c program files common files ahead lib NeroCheck exe mRun LGODDFU quot c program files lg fwupdate fwupdate exe quot blrun mRun LanguageShortcut quot c program files cyberlink powerdvd language Language exe quot mRun JMB X IDE Setup c windows raidtool xInsIDE exe mRun InCD c program files nero nero incd InCD exe mRun GEST mRun X Raid Configurer c windows system xRaidSetup exe boot mRun RTHDCPL RTHDCPL EXE mRun SoundMan SOUNDMAN EXE mRun AlcWzrd ALCWZRD EXE mRun Alcmtr ALCMTR EXE mRun NvMediaCenter RUNDLL EXE c windows sy... Read more

A:Google Search Links Redirecting

Hello and Welcome to TSF.

Please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription.

Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.

------------------------------------------------------

One or more of the identified infections is a backdoor trojan.

This type of infection allows hackers to remotely control your computer, log keystrokes, steal critical system information, and download and execute files without your knowledge.

If you do any banking or other financial transactions on the PC or if it should contain any other sensitive information, please get to a known clean computer and change all passwords where applicable, and it would be wise to contact those same financial institutions to apprise them of your situation.

Please read this: How Do I Handle Possible Identify Theft, Internet Fraud, and CC Fraud?

------------------------------------------------------


Quote:




I most likely got this infection while downloading something from a torrent. The torrent gave me over 40 malwares.




I hope you have learned something about torrents.

------------------------------------------------------

Please note that these fixes are not instantaneous. Most infections require more than one round to properly eradicate.

Please stay with me until given the 'all clear' even if symptoms seemingly abate.

Kindly follow my instructions and please do no fixing on your own or running of scanners unless requested by a helper.

------------------------------------------------------

Please visit this webpage for download links, and instructions for running ComboFix:

http://www.bleepingcomputer.com/comb...o-use-combofix

* Ensure you have disabled all antivirus and antimalware programs so they do not interfere with the running of ComboFix.

Get help here

Please post the C:\ComboFix.txt in your next reply for further review.

------------------------------------------------------

Disable the real-time protections of your antivirus and antispyware applications, usually via a right-click on the System Tray icon. Please re-enable them after the scan.
Download ToolBarSD and Save it to your Desktop.
Double-click ToolBarSD.exe to run it.
Type the letter of your chosen language and press Enter
Click OK to the prompt.
Type 1 and press Enter
Please post the log, TB.txt, which it creates at C:\TB.txt in your next reply.
------------------------------------------------------

http://www.techsupportforum.com/forums/f100/google-search-links-redirecting-366394.html
Relevancy 69.23%

Hello first time poster here I am hoping someone can assist me here A few of nights ago I stumbled onto a site that tried to install virus malware protection don't remember the name I did not accept for obvious reasons tried to escape by canceling which it wouldn't let me do and eventually got out by stopping Firefox altogether by halting the Firefox using Control-alt-delete Immediately afterward I quick scanned using MABM removed three infected files don't remember the files but I still have the logs Now for some reason my Google search links redirect to sites me other than the intended site This occurs about times and does not occur if the site is manually entered in the navigation bar I currently use Firefox version and lately have redirecting links search Google keep enabled NoScript add-on to halt the redirection I usually Google search links keep redirecting use tabbed browsing and what I noticed is that the redirected links always have one of two icons in the tab either a purple curly-q or a green global symbol don't know if this helps or narrows it down followed by the name of the site usually a shopping Google search links keep redirecting site or something totally unrelated Based on Google searching I see that this seems to be a common problem I would prefer not to use CombiFix without Google search links keep redirecting additional guidance MABM on either quick or full scan currently detects nothing malicious Same for Spybot Search and Destroy The DDS scan results are on the bottom of this message following my signature If needed I can make arrangements for a Kaspersky scan as well I have to get ready for work now so I probably won't have access to my computer again until this evening around p m EST Thank you again for your assistance Kaskade fan Following is the DDS scan below DDS Ver - - - NTFSx Run by Joseph G Desiderio at on Tue Internet Explorer BrowserJavaVersion Microsoft Windows XP Professional GMT - AV AVG Anti-Virus Free On-access scanning enabled Updated DDD - FF- F- E B- D D BF Running Processes C WINDOWS system svchost -k DcomLaunch svchost exe C WINDOWS System svchost exe -k netsvcs C Program Files Intel Wireless Bin EvtEng exe C Program Files Intel Wireless Bin S EvMon exe C Program Files Intel Wireless Bin WLKeeper exe C Program Files Intel Wireless Bin ZcfgSvc exe svchost exe C WINDOWS Explorer EXE svchost exe C PROGRA Intel Wireless Bin XConfig exe C WINDOWS System WLTRYSVC EXE C WINDOWS System bcmwltry exe C WINDOWS system spoolsv exe svchost exe C Program Files Common Files Apple Mobile Device Support bin AppleMobileDeviceService exe C PROGRA AVG AVG avgwdsvc exe C Program Files Bonjour mDNSResponder exe C WINDOWS system inetsrv inetinfo exe C Program Files Java jre bin jqs exe C Program Files Common Files Microsoft Shared VS DEBUG MDM EXE C Program Files Intel Wireless Bin RegSrvc exe C PROGRA AVG AVG avgrsx exe C WINDOWS system tcpsvcs exe C WINDOWS System snmp exe C WINDOWS system svchost exe -k imgsvc C WINDOWS system mqsvc exe C Program Files Canon CAL CALMAIN exe C WINDOWS system mqtgsvc exe C WINDOWS system ctfmon exe C Program Files Intel Wireless Bin ifrmewrk exe C Program Files Synaptics SynTP SynTPEnh exe C WINDOWS system igfxpers exe C WINDOWS system WLTRAY exe C Program Files CyberLink PowerDVD DX PDVDDXSrv exe C Program Files SigmaTel C-Major Audio WDM stsystra exe C PROGRA AVG AVG avgtray exe C Program Files Java jre bin jusched exe C Program Files iTunes iTunesHelper exe C WINDOWS system igfxsrvc exe C Program Files iPod bin iPodService exe C Program Files Mozilla Firefox firefox exe C Documents and Settings Joseph G Desiderio Desktop dds scr Pseudo HJT Report uStart Page hxxp www yahoo com uURLSearchHooks AVG Security Toolbar BHO a bc a - f - -aa - d c - c program files avg avg toolbar IEToolbar dll uURLSearchHooks H - No File mURLSearchHooks AVG Security Toolbar BHO a bc a - f - -aa - d c - c program files avg avg toolbar IEToolbar dll BHO Spybot-S amp D IE Protection - f - d - ... Read more

A:Google search links keep redirecting

Hi,

Sorry for delayed response. Forums have been really busy. If you still need help with this post a fresh dds.txt log, please.

http://www.bleepingcomputer.com/forums/t/264072/google-search-links-keep-redirecting/
Relevancy 69.23%

Hi Recently my google searches have been going to ad sites such as Yellowpages search Redirecting links google and whatnot I followed the instructions on the sticky and ran HijackThis and DDS I couldn t run GMER because I m running Windows -bit I ran SUPERAntiSpyware and Malwarebytes before deciding to post Redirecting google search links here I ll include the log for each HijackThis Log ------------------------------------------------------------------------------------------- Logfile of Trend Micro HijackThis Redirecting google search links v Scan saved at AM on Platform Windows WinNT MSIE Internet Explorer v Boot mode Safe mode Running processes C Users splttingatms Desktop HijackThis exe R - HKCU Software Microsoft Internet Explorer Main Default Page URL http asus msn com R - HKCU Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKCU Software Microsoft Internet Explorer Main Start Page http asus msn com R - HKLM Software Microsoft Internet Explorer Main Default Page URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Default Search URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Start Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Search SearchAssistant R - HKLM Software Microsoft Internet Explorer Search CustomizeSearch R - HKLM Software Microsoft Internet Explorer Main Local Page C Windows SysWOW blank htm R - HKCU Software Microsoft Windows CurrentVersion Internet Settings ProxyServer R - HKCU Software Microsoft Internet Explorer Toolbar LinksFolderName O - Hosts www google com O - Hosts search yahoo com O - BHO Search Helper - EBF - F- bff-A F-B E AAC B - C Program Files x Microsoft Search Enhancement Pack Search Helper SearchHelper dll O - BHO Windows Live Sign-in Helper - D - C - ABF- ECC- C - C Program Files x Common Files Microsoft Shared Windows Live WindowsLiveLogin dll O - BHO SkypeIEPluginBHO - AE - E C- ED - F B-F F A - C Program Files x Skype Toolbars Internet Explorer skypeieplugin dll O - BHO URLRedirectionBHO - B F A - E - -BA - B E FF - C PROGRA MICROS Office URLREDIR DLL O - BHO Java tm Plug-In SSV Helper - DBC -A - b-BC - C C C A - C Program Files x Java jre bin jp ssv dll O - BHO Windows Live Toolbar Helper - E A DC - - A - EA-DC EC ACF - C Program Files x Windows Live Toolbar wltcore dll O - Toolbar amp Windows Live Toolbar - FA EF- D- D - B F- A D - C Program Files x Windows Live Toolbar wltcore dll O - HKLM Run HControlUser C Program Files x ASUS ATK Hotkey HControlUser exe O - HKLM Run ATKMEDIA C Program Files x ASUS ATK Media DMedia exe O - HKLM Run ATKOSD C Program Files x ASUS ATKOSD ATKOSD exe O - HKLM Run BCSSync quot C Program Files x Microsoft Office Office BCSSync exe quot DelayServices O - HKLM Run e - f c- e -a ec-b a b c C Program Files x Google Gmail Notifier gnotify exe O - HKCU Run PeerBlock C Program Files PeerBlock peerblock exe O - HKCU Run SUPERAntiSpyware C Program Files SUPERAntiSpyware SUPERAntiSpyware exe O - HKUS S- - - Run Sidebar ProgramFiles Windows Sidebar Sidebar exe autoRun User LOCAL SERVICE O - HKUS S- - - RunOnce mctadmin C Windows System mctadmin exe User LOCAL SERVICE O - HKUS S- - - Run Sidebar ProgramFiles Windows Sidebar Sidebar exe autoRun User NETWORK SERVICE O - HKUS S- - - RunOnce mctadmin C Windows System mctadmin exe User NETWORK SERVICE O - HKUS S- - - Run flakqvpd C Windows system config systemprofile AppData Local fpsrbbtvo slqxvlishdw exe User SYSTEM O - HKUS DEFAULT Run flakqvpd C Windows system config systemprofile AppData Local fpsrbbtvo slqxvlishdw exe User Default user O - Startup AutoHotkey exe lnk C Program Files x AutoHotkey AutoHotkey exe O - Startup Dropbox lnk C Users splttingatms AppData Roaming Dropbox bin Dropbox exe O - Startup Flux lnk C Users splttingatms Local Settings Apps... Read more

Relevancy 69.23%

I know this has been discussed before but the solutions I read seemed to be out links ad to redirecting sites Google of date I seem to have some malware issue where half of the google links that I click or presumably links from any search engine as it happened with yahoo once when I tried are redirecting to random sites Google links redirecting to ad sites sometimes ad sites sometimes legitimate sites that I actually Google links redirecting to ad sites use that are in my browser history like daz d I'm on Windows and I ran Spyware S amp D Malware Bytes and Bitdefender None of them turned up anything I also ran Spyware Terminator but unfortunately it was not working properly hours and only got to it seemed to be scanning only one or two files per minute for the entire Corel Paint Shop Pro folder which it was scanning for at least hours just that one folder and this happened twice so I stopped the scan both times and eventually uninstalled it However it did list - infections on both scans and supposedly cleaned them out even though I had to abort early although I'm not sure those results can be trusted since the scan was cut off Lastly I installed Kaspersky and ran a full scan on that too It turned up two infections and deleted them both In spite of all this the link redirects are still occurring so I'm hoping someone here can help me out I have posted my most recent Hijack This log below Logfile of Trend Micro HijackThis v Scan saved at PM on Platform Windows SP WinNT MSIE Internet Explorer v Boot mode Normal Running processes C Program Files x STMicroelectronics AccelerometerP FF Protection exe C Program Files x Spybot - Search amp Destroy TeaTimer exe C Program Files x LogMeIn Hamachi hamachi- -ui exe C Program Files x iTunes iTunesHelper exe C Program Files x HP HP UT LEDM bin hppusg exe C Program Files x Dell Webcam Dell Webcam Central WebcamDell exe C Program Files x Kaspersky Lab Kaspersky Anti-Virus avp exe C lotus organize easyclip exe C Program Files x Mozilla Firefox firefox exe C Program Files x Mozilla Firefox plugin-container exe C Windows SysWOW Macromed Flash FlashPlayerPlugin exe C Windows SysWOW Macromed Flash FlashPlayerPlugin exe C Users Tess Desktop Media HijackThis exe R - HKCU Software Microsoft Internet Explorer Main Search Page Bing R - HKCU Software Microsoft Internet Explorer Main Start Page about blank R - HKLM Software Microsoft Internet Explorer Main Search Page Bing R - HKLM Software Microsoft Internet Explorer Main Start Page about blank R - HKLM Software Microsoft Internet Explorer Search SearchAssistant R - HKLM Software Microsoft Internet Explorer Search CustomizeSearch R - HKLM Software Microsoft Internet Explorer Main Local Page C Windows SysWOW blank htm R - HKCU Software Microsoft Windows CurrentVersion Internet Settings ProxyOverride local R - HKCU Software Microsoft Internet Explorer Toolbar LinksFolderName O - BHO btorbit com - B - B - -B F -F B EFC - C Program Files x Orbitdownloader orbitcth dll O - BHO AcroIEHelperStub - DF C-E AD- -A -FA C EBDC - C Program Files x Common Files Adobe Acrobat ActiveX AcroIEHelperShim dll O - BHO RealPlayer Download and Record Plugin for Internet Explorer - C E -B - BC - - C CA - C ProgramData Real RealPlayer BrowserRecordPlugin IE rpbrowserrecordplugin dll O - BHO Increase performance and video formats for your HTML lt video gt - E D- - FD- C - A F - C Program Files x DivX DivX Plus Web Player ie DivXHTML DivXHTML dll O - BHO ContentBlockerBrowserHelperObject - CC -EFA - CBF- A- CF FBBFFF F - C Program Files x Kaspersky Lab Kaspersky Anti-Virus IEExt ContentBlocker ie content blocker plugin dll O - BHO VirtualKeyboardBrowserHelperObject - -E C- C- -C DC - C Program Files x Kaspersky Lab Kaspersky Anti-Virus IEExt VirtualKeyboard ie virtual keyboard plugin dll O - BHO Java tm Plug-In SSV Helper - BB-D F - C-B EB-D DAF D D - C Program Files x Java jre bin ssv dll O - BHO Windows Live ID Sign-in Helper - D - C - ABF- ECC- C - C Program Files x Common File... Read more

A:Google links redirecting to ad sites

Hello and welcome to TSF.

HijackThis is no longer the preferred initial analysis tool in this forum.

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

Please follow our pre-posting process outlined here:

NEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help - Tech Support Forum

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

http://www.techsupportforum.com/forums/f100/google-links-redirecting-to-ad-sites-665021.html
Relevancy 69.23%

Hi I noticed that recently sometimes when I click a link in google search results google prevents me from being redirected to hxxp c ppcxml net a site which google says is a reported redirecting links google Firefox attack site I ran a full Firefox google links redirecting scan in Malwarebytes Anti-Malware and it reported that I had infections I also ran Firefox google links redirecting DDS and Hijackthis I will post all the logs if Firefox google links redirecting needed Any help is greatly appreciated DDS Ver - - - NTFSx Run by Brandon at on Sat Internet Explorer BrowserJavaVersion Microsoft Windows Vista Home Premium GMT - SP Windows Defender enabled Updated D DDC A- F- FAE- E -DA C ACF Running Processes C Windows system wininit exe C Windows system lsm exe C Windows system svchost exe -k DcomLaunch C Windows system nvvsvc exe C Windows system svchost exe -k rpcss C Windows System svchost exe -k secsvcs C Windows System svchost exe -k LocalServiceNetworkRestricted C Windows System svchost exe -k LocalSystemNetworkRestricted C Windows system svchost exe -k netsvcs C Windows system svchost exe -k GPSvcGroup C Windows system SLsvc exe C Windows system svchost exe -k LocalService C Windows system svchost exe -k NetworkService C Windows system nvvsvc exe C Windows system Dwm exe C Windows Explorer EXE C Windows System spoolsv exe C Program Files Avira AntiVir Desktop sched exe C Windows system svchost exe -k LocalServiceNoNetwork C Windows system taskeng exe C Windows system taskeng exe C Program Files Avira AntiVir Desktop avguard exe C Program Files Common Files Apple Mobile Device Support bin AppleMobileDeviceService exe C Program Files IVT Corporation BlueSoleil BlueSoleilCS exe C Program Files Bonjour mDNSResponder exe C Program Files IVT Corporation BlueSoleil BsMobileCS exe C Program Files Common Files LogiShrd LVMVFM LVPrcSrv exe C Program Files NVIDIA Corporation nTune nTuneService exe C Windows system svchost exe -k NetworkServiceNetworkRestricted C Program Files NVIDIA Corporation D Vision nvSCPAPISvr exe C Windows system svchost exe -k imgsvc C Program Files TeamViewer Version TeamViewer Service exe C Program Files NVIDIA Corporation System Update UpdateCenterService exe C Windows System svchost exe -k WerSvcGroup C Windows system SearchIndexer exe C Program Files IVT Corporation BlueSoleil BsHelpCS exe C Program Files Avira AntiVir Desktop avgnt exe C Program Files Microsoft Office Office GrooveMonitor exe C Program Files IVT Corporation BlueSoleil BtTray exe C Windows System rundll exe C Program Files Common Files Real Update OB realsched exe C Program Files iTunes iTunesHelper exe C Windows RtHDVCpl exe C Windows ehome ehtray exe C Program Files Windows Media Player wmpnscfg exe C Windows ehome ehmsas exe C Program Files Windows Media Player wmpnetwk exe C Program Files iPod bin iPodService exe C Windows system wuauclt exe C Program Files Microsoft Office Office WINWORD EXE C Program Files Mozilla Firefox firefox exe C Program Files AIM aim exe C Windows system SearchProtocolHost exe C Windows system SearchFilterHost exe C Users Brandon Downloads dds scr C Windows system wbem wmiprvse exe Pseudo HJT Report uStart Page hxxp www google com mStart Page hxxp www msn com uInternet Settings ProxyOverride local BHO D -C F - efb- B - ECA - No File BHO RealPlayer Download and Record Plugin for Internet Explorer c e -b - bc - - c ca - c program files real realplayer rpbrowserrecordplugin dll BHO Groove GFS Browser Helper - c - d -b f - bbc d a e - c program files microsoft office office GrooveShellExtensions dll BHO Java Plug-In SSV Helper dbc -a - b-bc - c c c a - c program files java jre bin jp ssv dll TB The Weather Channel Toolbar e e e- ac - e- a- a e - c windows system TwcToolbarIe dll TB DE C F- - A - B-AA ED D - No File TB BC A- - D - AC -E B A BA C - No File uRun ehTray exe c windows ehome ehTray exe uRun WMPNSCFG c program files windows media player WMPNSCFG exe mRun avgnt quot c program files avira antivir deskto... Read more

A:Firefox google links redirecting

Hello! My name is Sam and I will be helping you. In order to see what's going on with your computer I will ask for you to post various logs from the tools that we will use to resolve your issue. Please also share with me any information about how your computer is reacting and behaving each step of the way as we work through this process.We need to create an OTL ReportPlease download OTL from hereSave it to your desktop.Double click on the icon on your desktop.Click the "Scan All Users" checkbox.Under the Custom Scan box paste this in

netsvcs
%SYSTEMDRIVE%\*.exe
/md5start
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
sceclt.dll
ntelogon.dll
logevent.dll
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
/md5stop
%systemroot%\*. /mp /s
CREATERESTOREPOINT


Click the "Quick Scan" button.The scan should take just a few minutes.Please copy and paste both logs back here in your next reply.=============The next log will show us any hidden files that are present.Download GMER from here:Unzip it to the desktop.Open the program and click on the Rootkit tab.Make sure all the boxes on the right of the screen are checked, EXCEPT for ?Show All?.Click on Scan.When the scan has run click Copy and paste the results (if any) into this thread.

http://www.bleepingcomputer.com/forums/t/281738/firefox-google-links-redirecting/
Relevancy 69.23%

When i click on a link in google i am redirected to another site Nothing I have tried can seem to fix this I have XP Tablet Thank you for helping Below is a copy of my HJT report Logfile of redirecting included HJT google links Trend Micro HijackThis v Scan saved at PM google links redirecting HJT included on Platform Windows XP SP WinNT MSIE Internet Explorer v Boot mode Normal Running processes C google links redirecting HJT included WINNT System smss exe C WINNT system winlogon exe C WINNT system services exe C WINNT system lsass exe C WINNT system svchost exe C WINNT System svchost exe google links redirecting HJT included C WINNT System S EvMon exe C Program Files Common Files Microsoft Shared Ink KeyboardSurrogate exe C WINNT system ZCfgSvc exe C WINNT SYSTEM WISPTIS EXE C WINNT System tabbtnu exe C WINNT Explorer EXE C WINNT system spoolsv exe C Program Files Common Files Microsoft Shared Ink TCServer exe C Program Files Common Files Apple Mobile Device Support bin AppleMobileDeviceService exe C Program Files Google Common Google Updater GoogleUpdaterService exe C PROGRA McAfee MSC mcmscsvc exe c program files common files mcafee mna mcnasvc exe c PROGRA COMMON mcafee mcproxy mcproxy exe C PROGRA McAfee VIRUSS mcshield exe C Program Files McAfee MPF MPFSrv exe C WINNT System RegSrvc exe C WINNT System svchost exe C Program Files Common Files Symantec Shared Security Center SymWSC exe C PROGRA McAfee com Agent mcagent exe C WINNT System XConfig exe C WINNT system ctfmon exe C WINNT AGRSMMSG exe C Program Files Synaptics SynTP SynTPLpr exe C Program Files iTunes iTunesHelper exe C Program Files QuickTime qttask exe C Program Files Google GoogleToolbarNotifier GoogleToolbarNotifier exe C Program Files iPod bin iPodService exe C PROGRA McAfee VIRUSS mcsysmon exe C Program Files Internet Explorer iexplore exe C hijackthis HijackThis exe C Program Files Windows Live Messenger msnmsgr exe C Program Files Windows Live Messenger usnsvc exe R - HKCU Software Microsoft Internet Explorer Main Search Bar http us rd yahoo com customize ie defaults sb msgr http www yahoo com ext search search html R - HKCU Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Default Page URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Default Search URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Start Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Search SearchAssistant R - HKLM Software Microsoft Internet Explorer Search CustomizeSearch R - HKCU Software Microsoft Internet Explorer SearchURL Default http us rd yahoo com customize ie defaults su msgr http www yahoo com O - BHO Yahoo Toolbar Helper - D -C F - EFB- B - ECA - C Program Files Yahoo Companion Installs cpn yt dll O - BHO Adobe PDF Reader Link Helper - E F-C D - D -B D- B D BE B - C Program Files Common Files Adobe Acrobat ActiveX AcroIEHelper dll O - BHO Yahoo IE Services Button - BAB B B- BC- B - D - FC DE A - C Program Files Yahoo Common yiesrvc dll O - BHO scriptproxy - DB D A - - E -B D- F C - C Program Files McAfee VirusScan scriptsn dll O - BHO no name - E D - A- EC-A -BA D E E - no file O - BHO Windows Live Sign-in Helper - D - C - ABF- ECC- C - C Program Files Common Files Microsoft Shared Windows Live WindowsLiveLogin dll O - BHO ST - EDE -C B - E- - BF AF E - C Program Files MSN Apps ST en-xu stmain dll O - BHO Google Toolbar Helper - AA ED - DD- d - -CF F - c program files google googletoolbar dll O - BHO Google Toolbar Notifier BHO - AF DE - D - -B FA-CE B AD D - C Program Files Google GoogleToolbarNotifier swg dll O - BHO MSNToolBandBHO - BDBD DAD-C - A -ADC - B B FF D - C Program Files MSN Apps MSN Toolbar en-us msntb dll O - BHO no name - CE C CF - B - D -ABED- C - no... Read more

https://forums.techguy.org/threads/google-links-redirecting-hjt-included.718913/
Relevancy 69.23%

Hi

About a week and a half ago my google links started redirecting to other sites. I tried to fix my computer by running hijackthis and combofix as well as installing Avast antivirus. I have Malwarebites and it caught some viruses the first time I ran it but not since I started having issues. Avast scan catches nothing as well. I also now get popups to run a scan and win32 windows which I x out of. I have a hijackthis log but saw that I shouldn't post unless asked.

When I ran combofix it said there was rootkit activity and would shut my computer off, then restart it and continue the scan. It has not solved any of my issues though. I could really use any help as I can't afford another computer. Thanks!

A:Google links redirecting, possible rootkit?

You shouldn't run Combofix on your own,note the blue text above this forum.But having run it we need to see it now.Please go here....Preparation Guide ,do steps 6 - 9.Create a DDS log and post it in the new topic explained in step 9 which is here Virus, Trojan, Spyware, and Malware Removal Logs and not in this topic,thanks.Skip the GMER step and instead post the Combofix log you posted earlier.Let me know if that went well.

http://www.bleepingcomputer.com/forums/t/371955/google-links-redirecting-possible-rootkit/
Relevancy 69.23%

Ok, so for a little while now, what my title says has been going on. I tried Malwarebytes, but it never finds anything. Well just a couple days ago, my computer would not boot to Windows at all. It said some important file is missing, and to press 'r' to start recovery (which did nothing). Well, right when I was about to reformat it (which was later in the day, after I tried to do some other things to get it working) it starts to boot up again! I still have viruses, such as google ads, and also whenever I do boot up the computer it tries to run some anti-virus program from the start, and it won't quit unless I ctrl-alt-dlt it (forgot the name of it though).

So any help would be appreciated.. It's hard to look up help on google due to the redirects, and on yahoo I don't see anything helpful.

A:Google search links keep redirecting me to ads

Hello and welcome to Bleeping Computer.Please subscribe to your topic so that you will be notified as soon as I post a reply, instead of you having to check the topic all of the time. This will allow you to get an email notification when I reply.To subscribe, go to your topic, and at the top right hand corner by your first post, click the Options button and then click Track this topic. Then bullet the immediate notification bubble. Finally, press submit.Can you please post your latest Malwarebytes log? It can be found under the "Logs" tab of the program

http://www.bleepingcomputer.com/forums/t/280265/google-search-links-keep-redirecting-me-to-ads/
Relevancy 69.23%

Hello,
For a few weeks now, when I search for things on google and click on the results I am redirected to ad websites. These usually have nothing to do with what I searched for, and this is making it impossible to search for anything effectively . Can anyone please help me out? How can I fix this without having to buy some expensive virus scanner/remover?

Thank you so much for your help!
 

https://forums.techguy.org/threads/google-links-redirecting-to-ad-sites.1011434/
Relevancy 69.23%

Hello all,

I did a bit of searching and found where others here have had this problem and achieved resolution because of the incredible support of this forum. The solutions looked complicated, and potentially specific to each computer, so I thought I would start my own thread.

I think the title says it all, but if there are further questions about what is going on let me know. Otherwise, is there something I should do to give you more information?

Thanks in advance for your help.

JA
 

A:Google Links Redirecting to Ad Sites

Click here to download HJTInstall.exe

Save HJTInstall.exe to your desktop.
Doubleclick on the HJTInstall.exe icon on your desktop.
By default it will install to C:\Program Files\Trend Micro\HijackThis .
Click on Install.
It will create a HijackThis icon on the desktop.
Once installed, it will launch Hijackthis.
Click on the Do a system scan and save a logfile button. It will scan and the log should open in notepad.
Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
Come back here to this thread and Paste the log in your next reply.
DO NOT have Hijackthis fix anything yet. Most of what it finds will be harmless or even required.

 

https://forums.techguy.org/threads/google-links-redirecting-to-ad-sites.612925/
Relevancy 69.23%

I'm not sure how long this has been happening It is on my buddies computer I have run Adaware Malwarebytes and S amp D but I am still getting redirected to different sites when i click on links on his computer I am not really sure what to look for on the Hijack this log so I am calling in the experts ad to Google pages. me Redirecting Links Please Help Here is the Hijack This log Logfile of Trend Micro HijackThis v Scan saved at PM on Platform Windows XP SP WinNT MSIE Internet Explorer v Boot mode NormalRunning processes C WINDOWS System smss exeC WINDOWS system winlogon exeC WINDOWS system services exeC WINDOWS system lsass exeC WINDOWS system svchost exeC WINDOWS System svchost exeC Program Files Intel Wireless Bin EvtEng exeC Program Files Google Links Redirecting me to ad pages. Intel Wireless Bin S EvMon exeC Program Files Intel Wireless Bin WLKeeper exeC Program Files Intel Wireless Bin ZcfgSvc exeC WINDOWS Explorer EXEC WINDOWS system ctfmon exeC Program Files Lavasoft Ad-Aware aawservice exeC PROGRA Intel Wireless Bin XConfig exeC WINDOWS system spoolsv exeC Program Files ActivIdentity ActivClient acachsrv exeC Program Files ActivIdentity ActivClient acautoup exeC Program Files ActivIdentity ActivClient accoca exeC Program Files Common Files Apple Mobile Device Support bin AppleMobileDeviceService exeC Program Files Bonjour mDNSResponder exeC WINDOWS eHome ehRecvr exeC WINDOWS eHome ehSched exeC Program Files LogMeIn x RaMaint exeC Program Files LogMeIn x LogMeIn exeC Program Files LogMeIn x LMIGuardian exeC Program Files Dell NICCONFIGSVC NICCONFIGSVC exeC WINDOWS system nvsvc exeC Program Files Intel Wireless Bin RegSrvc exeC Program Files Alcohol Soft Alcohol StarWind StarWindServiceAE exeC WINDOWS system svchost exeC WINDOWS system dla tfswctrl exeC Program Files iTunes iTunesHelper exeC Program Files LogMeIn x LogMeInSystray exeC Program Files iPod bin iPodService exeC Program Files LogMeIn x LMIGuardian exeC Program Files Internet Explorer IEXPLORE EXEC Program Files Internet Explorer Iexplore exeC Program Files Trend Micro HijackThis HijackThis exeO - Toolbar MSN - BDAD DAD-C - A -ADC - B B FF D - C Program Files MSN Apps MSN Toolbar en-us msntb dllO - Toolbar Adobe PDF - -D C - - FA - E EAAC - C Program Files Adobe Acrobat Acrobat AcroIEFavClient dllO - HKLM Run dla C WINDOWS system dla tfswctrl exeO - HKLM Run NvCplDaemon RUNDLL EXE C WINDOWS system NvCpl dll NvStartupO - HKLM Run QuickTime Task quot C Program Files QuickTime QTTask exe quot -atboottimeO - HKLM Run iTunesHelper quot C Program Files iTunes iTunesHelper exe quot O - HKLM Run LogMeIn GUI quot C Program Files LogMeIn x LogMeInSystray exe quot O - HKCU Run ctfmon exe C WINDOWS system ctfmon exeO - Extra context menu item Convert link target to Adobe PDF - res C Program Files Adobe Acrobat Acrobat AcroIEFavClient dll AcroIECapture htmlO - Extra context menu item Convert link target to existing PDF - res C Program Files Adobe Acrobat Acrobat AcroIEFavClient dll AcroIEAppend htmlO - Extra context menu item Convert selected links to Adobe PDF - res C Program Files Adobe Acrobat Acrobat AcroIEFavClient dll AcroIECaptureSelLinks htmlO - Extra context menu item Convert selected links to existing PDF - res C Program Files Adobe Acrobat Acrobat AcroIEFavClient dll AcroIEAppendSelLinks htmlO - Extra context menu item Convert selection to Adobe PDF - res C Program Files Adobe Acrobat Acrobat AcroIEFavClient dll AcroIECapture htmlO - Extra context menu item Convert selection to existing PDF - res C Program Files Adobe Acrobat Acrobat AcroIEFavClient dll AcroIEAppend htmlO - Extra context menu item Convert to Adobe PDF - res C Program Files Adobe Acrobat Acrobat AcroIEFavClient dll AcroIECapture htmlO - Extra context menu item Convert to existing PDF - res C Program Files Adobe Acrobat Acrobat AcroIEFavClient dll AcroIEAppend htmlO - Extra context menu item E amp xport to Microsoft Excel - res C PROGRA MICROS OFFICE EXCEL EXE O - Extra button Messenger - FB F -... Read more

A:Google Links Redirecting me to ad pages.

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine.??If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine.??Please perform the following scan:Download DDS by sUBs from one of the following links.??Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool.??No input is needed, the scan is running.Notepad will open with the results.Follow the instructions that pop up for posting the results.Close the program window, and delete the program from your desktop.Please note:??You may have to disable any script protection running if the scan fails to run.??After downloading the tool, disconnect from the internet and disable all antivirus protection.??Run the scan, enable your A/V and reconnect to the internet.??Information on A/V control HERE

http://www.bleepingcomputer.com/forums/t/233877/google-links-redirecting-me-to-ad-pages/
Relevancy 69.23%

Hi I ve been having this problem in which when i click on any google search link it redirects me to some other page I am experiencing this both in firefox and in IE I ve serached and found out that people have overcome this by using hijackthis I ve downnloaded hijack this Google other redirecting to links webpages. and ran Google redirecting links to other webpages. but I dont have any idea what is to be removed Here is my fresh log normal mode not Safe mode from Hijack This I ll really appreciate any help on this Thanks a lot LOG Logfile of Trend Micro HijackThis v Scan saved at PM on Platform Windows XP SP Google redirecting links to other webpages. WinNT MSIE Internet Explorer v SP Boot mode Normal Running processes C WINDOWS System smss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS system svchost exe C WINDOWS System svchost exe C WINDOWS system spoolsv exe C Program Files Common Files Apple Mobile Device Support bin AppleMobileDeviceService exe C Program Files Bonjour mDNSResponder exe C WINDOWS system DRIVERS CDANTSRV EXE C WINDOWS system crypserv exe C Program Files Java jre bin jqs exe C Program Files Google Update GoogleUpdate exe C Program Files Common Files Microsoft Shared VS DEBUG MDM EXE C WINDOWS System svchost exe C app amit product db bin nmesrvc exe C app amit product db BIN TNSLSNR exe C WINDOWS Explorer EXE c app amit product db bin ORACLE EXE C WINDOWS System svchost exe C Program Files Informatica PowerCenter RepositoryServer bin pmrepserver exe C WINDOWS System svchost exe C WINDOWS System WLTRYSVC EXE C WINDOWS System bcmwltry exe C WINDOWS System WLTRAY exe C Program Files Google Google Talk googletalk exe C WINDOWS stsystra exe C WINDOWS system igfxtray exe C WINDOWS system hkcmd exe C WINDOWS system igfxsrvc exe C WINDOWS system igfxpers exe C Program Files Java jre bin jusched exe C Program Files iTunes iTunesHelper exe C Program Files HP HP Software Update HPWuSchd exe C Program Files Microsoft IntelliPoint ipoint exe C Program Files Common Files Real Update OB realsched exe C WINDOWS system ctfmon exe C Documents and Settings amit Local Settings Application Data Google Update GoogleUpdate exe C Program Files REALTEK USB Wireless LAN Driver and Utility RtWLan exe C Program Files Yahoo Messenger ymsgr tray exe C WINDOWS system cmd exe C app amit product db perl bin MSWin -x -multi-thread perl exe C WINDOWS system cmd exe C app amit product db jdk bin java exe C app amit product db bin emagent exe C Program Files iPod bin iPodService exe C WINDOWS system wscntfy exe C Program Files Mozilla Firefox firefox exe C Program Files Java jre bin jucheck exe C Program Files Trend Micro HijackThis HijackThis exe R - HKCU Software Microsoft Windows CurrentVersion Internet Settings ProxyOverride local O - BHO AcroIEHelperStub - DF C-E AD- -A -FA C EBDC - C Program Files Common Files Adobe Acrobat ActiveX AcroIEHelperShim dll O - BHO RealPlayer Download and Record Plugin for Internet Explorer - C E -B - BC - - C CA - C Program Files Real RealPlayer rpbrowserrecordplugin dll O - BHO BHOManager Class - BC- - C - B - F DC CE - C WINDOWS system BHOManager dll O - BHO Java tm Plug-In SSV Helper - BB-D F - C-B EB-D DAF D D - C Program Files Java jre bin ssv dll O - BHO Java tm Plug-In SSV Helper - DBC -A - b-BC - C C C A - C Program Files Java jre bin jp ssv dll O - BHO JQSIEStartDetectorImpl - E E F - CE- C -BC -EABFE F C - C Program Files Java jre lib deploy jqs ie jqs plugin dll O - HKLM Run Broadcom Wireless Manager UI C WINDOWS System WLTRAY exe O - HKLM Run Adobe Reader Speed Launcher quot C Program Files Adobe Reader Reader Reader sl exe quot O - HKLM Run googletalk C Program Files Google Google Talk googletalk exe autostart O - HKLM Run SigmatelSysTrayApp stsystra exe O - HKLM Run IgfxTray C WINDOWS system igfxtray exe O - HKLM Run HotKeysCmds C WINDOWS system hkcmd exe O - HKLM Run Persistence C WINDOWS system igfxpers exe O - HKLM Run SunJavaUpdateSched q... Read more

A:Google redirecting links to other webpages.

Hello ,
Can some please help me with the log. The problem of redirection of links is getting out of control.

Thanks a lot....
 

https://forums.techguy.org/threads/google-redirecting-links-to-other-webpages.818062/
Relevancy 69.23%

I have been having trouble when I click on a google link it redirects me to another site I went through your step by step redirecting Virus is my links google preparation guide but the DSS wouldn t save as a screen saver but only Virus is redirecting my google links as an AutoCAD file I couldn t get DSS to work for me - used Hijack instead hope this is okay Then I downloaded the GMER and was scanning it seemed to be working great for minutes Then it shut my computer down all of a sudden I went into safe mode and tried to run GMER again and it shut me down again Everything seems to be okay if I don t run that program but still not sure what to do to fix my problem with google links redirecting Please help my log is below Logfile of Trend Micro HijackThis v Scan saved at PM on Platform Windows Vista SP WinNT MSIE Internet Explorer v Boot Virus is redirecting my google links mode Normal Running processes C Virus is redirecting my google links Windows system Dwm exe C Windows system taskeng exe C Windows Explorer EXE C Windows System hkcmd exe C Windows System igfxpers exe C Program Files SigmaTel C-Major Audio WDM sttray exe C Windows OEM Mon exe C Program Files DellTPad Apoint exe C Program Files Dell Dell Webcam Manager DellWMgr exe C Program Files Dell MediaDirect PCMService exe C Program Files Trend Micro Internet Security pccguide exe C Program Files Microsoft Office Office GrooveMonitor exe C Program Files Adobe Acrobat Acrobat acrotray exe C Program Files Windows Sidebar sidebar exe C Program Files BitTorrent BitTorrent exe C Program Files Skype Phone Skype exe C Program Files Adobe Acrobat Acrobat acrobat sl exe C Windows system igfxsrvc exe C Program Files Skype Plugin Manager skypePM exe C Downloads HijackThis exe C Program Files DellTPad HidFind exe C Program Files DellTPad Apntex exe C Windows system wuauclt exe O - Service Trend Micro Real-time Service Tmntsrv - Trend Micro Inc - C PROGRA TRENDM INTERN Tmntsrv exe O - Service Trend Micro Personal Firewall TmPfw - Trend Micro Inc - C PROGRA TRENDM INTERN TmPfw exe O - Service Trend Micro Proxy Service tmproxy - Trend Micro Inc - C PROGRA TRENDM INTERN tmproxy exe

A:Virus is redirecting my google links

Hello , And to the Bleeping Computer Malware Removal Forum. My name is Elise and I'll be glad to help you with your computer problems.I will be working on your malware issues, this may or may not solve other issues you may have with your machine.Please note that whatever repairs we make, are for fixing your computer problems only and by no means should be used on another computer.The cleaning process is not instant. Logs can take some time to research, so please be patient with me. I know that you need your computer working as quickly as possible, and I will work hard to help see that happen. Please reply using the Add/Reply button in the lower right hand corner of your screen. Do not start a new topic. The logs that you post should be pasted directly into the reply. Only attach them if requested or if they do not fit into the post.Unfortunately, if I do not hear back from you within 5 days, I will be forced to close your topic. If you still need help after I have closed your topic, send me or a moderator a personal message with the address of the thread or feel free to create a new one.You may want to keep the link to this topic in your favorites. Alternatively, you can click the button at the top bar of this topic and Track this Topic, where you can choose email notifications. The topics you are tracking are shown here.-----------------------------------------------------------If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.If you have already posted a log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.We need to see some information about what is happening in your machine. Please perform the following scan:Please download OTL from one of the following mirrors:This is THE MirrorSave it to your desktop.Double click on the icon on your desktop.Click the "Scan All Users" checkbox.Push the Quick Scan button.Two reports will open, copy and paste them in a reply here:OTListIt.txt <-- Will be openedExtra.txt <-- Will be minimizedPlease Download Rootkit Unhooker Save it to your desktop.extract RKUnhooker to your desktop
Note** it is zipped up in a .rar file - If you do not have a program to unzip this type of file -
you can get a free one from here - http://www.7-zip.org/Now double-click on RKUnhookerLE.exe to run it.Click the Report tab, then click Scan.Check (Tick) Drivers, Stealth,. Uncheck the rest. then Click OK.Wait till the scanner has finished and then click File, Save Report.Save the report somewhere where you can find it. Click Close.Copy the entire contents of the report and paste it in a reply here.Note** you may get this warning it is ok, just ignore"Rootkit Unhooker has detected a parasite inside itself!It is recommended to remove parasite, okay?""just click on Cancel, then Accept".-------------------------------------------------------------In the meantime please, do NOT install any new programs or update anything unless told to do so while we are fixing your problemIf you still need help, please include the following in your next replyA detailed description of your problemsA new OTL log (don't forget extra.txt)RKU logThanks and again sorry for the delay.

http://www.bleepingcomputer.com/forums/t/358991/virus-is-redirecting-my-google-links/
Relevancy 69.23%

This is really frustrating! Whenever I click on a google link it goes to http://co.uk then redirects to random spam. I've ran AVG, malwarebytes, tdsskiller and hitman pro but none of them find any problems. What should I do?

A:Google links are redirecting me to spam

Hello and welcome.Are you on a router? Are other machines on it,if so are they redirecting?Do you use Firefox?Please follow our Removal Guide here How to remove Google Redirects. You will move to the Automated Removal InstructionsIf it finds something make sure Cure is selectedNext click Continue then Reboot nowA log file should be created on your C: drive named "TDSSKiller.txt" please copy and paste the contents in your next reply.Next run MBAM (MalwareBytes):Please download Malwarebytes Anti-Malware and save it to your desktop.Download Link 1Download Link 2MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.
For instructions with screenshots, please refer to the How to use Malwarebytes' Anti-Malware Guide.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan.If an update is found, the program will automatically update itself. Press the OK button to close that box and continue.If you encounter any problems while downloading the definition updates, manually download them from here and just double-click on mbam-rules.exe to install.On the Scanner tab:Make sure the "Perform Quick Scan" option is selected.Then click on the Scan button.If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button. The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".Click OK to close the message box and continue with the removal process.Back at the main Scanner screen:Click on the Show Results button to see a list of any malware that was found.Make sure that everything is checked, and click Remove Selected.When removal is completed, a log report will open in Notepad.The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.Copy and paste the contents of that report in your next reply. Be sure to post the complete log to include the top portion which shows MBAM's database version and your operating system.Exit MBAM when done.Note: If MBAM encounters a file that is difficult to remove, you will be asked to reboot your computer so MBAM can proceed with the disinfection process. If asked to restart the computer, please do so immediately. Failure to reboot normally (not into safe mode) will prevent MBAM from removing all the malware.Troubleshoot Malwarebytes' Anti-Malware

http://www.bleepingcomputer.com/forums/t/421290/google-links-are-redirecting-me-to-spam/
Relevancy 69.23%

Hi there I m having a few problems with my computer when I use google Sometimes when I click a link it redirects me to random pages The operating system is bit Windows Vista I have ran McAfee and Spybot normally and Problem! Help! Redirecting Links Google Please in safe mode and both have came back clear I also downloaded and ran malwarebytes which found a few trojans However after removing them the issue was still unresolved In addition to the redirecting links I am now receiving notifications from malwarebytes that they have blocked svchost exe from connecting to a malware site IP address Last night my desktop theme changed randomly without Google Links Redirecting Problem! Please Help! any input from me however it seems to be back to normal this morning Here is my system information Tech Support Guy System Info Utility version OS Version Microsoft Windows Vista amp Home Premium Service Pack bit Processor Celeron R Dual-Core CPU T GHz Intel Family Model Stepping Processor Count RAM Mb Graphics Card Mobile Intel R Series Express Chipset Family Mb Hard Drives C Total - MB Free - MB E Total - MB Free - MB Motherboard Dell Inc G F Antivirus McAfee Anti-Virus Google Links Redirecting Problem! Please Help! and Anti-Spyware Updated and Enabled Until recently this laptop was shared by a few people so I m unsure how whatever this is has entered the computer but I would be very grateful for any help I ran a hijackthis scan and this is the log Logfile of Trend Micro HijackThis v Scan saved at on Platform Windows Vista SP WinNT MSIE Internet Explorer v Boot mode Normal Running processes C Program Files x Intel Intel Matrix Storage Manager IAAnotif exe C Program Files x Windows Live Messenger msnmsgr exe C Program Files x Spybot - Search amp Destroy TeaTimer exe C Program Files x Nokia Nokia PC Suite PCSuite exe C Users Ashley AppData Roaming Dropbox bin Dropbox exe C Program Files x Dell Webcam Dell Webcam Central WebcamDell exe C Program Files x Common Files Nokia MPlatform NokiaMServer exe C Program Files x Epson Software Event Manager EEventManager exe C Program Files x Common Files Adobe ARM AdobeARM exe C Program Files x iTunes iTunesHelper exe C Program Files x Malwarebytes Anti-Malware mbamgui exe C Program Files x Windows Live Contacts wlcomm exe C Program Files x Mozilla Firefox firefox exe C Program Files x Mozilla Firefox plugin-container exe C Program Files x Trend Micro HiJackThis HiJackThis exe R - HKCU Software Microsoft Internet Explorer Main Default Page URL http g uk msn com USCON R - HKCU Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKCU Software Microsoft Internet Explorer Main Start Page http g uk msn com USCON R - HKLM Software Microsoft Internet Explorer Main Default Page URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Default Search URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Start Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Search SearchAssistant R - HKLM Software Microsoft Internet Explorer Search CustomizeSearch R - HKCU Software Microsoft Internet Explorer SearchURL Default http uk search yahoo com search fr mcafee amp p s R - HKCU Software Microsoft Windows CurrentVersion Internet Settings ProxyOverride local R - HKCU Software Microsoft Internet Explorer Toolbar LinksFolderName R - URLSearchHook McAfee SiteAdvisor Toolbar - EBBBE -BAD - B C- E A- ABECAE - c PROGRA mcafee SITEAD mcieplg dll F - REG system ini UserInit userinit exe O - Hosts localhost O - BHO AcroIEHelperStub - DF C-E AD- -A -FA C EBDC - C Program Files x Common Files Adobe Acrobat ActiveX AcroIEHelperShim dll O - BHO McAfee Phishing Filter - B A- - A -B -BE AFE AB - c progra mcafee msk mskapbho dll O - BHO Spybot-S amp D IE Protection - - F - D - - D F - C PROGRA SPY... Read more

Relevancy 69.23%

I have had many users being infected with the Cryp_TDSS-6 virus. While investigating this virus, my browser began redirecting to bogus sites while clicking google links. Attached is the hijackthis.log file. If anything else is needed please let me know.

A:Google links are redirecting to various ad sites

Hello,We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up.My name is Syler and I will be helping you to solve your Malware issues. If you have since resolved your issues I would appreciate if youwould let me no so I can close this topic, if you still need help please let me no what issues you are still having, in your next reply.Download random's system information tool (RSIT) by random/random from here and save it to your desktop.Double click on RSIT.exe to run RSIT.Click Continue at the disclaimer screen.Once it has finished, two logs will open. Please post the contents of both log.txt (<<will be maximized) and info.txt (<<will be minimized)Then please post back here with the following: log.txt info.txtThanks

http://www.bleepingcomputer.com/forums/t/264138/google-links-are-redirecting-to-various-ad-sites/
Relevancy 69.23%

Using Firefox I noticed that clicking on links in Google would redirect me to ad sites I noticed that it was only happening on the first click After jumping back to the initial Google results page clicking on the same link again would then properly send me ad are sites me links to redirecting Google to the correct URL I am not sure how to remove whatever is causing Google links are redirecting me to ad sites this A MSE full scan unfortunately did not fix the problem either Here is the DDS log as requested DDS Ver - - - NTFS AMD Internet Explorer BrowserJavaVersion Run by Google links are redirecting me to ad sites Peter J Ramaglia at on - - Microsoft Windows Home Premium GMT - AV McAfee VirusScan Enterprise Enabled Updated - - EA -ABB - B EB AV Microsoft Security Essentials Enabled Updated B BF E- BB- - AB-A A C A C SP Microsoft Security Essentials Enabled Updated A EAA- - E -AA B- E E EC SP Windows Defender Disabled Updated D DDC A- F- fae- E -DA C ACF SP McAfee VirusScan Enterprise Antispyware Module Enabled Updated D B - E- - - C A Running Processes C Windows system lsm exeC Windows system svchost exe -k DcomLaunchC Windows system svchost exe -k RPCSSc Program Files Microsoft Security Client MsMpEng exeC Windows System svchost exe -k LocalServiceNetworkRestrictedC Windows System svchost exe -k LocalSystemNetworkRestrictedC Windows system svchost exe -k netsvcsC Program Files x Creative Shared Files CTAudSvc exeC Windows system svchost exe -k GPSvcGroupC Windows system svchost exe -k LocalServiceC Program Files x Cisco Cisco AnyConnect Secure Mobility Client vpnagent exeC Windows system Dwm exeC Windows system svchost exe -k NetworkServiceC Windows Explorer EXEC Windows system WLANExt exeC Windows System spoolsv exeC Windows system taskhost exeC Windows system svchost exe -k LocalServiceNoNetworkC Program Files x Absolute Software Absolute Notifier AbsoluteNotifierService exeC Program Files x Google Update GoogleCrashHandler exeC Program Files x Google Update GoogleCrashHandler exeC Program Files Synaptics SynTP SynTPEnh exeC Program Files x Common Files Adobe ARM armsvc exeC Program Files Realtek Audio HDA AERTSr exeC Program Files Intel BluetoothHS BTHSAmpPalService exeC Windows system svchost exe -k apphostC Program Files x Common Files Apple Mobile Device Support AppleMobileDeviceService exeC Program Files Realtek Audio HDA RtkNGUI exeC Program Files Realtek Audio HDA RAVBg exeC Program Files x STMicroelectronics AccelerometerP FF Protection exeC Windows System rundll exeC Program Files Common Files Intel WirelessCommon iFrmewrk exeC Program Files Dell QuickSet quickset exeC Windows System rundll exeC Windows System rundll exeC Program Files Realtek Audio HDA RAVBg exeC Windows system AMBSpiE exeC Program Files Logitech Gaming Software LWEMon exeC Program Files Microsoft Security Client msseces exeC Program Files x Common Files Apple Internet Services iCloudServices exeC Program Files x Microsoft BingDesktop BingDesktopUpdater exeC Program Files x Creative ShareDLL CADI NotiMan exeC Program Files x Common Files Apple Internet Services ApplePhotoStreams exeC Program Files x Common Files Apple Internet Services BookmarkDAV client exeC Program Files x Google Drive googledrivesync exeC Program Files x Intel Bluetooth devmonsrv exeC Users Peter J Ramaglia AppData Local Microsoft SkyDrive SkyDrive exeC Program Files x Siber Systems AI RoboForm robotaskbaricon exeC Program Files Bonjour mDNSResponder exeC Windows system svchost exe -k bthsvcsC Program Files Intel BluetoothHS BTHSSecurityMgr exeC Windows system CISVC EXEC Program Files Intel WiFi bin EvtEng exeC Windows system svchost exe -k LocalServiceAndNoImpersonationC Windows system svchost exe -k ftpsvcC Windows SysWOW svchost exe -k hpdevmgmtC Windows system inetsrv inetinfo exeC Windows System svchost exe -k ipripsvcC Program Files x LeapFrog LeapFrog Connect CommandService exeC Program Files x HP Digital Imaging bin hpqtra exeC Windows System svchost exe -k LPDServiceC ... Read more

A:Google links are redirecting me to ad sites

Greetings and Welcome to The Forums!!My name is Gringo and I'll be glad to help you with your malware problems.I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of usPlease do not run any tools unless instructed to do so.
We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.
Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.
Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.
A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE: At the top of your post, click on the Watch Topic Button, select Immediate Notification, and click on Proceed. This will send you an e-mail as soon as I reply to your topic, allowing us to resolve the issue faster.NOTE: Backup any files that cannot be replaced. Removing malware can be unpredictable and this step can save a lot of heartaches if things don't go as planed. You can put them on a CD/DVD, external drive or a pen drive, anywhere except on the computer. NOTE: It is good practice to copy and paste the instructions into notepad and print them in case it is necessary for you to go offline during the cleanup process. To open notepad, navigate to Start Menu > All Programs > Accessories > Notepad. Please remember to copy the entire post so you do not miss any instructions.These are the programs I would like you to run next, if you have any problems with these just skip it and run the next one.-Security Check-Download Security Check by screen317 from here.Save it to your Desktop.Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.A Notepad document should open automatically called checkup.txt; please post the contents of that document.-AdwCleaner-Please download AdwCleaner by Xplode onto your desktop.
Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click on Delete.Confirm each time with Ok.Your computer will be rebooted automatically. A text file will open after the restart.Please post the content of that logfile with your next answer.You can find the logfile at C:\AdwCleaner[S1].txt as well.--RogueKiller-- Download & SAVE to your Desktop RogueKiller or from here
Quit all programs that you may have started. Please disconnect any USB or external drives from the computer before you run this scan! For Vista or Windows 7, right-click and select "Run as Administrator to start"For Windows XP, double-click to start. Wait until Prescan has finished ... Then Click on "Scan" button Wait until the Status box shows "Scan Finished"click on "delete" Wait until the Status box shows "Deleting Finished" Click on "Report" and copy/paste the content of the Notepad into your next reply.The log should be found in RKreport[1].txt on your DesktopExit/Close RogueKiller+Gringo

http://www.bleepingcomputer.com/forums/t/477387/google-links-are-redirecting-me-to-ad-sites/
Relevancy 69.23%

Scanning with AVG Lavasoft Spyware doctor all showing a clean system As title says Google links are being redirected Can you please have a look at the HJT Log Many many thanks Logfile of Trend Micro HijackThis v Scan saved at on Platform Windows Vista SP WinNT MSIE Internet Explorer v Boot mode Normal Running processes C Windows system Dwm exe C Windows Explorer EXE C Windows system taskeng exe C Program Files Prevx and links Chrome in Google redirecting IE prevx exe C Program Files ASUS ASUS Live Update ALU exe C Program Files Google links redirecting in IE and Chrome P G BatteryLife exe C Program Files ASUS Splendid ACMON exe C Windows system taskeng exe C Program Files CyberLink Power Go CLMLSvc exe C Windows System hkcmd exe C Program Google links redirecting in IE and Chrome Files ASUS SmartLogon sensorsrv exe C Windows System igfxpers exe C Program Files ASUS ATK Hotkey HControlUser exe C Program Files ASUS ATK Media DMedia exe C Program Files ASUS ATKOSD ATKOSD exe C Program Files AmIcoSingLun AmIcoSinglun exe C Program Files Realtek Audio HDA RtHDVCpl exe C Windows system igfxsrvc exe C Windows System ACEngSvr exe C Program Files Elantech ETDCtrl exe C Windows AsScrPro exe C Program Files AVG AVG avgtray exe C Program Files Common Files Research In Motion Auto Update RIMAutoUpdate exe C Program Files iTunes iTunesHelper exe C Program Files ScanSoft PaperPort pptd nt exe C Windows twain DELL MFP Monitor Stsmon exe C Program Files Java jre bin jusched exe C Program Files Adobe Acrobat Acrobat acrotray exe C Windows ehome ehtray exe C Program Files Windows Media Player wmpnscfg exe C Program Files Common Files InstallShield UpdateService ISUSPM exe C Program Files Google GoogleToolbarNotifier GoogleToolbarNotifier exe C Program Files WIDCOMM Bluetooth Software BTTray exe C Program Files Logitech SetPoint SetPoint exe C Program Files SRS Labs SRS Premium Sound Control Panel SRSPremiumPanel exe C Windows system wbem unsecapp exe C Windows ehome ehmsas exe C Program Files Common Files Logishrd KHAL KHALMNPR EXE C Program Files WIDCOMM Bluetooth Software BtStackServer exe C Program Files Lavasoft Ad-Aware AAWTray exe C PROGRA MICROS Office OUTLOOK EXE C Program Files AVG AVG avgcsrvx exe C Program Files Research In Motion BlackBerry DesktopMgr exe C Program Files Common Files Research In Motion RIMDeviceManager RIMDeviceManager exe C Program Files Common Files Research In Motion USB Drivers BbDevMgr exe C Program Files Internet Explorer iexplore exe C Program Files Internet Explorer iexplore exe C Program Files Google Google Toolbar GoogleToolbarUser exe C Program Files Windows Live Toolbar wltuser exe C Program Files Internet Explorer iexplore exe C Windows system SearchFilterHost exe C Program Files Trend Micro HijackThis HijackThis exe R - HKCU Software Microsoft Internet Explorer Main Default Page URL http asus msn com R - HKCU Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKCU Software Microsoft Internet Explorer Main Start Page http mlslink mlxchange com R - HKLM Software Microsoft Internet Explorer Main Default Search URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Start Page http search myheritage com R - HKLM Software Microsoft Internet Explorer Search SearchAssistant R - HKLM Software Microsoft Internet Explorer Search CustomizeSearch R - HKCU Software Microsoft Windows CurrentVersion Internet Settings ProxyOverride local R - HKCU Software Microsoft Internet Explorer Toolbar LinksFolderName R - URLSearchHook AVG Security Toolbar BHO - A BC A - F - -AA - D C - C Program Files AVG AVG Toolbar IEToolbar dll O - Hosts localhost O - BHO AcroIEHelperStub - DF C-E AD- -A -FA C EBDC - C Program Files Common Files Adobe Acrobat ActiveX AcroIEHelperShim dll O - BHO Browser Defender BHO - A F D B- - FF -B - CCE E - C Program Files Spyware D... Read more

Relevancy 69.23%

Hello, I'm new here and I need help with a problem I've been having for a week or so. When I click on links in google, I am redirected to other links like overclick.com and others. I greatly appreciate it if someone can help me with this problem. Thank you in advance.

A:Google Redirecting links [Moved]

As no logs have been posted, I am shifting this topic from the specialized HiJack This forum to the Am I Infected forum. I shall also close the topic that does have a log to avoid confusion.==>PLEASE DO NOT NOW POST LOGS<== unless a log is specifically requested.

http://www.bleepingcomputer.com/forums/t/236295/google-redirecting-links-moved/
Relevancy 69.23%

Hello and thanks in advance for any help you are able to offer Now on to my problem Whenever I open google and do a search the proper links show for the sites I am looking for however the first time I click on a link result from in to redirecting google various sites Links that search I am redirected to www gate com followed by Links in google redirecting to various sites a new search string based on what i typed Links in google redirecting to various sites into googles search box This then redirects me once more to one of many differant sites that are associated with that string sites include but not limited to www dexknows com crackle com and try alot com ct yellow Links in google redirecting to various sites com this one is another site that redirects to one of the aforementioned The hosts file is clean so the issue is not there I am pretty sure it is one of the processes that are running causing this to happen I am just unclear as to which one it is The temp fix I am currently using is to just double-click anylinks I open and I will get the site I want however this is becoming rather annoying A second issue that rarely occurs is when i do a google search I will get results that have the proper descriptions for what I am looking for but the titles and corrisponding links will be something completly differant Not sure if the two issues are related or not Here is my hijackthis log Logfile of Trend Micro HijackThis v Scan saved at PM on Platform Windows XP SP WinNT MSIE Internet Explorer v Boot mode Normal Running processes C WINDOWS System smss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS system Ati evxx exe C WINDOWS system svchost exe C WINDOWS System svchost exe C WINDOWS system Ati evxx exe C Program Files Common Files Symantec Shared ccProxy exe C Program Files Common Files Symantec Shared ccSetMgr exe C Program Files Symantec Client Security Symantec Client Firewall ISSVC exe C Program Files Common Files Symantec Shared SNDSrvc exe C Program Files Common Files Symantec Shared ccEvtMgr exe C Program Files Lavasoft Ad-Aware aawservice exe C WINDOWS Explorer EXE C WINDOWS system spoolsv exe C xampp apache bin apache exe C WINDOWS ehome ehtray exe C WINDOWS RTHDCPL EXE C Program Files DISC DISCover exe C Program Files DISC DiscUpdMgr exe C Program Files HP DigitalMedia Archive DMAScheduler exe C WINDOWS arservice exe C WINDOWS eHome ehRecvr exe C Program Files HP HP Software Update HPWuSchd exe C Program Files Common Files Symantec Shared ccApp exe C WINDOWS eHome ehSched exe C PROGRA SYMANT SYMANT VPTray exe C Program Files Common Files LightScribe LSSrvc exe C Program Files Common Files Microsoft Shared VS DEBUG MDM EXE C HP KBD KBD EXE C Program Files ATI Technologies ATI ACE Core-Static MOM EXE C xampp mysql bin mysqld-nt exe C WINDOWS system ctfmon exe C WINDOWS System spool DRIVERS W X HPZIPM EXE C WINDOWS system svchost exe C Program Files Symantec Client Security Symantec AntiVirus Rtvscan exe C Program Files Symantec Client Security Symantec Client Firewall SymSPort exe C Program Files Linksys Wireless-G PCI Wireless Network Monitor WLService exe C Program Files Linksys Wireless-G PCI Wireless Network Monitor WMP Gv exe C WINDOWS system SearchIndexer exe C WINDOWS eHome ehmsas exe c windows system hpsysdrv exe C Program Files Java jre bin jusched exe C Program Files ATI Technologies ATI ACE Core-Static ccc exe C xampp apache bin apache exe C WINDOWS system dllhost exe C WINDOWS System svchost exe C Program Files DISC DiscStreamHub exe C Program Files DAEMON Tools Lite daemon exe C Program Files Common Files Real Update OB realsched exe C Program Files Internet Explorer iexplore exe C WINDOWS system SearchProtocolHost exe C Documents and Settings HP Administrator Desktop HiJackThis exe R - HKCU Software Microsoft Internet Explorer Main Default Page URL http ie redirect hp com svs rdr TYPE amp tp iehome amp locale EN US amp c amp bd PAVILION amp pf desktop R - H... Read more

https://forums.techguy.org/threads/links-in-google-redirecting-to-various-sites.767055/
Relevancy 69.23%

Can anyone help Whenever I do a search via Google the links send me elsewhere for example http parislove org result php Key aac lInks is Search Google Redirecting e b f ac f ad d da fb Google Search is Redirecting lInks amp Submit Go This only appears to arise when I search for support sites such as this Any other search takes me to the appropriate site wikipedia no problem I have scanned with my IS Panda and nothing is found super anti spyware also finds nothing Spybot S amp D found something called Virtumonde and has deleted the said virus I have just completed a scan with MBAM and again nothing is found Something is deeply embedded here can anyone help latest Hijack this report is Logfile of Trend Micro HijackThis v Scan saved at on Platform Windows Vista SP WinNT MSIE Internet Explorer v Boot mode Normal Running processes C PROGRAM FILES PANDA SECURITY PANDA INTERNET SECURITY WebProxy exe C Windows system Dwm exe C Windows Explorer EXE C Windows SYSTEM taskeng exe C Program Files Ashampoo Ashampoo Magical Defrag bin defragMonitorService exe C Program Files Ashampoo Ashampoo Magical Defrag bin defragActivityMonitor exe C Program Files NVIDIA Corporation nTune nTuneCmd exe C Program Files Ashampoo Ashampoo Magical Defrag bin defragTaskBar exe C Program Files Creative Sound Blaster X-Fi Volume Panel VolPanlu exe C Windows System rundll exe C Program Files Panda Security Panda Internet Security ApVxdWin exe C Program Files Windows Sidebar sidebar exe C Program Files SUPERAntiSpyware SUPERAntiSpyware exe C Program Files Spybot - Search amp Destroy TeaTimer exe C Program Files Orbitdownloader orbitdm exe C Program Files Orbitdownloader orbitnet exe C Program Files Panda Security Panda Internet Security PavBckPT exe C Program Files Opera opera exe C Program Files Trend Micro HijackThis HijackThis exe R - HKLM Software Microsoft Internet Explorer Main Default Page URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Default Search URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Start Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Search SearchAssistant R - HKLM Software Microsoft Internet Explorer Search CustomizeSearch R - HKCU Software Microsoft Internet Explorer Main Local Page R - HKLM Software Microsoft Internet Explorer Main Local Page R - HKCU Software Microsoft Windows CurrentVersion Internet Settings ProxyOverride local R - HKCU Software Microsoft Internet Explorer Toolbar LinksFolderName O - Hosts localhost O - BHO btorbit com - B - B - -B F -F B EFC - C Program Files Orbitdownloader orbitcth dll O - BHO Groove GFS Browser Helper - - C - D -B F - BBC D A E - C Program Files Microsoft Office Office GrooveShellExtensions dll O - BHO Windows Live Sign-in Helper - D - C - ABF- ECC- C - C Program Files Common Files Microsoft Shared Windows Live WindowsLiveLogin dll O - BHO Java tm Plug-In SSV Helper - DBC -A - b-BC - C C C A - C Program Files Java jre bin jp ssv dll O - Toolbar amp Windows Live Toolbar - FA EF- D- D - B F- A D - no file O - HKLM Run Kernel and Hardware Abstraction Layer quot C Windows KHALMNPR EXE quot O - HKLM Run DefragTaskBar quot C Program Files Ashampoo Ashampoo Magical Defrag bin defragTaskBar exe quot O - HKLM Run VolPanel quot C Program Files Creative Sound Blaster X-Fi Volume Panel VolPanlu exe quot r O - HKLM Run P RunE RunDll P RunE dll RunDLLEntry O - HKLM Run APVXDWIN quot C Program Files Panda Security Panda Internet Security APVXDWIN EXE quot s O - HKLM Run SCANINICIO quot C Program Files Panda Security Panda Internet Security Inicio exe quot O - HKCU Run Sidebar quot C Program Files Windows Sidebar sidebar exe quot autoRun O - HKCU Run SUPERAntiSpyware C Program Files SUPERAntiSpyware SUPERAntiSpyware exe O - HKCU Run SpybotSD TeaTimer C Program Files Spybot - Search amp Destro... Read more

https://forums.techguy.org/threads/google-search-is-redirecting-links.893392/
Relevancy 69.23%

Problem with Google links redirecting to other sites Sometimes new IE window opens with random site Also when I come home each day the PC is frozen with desktop showing and cannot be recovered without using power off button Ran latest update of Symantec AV and AntiMalware which found nothing to fix Thank you for any help G Pentium GB RAM WindowsXP Media Center Edition Version SP Hijack this DDS and GMER log files below in order requested Logfile of Trend Micro HijackThis v Scan saved at PM on Platform Windows XP SP WinNT MSIE Internet Explorer v Boot mode Safe mode with network support Running processes C WINDOWS System smss to other links sites Google redirecting exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS system svchost exe C WINDOWS system svchost exe C WINDOWS Explorer EXE C Program Files Internet Explorer iexplore exe C WINDOWS system ctfmon exe C Documents and Settings Terry Desktop HijackThis exe R - HKLM Software Microsoft Internet Explorer Main Default Page URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Default Search URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Google links redirecting to other sites Search Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Start Page http go microsoft com fwlink LinkId O - BHO Adobe PDF Reader Link Helper - E F-C D - D -B D- B D BE B - C Program Files Common Files Adobe Acrobat ActiveX AcroIEHelper dll O - BHO AcroIEHelperStub - DF C-E AD- -A -FA C EBDC - C Program Files Common Files Adobe Acrobat ActiveX AcroIEHelperShim dll O - BHO DriveLetterAccess - CA D E- - CF- E - - C WINDOWS System DLA DLASHX W DLL O - BHO Google Toolbar Helper - AA ED - DD- d - -CF F - C Program Files Google Google Toolbar GoogleToolbar dll O - BHO Adobe PDF Conversion Toolbar Helper - AE CD -E - f- - EE - C Program Files Adobe Acrobat Acrobat AcroIEFavClient Google links redirecting to other sites dll O - BHO Google Toolbar Notifier BHO - AF DE - D - -B FA-CE B AD D - C Program Files Google GoogleToolbarNotifier swg dll O - Toolbar Adobe PDF - -D C - - FA - E EAAC - C Program Files Adobe Acrobat Acrobat AcroIEFavClient dll O - Toolbar no name - C -E D- c -AA D- AC BABA C - no file O - Toolbar Google Toolbar - C B - - d - B - A CD F - C Program Files Google Google Toolbar GoogleToolbar dll O - HKLM Run ehTray C WINDOWS ehome ehtray exe O - HKLM Run igfxtray C WINDOWS system igfxtray exe O - HKLM Run igfxhkcmd C WINDOWS system hkcmd exe O - HKLM Run igfxpers C WINDOWS system igfxpers exe O - HKLM Run DLA C WINDOWS System DLA DLACTRLW EXE O - HKLM Run itype quot C Program Files Microsoft IntelliType Pro itype exe quot O - HKLM Run IntelliPoint quot C Program Files Microsoft IntelliPoint ipoint exe quot O - HKLM Run QuickTime Task quot C Program Files QuickTime qttask exe quot -atboottime O - HKLM Run RoxWatchTray quot C Program Files Common Files Roxio Shared SharedCOM RoxWatchTray exe quot O - HKLM Run ccApp quot C Program Files Common Files Symantec Shared ccApp exe quot O - HKCU Run ctfmon exe C WINDOWS system ctfmon exe O - HKCU Run swg quot C Program Files Google GoogleToolbarNotifier GoogleToolbarNotifier exe quot O - HKCU Run Iomega Automatic Backup Pro quot C Program Files Iomega Automatic Backup Pro LiveSystem exe quot -s O - HKCU Run adnotifier quot C Program Files Ad Notifier AdNotifier exe quot min O - HKUS S- - - RunOnce RunNarrator Narrator exe User SYSTEM O - HKUS DEFAULT RunOnce RunNarrator Narrator exe User Default user O - Global Startup APC UPS Status lnk O - Global Startup Extender Resource Monitor lnk C WINDOWS ehome RMSysTry exe O - Global Startup Microsoft Office lnk C Program Files Microsoft Office Office OSA EXE O - Extra context menu item Convert link target to Adobe PDF - res C Program Files Adobe Acrobat Acrobat AcroIEFavClient dll AcroIECapture html O - Extra context menu item Convert link target... Read more

Relevancy 69.23%

Hi new here because i need this issue resolved Using any web browser google links are redirected to other sites such as ign com and others I just had this computer in for repairs had to change the dying hard drive Now i m running virus scan after virus scan using Avira still not completely clean Anyway here is my HJT log Logfile of Trend Micro HijackThis v Scan saved at AM on Platform Windows XP SP WinNT MSIE Internet Explorer v Boot mode Normal Running processes C WINDOWS System smss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS system svchost exe C WINDOWS System svchost exe C WINDOWS system svchost exe C WINDOWS system spoolsv exe C WINDOWS Explorer EXE C Program Files Common Files ArcSoft Connection Service Bin ACService exe E Program Files Zune ZuneLauncher exe C Program Files Microsoft Xbox Accessories XboxStat exe C Program Files Common Files Real Update OB realsched exe C Links Google redirecting stuff other and Program Files Java jre bin jusched exe C Program Files Saitek Software SaiSmart exe C WINDOWS system RUNDLL EXE E Program Files Microsoft Office Office GrooveMonitor exe C Program Files Canon MyPrinter BJMyPrt exe C Program Files VIA VIAudioi SBADeck ADeck exe E Program Files Avira AntiVir Desktop avguard exe E Program Files Creative MediaSource MtdAcqu exe C Program Files Messenger msmsgs exe C WINDOWS system ctfmon exe C Program Files DNA btdna exe C Program Files Bonjour mDNSResponder exe E Program Files Muiltmedia keyboard utility KbdAp A exe C WINDOWS system cisvc exe C WINDOWS system CTsvcCDA exe C Program Files HP Digital Imaging bin Google Links redirecting and other stuff hpqtra exe C WINDOWS Google Links redirecting and other stuff system svchost exe C Program Files Canon IJPLM IJPLMSVC EXE C Program Files Java jre bin jqs exe C WINDOWS System svchost exe E Program Files CDBurnerXP NMSAccessU exe C WINDOWS System nvsvc exe C WINDOWS System svchost exe C Program Files Analog Devices SoundMAX SMAgent exe C WINDOWS System svchost exe C WINDOWS System TUProgSt exe C WINDOWS system ZuneBusEnum exe E Program Files Avira AntiVir Desktop avmailc exe E Program Files Avira AntiVir Desktop AVWEBGRD EXE C WINDOWS System svchost exe E Program Files Avira AntiVir Desktop sched exe E Program Files Avira AntiVir Desktop avscan exe E Program Files Mozilla Firefox Beta firefox exe C WINDOWS system cidaemon exe C Documents and Settings l Desktop HiJackThis exe R - HKCU Software Microsoft Internet Explorer Main Search Bar http g msn com SEENUS SAOS FORM TOOLBR R - HKCU Software Microsoft Internet Explorer Main Search Page http g msn com SEENUS SAOS FORM TOOLBR R - HKCU Software Microsoft Internet Explorer Main Start Page http www google ca R - HKLM Software Microsoft Internet Explorer Main Default Page URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Default Search URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Start Page about blank R - HKCU Software Microsoft Internet Explorer SearchURL Default http g msn com SEENUS SAOS FORM TOOLBR R - HKCU Software Microsoft Internet Explorer Main Window Title Internet Explorer provided by Sympatico O - BHO Adobe PDF Reader Link Helper - E F-C D - D -B D- B D BE B - C Program Files Common Files Adobe Acrobat ActiveX AcroIEHelper dll O - BHO Click-to-Call BHO - C C A-E - b - D - CECB - C Program Files Windows Live Messenger wlchtc dll O - BHO Symantec NCO BHO - ADB E- AFF- - AA - DAC DFA - E Program Files Norton Internet Security Engine coIEPlg dll file missing O - BHO Symantec Intrusion Prevention - D EC - AAE- -AEEE-F F C - E Program Files Norton Internet Security Engine IPSBHO DLL file missing O - BHO Groove GFS Browser Helper - - C - D -B F - BBC D A E - E Program Files Microsoft Office Office GrooveShellExtensions dll O - BHO Windows Live Sign-... Read more

https://forums.techguy.org/threads/google-links-redirecting-and-other-stuff.825652/