Fixing Google Redirection/hijacking and other redirection problems

[chaslang]

There are quite a few different infections that can cause search engine redirections. We will try to cover several of the most frequent cases in this procedure.


Note Vista and Windows 7 users:

• All tools mentioned below should be run directly by accessing the executable file. That is do not use links/shortcuts to them.
• Also when you run then, run with Admin Rights (Right click, choose "Run as Administrator")

Step 1 - First let's just do some general house cleaning before the specialized fixes


Now let's flush the Java Cache

• Click Start > Control Panel
• Double click the Java icon (be patient, it may take a while to open)
• Now click the General tab and under the Temporary Internet File area
• Click the Settings button and then click the Delete Files... button.
• In the next popup click OK.

If you have multiple Java plugin icons in Control Panel follow the above to clear all their caches.

Now let's flush the FireFox Cache

• In Firefox, click Tools
• select Options
• select Privacy
• in the section labeled Private Data click Clear Now

Now let's flush the Internet Explorer Cache

• In Internet Explorer, click Tools
• Internet Options
• Now on the General tab and click Delete Files and select Delete all Offline content too
• Click OK.
• When it finishes Click OK.

Now let's flush the DNS cache

• Click Start > Run and type in cmd
• Click OK.
• This will open a command prompt.
• Type or copy and paste the following line in the command window:
  ipconfig /flushdns
• Hit Enter
• Exit the command window

Did the general house cleaning solve your problems? If not, continue on with the next sections.

Step 2 - DNS Poisoning/Hijacking

These types of infection have been known to infect router hardware. If you have a router ( the router could also be part of your cable or DSL modem ) hooked up then you need to follow the instructions for your hardware and reset it to factory default settings. Normally there is a recessed push button type switch that needs to be held down for some number of seconds to do this. After resetting to factory defaults on your router, you will need to reconfigure the router for your network if you have made any changes to the default network setup.

After doing the above power down your DSL or Cable modem and also your router. Wait a minute and then power them back up.

Now check to see if your problem has been resolved. If not, continue on with the next sections.

Step3 - FireFox Browser Redirection Problems

Please download GooredFix from the link below and save it to your Desktop. ( The download links are the text saying Download@MajorGeeks )

GooredFix

• Ensure all Firefox windows are closed.
• To run the tool, double-click it (XP), or right-click and select Run As Administrator (Vista/Win 7).
• When prompted to run the scan, click Yes.
• GooredFix will check for infections, and then a log will appear.
• Please attach the Goored.txt log to your next reply (it can be found on your desktop). (See: HOW TO: Attach Items To Your Post )

Now check to see if your problem has been resolved. If not, continue on with the next sections.


Step 4 - All Browsers Have Redirection Problems

• Goto the below link and follow the instructions for running TDSSKiller from Kaspersky
  • TDSSkiller - How to run
• Be sure to attach your log from TDSSKiller if it found any malware especially if still having any problems. (See: HOW TO: Attach Items To Your Post )

NOTE: If you have a problem running TDSSkiller, then run the below tool from Symantec

• Download fixTDSS and save it to your Desktop
• The double click it to run the program. (If you use vista or Win 7 right click and select Run as Administrator)
• Follow the prompts and Ok any security prompts
• When it has finished, it will either say the infection was cleared or no infection was found. Tell us what it said.

Now check to see if your problem has been resolved. If not, continue on with the next section.

Step 5 - Do still have redirection problems?

If you still have problems with redirection after trying all of the above, move on to the below instructions for running MBRcheck and also our full cleaning procedure and post your logs in the Malware Forum when finished.

Please also download MBRCheck to your desktop.


See the download links under this icon

• Double click MBRCheck.exe to run (vista and Win 7 right click and select Run as Administrator)
• It will show a Black screen with some information that will contain either the below line if no problem is found:
  • Done! Press ENTER to exit...
• Or you will see more information like below if a problem is found:
  • Found non-standard or infected MBR.
  • Enter 'Y' and hit ENTER for more options, or 'N' to exit:
• Either way, just choose to exit the program at this point since we want to see only the scan results to begin with.
• MBRCheck will create a log named similar to MBRCheck_07.16.10_00.32.33.txt which is random based on date and time.
• Attach this log to your next message. (See: HOW TO: Attach Items To Your Post )

DO NOT SKIP THE BELOW if you are going to post with problems!!!!!

Now run our full cleaning procedure give in the below link:


READ & RUN ME FIRST. Malware Removal Guide

Make sure that you attach all of the requested logs to avoid any delay in getting help.