Google Links Redirecting - Please Help

Discussion in 'Malware Help (A Specialist Will Reply)' started by mcannon75, Jan 9, 2010.

  1. mcannon75

    mcannon75 Private E-2

    I cannot seem to get rid of this. 90% of the Google links all redirect me to junk sites and other sites that tell me my computer is infected with Malware. This has been going on for about 2 months now.

    I have followed ever step on here: http://forums.majorgeeks.com/showthread.php?t=35407

    It does not seem to have fixed my issue and you guys are my last hope.

    I have attached all the log files to this post in a zip file.

    Anything you can do to help me would be greatly appreciated. I do not know what else i can do. All my Anti-Malware programs tell me that my computer is clean when i know it is not.
     

    Attached Files:

  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Welcome to Major Geeks!

    Please tell us which browser (s) you notice the redirects with. For example, I can see you have Internet Explorer, Google Chrome, and FireFox installed. Does it happen with all of them? If you have not tried, then please try before answering. Also please tell us if it also occurs in safe boot mode.
     
  3. mcannon75

    mcannon75 Private E-2

    The redirects are happening in all three browsers. I just tested all three of them again to make sure and yes, the same thing happens across the board.

    When i boot up in safe mode, the same issue is happening in all three browsers as well.

    Hope this helps.
     
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Okay please run the below two scans and attach the logs.



    Go to TDSSKiller and Download TDSSKiller.zip to your Desktop
    • Extract its contents to your Desktop so that you have TDSSKiller.exe directly on your Desktop and not in any subfolder of the Desktop.
    • Click Start > Run and copy/paste the following bold command into Run box and hit Enter.
    "%userprofile%\Desktop\TDSSKiller.exe" -v
    • Follow the instructions to type in "delete" when it asks you what to do when if finds something.
    • When done, a log file should be created on your C: drive named something like TDSSKiller.2.1.1_27.12.2009_14.17.04_log.txt which is based on the program version # and date and time run. Please attach this log to your next reply. (See: HOW TO: Attach Items To Your Post )
    Now run the below:
    GMER - running with a random name
     
  5. mcannon75

    mcannon75 Private E-2

    I just finished running both scans. I have attached both log files.

    I rebooted the computer and tested all three browsers and, i don't want to jinx anything, but it appears that they are all working perfectly! I did several different searches in each one, clicked on many different links and did not get redirected once.

    I am not sure exactly how much you can tell from the log files but let me know what you think.

    Thanks again.
     

    Attached Files:

  6. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Yes TDSSkiller removed your problem.


    If you are not having any other malware problems, it is time to do our final steps:
    1. We recommend you keep SUPERAntiSpyware and Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase them, they provide no protection. They do not use any significant amount of resources ( except a little disk space ) until you run a scan.
    2. If we had you use ComboFix, uninstall ComboFix (This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)
      • Click START then RUN and enter the below into the run box and then click OK. Note the quotes are required
      • "%userprofile%\Desktop\combofix" /uninstall
        • Notes: The space between the combofix" and the /uninstall, it must be there.
        • This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.
    3. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
    4. If we had you download any registry patches like fixme.reg or fixWLK.reg (or any others), you can delete these files now.
    5. If running Vista, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
    6. Go to add/remove programs and uninstall HijackThis.
    7. Goto the C:\MGtools folder and find the MGclean.bat file. Double click on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.
    8. If you are running Vista, Windows XP or Windows ME, do the below:
      • Refer to the cleaning procedures pointed to by step 6 of the READ ME for your Window version and see the instructions to Disable System Restore which will flush your Restore Points.
      • Then reboot and Enable System Restore to create a new clean Restore Point.
    9. After doing the above, you should work thru the below link:
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds