Google - hijacked?

mynsa · 16 Dec 2009 at 00:06

not at a quick glance, ill take a closer look tomorrow when i can sit down with it

for a quick fix, you might be able to use a different browser depending upon how the malware is working

Brizzles · 16 Dec 2009 at 00:20

mynsa said:
not at a quick glance, ill take a closer look tomorrow when i can sit down with it

for a quick fix, you might be able to use a different browser depending upon how the malware is working

Thanks for your help

Tried FF and IE , both the same.

Tried Google and bing search engines - both the same.

Cheers.

Brizzles · 16 Dec 2009 at 10:44

mynsa said:
not at a quick glance, ill take a closer look tomorrow when i can sit down with it

Hi mate.

Don't spend anymore time on it.

I've found out its a 'Google redirect virus' from some digging around i did last night. Tried to find the system entries causing it,but no luck.

As its only on the laptop, which is only really used for browsing, i'll do a clean re-install today, the beef up the security.

Cheers for the help

Nossmayo · 16 Dec 2009 at 11:18

This is still happening to me too.

If I click a link on any search engine (in any browser) it redirects to a site like this:

Brizzles · 16 Dec 2009 at 11:26

Nossmayo said:
This is still happening to me too.

If I click a link on any search engine (in any browser) it redirects to a site like this:

Try and search for ''Google redirect virus'' , difficult if you get redirected but keep trying.

There are a couple of .sys entries you can remove that supposedly fixes it - Saying that , i couldn't find them on my laptop.

I feel your pain

I've given up and will be doing a full re-install later today.

Good luck

mynsa · 16 Dec 2009 at 11:26

Nossmayo said:
This is still happening to me too.

If I click a link on any search engine (in any browser) it redirects to a site like this:

try following the instructions here:

http://www.techspot.com/vb/topic122119.html

.one. · 18 Dec 2009 at 19:24

Not sure if you have sorted this but:

1.If you rename FireFox too TireFox or what ever you like there will be no redirect.

2 Find & run Combofix with the added script for the removal of Google redirect.

If you can not find the script i will take a look for you but it is out there.

cheers jay.

Redgie · 18 Dec 2009 at 20:01

Or just download the applicatiosn on another machine and copy them across the network / use a USB stick

siege2 · 19 Dec 2009 at 09:12

I had the same happen to me on going onto one webby "isohunt" I did a restore to my netbook then put on avast FREE good program not happened since.

btw I have microsoft essentials on main PC and my SHuttle.

Rabtech · 19 Dec 2009 at 11:21

As suggested above, run Combofix. Once thats finished check your routers DNS settings, the hijackthis log looks fine so its not likely to be a hosts file redirector.

If you havent changed your routers password from default (tut tut if you havent) then the trojan.dns infection can log in to various routers and change the DNS servers to 'bad' DNS servers normally beginning 85.*

Brizzles · 19 Dec 2009 at 12:47

Rabtech said:
As suggested above, run Combofix. Once thats finished check your routers DNS settings, the hijackthis log looks fine so its not likely to be a hosts file redirector.

If you havent changed your routers password from default (tut tut if you havent) then the trojan.dns infection can log in to various routers and change the DNS servers to 'bad' DNS servers normally beginning 85.*

The router is fine, the main pc is not affected, just the laptop ( Both run from the same router).

Combofix cannot be downloaded, it has been taken offline from the trusted links.

Cheers.

Hairybudda · 19 Dec 2009 at 12:48

Tried running rootkitrevealer to see if there are any processes hiding themselves from HJT?