How to remove Google redirect virus?

[tofast4u]

I have a problem on my computer, and this is with any browser that I use (Firefox, Explorer, and Chrome). If I google something and then press on the link I will be redirected to a different website and those websites are random too. The redirect thing happens about 40% of the time I click a link, but it gets very annoying. I already scanned with MalwareBytes and found nothing, same goes for Avast, and Microsoft Essentials. What should I do?

 

[moerik]

First, make-sure your malware/virus scanners are up-to-date, if not update them.
Then try scanning in Safe-mode.
You can get into safe-mode by hitting WindowsKey, and then typing in msconfig.
Then go to the boot-tab, select the OS (Operating System), and check the box that says; "Safe Boot".
Then select Minimal, which is located under Safe Boot.
Re-start your Desktop/Laptop.
Now run the scans (If possible with minimal critical files), not all together, but one at a time, as they might interfere with each other.
Report back if MalwareBytes, Microsoft Security Essentials and Avast find nothing.

 

[Seaking]

also run Combofix.
https://www.google.com/search?q=combofix

also, check your host files.

http://support.kaspersky.com/5350
this too, TDSSKiller.

Check regedit.
HKLM > Software > Look for any garbage registry entries
HKCU > Software > Look for any garbage entries (like fa09i8213jk0123k or something similar)

 

[tofast4u]

also run Combofix.
https://www.google.com/search?q=combofix

also, check your host files.

http://support.kaspersky.com/5350
this too, TDSSKiller.

Check regedit.
HKLM > Software > Look for any garbage registry entries
HKCU > Software > Look for any garbage entries (like fa09i8213jk0123k or something similar)

Yeah I tried all of that and it didn't work. Also my virus protection stuff are all up to date.

 

[Seaking]

reinstall windows then.

 

[retKHAAAN]

Don't reinstall windows just yet...

Run super antispyware first. If that doesn't work, then do what you will. Super took care of it for me a while back.
http://www.superantispyware.com/downloadfile.html?productid=SUPERANTISPYWAREFREE

P.s. super is not malware of any kind.

 

[Rydian]

Could have sworn I posted here...

http://www.filehippo.com/download_hijackthis/
Run this and give us the log file (put it on pastebin.com and link us or something).

 

[Deleted member 318366]

I found a quick guide on how to get rid of the google redirect virus here, hope it helps.

 

[Zetta_x]

I was going to say make sure you set tdsskiller to scan boot sectors.

 

[Fishaman P]

These things are tricky. In fact, my friend got this a few months back, and he just had to reformat.

I'm a fan of reformatting, but you may not be.

 

[Jamstruth]

I remember I had to permanently delete some files under AppData\Roaming\Google when I had this issue. Everytime I booted up they'd return and fuck up the DNS cache. Try flushing DNS and see if it goes away for a bit.

 

[Psionic Roshambo]

Download Virus Scan 2009 hehehehehe (Don't do it.... seriously its a virus/scamware.)

 

[DaggerV]

Had one that was a modem issue I guess someone managed to hack it, don't know if it's similar with you though.

 

[xist]

I know there are about a billion suggestions in this topic, but i encountered this last month and tried all these various fixes but turned up nothing. However, i have a paid for Avira Premium suite which after an update managed to clear it out.

The Avira Antivirus is free iirc so that might be a good choice to run a scan with.

 

[Rydian]

Had one that was a modem issue I guess someone managed to hack it, don't know if it's similar with you though.

Modern malware can modify the DNS settings on routers that still have the default user/pass.

 

[Randamin]

That used to happen to me with the firefox browser but a major update seemed to solve the problem.

 

[tofast4u]

Could have sworn I posted here...

http://www.filehippo.com/download_hijackthis/
Run this and give us the log file (put it on pastebin.com and link us or something).

Seems like the log isn't working, all I get is a blank notepad page. It says cannot find the "filename"

 

[Rydian]

Go to your program files folder, to the Trend Micro folder, and see if you can find the log somewhere in there.

EDIT: Oh of all the fucking fdslgha

Trendy Micro fucked up and the thing's an MSI now that installs itself to program files, but also tries to write there while not running as admin, AND they put a custom shortcut up that doesn't have the admin option.

You'll have to browse to the folder it installs to, right-click it, and run it as admin. Then it can scan and make a log.

 

[Another World]

your post reads like you scanned a lot already. so i wanted to ask, what router do you have?

we have a linksys (by cicso) here with a known firmware issue. the router's IP gets put as the DNS so the router makes it impossible to visit some pages, it redirects, etc. i also experienced this about 40% of the time. i fixed it by manually entering google's dns servers (8.8.8.8, 8.8.4.4) both in the router and my pc, now i have no more issues.

-another world

 

[tofast4u]

Go to your program files folder, to the Trend Micro folder, and see if you can find the log somewhere in there.

EDIT: Oh of all the fucking fdslgha

Trendy Micro fucked up and the thing's an MSI now that installs itself to program files, but also tries to write there while not running as admin, AND they put a custom shortcut up that doesn't have the admin option.

You'll have to browse to the folder it installs to, right-click it, and run it as admin. Then it can scan and make a log.

Ran it as Admin, and it did the trick here is the log file.
http://pastebin.com/VUTQ7nS6