Gaming google virus?

[_Chaz_]

I'm not reading the whole thread, but if it's happening on other browsers, you may have a virus that is redirecting you. I suggest you take a look at this thread: http://gbatemp.net/t298763-infection-remov...t&p=3737219

 

[Sinister181]

I had the same problem. Until I came across this removal tool on the internet.

http://filetrip.net/f25797-Google-Redirect-Fix-1-0.html

 

[Bladexdsl]

I had the same problem. Until I came across this removal tool on the internet.

http://filetrip.net/f25797-Google-Redirect-Fix-1-0.html

tried didn't work the fucking thing must be hiding somewhere else

 

[Rydian]

Log into your router's settings and make sure the DNS servers set there haven't changed.

 

[Bladexdsl]

checked the dns their all fine, tried spyware doctor that didn't work. fuck this thing!

 

[Rydian]

What are the settings in the router actually set to? Take a screenshot.

Is there a proxy or DNS set for your IPv4 settings in the network adapter you're using? Take a screenshot.

What firefox addons do you have? Take a screenshot.

What IE addons do you have? Take a screenshot.

 

[Bladexdsl]

the dns is fine i posted them on whirlpool and they use same isp as me they said their fine.

ff addons

 

[xmrnogatcox]

Use another PC to download the following:
1) TDSSKiller
2) ComboFix. Get this from BleepingComputer.com
3) Hijackthis

TDSS Killer is an amazing rootkit cleanup utility made by Kaspersky (who I normally hate). ComboFix is also good with malware and rootkits.

Boot into safe mode with networking. Go into Internet Options > click on the "Connections" tab > click on "LAN Settings" > Make sure none of the settings are checked.

Run TDSSKiller. Delete or cure any rootkit infected files. Then run ComboFix. Press "yes" at every prompt.

When those are finished, run a MalwareBytes and SuperAntiSpyware FULL SCAN.

After that, run Hijackthis. Unless you know how to read a Hijackthis log, upload it to www.Hijackthis.de. It will tell you what is safe to delete. Or you can post it here and I'll tell you what to delete.

Then open the registry editor and check your startup items for anything out of the ordinary. If you get to this point and still need help, let me know.

After everything is finished, log into your router and check to see if you are using a dynamic DNS. 9 out of 10 homes do. If you have a static ip set, write it down and set it to a dynamic address.

 

[Zetta_x]

Does it happen on multiple browsers or just firefox?

---

All it takes it one computer in the network to have a TDSS.tdl4 and it will assign you bad DNS (I remember one computer having something like 188.122.*.* as a DNS server which was definitely used for bad purposes). However, if you are sure your Ipv4 config is correct, then it's nothing you have to worry about. If however you are getting bad ipv4 settings, then you are going to have to run that TDSSKiller by Kaspersky on every computer in the house =P

 

[Bladexdsl]

Use another PC to download the following:
1) TDSSKiller
2) ComboFix. Get this from BleepingComputer.com
3) Hijackthis

TDSS Killer is an amazing rootkit cleanup utility made by Kaspersky (who I normally hate). ComboFix is also good with malware and rootkits.

Boot into safe mode with networking. Go into Internet Options > click on the "Connections" tab > click on "LAN Settings" > Make sure none of the settings are checked.

Run TDSSKiller. Delete or cure any rootkit infected files. Then run ComboFix. Press "yes" at every prompt.

When those are finished, run a MalwareBytes and SuperAntiSpyware FULL SCAN.

After that, run Hijackthis. Unless you know how to read a Hijackthis log, upload it to www.Hijackthis.de. It will tell you what is safe to delete. Or you can post it here and I'll tell you what to delete.

Then open the registry editor and check your startup items for anything out of the ordinary. If you get to this point and still need help, let me know.

After everything is finished, log into your router and check to see if you are using a dynamic DNS. 9 out of 10 homes do. If you have a static ip set, write it down and set it to a dynamic address.

tried all that no effect. also tried spyware doctor nothing detects and removes it even patches that claim to and it happens in any browser!! wouldnt be a big deal i can use another search engine but it won't let me log into my youtube acc

!

!

!

 

[Rydian]

http://support.mozilla.com/en-US/kb/Safe Mode

Does firefox do it in it's own safe mode?

 

[Bladexdsl]

it does it in ALL browsers.

 

[xmrnogatcox]

it does it in ALL browsers.

Open your hosts file (C:\windows\system32\drivers\etc\hosts) in notepad. You may have to enable hidden files and folders and unchecked hide protected system files.

What does it say?

 

[Arm73]

Well since it's a desperate situation, why don't you do what I usually do ?
I'm a PC gamer, I download a lot of stuff. I've got a good free antivirus, but that's not the point.
The point is I install and then remove a lot of things, often unverified tools, so every once in a while my computer gets affected by all that unnecessary applications, not even viruses...
But anyway, I keep an external hard drive, I always did, and if you don't, I'd recommend you to get one, they are cheap as bag of potatoes these days.....
So on this external HDD, put all your pictures, music, videos, games, your firefox favorites ( although there is an option in newer version to sync your setting between different computers ) and everything else you like to keep.
Then go ahead, and reformat your PC by performing a fresh Windows installation.
If you don't have the Windows CD anymore, most computers have a separate partition that you can use to restore your PC to it's original out-of-the-box setting.
Do it, and then transfer over your files from the external usb HDD.
Oh and while you are at it,you might want to use revo uninstaller to delete all the non essential crap that new computers are shipped with, then download a newer version of Firefox and enjoy your clean PC !
I just did that on my cousin's PC and she told me that her PC never run so fast, even when it was new !
Of course you will have to reinstall any programs that your version of Windows didn't come with, but it's totally worth it to know that your PC is as clean as it gets !

 

[Bladexdsl]

it does it in ALL browsers.

Open your hosts file (C:\windows\system32\drivers\etc\hosts) in notepad. You may have to enable hidden files and folders and unchecked hide protected system files.

What does it say?

there is no hosts file

 

[Arm73]

it does it in ALL browsers.

Open your hosts file (C:\windows\system32\drivers\etc\hosts) in notepad. You may have to enable hidden files and folders and unchecked hide protected system files.

What does it say?

there is no hosts file

Don't waste your time with complicated operations, just reformat your HDD and be done with it.

 

[Zetta_x]

it does it in ALL browsers.

Open your hosts file (C:\windows\system32\drivers\etc\hosts) in notepad. You may have to enable hidden files and folders and unchecked hide protected system files.

What does it say?

there is no hosts file

Don't waste your time with complicated operations, just reformat your HDD and be done with it.

What if it doesn't fix it. Then he pretty much has to re-do his HDD with applications.

 

[jalaneme]

it does it in ALL browsers.

do you have a anti virus installed? that would have stopped you getting the virus in the 1st place.

 

[xmrnogatcox]

it does it in ALL browsers.

Open your hosts file (C:\windows\system32\drivers\etc\hosts) in notepad. You may have to enable hidden files and folders and unchecked hide protected system files.

What does it say?

there is no hosts file

Don't waste your time with complicated operations, just reformat your HDD and be done with it.

The hosts file is easy. You probably don't see it because you need to uncheck "Hide protected operating system files" in your folder options.

The host file should look like:

127.0.0.1 localhost

There shouldn't be anything else in there unless an app wrote to it.

The hosts file is a lot of times why people are redirected.

 

[Dimensional]

It could be a browser hijacker. If you haven't already, try browsing the web with another web browser, like Internet Explorer or Apple Safari. If you get the same problem, then it's a virus on your system, even a rootkit.

One suggestion is that until you get a fix, don't use google. There are many search engines, so don't just use one. If the problem is with all search engines, then your virus is more malicious than initially thought, and you might have to format your hard drive and start from scratch again. And that option isn't something anybody would look forward to.