How to remove Google redirect virus?

[tofast4u]

What about the system's proxy/DNS? What about the DNS and proxy settings in the router?

I dont know how to check that out.

 

[Rydian]

Open the network and sharing center from the windows control panel, click "change adapter settings" on the left, then find the current connection, go to the properties, then in the list that comes up find the IPv4 thing and go to those properties.

 

[tofast4u]

Open the network and sharing center from the windows control panel, click "change adapter settings" on the left, then find the current connection, go to the properties, then in the list that comes up find the IPv4 thing and go to those properties.

http://i50.tinypic.com/357r5lc.png

 

[DaggerV]

I'd wager it's router side as I mentioned earlier if what you said don't work, back up images and junk and do a system restore, if it doesn't fix it, you know for sure.

 

[Rydian]

I'd just check the router first, as that's a lot less trouble.

In your start/globe menu, go to the "run" command. If you're on vista/7, you'd use the little white box near the bottom. Type in "CMD" and press CTRL+SHIFT+ENTER.

In the black box that comes up, type "ipconfig" and press enter. It'll list a series of four numbers as your "default gateway". Write those down. Go open any web browser, and enter the four numbers (like 192.168.x.x) into the address bar, and press enter.

A login box should come up. The username should be "admin" or blank, and the password can be anything from "admin" to "administrator" "pass" to "password" or "password1", or something else if you've set it differently. Ask whoever set up the router what the password to get into it is, or check this page.
http://www.phenoelit-us.org/dpl/dpl.html

In the router's page, go to the connection status (or WAN info or something) where it shows your current WAN IP and DNS and such, tell us what the DNS entries are.

 

[tofast4u]

I'd just check the router first, as that's a lot less trouble.

In your start/globe menu, go to the "run" command. If you're on vista/7, you'd use the little white box near the bottom. Type in "CMD" and press CTRL+SHIFT+ENTER.

In the black box that comes up, type "ipconfig" and press enter. It'll list a series of four numbers as your "default gateway". Write those down. Go open any web browser, and enter the four numbers (like 192.168.x.x) into the address bar, and press enter.

A login box should come up. The username should be "admin" or blank, and the password can be anything from "admin" to "administrator" "pass" to "password" or "password1", or something else if you've set it differently. Ask whoever set up the router what the password to get into it is, or check this page.
http://www.phenoelit-us.org/dpl/dpl.html

In the router's page, go to the connection status (or WAN info or something) where it shows your current WAN IP and DNS and such, tell us what the DNS entries are.

My DNS address is 68.237.161.12, and my DNS address 2 is 71.250.0.12

 

[Rydian]

Yup those are Verizon's. If other machines in the house aren't doing this then it's most likely not in the router.

Make a new admin account on the computer, then shut down, start back up into safe mode (with networking) and go into that account and see if the issue persists.

 

[tofast4u]

Yup those are Verizon's. If other machines in the house aren't doing this then it's most likely not in the router.

Make a new admin account on the computer, then shut down, start back up into safe mode (with networking) and go into that account and see if the issue persists.

Yeah none of the other computers or devices in the household have this problem connected to the same wifi. I'll try that suggestion tomorrow, thanks for helping me through this.

 

[Rydian]

S'ok, I'm just curious what kind of crap's going around nowadays.

 

[TheCasketMan]

i have the same problem and it is so annoying. wish there was a way to official solve this adware

 

[Rydian]

Have you tried the basics like checking browser addons, malwarebytes, etc?

 

[tofast4u]

S'ok, I'm just curious what kind of crap's going around nowadays.

I just made a new account, and tried to see if I have the problem on that one and I don't. Everything is fine on the new account and I don't have any Google redirect problems.

 

[omgpwn666]

Just turn off plugins, that should work. My friend just had this problem about two days ago, and it turns out after dozens of scans, he just found it was a plugin. It was linking him to porn.

 

[Rydian]

I just made a new account, and tried to see if I have the problem on that one and I don't. Everything is fine on the new account and I don't have any Google redirect problems.

In the start menu run msconfig, go to the startup section, and see what's there on the account with the issue, versus the one without the issue.

 

[Foxhounder]

I've been having a similar problem since the 21st of December. Sometimes when I click a link or website a new page opens up on another tab..I don't know if this is a virus but it's getting on my nerves. It's always teh same site(can't remember the name)but it acts like a search engine...I think it starts with the letter d.

I'm using Chrome.

 

[Rydian]

Menu -> Tools -> Extensions, screenshot it.
Menu -> Settings - > Manage Search Engines, screenshot it.

And screenshot the ipv4 config and IE LAN settings things I told the OP to do earlier on this page.

 

[Foxhounder]

Well I took a shit of the page just as it begun loading.

 

[Rydian]

Yup, give us the info.

 

[Foxhounder]

Yup, give us the info.

I don't have the search engine in the extensions nore can I find the virus in the registry yet its still here. I used Malwarebytes Pro to delete 11 things from the registry, did a restart and just got on gbatemp and the blasted site popped up again -_-

 

[Rydian]

Menu -> Tools -> Extensions, screenshot it.
Menu -> Settings - > Manage Search Engines, screenshot it.

And screenshot the ipv4 config and IE LAN settings things I told the OP to do earlier on this page.