Browser searches redirected

[DonInKansas]

I'm seeing this problem on multiple computers; one at work and also my nephew's laptop. They will run a search in Google or whatever but when a link is clicked as a result of a search, whether it be to wikipedia or hotsneekylovin.com, the click is redirected to different sites, generally wanting you to buy some sort of merchandise. I've gone through cleanups, System Restores, and everything else I can think of without reinstalling to no avail because a feformat on the work comp would be like a 2 day process. Anyone had any success killing this?

 

[cheesy999]

I'm seeing this problem on multiple computers; one at work and also my nephew's laptop. They will run a search in Google or whatever but when a link is clicked as a result of a search, whether it be to wikipedia or hotsneekylovin.com, the click is redirected to different sites, generally wanting you to buy some sort of merchandise. I've gone through cleanups, System Restores, and everything else I can think of without reinstalling to no avail because a feformat on the work comp would be like a 2 day process. Anyone had any success killing this?

run a virus scan, preferably with this -> http://download.cnet.com/Malwarebyt...4572.html?part=dl-10804572&subj=dl&tag=button

though if the PC's are on 2 different networks i would assume it was caused by something you did on them

 

[DonInKansas]

I've run Malwarebytes, SAS, and most of the rest. I wouldn't have come here if I hadn't run a virus scan yet.

These computers are not networked, one being at work and the other being personal and had the problems before I got a hold of them. Did you even read my post?

 

[cheesy999]

I've run Malwarebytes, SAS, and most of the rest. I wouldn't have come here if I hadn't run a virus scan yet.

These computers are not networked, one being at work and the other being personal and had the problems before I got a hold of them. Did you even read my post?

if the computers are on 2 different networks, are thoroughly virus scanned etc, i would think it would be a user problem, maybe you've left some sort of proxy running on them or left a specific google account logged in on both

have the 2 PC's ever had contact via using the Same floppy disk, CD etc

 

[entropy13]

Must be a virus that YOU carry then, since that's the only thing in common between the two (you have accessed both).


Maybe some screenshots? It probably only replaces the first few search results?

 

[MRCL]

What does it redirect to? genuine websites, or CanadianRX/V1aagraaa/Nicole is lonely?

 

[newtekie1]

I've seen this alot coming into the shop.

I suggest a program called TDSSKiller: http://support.kaspersky.com/faq/?qid=208283363

It generally takes care of this pretty quickly.

Combofix might also be required, but I always save that as a last resort because it breaks 1 in 100 computers, but if it is a last resort before formatting anyway I just go ahead an use it.

 

[Red_Machine]

I had something very similar to this. MSE couldn't fix it, Norton couldn't fix it, Kaspersky couldn't fix it and neither could Malwarebytes. In the end, Lavasoft's Adaware cleared it out. I suggest downloding that and running a scan.

 

[twilyth]

Close all browsers. Delete the hosts file. Start up a browser to create a new hosts file. Lock it.

This thread should give you the info you need.

http://www.bleepingcomputer.com/forums/topic353766.html

edit: However a corrupted hosts file means you are guaranteed to be infected. Try Avira. The full product I think is free for 60 days and their free version is supposed to be pretty good.

 

[95Viper]

Close all browsers. Delete the hosts file. Start up a browser to create a new hosts file. Lock it.

This thread should give you the info you need.

http://www.bleepingcomputer.com/forums/topic353766.html

edit: However a corrupted hosts file means you are guaranteed to be infected. Try Avira. The full product I think is free for 60 days and their free version is supposed to be pretty good.

+1 agree
____________________________________________

Info @ MS KB...

How do I reset the hosts file back to the default?

 

[DonInKansas]

I've seen this alot coming into the shop.

I suggest a program called TDSSKiller: http://support.kaspersky.com/faq/?qid=208283363

It generally takes care of this pretty quickly.

Combofix might also be required, but I always save that as a last resort because it breaks 1 in 100 computers, but if it is a last resort before formatting anyway I just go ahead an use it.

TDSS did the job. +5 internets for you, tekie. Thanks!

 

[1nf3rn0x]

Ah yes, I have the same problem on my two desktops, my laptop and my fathers laptop! I assure you, the computers are all clean. I'll have a go at that prog. you mentioned.