Browsers Redirected

January 5, 2012 at 06:56:16
Specs: Windows XP, 2.4GHz/768mb
Hello.
On any google page, (except the home page) when I click on the search link to go to the page it references, I get redirected to some other page than what the link pointed to. Quite often it's yellowpages.com, http://infomash.org & http://www.get-answers-fast.com. I use both IE 8 & Firefox 9 and get the same results using both browsers. When I can place the url address in the address bar I also get the redirect but it's far less often.
For some reason when I copy the url from the web page to the address bar the words 'Cached - Similar' automatically appear to the immediate right of the address just before the redirect but if I remove those words before I either click the 'go' button or press ENTER there will be no redirect.
Also, in the status bar, "http://santalubaulacara.com" or "http://satan.isyourfriend.com" often appears during the redirect and on the 'redirected to' page - in the address bar, the address will start off with something like this: http://63.209.69.107/search/web/.....
I've tried scans using Malwarebytes, Avast, Trojan Hunter, Rkill, Eset, Windows malicious software removal tool, RootKit Revealer, TDSSKiller -no effect
I've disabled add ons -no effect
I've gone into 'safe mode with networking' disabled the add ons -no effect
I've googled over to Bing & used Live Search -same results
How's this for a laugh: I tried ComboFix. Its command window gave me an "attrib.exe not recognized as an....command" error. Fixed that, but when I went to delete the program & reinstall it, the folder for the ComboFix program was missing - in its place was the desktop icon for "My Computer" but named "ComboFix" and when I opened it - the "My Computer" window which displays the computer drives was opened!
I'm using a Linksys 2.4GHz wireless adapter and tried it on other PCs to see if this could be the source of the problem, but there are no redirects using this adapter with any of the other PCs - just the one in question here!
Deleting the cookies seems to help in both browsers - but only temporarily.
I really don't want to reinstall the OS, but even then I've read in one blog where not even that helped in one person's case.
Any help would be greatly appreciated!

PS
PLS do not recommened links to Microcraps' No-Help-Or-Support pages or to their Lack-Of-Knowledge Base - as over time I have found these volumes upon volumes of USELESS RUBBISH to be helpfull for NOTHING!


See More: Browsers Redirected

Report •

#1
January 5, 2012 at 09:30:08
I know you said you mentioned all those programs.. but one that I use that works every single time is Spybot - Search and Destroy.. because it searches specifically in browsers to find any infections within browser files.

Also.. do you have some toolbars or other programs on your computer? Check your Local/Application Data folders and look for anything unusual.

Also, what antivirus are you using?


Report •

#2
January 9, 2012 at 19:21:25
Hi gestohlenseele. Sorry about the delay in getting back and by the way, thanks for your reply. I tried the spybot idea - don't know if it has taken positive effect yet as I've been having trouble with my internet connection with the problem PC - I'm using another PC to send this reply.
Suddenly I've been getting problems w/my usb ports:
my wireless internet uses usb and tho' the drivers are all installed and it senses the access point, it will not gain web access.
And when I plug in a flash drive I get the error message:
"the disk drive F is not formatted..." error even though both devices work fine in other PCs.

The toolbars are the 'Ask" toolbar - which is in both browsers and installed after the hijack problems bagan and the google toolbars which were native to the FF and IE browsers.


Report •

#3
January 12, 2012 at 08:21:45
And I also apologize for the delay in getting back to you, lol

Did you have any luck with the Spybot application?

Jonas "Jackal" Lear
http://www.sbccrew.com
Serving the South Bay Since 1999


Report •

Related Solutions

#4
January 12, 2012 at 11:15:38
No luck yet - still can't get the internet - going to check into resolving the errors I've been getting in the mean time. Oh yes, about the antivirus programs I was using - I don't remember for sure but I think it was either Avast or Eset Nod32.

Report •

#5
January 14, 2012 at 06:15:41
Your hosts file might be corrupt. If you do no know how to get there please google how to. The file should not have a lot or even any entries in it. Let us know whats in file.

Report •

#6
January 19, 2012 at 06:38:55
It appears to be standard with nothing additional contained in it. when compared to hosts files of other PCs I've checked, they are identical. Or
perhaps I should say WERE identical. Since using Spybot there has been a long list of added entries that it has added.

Report •

#7
January 20, 2012 at 09:27:14
Yes, those are normal.. when Spybot runs it updates your hosts file for preventative measures, this is perfectly normal.

However, did Spybot do any good in this case that you've noticed?

Jonas "Jackal" Lear
http://www.sbccrew.com
Serving the South Bay Since 1999


Report •

#8
January 21, 2012 at 17:29:14
Spybot seems to have 'discovered' some things the other anti's had missed - that it says were hijackers, malware, etc as well as some false positives like 'unlocker.exe' and a few other uninstalled apps in my Docs folder. So I deleted all the stuff that didn't look familiar. The result -no effect. Could there be some kind of script that simply has been written into the links themselves that could be discovered and removed? This redirect happens even when I'm using the Ask.com pages!

Report •

#9
January 26, 2012 at 13:16:33
I very highly doubt it.. not sure if I have asked or not but does it do this with all browsers or just this one?

Jonas "Jackal" Lear
http://www.sbccrew.com
Serving the South Bay Since 1999


Report •

#10
January 28, 2012 at 10:45:24
It does this at least in IE8 and FF. I can't tell if it does this in Opera since for some reason I've lost my internet connection again!

Report •

Ask Question