Google redirect virus help please?

Gateway / GT5034
December 4, 2008 at 21:32:57
Specs: Windows XP, not sure
It seems I have been hit with this virus. Every search result I click on goes to a popup with some kind of adware. It is causing my computer to run really slow. I have tried Malwarebytes but it didn't fix it. It won't even let me go to any other Spyware websites. Please help

See More: Google redirect virus help please?

Report •

December 4, 2008 at 21:47:35
Try to do the following. I see you have run Malwarebytes but run it as suggested below paying close attention to item 6.

Please download HostsXpert from the following link:


Extract the by doing the following:Right-click and select extract all – Follow the wizard and extract it to your DesktopClick Finish. Double-click the HostsXpert folder and then double-click HostsXpert.exe. Click “ Restore MS Hosts File” and press OK.Exit the program.

Note: if you were using a custom Hosts file you will need to replace any of those entries yourself.

Please download Malwarebytes' Anti-Malware from one of these sites:



1. Double Click mbam-setup.exe to install the application.
2. Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
3. If an update is found, it will download and install the latest version.
4. Once the program has loaded, select "Perform Quick Scan", then click Scan. The scan may take some time to finish,so please be patient.
5. When the scan is complete, click OK, then Show Results to view the results.
6. Make sure that everything found is checked, and click Remove Selected.
7. When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediately.
8. The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
9. Copy&Paste the entire report in your next reply.

Please download and install the latest version of HijackThis v2.0.2:

Download the "HijackThis" Installer from this link:
Hijack This

1. Save " HJTInstall.exe" to your desktop.
2. Double click on HJTInstall.exe to run the program.
3. By default it will install to C:\Program Files\Trend Micro\HijackThis.
4. Accept the license agreement by clicking the "I Accept" button.
5.Click on the "Do a system scan and save a log file" button. It will scan and then ask you to save the log.
6. Click "Save log" to save the log file and then the log will open in Notepad.
7. Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
8. Paste the log in your next reply.
9. Do NOT have HijackThis fix anything yet! Most of what it finds will be harmless or even required.

If you still cannot get to the webstes try the following:

Click on Start, click Run, and then type devmgmt.msc and click OK
On the View menu click on Show hidden devices
Browse to Non-Plug and Play Drivers and click the + sign to the left, you should see something like TDSSserv.sys in that list.
Highlight that driver and right click on it and select DISABLE - NOT uninstall.
Now RESTART your computer.

Still cannot access the websites try this:

Please reboot your computer in Safe Mode with Networking by doing the following :
Restart your computer
After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;
Instead of Windows loading as normal, a menu with options should appear;
Select Safe Mode with Networking, then press "Enter".
Choose your usual account.

Then try to post the logs.

Report •

December 5, 2008 at 14:29:59
Thanks for the quick reply. I believe I got it cleared up. I was able to run Malwarebytes again and it seemed to clear it up this time.

Report •

December 5, 2008 at 20:04:22
It is probaby not cleaned up yet and we need the logs if you choose to continue the removal process.

Report •

Related Solutions

January 14, 2009 at 01:16:43
I was having the same problem and its been driving me crazy for weeks. i disabled that driver and once i rebooted my virus scanner found (Win32/FakeAlert.IU) or (TrojanDropper:Win32/Alureon.J). I just wanted to say thank you for the help. i probably wont read these forums again but if you have any other questions or comments feel free emailing me.

Report •

Ask Question