I also have Google results redirected

00101911 8765c / 15136200001039
December 23, 2009 at 10:46:13
Specs: Microsoft Windows XP Home Edition, 906 MHz / 383 MB
I'm another user that has a problem with the search results in Google being redirected. After reading the posts I can see why my: Ad-Aware, Spybot, Malawarebytes weren't effective. I had the about blank malware a few years ago so I know this is something I need help cleaning. I would really appreciate any help. Thanks Blaine

See More: I also have Google results redirected

Report •

December 23, 2009 at 11:32:34
Please run RSIT.exe by random/random and post its logs.

Download random's system information tool (RSIT) by random/random from the following link and save it to your desktop.


1. Double click on RSIT.exe to launch program.
2.(Vista Users Only) Right click on the RSIT.exe icon and select "Run as Administrator" to run the program.
3. Click Continue at the disclaimer screen.
4. Your firewall may alert you that RSIT is requesting Internet access. Please allow it.
5.Once it has finished, two logs will open: log.txt<-- this will be maximized and info.txt<-- this will be minimized. Both logs will be located at C:\RSIT.exe.

Download Gmer.exe from the following link.


Next reboot into safe mode using only the F8 method:

1.Restart your computer.
2.When the machine first starts again it will generally list some equipment that is installed in your machine, amount of memory, hard drives installed etc. At this point you should gently tap the F8 key repeatedly until you are presented with a Windows XP Advanced Options menu.
3.Select the option for Safe Mode using the arrow keys.
4.Then press enter on your keyboard to boot into Safe Mode.

Now run GMER from safe mode.

Report •

December 23, 2009 at 14:19:17
I ran the RSIT with no problem but I can't find any way to save the results from the GMER scan. Thanks.. Blaine012

Report •

December 23, 2009 at 16:31:41
I don't seem to see a save tab at the bottom of the GMER scan. I thought perhaps I needed to change my screen resolution because it might be buried but I can not change my screen resolution in Safe Mode (even as administrator.)

Report •

Related Solutions

December 23, 2009 at 19:16:31
Looks like I clipped the bottom off of the GMER post, you may need to run it again.

Run Gmer from safe mode.
1. Disconnect from the Internet and close all running programs.
2. Temporarily disable any real-time active protection so your security programs will not conflict with gmer's driver.
3. Double-click on the randomly named GMER file (i.e. n7gmo46c.exe) and allow the gmer.sys driver to load if asked.
4. Note: If you downloaded the zipped version, extract the file to its own folder such as C:\gmer and then double-click on gmer.exe.
5. GMER will open to the Rootkit/Malware tab and perform an automatic quick scan when first run. (do not use the computer while the scan is in progress)
6. If you receive a WARNING!!! about rootkit activity and are asked to fully scan your system...click NO.
7. Now click the Scan button. If you see a rootkit warning window, click OK.
8. When the scan is finished, click the Save... button to save the scan results to your Desktop. Save the file as gmer.log.
9. Click the Copy button and paste the results into your next reply.
•Exit GMER and re-enable all active protection when done.

Report •

December 24, 2009 at 11:32:11
I tried downloading the GMER program and running it again but I still never have a Save button visible. If I run it when I download it then it is visible but in Safe mode it never appears. I can't seem to change my resolution in Safe Mode. Thanks Blaine012

Report •

December 26, 2009 at 13:24:45
Just getting back from Christmas vacation.

Please post your RSIT log.

Download RootRepeal from one of the links on the rootrepeal download page. It can be downloaded as a .rar or .zip file which ever you like. If you get a bandwidth problem notice just try another link.


Extract the RootRepeal.exe file from the RAR or ZIP and save the EXE file to your Desktop.
Disable your antivirus, antispyware, and firewalls before continuing or they may block RootRepeal from running properly.
Now run the RootRepeal.exe program by double clicking on it.
On the botton click the Files tab and then click the Scan button
A Select Drives form will open. Select all of your drives by checking the boxes and then click ok.
It will start scanning. It may take a while to finish depending on how many drives, files and folder you have so be patient and wait on it.
When it finishes click “save report” and save at a easy place to locate such as your desktop. Save it as Rrlog.txt.
Place post the log that was produced to the forum.

Report •

Ask Question