My google links are being redirected!!!

December 30, 2010 at 00:42:31
Specs: Windows Vista
when I search for something in google and click on the result links, the links are redirected to sites other than what the link is supposed to be. Please help me find the spyware/virus! thank you!

See More: My google links are being redirected!!!

Report •


#1
December 30, 2010 at 05:00:12
Turn off Javascript & see if it stops.

If it does, what browser are you using?


Report •

#2
December 30, 2010 at 09:24:12
just to make sure i'm doing this correctly, to turn off javascript is to disable active scripting? if so then i've done it. however, i don't know if it'll still redirect until i use my computer for a whole day to see if it happens. it didn't happen all the time, the links would be redirected at random times, more often than not, but still not all the time. Can i let you know after using my computer for about a day?

my browser is IE 7 i think.


Report •

#3
December 30, 2010 at 12:34:13
If you are a home user, you click Internet ( not Local intranet )

ie7 disable javascript

http://moourl.com/ehecc

http://www.ehow.com/how_6040084_dis...

http://www.technipages.com/internet...

"Can i let you know after using my computer for about a day?"
No problem.


Report •

Related Solutions

#4
December 30, 2010 at 13:33:44
Let me know if you find this. Disable it, if you do.

Go to Start > Control Panel > System > Hardware > Device Manager > View > Show Hidden Devices.
Scroll down to “Non-plug and Play Drivers” and click the plus icon to open those drivers.
Then search for “TDSSserv.sys”
Right click on it, and select “Disable”
Note: If you select Uninstall, it will install itself again when you reboot the system, so DON’T select Uninstall.
Restart your pc.


Report •

#5
December 31, 2010 at 06:32:22
so yesterday when my javascript was turned off, i didn't get redirected, but then i also couldn't go on a lot of websites. so i turned it back on at night, then when i turned on my computer this morning (with javascript on), my links were redirected again.

Also, I couldn't find TDSSserve.sys at all in my non plug and play drivers list, so i wasn't able to uninstall it. could it be somewhere else?


Report •

#6
Report •

#7
December 31, 2010 at 14:17:43
ran the scan, no infections were found

Report •

#8
December 31, 2010 at 14:35:04
Run Malwarebytes, Trojan remover and hitman pro and remove all they find

Some HELP in posting on Computing.net plus free progs and instructions Cheers


Report •

#9
December 31, 2010 at 16:10:39
leeingri, if you have any trouble downloading, installing or running Malwarebytes, let us know, whatever you have may, stop a lot of programs.

Report •

#10
December 31, 2010 at 16:44:42
while i'm scanning, my avira and trojan remover keeps telling me there's a file that's suspicious: dataapp\llt...dll something...i tried to get it but it disappeared...

nothing found using malwarebytes. symantec antivirus says suspicious.MH690 quarantined. i didn't scan with symantec, it just popped up when i was installing the programs.

hitman pro found tracking cookies which were deleted. i'm going to now restart my computer


Report •

#11
December 31, 2010 at 17:26:42
How many anti-viruses are you running?

Some HELP in posting on Computing.net plus free progs and instructions Cheers


Report •

#12
December 31, 2010 at 17:57:10
avira and symantec.

Report •

#13
December 31, 2010 at 18:03:17
I use Microsoft Security Essentials leeingri.

Can I run more than one anti-virus program? Anti-spyware program? Firewall? Should I?
http://ask-leo.com/can_i_run_more_t...
Real time monitoring, on the other hand, is another story. When you install most anti-virus programs they often automatically install and enable their real-time monitors. Running two or more real-time anti-virus monitors at the same time is very likely to cause a conflict. That conflict could result in error messages, crashes of the anti-virus programs, or other types of failure.

Best Free Antivirus Software
http://www.techsupportalert.com/bes...


Report •

#14
December 31, 2010 at 18:05:27
For uninstalling programs, I use Revo Uninstaller
http://www.softpedia.com/get/Tweak/...
http://www.softpedia.com/progScreen...
http://www.revouninstaller.com/
I use Advanced Mode. Screenshots of how to use.
http://img695.yfrog.com/gal.php?g=r...
http://img695.imageshack.us/slidesh...

Report •

#15
December 31, 2010 at 18:18:40
it says this PC cannot be repaired by reimage while spybot tea timer is running. but i already shut off my spybot?

Report •

#16
December 31, 2010 at 18:21:29
nevermind, i restarted reimage and its analyzing

Report •

#17
December 31, 2010 at 18:21:34
"it says this PC cannot be repaired by reimage"

More detail please, are you running something to get that message?


Report •

#18
December 31, 2010 at 18:26:57
avira and symantec

you can only run one anti-virus at a time on a PC, uninstall one or the other.

Some HELP in posting on Computing.net plus free progs and instructions Cheers


Report •

#19
December 31, 2010 at 18:28:32
"nevermind, i restarted reimage and its analyzing"

Ok, got it.

Just googled reimage as I have never heard of it, be interesting to see what it finds.


Report •

#20
January 1, 2011 at 20:25:13
no threats were found by reimage

Report •

#21
January 1, 2011 at 20:32:44
oh, and it says my PC stability level is 66%. however, i can't repair with the program until i purchase it.

Report •

#22
January 1, 2011 at 20:51:05
"oh, and it says my PC stability level is 66%. however, i can't repair with the program until i purchase it"
That's what I expected.

No need to buy, just a matter of cleaning/tiding things up & installing free info/programs.

First things first, are you now only running one Anti Virus?


Report •

#23
January 2, 2011 at 12:43:45
yes, i deleted symantec, kept the avira

Report •

#24
January 2, 2011 at 13:05:29
"suspicious: dataapp\llt...dll something...i tried to get it but it disappeared..."
It will be in their log.

"suspicious.MH690"

Are either of these infections still on the comp after you do your scans, as before.


Report •

#25
January 2, 2011 at 13:11:46
yes, i deleted symantec, kept the avira


Hopefully you used the norton uninstaller from their website or Avira will not work properly

Some HELP in posting on Computing.net plus free progs and instructions Cheers


Report •

#26
January 2, 2011 at 18:29:17
i just used the uninstall programs on the system management thing to uninstall symantec.

the dataapp thing didn't appear anymore i don't think, but the suspicious MH690 doesn't appear anymore cuz it was symantec that picked it up and i deleted that program


Report •

#27
January 2, 2011 at 18:41:45
Symantec, like most of these type of programs, will do a free online scan.

online symantec virus scan

http://moourl.com/ltouo

http://service1.symantec.com/SUPPOR...

Click on Virus Detection.


Report •

#28
January 2, 2011 at 19:18:48
run the norton uninstaller from the website as I mentioned...just using add/remove will NOT remove all the norton registry items.
I've been doing PC repairs for 9 yrs now.

Some HELP in posting on Computing.net plus free progs and instructions Cheers


Report •

#29
January 2, 2011 at 19:52:35
Norton Removal Tool runs on Windows. Norton Removal Tool should be used only if you have tried to uninstall the Norton program using Windows Add/Remove Programs and that did not work.
http://www.softpedia.com/get/Tweak/...
http://www.softpedia.com/progScreen...
http://us.norton.com/support/kb/web...

Report •

#30
January 2, 2011 at 20:09:15
Norton Removal Tool should be used only if you have tried to uninstall the Norton program using Windows Add/Remove Programs and that did not work.

That's where you are wrong, the add/remove still leaves lots in the registry...hmmm...makes me wonder, as I've been removing Norton for almost a decade.

Some HELP in posting on Computing.net plus free progs and instructions Cheers


Report •

#31
January 3, 2011 at 06:10:12
:) i'm getting a little confused. so why am i using symantec online when i just deleted it? and also, if i've already uninstalled symantec, am i still to download norton removal tool to remove it? cuz if it's uninstalled is norton removal tool going to detect it?

Report •

#32
January 3, 2011 at 06:57:07
The norton uninstaller will remove the registry entries left behind after you removed it with add/remove.
You will see how it hangs while it cleans out the excess entries.

You don't have to use the online norton scan.
Are you still getting redirected? If so, I can suggest a few more good free cleaners.

Some HELP in posting on Computing.net plus free progs and instructions Cheers


Report •

#33
January 3, 2011 at 07:11:48
i did the online symantec scan and there's no virus detected, my computer status is safe.

i haven't been redirected in the past couple of days so i'm guessing the virus is gone?

i will do the norton uninstaller now.


Report •

#34
January 3, 2011 at 07:39:29
ok, it may be gone, yes do run the uninstaller

Some HELP in posting on Computing.net plus free progs and instructions Cheers


Report •

#35
January 3, 2011 at 09:58:38
done! thank you guys for the help! hopefully i won't have to bother you again!!! happy new year!

Report •

#36
January 3, 2011 at 10:07:28
Thanks for posting back, Happy New Year to you too!
Drop us a line if you have any more probs.

Some HELP in posting on Computing.net plus free progs and instructions Cheers


Report •

#37
January 3, 2011 at 20:55:28
":) i'm getting a little confused. so why am i using symantec online when i just deleted it?"

With infections the badies are always ahead of the goodies, therefore one scanner may be ahead of another in fixing an infection. But with thousands of variations coming out each week, they struggle.

In your case you told us symantec quarantined suspicious.MH690. Often these infections can worm there way back into the system, so rather than assume you were clean or check manually to see if the 202 files were all gone, I got you to do an online scan.


Report •

#38
January 3, 2011 at 21:02:22
"done! thank you guys for the help! hopefully i won't have to bother you again!!!"

Not quite, you need to run this.

ATF Cleaner
http://www.softpedia.com/get/Securi...
http://www.softpedia.com/progScreen...
http://www.atribune.org/
http://www.atribune.org/index.php?o...
Forum
http://www.atribune.org/forums/
Double-click ATF-Cleaner.exe to run the program.
Under Main choose: Select All
Click the Empty Selected button.
If you use Firefox browser
Click Firefox at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
If you use Opera browser
Click Opera at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
Click Exit on the Main menu to close the program.
For Technical Support, double-click the e-mail address located at the bottom of each menu.
This will remove all files from the items that are checked so if you have some cookies you'd like to save, please move them to a different directory first,
Notes for Windows Vista users:
On Windows Vista that "Windows Temp" is disabled, to empty "Windows Temp" ATF-Cleaner must be "Run as an Administrator" This program is for Windows 98/ME/2K/XP and Vista!


Report •

#39
January 3, 2011 at 21:47:23
ATF cleaner is old hat any more IMO, I would rather suggest Ccleaner slim and use that to clean up the registry safely

Some HELP in posting on Computing.net plus free progs and instructions Cheers


Report •

#40
January 3, 2011 at 23:23:13
ATF cleaner is not a registry cleaner.

leeingri. ATF is the correct tool to use after an infection. Small steps is the way to go.

When we had Jabuck doing the forum, it was one of the tools he used, as it is with other forums. Here are a few.
http://www.computing.net/answers/se...
http://www.computing.net/answers/se...
http://forums.devshed.com/antivirus...
http://forum.networktechs.com/showt...
http://www.theeldergeek.com/forum/i...
http://www.techspot.com/vb/topic581...

Ccleaner slim is a very good cleaner, so by all means, do your homework on what boxes you tick & then use it.


Report •

#41
January 3, 2011 at 23:44:56
that was years ago when Jabuck was here and Ccleaner will also clean out the junk files safely

Some HELP in posting on Computing.net plus free progs and instructions Cheers


Report •

#42
January 4, 2011 at 06:35:26
well, i did both ccleaner and ATF cleaner. Is there anything else I should do?

Report •

#43
January 4, 2011 at 13:37:56
For you to get infected, that is telling you, that your defences are not good enough.

What security other than Avira & Malwarebytes, is in place?

Are you using Wireless to connect to the internet?

"my browser is IE 7 i think"
Confirm your browser version please.
how to find out ie version
http://moourl.com/eegz1
http://windows.microsoft.com/en-AU/...

Are Windows Automatic updates turned on? You must have SP2 installed for you to get them.
http://support.microsoft.com/kb/935791

Is your Java up to date?
http://www.java.com/en/download/hel...


Report •

#44
January 5, 2011 at 10:02:03
my browser is actually IE 8
i didn't quite understand the instructions about windows updates, but i checked for updates and it said i had nothing to update, i wasn't sure so i manually downloaded sp2

and my java is up to date


Report •

#45
January 5, 2011 at 14:16:29
"i wasn't sure so i manually downloaded sp2"

If you don't have SP2 installed, now you have a clean machine, is the best time to install it.

Vista how to find what sp version

http://moourl.com/woot/?moo=8ulji

http://windows.about.com/od/windows...

http://0.tqn.com/d/windows/1/0/f/0/...


Report •

#46
January 5, 2011 at 14:25:47
i checked, i have service pack 2

Report •

#47
January 5, 2011 at 14:31:08
Unanswered questions.

What security other than Avira & Malwarebytes, is in place?

Are you using Wireless to connect to the internet?


Report •

#48
January 5, 2011 at 16:22:28
Howdy folks.....hope I can sneak in a question.

Have really enjoyed this thread and appreciate RealXP' and others following through on this issue. Members like you guys are what make a great forum.

I often have to deal with various bugs on different PCs quite a bit and have, lately, had a terrible time with the browser re-director. It seems like no matter what is installed, it won't stop it from getting on. And, once on....it has been impossible to get rid of using conventional methods (or, my methods, I guess).

QUESTION IS: While several things were run in the this attempt to remove it (and one evidently got it)....are you able to tell which one did it?

If so....that's the one I'll start using when faced with this issue...which would save a ton of time.

Thanks very much.

> PLEASE HELP OTHERS - Report back what did/didn't work for those referencing this thread.<


Report •

#49
January 5, 2011 at 17:17:07
"Howdy folks.....hope I can sneak in a question"
No problem Kev.

"It seems like no matter what is installed, it won't stop it from getting on"
Incorrect. A lot has to do with the person using the keyboard.
Google is your best tool to find out more, don't know your operating system or browser, but lets assume it's XP, google > XP preventative security < as a starting point.
I will be suggesting Vista info for leeingri later.

"are you able to tell which one did it?"
As reported by leeingri, she had dataapp\llt...dll something & suspicious.MH690, I suspect they were one & the same. Anyway they are gone, removed by symantec.

"QUESTION IS: While several things were run in the this attempt to remove it (and one evidently got it)....are you able to tell which one did it?"
With the huge amount of new versions coming out daily ( even google redirect ) there is no one tool to detect, remember the badies re always ahead of the goodies.

Malwarebytes free should be a permanent part of checking regularly for anything that has got past your inadequate defenses.



Report •

#50
January 5, 2011 at 22:48:07
kev, I use certain cleaners and usually in a sequence. Sometimes like in the case of this poster, they only do some of the things mentioned. They tend to rush through and leave out the important parts.
One of the biggest problems is the removing of previous anti-viruses...if not done properly, most problems still exist. that's why I suggest using the norton removal tool even after an add/remove. Norton and McAfee are notorious for leaving registry items behind and without removing them, no other AV will work properly, thus the probs remain.

Also, most progs I recommend are on filehippo, it's the easiest place to download, even easier than the manufacturers website in most cases. I hate having to click 4 times to download something.
Finally,
Thanks for the kind words

Some HELP in posting on Computing.net plus free progs and instructions Cheers


Report •

#51
January 8, 2011 at 08:36:40
i know this is unrelated to the current topic, but i desparately need answers!

i can't play any online videos, including online class tutorials, youtube, any online streaming videos. i've already reinstalled flash numerous times and i used uninstall feature from their webiste before installing. my java's up to date and windows is up to date. pls help!


Report •

#52
January 8, 2011 at 11:52:27
I am having the same issue with google re-directs. Win XP sp3, Firefox 3.6.XX I have used the following software Malwarebytes Pro, Spybot Search & Destroy, ATF Cleaner, ccleaner, and JV16 power tools.

I have reset IE (even though I'm using Firefox) have cleaned all cache, history, cookies and passwords.

got any other suggestions???


Report •

#53
January 8, 2011 at 13:44:53
leeingri, best if you start a new thread.

Here are some of the questions that will need to be answered.

Have you previously been able to play any online videos, including online class tutorials, youtube, any online streaming videos?



Report •

#54
January 8, 2011 at 13:45:57
aloha_hai, best if you start a new thread.

Report •

#55
January 8, 2011 at 13:58:59
leeingri, have spotted you have started a new thread.

Report •

#56
January 8, 2011 at 15:51:42
thank you :) you're awesome!

Report •


Ask Question