search result redirecting to another site Solved/Closed

Question

Hello,
I am really frustrted.Can someone plz help? I got infected with the Antivirus XP 2008 today. I removed it. But now having a problem. When I search using google and I try to click on a search result I am not able to open it.instead it is redirected to another site. How can it be fixed? Any help will be much appreciated.

Thanx.

AdamoRabidus · Accepted Answer

Follow these instructions exactly and you will get throught this easily. This is the easiest way to  
get rid of the problem. the process is easy. the instuction look long but I wrote them assuming the 
reader has no computer experience. enjoy 

1. start another IE window along side this one to quickly and accurately review instructions (ctrl+n) 

2. copy and paste the URL below directly into the address bar then press ENTER 
DO NOT CLICK THE URL. YOU MUST COPY AND PASTE OR YOU WILL BE REDIRECTED! 

*the tdss (go.google) redirect virus recognizes all instances of "Malware, Mbam, etc... 
this will get around that. DO NOT CLICK THE URL. YOU MUST COPY AND PASTE OR YOU WILL BE REDIRECTED! 

www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html 

3. under "features" use drop down menu and select Ver. 1.32, this will cause screen to refresh 

4. click "download latest version" 

5. a yellow Active X control should show just under your tab in the window. It will say 
"To help protect your security, IE blocked.........and so forth" 

6. left click and select download file 

7. select SAVE, in file name field replace "mbam-setup.exe" with "setup.exe" 

8. when complete, select "open folder" and double click setup.exe and then run 

9. Proceed through till you are prompted to select destination location. to make it easier  
just copy and past what I have below into the name bar 

C:\Malware\Malware 

10. name start menu folder Malware (usesless but do it) do not create shortcut 

11. deselect (uncheck if checked) option to create desktop icon or quick launch, continue through confirmation 

12. It will take between 15 to 60 minutes (it will appear frozen, it is not. just let it be) 

13. IMPORTANT!!! deselect UPDATE MALWARE AND LAUNCH MALWARE (THE VIRUS WILL SHUT YOU DOWN IF NOT UNCHECKED) click finish 

14. right click start, select explore and locate "Local Disk (C:)", expand view (click [-}, should be folder name "Malware" below 

15. double click folder, locate mbam.exe and rick click to rename "Mban.exe" then double click Mban.exe to run 

16. do not worry about updating, you wont be able to, select scanner tab and Perform quick scan 

17. will take awhile depending on computer ~approx 10-20 minutes 

18. will find around 8-20 files. here is a copy of my log for example: 

************************************************************************ 
Malwarebytes' Anti-Malware 1.33 
Database version: 1654 
Windows 5.1.2600 Service Pack 3 

1/15/2009 3:52:36 AM 
mbam-log-2009-01-15 (03-52-36).txt 

Scan type: Quick Scan 
Objects scanned: 51044 
Time elapsed: 5 minute(s), 2 second(s) 

Memory Processes Infected: 0 
Memory Modules Infected: 0 
Registry Keys Infected: 2 
Registry Values Infected: 0 
Registry Data Items Infected: 2 
Folders Infected: 0 
Files Infected: 9 

Memory Processes Infected: 
(No malicious items detected) 

Memory Modules Infected: 
(No malicious items detected) 

Registry Keys Infected: 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion	dssdata (Trojan.Agent) -> Quarantined and deleted successfully. 
HKEY_LOCAL_MACHINE\SOFTWARE	dss (Trojan.Agent) -> Quarantined and deleted successfully. 

Registry Values Infected: 
(No malicious items detected) 

Registry Data Items Infected: 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Trojan.Agent) -> Data: c:\windows\system32\ -> Quarantined and deleted successfully. 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Trojan.Agent) -> Data: system32\ -> Quarantined and deleted successfully. 

Folders Infected: 
(No malicious items detected) 

Files Infected: 
C:\WINDOWS\system32\TDSSbrsr.dll (Trojan.TDSS) -> Delete on reboot. 
C:\WINDOWS\system32\TDSSoiqh.dll (Trojan.TDSS) -> Delete on reboot. 
C:\WINDOWS\system32\TDSSriqp.dll (Trojan.TDSS) -> Delete on reboot. 
C:\WINDOWS\system32\TDSSxfum.dll (Trojan.TDSS) -> Delete on reboot. 
C:\WINDOWS\system32\drivers\TDSSpqlt.sys (Trojan.TDSS) -> Delete on reboot. 
C:\Documents and Settings\Owner\Local Settings\Temp\TDSScbec.tmp (Trojan.Agent) -> Quarantined and deleted successfully. 
C:\WINDOWS\system32\ (Trojan.Agent) -> Delete on reboot. 
C:\WINDOWS\system32\TDSSlxwp.dll (Rootkit.Agent) -> Delete on reboot. 
C:\WINDOWS\system32\TDSStkdu.log (Trojan.TDSS) -> Delete on reboot. 
************************************************************************ 

19. remove all items as prompted, some will require reboot to remove, this is normal 

20. allow computer to reboot after cleaning. You are now free from your nightmare.

Abhi · Answer

were you able to solve the problem .... I have same issue

ABhi · Answer

Hi I was able to solve the problem after 5 hours of gruelling work . I used SuperAntiSpyware and Malwarebytes to remove the Malware. if you need more help google for go.google.com malware and loads of information would come up. Incidentally the Malware will not allow you to install any of the software so you will have to rename the files and then try to install. Start with Super Anti Spyware  

Enjoy  
Abhi

KS · Answer

Thanks to the link for malwarebytes. I was having this same problem and at a loss how to get this off my computer. It worked great!

Rubanek · Answer

Using Malwarebytes worked for me.  My situation was slightly different in that all search engine searches would return a proper "sounding" title, but the URL actually pointed to a site other than what it link said.  So for a Google search, it would return a page that looked very much like google but there were differences.  Google has sponsored links at the top and down the right side of the page, but with the rootkit running there were no sponsored links and there was a lot of white space on the page.  

Malwarebytes found a Rootkit.Agent on C:\Windows\System32\sysaudio.sys.  After removing it, all of my searches returned to normal function.

Xmen fan · Answer

Thanx for the suggestion to the malware bytes removal app. It found the file that you mentioned(audio.sys) and it removed it. I also used the antispyware one and it found other stuff but didnt help with the problem. I hate these damn spyware crap.

Thanx bro.

ryanasd · Answer

it think this is probally spyware but i'm not 100% sure but if you do get avast and it will remove it

Chris · Answer

Saf, I love U! hahahahaa! after wasting a lot of time to solve the problem, I finally found this site. And your advice worked. Thank you soooo much. May the force be with you man. take care

mal · Answer

hi all....thankyou for the help...I downloaded malwarebytes...and it fixed the problem straight away...thankyou all so much..your the best!

Rastaman · Answer

Malwarebytes' Anti-Malware as a suggested solution solved my pain in the @$$ problem.  Time is money.  This free solution could not have been found at a better time.
Here is the long list of problems I had prior to finding the solution above:
Problems in Windows XP system restore, it did not fix or clean the registry. I Could not update lavasoft ad-aware, as it did not find the problem, even after a full scan.  AVG anti-virus and Avast! anti-virus would not execute the updates or identify the problem.  Frustrated, I even set up my home page to the microsoft windows update only to be redirected to google.  With the Malwarebytes' Anti-Malware program I invested 5 minutes of my time.  The reward could not be matched by any other program.  Thank You.  May the good Karma you have spread today come back to reward you for this kind act.

lauren · Answer

i had the same problem...
i already had symantac on my computer, but it didn't recognize the virus, so I downloaded avast (the free edition) and ran a full scan. It found two pieces of malware and took care of them. I then went into my document and settings and deleted all of my cookies. I then went into firefox,tools then options and deleted all private data and also unchecked "accept third-party cookies."  

This whole process took about 30 minutes (because the full scan takes so long) and my problem is completely gone.
good luck!

jk · Answer

saf disabling 'tdssserv.sys'  worked thanks

SammyG · Answer

After hours of messing around with these so called fixes I eventually went through HiJackthis and it removed it.............


ONLY TO COME BACK AGAIN!

I thought, forget this, and went to www.fixedlikemagic.com whihc a friend had recommended to me and had them fix it.. not only is the problem gone but the computer is running soo much faster thanks to their tune up service. I recommend them 100%

drComput3r · Answer

For those who couldn't find that process starting with "t"....I disabled a process with "IEEE" which was labeled with yellow tag.... 
After that you should be able to browse the internet ....

Meezzy · Answer

I had this problem as well (Firefox browser search being redirected to other sites, mostly advert sites/search results).

I solved this problem using Eset Security Center computer scan. This program found the virus and after it was deleted/quarantined I was able to use my Firefox browser search bar and Mozilla search page without being redirected.

I used to have Eset Nod32 Antivirus but it never found the virus. I also tried McAfee Total Protection 2009 and it didn't find it. Other things I tried was Malwarebytes, SuperAntispyware, AdAware, and Spybot Search & Destroy... none of these programs found it.

So get Eset Security Center 4 and use the computer scanner to scan all your files (I think it was found in one of Firefox folders. I think the name of the file was chrome.manifest. I can't remember for sure.)

pinto · Answer

after installing the superantispyware, problem still exsists and I could not find the 'tdssserv.sys' to disable under Non-plug and play drivers , please help........

wicked · Answer

thank you robertpo I think I got it

Poonam · Answer

Simply go to Start-> Run-> msconfig

in Services , select hide Microsoft services and unclick all other services. Click Apply. 
also in startup , unselect all services. Click Apply . and come out .

Select Exit without restart and check out. Pop Up would Stop. If you get POP up Viruses. Delete all the exes for that particular virus like for cyber security cs.exe ...

Clean registries winlogon-> notify and delete ...
when you restart , you get a mesege select donot show msg agn and ok.
you r all set

Python · Answer

i dont have access to the registry, it is says disabled by administrator,a lthough im myself administrator and I did not disable it

nobody · Answer

Solved the search results' redirecting problem with Hitman 3.5 downloaded frm CNET

bbcdude · Answer

ok if you click start and type: ''C:\WINDOWS\system32\drivers\etc\HOSTS'' then save as notepad then delete the websites that are under the hosts then restart your computer and BAM its problems solved any problems just contact me at bbcpark2000@gmail.com

cottoncandy · Answer

EASY solution for Google redirects to other sites or ads. Tried Malwarebytes, AntiSpyware, Spybot Search and Destroy and several other programs. Looked at lots of forums. Finally one said to download Hitman Pro 3.5 for free at cnet. com as that's the only thing that worked for him...It worked for me too!

Mehak · Answer

Can anyone help me that How to check the name of the page from which the new site URL was redirected from the Old site URL. Basically I wana to know the URL of my old site. Can anyone help me ..?????

chris1234567 · Answer

hi there! 
i had this same problem and tried every thing listed on this post and nothing worked!

then I had a little brain storm that it might be in my add-ons, I use firefox by the way.

so I went Tools/ add-ons / extensions= then Uninstall pretty much everything.

this cured the problem of redirection and pop ups.

hope this hepls.

Bigzy · Answer

Delete your Cookies and Change Your web browser. . . . . worked for me :D

Mirza · Answer

after a long processes, I finaly got rid of trhis virus, thanks

Gunshot · Answer

I have the same problem I dont know what happened but its happening on all the web browers I have. E.G Internet explorer, google chrome and firefox.

I need help aswell.

JustinLudlow · Answer

Same problem here and this took me days of pulling my hair out. I have Sophos AV, I used the symantec online scanner, Ad-Aware, and Spybot and they found nothing. I downloaded that Simply Super Trojan Remover that's linked above. It found 2 entries to the same DLL and voila we are good to go.. THANK GOD! Thanks for posting this cause noone has a clue at this point,

zero · Answer

i got redirected twice just trying to get here.

Ambucias · Answer

Hello Zero

Download to your desktop Malwarebyte. 

https://ccm.net/downloads/security-and-maintenance/4621-malwarebytes-anti-malware/ 

Once on your desktop, we must still outwit the virus. 

Right click on the MBAM icon and click on rename. Rename it Kioskea.exe 

Install Malwarebyte and launch it. From the second tab, update it. 

Please, request a FULL system scan which should take more than hour. Once the scan is finish, delete all of item that were found. 

Once your computer is clean and working normally just to be on the safe side 
*Turn off system restore and wait 30 seconds, 
*Turn it back on and create a new restore point. 

This way it gets rid of anything bad that might have gotten saved in a restore point and you have a clean restore point to use in the near future if needed. 

Regards

Paul · Answer

My problem seemed to be an add-on as well.  Specifically an old version of 'Java Deployment toolkit'.  I disabled it and everything has been fine so far.  We will see how long it lasts

alwyr · Answer

Hi:

You might want to try this: (assuming you notice Google is being re-directed fairly quickly)

1. Run SpyBot or any other anti virus/malware application - which is ALWAYS a good thing.

2. Go to 'System Restore' in your MS OS (Windows 7, XP, etc.) and restore your system to a date prior to the date you first noticed Google searches  were being redirected

This worked for me....and it's easy!!!

shuraxoxol · Answer

I have a problem with google search redirected results. I have used AVG, malware bytes, Microsoft security essential but no luck. I have tried hitman pro 3.5 and it help me to resolve the problem. 
Thanks to people who suggest to use such easy program

ckay · Answer

Hi,
Had same problem with firefox and IE, I tried forefox reinstallation but didn't worked.
Then I went to option and removed all add-on, clicked on security and check warn me when need to install new addon. removed check box when there was automatic install addon checked. also removed java toolkit addon, which was the main thing. 
restart firefox, solved.......

Sameeen · Answer

Please help me how can I start my account

David V · Answer

I have experienced the same problem.  I used IOBit.com's free Advanced System Care package, which runs a suite of programs to optimize computer functions.  Removal of malware, including hijacked functions is included.  One pass of IOBit.com's software eliminated my Google redirect problems.  I am running XP profressional 24/7, which is automatically updated.

SRQ · Answer

I had the same redirct problem as all the others.  I downloaded Mirosoft Security Essentials... it found some stuff but didn't take care of the problem.  I then tried Hit Man Pro, but it didn't work either.  

The only thing that worked for me was Malware Bytes Anti-Malware.  Thank God my isses are now gone!

joseph · Answer

Thanks for this post, I will try that.

Search result redirecting to another site

38 responses

Similar discussions

Subscribe To Our Newsletter!