Menu
  1. Accueil
  2. Tech Forum
  3. Viruses/Security

Google image redirect notice [Closed]

Report
Posts
3
Registration date
Wednesday August 29, 2012
Status
Member
Last seen
August 30, 2012
 -
Posts
47372
Registration date
Monday February 1, 2010
Status
Moderator
Last seen
April 7, 2021
 -
hey i have a alienware m15x with windows 7 64 bit.

I just started to have this problem 2 days ago, when i search on google images i keep getting this error
Redirect Notice

The previous page is sending you to http://www.milefoot.com/math/discrete/counting/cardfreq.htm.

If you do not want to visit that page, you can return to the previous page.

I have tried every malware scanner, hitmanpro, spybot, ccleaner etc etc etc..
I have done the whole system 32 driver etc hosts.
i have deleted history, cookies etc.
i have done a system restore.
i have done it all in safe mode.
i even did a reformat on my laptop from factory
It doesnt matter what i searcg for on google image i get this error.
if i search on google just regular and click on a image it works
but if i click on "images" on google then search i get the error
this happens when im signed into google and when im signed out.
I thought it was a virus untill i did a format, and before that i uninstalled and reinstalled IE9.
and it still happens.

Is there anyone that can walk me through anything else that i havent done that might work..
i am currently using MalwareBytes (anti-malware) and it just keeps saying no malware was detected.

so anyone please please help.
Related:

6 replies

Answer 1 / 6
Posts
47372
Registration date
Monday February 1, 2010
Status
Moderator
Last seen
April 7, 2021
 10,047
To help you and precribe a remedy, I must make a diagnostic and to do so, I require a system log.
.

1. Open this link and download ZHPDiag2 :

https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html

(Don't be alarmed is the site is in French, it sometimes happens, the tool will take your system language and allow the download if you get a warning message. Also clicking on the "hardhat" icon allows to change the language.)

2. Save the file on your Desktop.

3. Double click on ZHPDiag.exe and follow the installation instructions.

the tool creates three icons ZHPDiag, MRB, and ZHPFix (If necessary,we will use ZHPFix at the next step).

4. Double click on the short cut ZHPDiag on your Destktop.

5. Click on the screwdriver icon and ensure all of the items are checked.

6. Click on the Magnifying glass and run the analysys.

Wait for the tool to finished (maybe a long time)

7. Close ZHPDiag.

8. To transmit the report, click on this link :

https://authentification.site

9. Click on Parcourir and search the directory where you installed ZHPDiag (usually C:\Program Files\ZHPDiag).

10. Select the file ZHPDiag.txt.

11. Click on "upload »

12. Copy the url and post it here

Best regards

Ambucias
Kioskea Virus Security Contributor
3
Thank you
Thank you

A few words of thanks would be greatly appreciated. Add comment

CCM 2942 users have said thank you to us this month

Answer 2 / 6
Posts
47372
Registration date
Monday February 1, 2010
Status
Moderator
Last seen
April 7, 2021
 10,047
Hi,

You have uploaded the wrong file, you uploaded the exe file instead of the text file and the log that you pasted is incomplete.

Please upload the text file on Speedyshare and do not paste the text file.

Regards
Answer 3 / 6
Posts
47372
Registration date
Monday February 1, 2010
Status
Moderator
Last seen
April 7, 2021
 10,047
Hi Money,

First if you click on the hard hat, you can change the ZHP's language.

Your computer was once infected but the clean-up was not completed but I repeat there is no malware.

However you must go to your Internet settings and check-off "use a proxy for this connection", that's the thing that is redirecting your browser.

Youe Windows needs to be updated.

There are also some useless processes running at boot time.

On your desktop ZHP Diag created ZHP Fix.

1. Open it and click on the large "H"

2. Copy and paste the following lines. Once done click on GO.

O87 - FAEL: "{F68DAB52-4032-473D-9DDD-A09769FDDDB2}" | In - Private - P6 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe
O87 - FAEL: "{952C84AE-E812-4858-A961-ED10E921A709}" | In - Private - P17 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe
O87 - FAEL: "{71D6991F-7483-457D-8331-5F3D349BA4C6}" | In - Private - P6 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O87 - FAEL: "{B56167AE-E856-4506-A87E-F1DF432455B9}" | In - Private - P17 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files (x86)\Bonjour\mDNSResponder.exe

If after you have fixed the proxy issue you still get redirected, please let me know by sending me a fresh log and I shall prescribe another medicinal compound.

Regards

P.S. DNSResponder service comes from an Apple application but it's heavy on a computer as it sends info, runs as an application, eats ram. I consider it a pest and it's difficult to remove.
Answer 4 / 6

hey hope this is right i followed everything you asked.

http://speedy.sh/d8EX9/ZHPDiag.exe
Answer 5 / 6
Posts
3
Registration date
Wednesday August 29, 2012
Status
Member
Last seen
August 30, 2012
what is the name that i have to upload then. the complete program that i installed from your link is all french
Answer 6 / 6
Posts
3
Registration date
Wednesday August 29, 2012
Status
Member
Last seen
August 30, 2012
http://speedy.sh/cP5rJ/ZHPDiag.txt
Ask a question

Subscribe To Our Newsletter!

The Best of CCM in Your Inbox

Subscribe To Our Newsletter!