Google image redirect notice Closed

Question

hey i have a alienware m15x with windows 7 64 bit.

I just started to have this problem 2 days ago, when i search on google images i keep getting this error 
Redirect Notice

 The previous page is sending you to http://www.milefoot.com/math/discrete/counting/cardfreq.htm.

 If you do not want to visit that page, you can return to the previous page.

I have tried every malware scanner, hitmanpro, spybot, ccleaner etc etc etc..
I have done the whole system 32 driver etc hosts.
i have deleted history, cookies etc.
i have done a system restore.
i have done it all in safe mode.
i even did a reformat on my laptop from factory
It doesnt matter what i searcg for on google image i get this error.
if i search on google just regular and click on a image it works
but if i click on "images" on google then search i get the error
this happens when im signed into google and when im signed out.
I thought it was a virus untill i did a format, and before that i uninstalled and reinstalled IE9.
and it still happens.

Is there anyone that can walk me through anything else that i havent done that might work..
i am currently using MalwareBytes (anti-malware) and it just keeps saying no malware was detected.

so anyone please please help.

Ambucias · Accepted Answer

To help you and precribe a remedy, I must make a diagnostic and to do so, I require a system log.  
. 

1. Open this link and download ZHPDiag2 :  

https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html  

(Don't be alarmed is the site is in French, it sometimes happens, the tool will take your system language and allow the download if you get a warning message. Also clicking on the "hardhat" icon allows to change the language.) 

2. Save the file on your Desktop.  

3. Double click on ZHPDiag.exe and follow the installation instructions.  

the tool creates three icons ZHPDiag, MRB, and ZHPFix (If necessary,we will use ZHPFix at the next step).  

4. Double click on the short cut ZHPDiag on your Destktop.  

5. Click on the screwdriver icon and ensure all of the items are checked. 

6. Click on the Magnifying glass and run the analysys.  

Wait for the tool to finished (maybe a long time)  

7. Close ZHPDiag.  

8. To transmit the report, click on this link :  

https://authentification.site  

9. Click on Parcourir and search the directory where you installed ZHPDiag (usually C:\Program Files\ZHPDiag).  

10. Select the file ZHPDiag.txt.  

11. Click on "upload »  

12. Copy the url and post it here 

Best regards

Ambucias
Kioskea Virus Security Contributor

moenyshot23 · Answer

hey hope this is right i followed everything you asked.

http://speedy.sh/d8EX9/ZHPDiag.exe

Ambucias · Answer

Hi,

You have uploaded the wrong file, you uploaded the exe file instead of the text file and the log that you pasted is incomplete.

Please upload the text file on Speedyshare and do not paste the text file.

Regards

moneyshot23 · Answer

what is the name that i have to upload then. the complete program that i installed from your link is all french

moneyshot23 · Answer

http://speedy.sh/cP5rJ/ZHPDiag.txt

Ambucias · Answer

Hi Money,

First if you click on the hard hat, you can change the ZHP's language.

Your computer was once infected but the clean-up was not completed but I repeat there is no malware.

However you must go to your Internet settings and check-off "use a proxy for this connection", that's the thing that is redirecting your browser.

Youe Windows needs to be updated.

There are also some useless processes running at boot time.

On your desktop ZHP Diag created ZHP Fix.

1. Open it and click on the large "H"

2. Copy and paste the following lines.  Once done click on GO.

O87 - FAEL: "{F68DAB52-4032-473D-9DDD-A09769FDDDB2}" | In - Private - P6 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe
O87 - FAEL: "{952C84AE-E812-4858-A961-ED10E921A709}" | In - Private - P17 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe
O87 - FAEL: "{71D6991F-7483-457D-8331-5F3D349BA4C6}" | In - Private - P6 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O87 - FAEL: "{B56167AE-E856-4506-A87E-F1DF432455B9}" | In - Private - P17 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files (x86)\Bonjour\mDNSResponder.exe

If after you have fixed the proxy issue you still get redirected, please let me know by sending me a fresh log and I shall prescribe another medicinal compound.

Regards

P.S. DNSResponder service comes from an Apple application but it's heavy on a computer as it sends info, runs as an application, eats ram. I consider it a pest and it's difficult to remove.

Google image redirect notice

6 responses

Similar discussions

Subscribe To Our Newsletter!