Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


Help: Google Search Page Is Fake And Redirects

  • Please log in to reply
3 replies to this topic

#1 julianjc23


  • Members
  • 2 posts
  • Local time:11:43 AM

Posted 05 October 2007 - 08:24 AM

HI dere
I need urgent help!!!! I was chatting to my friends on gmail when i got this mess-(WARNING DON'T CLICK ON THE LINK) [i]motherf**** //meta-stuff.com/?news_id=18388
I clicked on it and it was a virus. Now my homepage is gone and when go to google.co.uk i m getting the google site
but all the links on it to sme otehr sites. mainly unitedreporters.org. If i try to search smething i get the error mess as below.

"Google Error

Your client does not have permission to get URL /custom?hl=en&q=search+virus+found%2Bmotherf****+http%3A%2F%2Fmeta-stuff.com%2F%3Fnews_id%3D18388+X
3A0000FF%3BLC%3A0000FF%3BT%3A000000%3BGFNT%3A0000FF%3BGIMP%3A0000FF%3BFORID%3A1&hl=en from this server. (Client IP address:

We apologize for your inconvenience, but this request could not be processed.

Please click here to continue your search on Google"

I tried all other search engines like yahoo and msn , everything is givivng me a similar results, so please please
if you got a solution please let me know, coz this has happ at my work place , and u know how it would be, please i need urgent help. i used avg anti virus, spybot , everything , but its still dere, please help me out.

Edited by KoanYorel, 05 October 2007 - 10:08 AM.
to sanitize hot link URL and censor language

BC AdBot (Login to Remove)


#2 boopme


    To Insanity and Beyond

  • Global Moderator
  • 73,562 posts
  • Gender:Male
  • Location:NJ USA
  • Local time:11:43 AM

Posted 05 October 2007 - 09:37 AM

Run these scans to get rid of the malware that is probably causing this
SuperAntiSpyware - Use free Home user version


House Call

Let us know
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#3 julianjc23

  • Topic Starter

  • Members
  • 2 posts
  • Local time:11:43 AM

Posted 05 October 2007 - 04:27 PM

Thanks , i tried everything . did run housecall. and did exactly what was said on trendmicro regarding this , got a name for the worm, sohanad. i m still trying to get it unistall but no luck. Was successful when i did it under administrator but when i logged on my account its still the same story.. i did everything again but no vain. still same.

#4 quietman7


    Bleepin' Janitor

  • Global Moderator
  • 52,062 posts
  • Gender:Male
  • Location:Virginia, USA
  • Local time:11:43 AM

Posted 05 October 2007 - 04:52 PM

Download Sysclean Package & save it to your desktop.
  • Create a new folder on drive "C:\" and rename it Sysclean - (C:\Sysclean).
  • Place the sysclean.com inside that folder.
  • Then download the latest Virus Pattern Files - (Pattern files are usually named lptxxx.zip, where xxx is the pattern file number)
  • Extract (unzip) the lptxxx.zip pattern file into the Sysclean folder where you put sysclean.com. (Click here for information on how to extract a file if your not sure how to do this. DO NOT scan yet.
Reboot your computer in "SAFE MODE" using the F8 method. To do this, restart your computer and after hearing your computer beep once during startup (but before the Windows icon appears) press the F8 key repeatedly. A menu will appear with several options. Use the arrow keys to navigate and select the option to run Windows in "Safe Mode".

Note: Some anti-virus programs such as Avast will alert you to a virus attack when running sysclean so it's best to disable them before going to the next step.

Scan with Sysclean as follows:
  • Open the Sysclean folder and double-click on sysclean.com to start the scanning process.
  • Put a check mark on the "Automatically clean or delete infected files" option by clicking in the checkbox.
  • Click the Advanced >> button.
  • The scan options appear. Select the "Scan all local fixed drives".
  • Click the "Scan button" on the Trend Micro System Cleaner console.
  • It will take some time to complete. Be patient and let it clean whatever it finds.
  • Another MS-DOS window appears containing the log file (sysclean.log) generated in the same folder where the scan is completed - C:\Sysclean.
  • To view the log, click the "View button" on the Trend Micro System Cleaner console. The Trend Micro Sysclean Package - Log window appears.
    • The Files Detected section shows the viruses that were detected by System Cleaner.
    • The Files Clean section shows the viruses that were cleaned.
    • The Clean Fail section shows the viruses that were not cleaned.
  • Exit when done, reboot normally and re-enable your anti-virus program.
Instructions with screenshots are here if you need them.

When using Sysclean its best to use the Administrator's account or an account with Administrative rights otherwise you will not have access rights to scan some locations. You can also Use the "Run As" Command to Start a Program as an Administrator. Even when doing that, the scanning process may result in "Access Denied" messages for some files. This is normal because these files are protected by the system.

Then download and scan with Dr.Web CureIt. Follow the instructions here for performing a scan in "safe mode".
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users