Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

google search results show false links to casino or ads websites


  • This topic is locked This topic is locked
1 reply to this topic

#1 Francisco Cortes

Francisco Cortes

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:03:32 AM

Posted 21 February 2009 - 09:21 PM

I thought I would share what happened to me and what happened to the another member of this website, whose topic is already closed and is the reason wny i decided to open a new topic as I had something to add from my own experience dealing with the problem

http://www.bleepingcomputer.com/forums/t/200104/need-help-getting-rid-of-hijacked-search-results-google/

my system:

I got windows xp pro sp3
avg 7.5
adaware 2009
spybot search and destroy
a squared

the problem

everytime I would open ie7 and would go to google to search for something the first hits (search results) among others would provide what seem like a ligitimate and good website link but the actual website to the link was something related with "casinos" or with metasearch websites to other selling/ad websites or to phony antivirus/spyware websites.

resolution:

1. the computer was cleaned up with the tools mentioned above but the problem remained.
2. I used http://www.bleepingcomputer.com/files/smitfraudfix.php as directed by other member who posted a very similar problem (if not the same) but the problem remained.
3. as per a different user on another website I decided to use combofix. the problem was resolved

this was the result of the clean up (file deletion) that combofix did for me.

c:\windows\system32\404Fix.exe
c:\windows\system32\Agent.OMZ.Fix.exe
c:\windows\system32\Cache
c:\windows\system32\digeste.dll
c:\windows\system32\dumphive.exe
c:\windows\system32\IEDFix.C.exe
c:\windows\system32\IEDFix.exe
c:\windows\system32\m3.ico
c:\windows\system32\MabryObj.dll
c:\windows\system32\o4Patch.exe
c:\windows\system32\Process.exe
c:\windows\system32\SrchSTS.exe
c:\windows\system32\tmp.reg
c:\windows\system32\VACFix.exe
c:\windows\system32\VCCLSID.exe
c:\windows\system32\wdmaud.sys
c:\windows\system32\WS2Fix.exe
c:\windows\wiaserviv.log

combofix seem like a very solid and strong tool, (I had to restart my explore.exe to get my desktop back after combofix did its deed.. no biggy, though)
I'm not a combofix expert so I still suggest that if you're using the tool you read first about it and if needed consult with a trained combofix specialist if follow up is needed on your malware problem.

Edited by Orange Blossom, 22 February 2009 - 12:53 AM.
Fix link. ~ OB


BC AdBot (Login to Remove)

 


#2 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 52,047 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:02:32 AM

Posted 23 February 2009 - 02:07 PM

Please note the message text in blue at the top of this forum.

You should not be using Combofix unless instructed to do so by a Malware Removal Expert who can interpret the logs. It is a powerful tool intended by its creator to be "used under the guidance and supervision of an expert", NOT for private use. Combofix was never meant to be used as a general purpose malware scanner like SuperAntispyware or Malwarebytes' Anti-Malware. Using this tool incorrectly could lead to disastrous problems with your operating system such as preventing it from ever starting again. Please read Combofix's Disclaimer.

This topic is now closed. If you have any questions, please PM me or another Moderator.
The BC Staff
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users