Windows update redirect to Google.com

Hello

This is my first post.

My computer issue is that I am not able to update my Windows and Anti-virus definition.

Every time I type "update.microsoft.com", I will be redirected to "www.google.com".

I am also not able to update my Anti-virus definition file automatically. I have to download the definition file manually and apply it.

I have enclosed the output file from "Hijackthis".

Thank you

David

Hi david133,

Welcome to BC HijackThis forum and sorry for the delay. I am farbar. I am going to assist you with your problem.

Please refrain from making any changes to your system (updating Windows, installing applications, removing files, etc.) from now on as it might prolong handling your log and make the job for both of us more difficult.

• Download ComboFix from one of these locations:
  
  Link 1
  Link 2
  Link 3
  
  * IMPORTANT !!! Save ComboFix.exe to your Desktop
  
  
  • Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. (Information on A/V control HERE)
  • Double click on ComboFix.exe & follow the prompts.
  • As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
  • Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.
  **Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.
  
  

  

  
  Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:
  
  

  

  
  Click on Yes, to continue scanning for malware.
  
  When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply.
  
  
• After running ComboFix please go to start -> Run.
  • Copy and paste the bold line in the run-box and click OK: "C:\Qoobox\Add-Remove Programs.txt"
  • A text file opens up, copy and paste the content to your reply.

Hello farbar

Thank you for your assisitance.

I have downloaded "ComboFix.exe" and I will install into my desktop when I get home from work tonight.

Will post the log to you tonight.

Thank you

Hi David,

Take your time and post the log when ready.

Hello farbar

Thank you for your help.

I think I may have resolve my issue.

Looking through this forum, I found someone had the exact problem I had - the resolution was to change the network DNS.

I found that I had a static DNS address. After changing the DNS option to getting a DNS address automatically, I was able to perform Windows Update and my Anitvirus was also able to download the virus definition file.

Thank you.

Case closed.

You are welcome and thanks for letting me know.

I saw the DNS on the log too. That static DNS is a part of DNS-changer trojan and goes to Ukraine. When changing it to dynamic you may resolve the problem temporarily. It might come back after reboot if the trojan file is still there. But if it is removed, changing the setting might persists.

As you decided this thread will now be closed since the issue seems to be resolved.

If you need this topic reopened, please send me a PM and I will reopen it for you.

If you should have a new issue, please start a new topic.