Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Web browser redirection and anit virus programs will not run....


  • This topic is locked This topic is locked
12 replies to this topic

#1 funkecrates

funkecrates

  • Members
  • 57 posts
  • OFFLINE
  •  
  • Local time:06:31 AM

Posted 11 September 2009 - 10:12 AM

Hello I am hoping that someone can assist me with some issues I am having with my computer. Whenever I search for particular websites via google the results are shown and when I attempt to click on the link to the website I would like to visit I am redirected to other sites usually to another search engine or a website that reads btcar.com, asklots.com and blinkx.com.... if I hit my browsers back button the same website reappears the only way I can leave the site is to close down my browser (firefox). Upon noticing this problem I tried to run McAfee anti virus program upon attempting to do this I got the following message "windows cannot access the specified device path or file. You may not have appropriate permissions to access the item. windows cannot access the specified device path or file." Something is stopping any and all anti virus/ malware programs I install from running I have tried Windows Defender and a few others most will start (scan) and then shut down and when I try to run the programs (scan) once more I get the aforementioned error message.I attempt to use other anti virus/ malware programs however most times my browser wont load or let me view these pages! I am on a pc running windows xp....any suggestions/ help will be greatly appreciated thanks in advance.

Edited by funkecrates, 12 September 2009 - 07:26 AM.


BC AdBot (Login to Remove)

 


#2 Green Hornet

Green Hornet

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Columbus, Ohio USA
  • Local time:05:31 AM

Posted 11 September 2009 - 02:30 PM

funkecrates:It appars that your problem with Google, is what is generally referred to as Google search redirect virus, from

what you described as symptoms. Some internet searchers also experience similar Yahoo search problems.

I had this problem a year ago. I used the tool GooRedFix. It's a tool used to fix google redirects and is recommended in many forums. It is also described as a program used to fix FireFox browser re-direction problems.

I had to download it from Major Geeks. http://forums.majorgeeks.com/showthread.php?t=185846

Name: GooredFix.exe
Type: Application, 45.0 KB
From: jpshortstuff.247fixes.com
download and save to DESKTOP - Follow instructions.

Here is what I did to correct my re-direct problem -
Start > Control Panel > System > Hardware > Device Manager > View > Show Hidden Devices

Scrolled down to NON-PLUG AND PLAY DRIVERS and clicked on the + icon to open those drivers
Then sesarched for TDSSservs.sys
I DISABLED IT. (DO NOT TRY TO UN-INSTALL IT)
After it is disabled, you must 'REBOOT IMMEDIATEL;Y'
After reboot continue on with other cleaning instructions youmay have been having problems running.

Also, I suggest you download SUPERantiSpyware and Malwarebytes - Antimalware. (No conflict with your present antivirus
programs.

Good luck! :thumbsup:

#3 Green Hornet

Green Hornet

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Columbus, Ohio USA
  • Local time:05:31 AM

Posted 11 September 2009 - 03:34 PM

Hello I am hoping that someone can assist me with some issues I am having with my computer. Whenever I search for particular websites via google the results are shown and when I attempt to click on the link to the website I would like to visit I am redirected to other sites usually to another search engine or a website that reads bcs.com(?), asklots.com and blinkx.com.... if I hit my browsers back button the same website reappears the only way I can leave the site is to close down my browser (firefox). Upon noticing this problem I tried to run McAfee anti virus program upon attempting to do this I got the following message "windows cannot access the specified device path or file. You may not have appropriate permissions to access the item. windows cannot access the specified device path or file." Something is stopping any and all anti virus/ malware programs I install from running I have tried Windows Defender and a few others most will start (scan) and then shut down and when I try to run the programs (scan) once more I get the aforementioned error message.I attempt to use other anti virus/ malware programs however most times my browser wont load or let me view these pages! I am on a pc running windows xp....any suggestions/ help will be greatly appreciated thanks in advance.



funkecrates: list this problem in the 'hijack this logs and virus/trojan/malware removal forum also. As you scroll th pages
you will see quite a few have the same problem as you do in this section alone. Someone will come along to help you, who is expert.

Edited by Green Hornet, 12 September 2009 - 07:10 AM.


#4 funkecrates

funkecrates
  • Topic Starter

  • Members
  • 57 posts
  • OFFLINE
  •  
  • Local time:06:31 AM

Posted 12 September 2009 - 07:37 AM

Hello I am hoping that someone can assist me with some issues I am having with my computer. Whenever I search for particular websites via google the results are shown and when I attempt to click on the link to the website I would like to visit I am redirected to other sites usually to another search engine or a website that reads bcs.com(?), asklots.com and blinkx.com.... if I hit my browsers back button the same website reappears the only way I can leave the site is to close down my browser (firefox). Upon noticing this problem I tried to run McAfee anti virus program upon attempting to do this I got the following message "windows cannot access the specified device path or file. You may not have appropriate permissions to access the item. windows cannot access the specified device path or file." Something is stopping any and all anti virus/ malware programs I install from running I have tried Windows Defender and a few others most will start (scan) and then shut down and when I try to run the programs (scan) once more I get the aforementioned error message.I attempt to use other anti virus/ malware programs however most times my browser wont load or let me view these pages! I am on a pc running windows xp....any suggestions/ help will be greatly appreciated thanks in advance.



funkecrates: list this problem in the 'hijack this logs and virus/trojan/malware removal forum also. As you scroll th pages
you will see quite a few have the same problem as you do in this section alone. Someone will come along to help you, who is expert.


Thanks for the advice I see that others on the hijack thbis forum have the same issue.....

#5 Guest_The weatherman_*

Guest_The weatherman_*

  • Guests
  • OFFLINE
  •  

Posted 12 September 2009 - 08:19 AM

Hello funkecrates,

Please only take advice in this forum from members who are approved. You may find this article worth a read: How do I get help? Who is helping me?

I have also removed your post in the HJT forum it was not necessary, you will be advised accordingly here. :thumbsup:

#6 funkecrates

funkecrates
  • Topic Starter

  • Members
  • 57 posts
  • OFFLINE
  •  

Posted 12 September 2009 - 08:43 AM

Hello funkecrates,

Please only take advice in this forum from members who are approved. You may find this article worth a read: How do I get help? Who is helping me?

I have also removed your post in the HJT forum it was not necessary, you will be advised accordingly here. :thumbsup:


Sorry I had already read that article and knew better....

#7 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,221 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:06:31 AM

Posted 12 September 2009 - 07:40 PM

You will need to run HJT/DDS.
Please follow this guide. go and do steps 6 thru 8 ,, Preparation Guide For Use Before Using Hijackthis. Then go here HijackThis Logs and Virus/Trojan/Spyware/Malware Removal ,click New Topic,give it a relevant Title and post that complete log.

Let me know if it went OK.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#8 funkecrates

funkecrates
  • Topic Starter

  • Members
  • 57 posts
  • OFFLINE
  •  
  • Local time:06:31 AM

Posted 12 September 2009 - 09:02 PM

You will need to run HJT/DDS.
Please follow this guide. go and do steps 6 thru 8 ,, Preparation Guide For Use Before Using Hijackthis. Then go here HijackThis Logs and Virus/Trojan/Spyware/Malware Removal ,click New Topic,give it a relevant Title and post that complete log.

Let me know if it went OK.


Hello and thanks for your assistance I was able to download the dds however when I ran the program I saw the black text box as described in the instructions detailing the scan that would take place. The black screen then closed very quickly and I never saw the text boxes that would detail what took place during the scan. Part of the instructions asked for me to turn off any script blocking programs I dont know how to do this could this have been what made the scan unsuccessful? I tried to run the dds a second time this time the black text box stayed open however I never saw/ received the scan results. I have Mcafee running on my computer so I went to this program to see if it was blocking script...thing is all of the controls are light greyish and I cannot change anything I wonder is this causing some sort of problem....

Edited by funkecrates, 12 September 2009 - 09:21 PM.


#9 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,221 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:06:31 AM

Posted 12 September 2009 - 09:27 PM

You're welcome,this will be easier.
If you cannot get DDS to work, please try this instead.

Please download RSIT by random/random and save it to your Desktop.
Note: You will need to run this tool while connected to the Internet so it can download HijackThis if it is not located on your system. If you get a warning from your firewall or other security programs regarding Rist attempting to contact the Internet, please allow the connection.
  • Close all applications and windows so that you have nothing open and are at your Desktop.
  • Double-click on RSIT.exe to start the program.
  • If using Windows Vista, be sure to Run As Administrator.
  • Click Continue after reading the disclaimer screen.
  • Leave the drop down box set to default: "List/folders created or modified in the last 1 month (30 days).
  • When the scan is complete, a text file named log.txt will automatically open in Notepad.
  • Save the log file to your desktop and copy/paste the contents into a new topic in the HijackThis Logs and Malware Removal forum, NOT here.
Important: Be sure to mention that you tried to follow the Prep Guide but were unable to get DDS to run.
If RSIT did not work, then reply back here.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#10 funkecrates

funkecrates
  • Topic Starter

  • Members
  • 57 posts
  • OFFLINE
  •  
  • Local time:06:31 AM

Posted 12 September 2009 - 09:42 PM

Wow that wouldn't run either I see the following "Autolt Error Line -1: Error: Variable used without being declared" The actual program itself reads "Writing header information"

#11 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,221 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:06:31 AM

Posted 13 September 2009 - 12:09 PM

System Repair Engineer
  • Please download System Repair Engineer from here
  • Unzip/extract sreng2.zip to a folder on your desktop
  • Double-click on SREngLdr.EXE to launch System Repair Engineer
  • Click the Smart Scan Icon
  • Click Scan
  • Wait for the scan to finish
  • Click on the Save Reports button
  • Save it to your desktop, using the recommended name of SREngLOG.log
  • Close System Repair Engineer
  • Use notepad to open the SREngLOG.log file
  • Copy & paste the contents of that file as a reply to this topic.. Copy & paste the contents of that file into a new topic in the HijackThis Logs and Malware Removal forum, NOT here.
Important: Be sure to mention that you tried to follow the Prep Guide but were unable to get DDS to run.
Note: The log may be long, and you may need several posts to post all of it
If you are using a custom HOSTS file, please leave out the HOSTS File section, as it will make the log far too long
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#12 funkecrates

funkecrates
  • Topic Starter

  • Members
  • 57 posts
  • OFFLINE
  •  
  • Local time:06:31 AM

Posted 13 September 2009 - 12:46 PM

System Repair Engineer

  • Please download System Repair Engineer from here
  • Unzip/extract sreng2.zip to a folder on your desktop
  • Double-click on SREngLdr.EXE to launch System Repair Engineer
  • Click the Smart Scan Icon
  • Click Scan
  • Wait for the scan to finish
  • Click on the Save Reports button
  • Save it to your desktop, using the recommended name of SREngLOG.log
  • Close System Repair Engineer
  • Use notepad to open the SREngLOG.log file
  • Copy & paste the contents of that file as a reply to this topic.. Copy & paste the contents of that file into a new topic in the HijackThis Logs and Malware Removal forum, NOT here.
Important: Be sure to mention that you tried to follow the Prep Guide but were unable to get DDS to run.
Note: The log may be long, and you may need several posts to post all of it
If you are using a custom HOSTS file, please leave out the HOSTS File section, as it will make the log far too long


This ran and I followed your steps and posted in the HiJackthis forums.....thanks alot!

#13 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,221 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:06:31 AM

Posted 13 September 2009 - 08:09 PM

You're welcome,looks good there.
Now that your log is properly posted, you should NOT make further changes to your computer (install/uninstall programs, use special fix tools, delete files, edit the registry, etc) unless advised by a HJT Team member, nor should you continue to ask for help elsewhere. Doing so can result in system changes which may not show it the log you already posted. Further, any modifications you make on your own may cause confusion for the helper assisting you and could complicate the malware removal process which would extend the time it takes to clean your computer.

From this point on the HJT Team should be the only members that you take advice from, until they have verified your log as clean.

Please be patient. It may take a while to get a response because the HJT Team members are very busy working logs posted before yours. They are volunteers who will help you out as soon as possible. Once you have made your post and are waiting, please DO NOT make another reply until it has been responded to by a member of the HJT Team. Generally the staff checks the forum for postings that have 0 replies as this makes it easier for them to identify those who have not been helped. If you post another response there will be 1 reply. A team member, looking for a new log to work may assume another HJT Team member is already assisting you and not open the thread to respond.

To avoid confusion, I am closing this topic.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users