Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Google Redirect Virus out of control, in dire need of help


  • Please log in to reply
3 replies to this topic

#1 blackstar7

blackstar7

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:05:37 PM

Posted 03 August 2010 - 07:17 PM

I'm running Windows Vista, and everytime I do a search in Google, any of the results redirect to a page called "MFeed Search" at the address searchingandclick43.com. If I mouse over a link in Google, at the end of every result I see the same thing: &domen=searchingandclick43.com.

This is without question the most persistent problem I have ever experienced on a PC. I have ran full scans with SUPERAntiSpyware, MalwareBytes TDSSkiller, Sophos Anti-Root Kit, Ad-Aware, NOD 32, and have removed of all junk/temp/etc files with CCleaner and ATF Cleaner. I have tried all these things in both regular mode and in safe mode with no success at fixing the problem.

I am really, truly at a loss. I see a lot of similar Google redirect issues are posted on here, and I hate to add to the mass, but basically everything I have seen suggested in these posts hasn't resolved the issue.

I'm going out of town tomorrow and need a functioning laptop for work, and I'm getting a little desperate for help. I am on hand to post whatever logs are needed or attempt whatever suggestions you guys have for me.

Thank you

BC AdBot (Login to Remove)

 


#2 wemmick

wemmick

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:05:37 PM

Posted 07 August 2010 - 06:39 PM

I just figured this one out - after using all the spyware apps I could find, this is what did it:

Download "HijackThis" (I know, terrible name):
http://free.antivirus.com/hijackthis/

Let it do a scan, and it'll find a bunch of stuff, but look for lines that look like this:

HOST (ip address) google.com
HOST (ip address) google.com.it
HOST (ip address) bing.com
etc.

I found about 20 of them. Check these lines, and have HijackThis remove ONLY those. That immediately fixed the problem for me.

#3 NOTTHEFACE

NOTTHEFACE

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Here, where else would I be?
  • Local time:05:37 PM

Posted 23 August 2010 - 12:01 PM

I'm having the same problem, but Hijack this is telling me It can't delete a HOSTS file for some reason (WTF!!). My computer is still (expletive deleted) up and I can't find a solution. PLEASE HELP>

#4 fahlin

fahlin

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:05:37 PM

Posted 24 August 2010 - 03:14 PM

I had same problem, just run Notepad as administrator and remove the lines in the hosts file.

- Run notepad as administrator, right-click on the notepad icon and select run as administrator.
- Open windows\system32\drivers\etc\hosts
- Remove these lines,

89.149.210.113 www.google.com
89.149.210.113 us.search.yahoo.com
89.149.210.113 uk.search.yahoo.com
89.149.210.113 search.yahoo.com
89.149.210.113 www.google.com.br
89.149.210.113 www.google.it
89.149.210.113 www.google.es
89.149.210.113 www.google.co.jp
89.149.210.113 www.google.com.mx
89.149.210.113 www.google.ca
89.149.210.113 www.google.com.au
89.149.210.113 www.google.nl
89.149.210.113 www.google.co.za
89.149.210.113 www.google.be
89.149.210.113 www.google.gr
89.149.210.113 www.google.at
89.149.210.113 www.google.se
89.149.210.113 www.google.ch
89.149.210.113 www.google.pt
89.149.210.113 www.google.dk
89.149.210.113 www.google.fi
89.149.210.113 www.google.ie
89.149.210.113 www.google.no
89.149.210.113 www.google.de
89.149.210.113 www.google.fr
89.149.210.113 www.google.co.uk
89.149.210.113 www.bing.com

- Save the file, you may have to remove the read-only flag first.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users