Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Google redirect after reinstalling XP


  • Please log in to reply
4 replies to this topic

#1 EddieB428

EddieB428

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:06:57 AM

Posted 13 April 2011 - 08:45 PM

Recently I got hit with the Internet Security 2011 rogue software. I thought I had removed it but a similar one came back a couple days later. I was also having redirect problems with google in IE8. This was after a computer error where I had to manually copy backed up files to the system32 directory. Rather than go through the trouble of trying to get rid of the viruses I decided to just reinstall XP (the computer needed a good cleaning anyways). I reinstalled XP tonight (did an fdisk from the XP cd and reformat) and I'm still getting redirects from google. The only website I went to was Microsoft to install all the updates. All the drivers were downloaded on my laptop and transferred to the desktop via flash drive. I did update Adobe Flash Player before I saw there are security issues with it, could that have caused the problem? We have 4 computers in the house and they all have the same issue. Can this problem be passed through the home network passively? We rarely if ever transfer files over the network. Any help would be appreciated.

BC AdBot (Login to Remove)

 


#2 EddieB428

EddieB428
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:06:57 AM

Posted 13 April 2011 - 09:00 PM

Something else to add. I only counted the computers that have been in use. My wife's desktop hasn't been used in a month but it hasn't been shutdown recently either and the problem occurs on that one as well. It's almost like the issue is in the network.

#3 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,573 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:06:57 AM

Posted 13 April 2011 - 10:35 PM

Your router is hijacked by trojan DNS-hijacker.

  • Please read this: Malware Silently Alters Wireless Router Settings

  • Then reset your router to it's factory default settings:

    "If your machine has been infected by one of these Zlob/DNSchanger Trojans, and your router settings have been altered, I would strongly recommend that you reset the router to its default configuration. Usually, this can be done by inserting something tiny like a paper clip end or pencil tip into a small hole labeled "reset" located on the back of the router. Press and hold down the small button inside until the lights on the front of the router blink off and then on again (usually about 10 seconds)"


  • This is the difficult part.
    First get to the routers server. To do that open Internet Explorer and type http:\\192.168.1.1 in the address bar and click Enter. You get the log in window.
    Fill in the password you have already found and you will get the configuration page.
    Configure the router to allow you to connect to your ISP server. In some routers it is done by a setup wizard. But you have to fill in the log in password your ISP has initially given to you.
    You can also call your ISP if you don't have your initial password.
    Don't forget to change the routers default password and set a strong password. Note down the password and keep it somewhere for future reference.

How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#4 EddieB428

EddieB428
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:06:57 AM

Posted 13 April 2011 - 10:56 PM

So far so good. I thought about doing that but didn't for some reason. Thanks.

#5 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,573 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:06:57 AM

Posted 13 April 2011 - 11:04 PM

Great!! Download and Run FlashDisinfector

You may have a flash drive infection. These worms travel through your portable drives. If they have been connected to other machines, they may now be infected.
Please download Flash_Disinfector.exe by sUBs and save it to your desktop.
Double-click Flash_Disinfector.exe to run it and follow any prompts that may appear.
The utility may ask you to insert your flash drive and/or other removable drives including your mobile phone. Please do so and allow the utility to clean up those drives as well.
Wait until it has finished scanning and then exit the program.
Reboot your computer when done.

Note: Flash_Disinfector will create a hidden folder named autorun.inf in each partition and every USB drive plugged in when you ran it. Don't delete this folder. It will help protect your drives from future infection.


When you plug the drive into the clean computer make sure you hold down the SHIFT key, which will stop any AutoRuns from executing. You can then run this tool:


Running On a clean Comp
You would need to run sub's flash disinfector on the clean computer first and hold down the shift key before connecting the external drive.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users