Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

google search results redirected (basic-search.net, get-answers.fast.com and easya-z.com)


  • Please log in to reply
5 replies to this topic

#1 pezboytom

pezboytom

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:08:06 AM

Posted 28 December 2011 - 03:03 PM

Hi, I am having trouble with using google on a computer running Windows XP SP3. The links from search results are being redirected through the pages "basic-search.net", "get-answers-fast.com" and "easyA-Z.com".

Steps taken so far:
1)
Attempted manual removal of files after searching for this problem on google. Located and removed files in
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader
"qmgr0.dat" and "qmgr1.dat".

These had to be removed in safe mode - upon restarting they were back again.

2)
Scanned computer using malwarebytes and spybot s&d. Other than tracker cookies, no problems were detected.
Scanned computer using TDSSkiller, which found nothing either. Some unregistered drivers were found when the optional settings were enabled.
Attempted scan using combofix, based on the success story here:
http://www.bleepingcomputer.com/forums/topic412458.html/page__st__45
although this stalls soon after it starts scanning for infected files.

Any help would be greatly appreciated.

BC AdBot (Login to Remove)

 


#2 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,914 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:04:06 AM

Posted 28 December 2011 - 04:29 PM

Hello and welcome pezboytom!

We need a deeper look. Please go here....
Preparation Guide ,do steps 6 - 9.

Create a DDS log and post it in the new topic explained in step 9,which is here Virus, Trojan, Spyware, and Malware Removal Logs and not in this topic,thanks.
If Gmer won't run,skip it and move on.
Include a link back to this topic.

Let me know if that went well.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#3 pezboytom

pezboytom
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:08:06 AM

Posted 29 December 2011 - 10:55 AM

Hi, thanks for getting back to me. I followed those steps as you suggested. It didn't go very well!

I attempted to run DDS and it stalled at about 70% of the progress bar. I ran gmer and this resulted in a blue screen.

Any suggestions?

#4 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,914 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:04:06 AM

Posted 29 December 2011 - 10:14 PM

OK skip the GMER and instead ... Please download OTL by OldTimer and save it to your Desktop.
  • Close all other applications and windows so that you have nothing open.
  • Double click on the Posted Image icon on your desktop.

    Vista/Windows 7 users right-click and select Run As Administrator.
    If you receive a UAC prompt asking if you would like to continue running the program, you should press the Continue button.
  • Under Output, ensure that Minimal Output is selected.
  • Click the "Scan All Users" checkbox.
    Leave the remaining selections to the default settings.
  • Click the Posted Image button.
  • Do not use the computer while the scan is in progress.
  • When the scan is complete, two log files will open in Notepad:
    • OTListIt.txt <- (will be maximized)
    • Extras.txt <- (will be minimized in the Task Bar).
  • Both logs are automatically saved to the Desktop.
  • Please copy and paste the contents of OTListIt.txt and Extras.txt in your next reply.
    If the Extras.txt log is too long, you may need to add a second reply to your thread or upload it as an attachment.
  • Click the red X in the upper right corner to exit OTL.
Important: Be sure to mention that you tried to follow the Prep Guide but were unable to get DDS to run. If OTL did not work, then reply back here.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#5 pezboytom

pezboytom
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:08:06 AM

Posted 10 January 2012 - 12:06 PM

You can mark this as solved. I was trying to fix a family computer while I was back home for the holidays but unfortunately I no longer have access to it.

For the record, before I left, I ran combofix with the /nombr switch and it ran successfully. It appeared to do the trick. Next time I return home I'll find out the rest of the story I'm sure!

Sorry to waste your time and thanks a lot for your help.

#6 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,914 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:04:06 AM

Posted 10 January 2012 - 12:17 PM

No problem.. Thanks for the update.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users