Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Why is nickreboot redirecting me to Google?


  • Please log in to reply
24 replies to this topic

#1 Guest_MikaelaArsenault_*

Guest_MikaelaArsenault_*

  • Guests
  • OFFLINE
  •  

Posted 09 July 2014 - 05:58 PM

There was a problem with nickreboot so I decided to close it out. When I went to nickreboot again it went to Google instead. Why is it doing this to me? Why does it keep going to Google? I want it to go back to nickreboot not Google.

 

http://nickreboot.com/


Edited by MikaelaArsenault, 09 July 2014 - 06:06 PM.


BC AdBot (Login to Remove)

 


#2 Quevvy

Quevvy

  • Members
  • 172 posts
  • OFFLINE
  •  
  • Gender:Male

Posted 09 July 2014 - 06:39 PM

Is it actually sending you to google.com? Or is it some other site that is spoofing Google?



#3 Guest_MikaelaArsenault_*

Guest_MikaelaArsenault_*

  • Guests
  • OFFLINE
  •  

Posted 09 July 2014 - 06:40 PM

It's sending me to google.com.



#4 buddy215

buddy215

  • BC Advisor
  • 13,005 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:10:52 AM

Posted 09 July 2014 - 06:41 PM

Could be a DNS redirect....maybe. Try running Windows Repair. Choose all of the options listed.

 

Windows Repair (All In One) Download

 

Windows Repair can perform the following tasks:

  • Reset Registry Permissions
  • Reset File Permissions
  • Register System Files
  • Repair WMI
  • Repair Windows Firewall
  • Repair Internet Explorer
  • Repair MDAC & MS Jet
  • Repair Hosts File
  • Remove Policies Set By Infections
  • Repair Icons
  • Repair Winsock & DNS Cache
  • Remove Temp Files
  • Repair Proxy Settings
  • Unhide Non System Files
  • Repair Windows Updates
  • Repair CD/DVD Missing/Not Working

If that doesn't fix the problem....(or run them anyway, many users have adware and don't know it)

  • download AdwCleaner by Xplode onto your desktop.
    Close all open programs and internet browsers.
    Double click on adwcleaner.exe to run the tool.
    Click on Delete.
    Confirm each time with Ok.
    You will be prompted to restart your computer. A text file will open after the restart.
    Please post the contents of that logfile with your next reply.
    You can find the logfile at C:\AdwCleaner[S1].txt as well.

 

  • download Junkware Removal Tool to your desktop.
  • Shut down your protection software now to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message.

“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss

A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”


#5 Guest_MikaelaArsenault_*

Guest_MikaelaArsenault_*

  • Guests
  • OFFLINE
  •  

Posted 09 July 2014 - 06:50 PM

It's leading me to Google UK.



#6 buddy215

buddy215

  • BC Advisor
  • 13,005 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Tennessee

Posted 09 July 2014 - 06:59 PM

Did you miss seeing my last post?


“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss

A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”


#7 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:11:52 AM

Posted 09 July 2014 - 07:44 PM

Quoted from your last reply a few days back, you did not reply  >>

According to the nickreboot site, you need the latest Java and Flash to run the site properly. You can get the latest Java here -

https://www.java.com/en/download/

And the latest version of Flash from here -

https://get.adobe.com/flashplayer/

Try it and see what happens.



#8 Guest_MikaelaArsenault_*

Guest_MikaelaArsenault_*

  • Guests
  • OFFLINE
  •  

Posted 10 July 2014 - 04:44 AM

Did you miss seeing my last post?

No.



#9 Guest_MikaelaArsenault_*

Guest_MikaelaArsenault_*

  • Guests
  • OFFLINE
  •  

Posted 10 July 2014 - 05:42 AM

Quoted from your last reply a few days back, you did not reply  >>

According to the nickreboot site, you need the latest Java and Flash to run the site properly. You can get the latest Java here -

https://www.java.com/en/download/

And the latest version of Flash from here -

https://get.adobe.com/flashplayer/

Try it and see what happens.

 

I already have the latest version of Flash and Java..



#10 buddy215

buddy215

  • BC Advisor
  • 13,005 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Tennessee

Posted 10 July 2014 - 06:04 AM

Do you intend to perform the scans or not?


Edited by buddy215, 10 July 2014 - 06:05 AM.

“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss

A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”


#11 Guest_MikaelaArsenault_*

Guest_MikaelaArsenault_*

  • Guests
  • OFFLINE
  •  

Posted 10 July 2014 - 01:51 PM

Do you intend to perform the scans or not?

 

I'm doing the AdwCleaner scan right now.



#12 Guest_MikaelaArsenault_*

Guest_MikaelaArsenault_*

  • Guests
  • OFFLINE
  •  

Posted 10 July 2014 - 01:58 PM

Here is the AdwCleaner log.

 

# AdwCleaner v3.215 - Report created 10/07/2014 at 14:51:44
# Updated 09/07/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Arsenault - ARSENAULT-PC
# Running from : C:\Users\Arsenault\Downloads\AdwCleaner.exe
# Option : Clean
 
***** [ Services ] *****
 
Service Deleted : qknfd
 
***** [ Files / Folders ] *****
 
Folder Deleted : C:\ProgramData\NCH Software
Folder Deleted : C:\Program Files (x86)\NCH Software
Folder Deleted : C:\Users\Arsenault\Documents\Optimizer Pro
File Deleted : C:\Users\Arsenault\AppData\Roaming\Mozilla\Firefox\Profiles\uam7y4at.default\searchplugins\speedbit.xml
File Deleted : C:\Users\Arsenault\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage
File Deleted : C:\Users\Arsenault\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal
 
***** [ Shortcuts ] *****
 
 
***** [ Registry ] *****
 
Key Deleted : HKCU\Software\Google\Chrome\Extensions\bakijjialdiiboeaknfpmflphhmljfkd
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\bakijjialdiiboeaknfpmflphhmljfkd
Key Deleted : [x64] HKLM\SOFTWARE\Google\Chrome\Extensions\bakijjialdiiboeaknfpmflphhmljfkd
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{31090377-0740-419E-BEFC-A56E50500D5B}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{7F4EFF06-7032-458E-AE16-1C1D8255C28A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{7F4EFF06-7032-458E-AE16-1C1D8255C28A}
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{2318C2B1-4965-11D4-9B18-009027A5CD4F}]
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{31090377-0740-419E-BEFC-A56E50500D5B}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{7F4EFF06-7032-458E-AE16-1C1D8255C28A}
Key Deleted : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Key Deleted : HKLM\Software\{1146AC44-2F03-4431-B4FD-889BC837521F}
Key Deleted : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Key Deleted : HKLM\Software\{6791A2F3-FC80-475C-A002-C014AF797E9C}
 
***** [ Browsers ] *****
 
-\\ Internet Explorer v11.0.9600.17207
 
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls [Tabs]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
 
-\\ Mozilla Firefox v30.0 (en-US)
 
[ File : C:\Users\Arsenault\AppData\Roaming\Mozilla\Firefox\Profiles\uam7y4at.default\prefs.js ]
 
Line Deleted : user_pref("browser.search.defaultenginename", "Speedbit Search");
Line Deleted : user_pref("browser.search.defaulturl", "hxxp://go.speedbit.com/search.aspx?s=E6Laya1&q=");
Line Deleted : user_pref("browser.search.order.1", "Speedbit Search");
Line Deleted : user_pref("browser.search.selectedEngine", "Speedbit Search");
Line Deleted : user_pref("browser.startup.homepage", "hxxp://go.speedbit.com/?s=E6Laya1");
Line Deleted : user_pref("browser.startup.homepage_override_url", "hxxp://go.speedbit.com/?s=E6Laya1");
Line Deleted : user_pref("keyword.URL", "hxxp://go.speedbit.com/search.aspx?s=E6Laya1&q=");
 
-\\ Google Chrome v35.0.1916.153
 
[ File : C:\Users\Arsenault\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
Deleted [Search Provider] : hxxp://go.speedbit.com/search.aspx?s=E6Laya1&q={searchTerms}
Deleted [Homepage] : hxxp://go.speedbit.com/?s=E6Laya1
Deleted [Extension] : bakijjialdiiboeaknfpmflphhmljfkd
 
*************************
 
AdwCleaner[R0].txt - [12850 octets] - [12/04/2014 19:18:09]
AdwCleaner[R1].txt - [13291 octets] - [04/06/2014 14:54:45]
AdwCleaner[R2].txt - [1013 octets] - [04/06/2014 18:29:01]
AdwCleaner[R3].txt - [5172 octets] - [10/07/2014 14:49:13]
AdwCleaner[S0].txt - [11799 octets] - [04/06/2014 14:55:57]
AdwCleaner[S1].txt - [1076 octets] - [04/06/2014 18:29:57]
AdwCleaner[S2].txt - [4091 octets] - [10/07/2014 14:51:44]
 
########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [4151 octets] ##########


#13 buddy215

buddy215

  • BC Advisor
  • 13,005 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:11:52 AM

Posted 10 July 2014 - 02:51 PM

You need to run some more programs to clean the computer of adware and possibly more. You have quiet the collection of adware.

No one program will find all of the adware and malware out there in the wild.

 

The Eset online scanner may take an hour or more depending on the amount of hdd storage and computer resources.

 

  • download Junkware Removal Tool to your desktop.
  • Shut down your protection software now to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message.

 

Use CCleaner to cleanup temporary files, logs, ad cookies, etc. Use the default settings. Pay attention while installing

and UNcheck any offers of toolbars. No need to use the Registry Cleaning tool...may cause a problem.

CCleaner - PC Optimization and Cleaning - Free Download

 

  • Run the ESET Online Scanner.
  • Hold down Control and click on this link to open ESET OnlineScan in a new window.
  • Click the esetonlinebtn.png button.
  • For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
  • Click on esetsmartinstaller_enu.exe to download the ESET Smart Installer. Save it to your desktop.
  • Double click on the esetsmartinstaller_enu.png icon on your desktop.
  • Check "YES, I accept the Terms of Use."
  • Click the Start button.
  • Accept any security warnings from your browser.
  • Under scan settings, check "Scan Archives" and "Remove found threats"
  • ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
  • When the scan completes, click List Threats
  • Click Export, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
  • Click the Back button.
  • Click the Finish button.
  • NOTE:Sometimes if ESET finds no infections it will not create a log.
  • download MiniToolBox, save it to your desktop and run it.
  • Checkmark the following checkboxes:
  • Flush DNS
  • Report IE Proxy Settings
  • Reset IE Proxy Settings
  • Report FF Proxy Settings
  • Reset FF Proxy Settings
  • List content of Hosts
  • List IP configuration
  • List Winsock Entries
  • List last 10 Event Viewer log
  • List Installed Programs
  • List Users, Partitions and Memory size.
  • Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run.
    Note: When using "Reset FF Proxy Settings" option Firefox should be closed.

“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss

A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”


#14 Guest_MikaelaArsenault_*

Guest_MikaelaArsenault_*

  • Guests
  • OFFLINE
  •  

Posted 10 July 2014 - 03:33 PM

I know what the issue is. It's not adware. My dad was able to get on nickreboot at work. It's the network that we have at home.



#15 Quevvy

Quevvy

  • Members
  • 172 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:02:52 AM

Posted 10 July 2014 - 03:41 PM

I know what the issue is. It's not adware. My dad was able to get on nickreboot at work. It's the network that we have at home.

 

I doubt that your network itself is redirecting you to Google. Yes, I can get on nickreboot as well, but it's most likely an issue of your specific computer. Have you tried on other computers on your network?






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users