Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

May have an issue with searchpagefix


  • This topic is locked This topic is locked
17 replies to this topic

#1 Scott3232

Scott3232

  • Members
  • 29 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:31 AM

Posted 18 December 2014 - 03:31 PM

Hi, thank you for providing this service.  I noticed when I go to my fiance and my website instead of going there it redirects me to searchpagefix.com.  I talked to the company hosting our site and they said I may have a virus.  I looked in my processes as well as my extensions and I don't see anything about searchpagefix.  I know I had an issue with a program I downloaded a couple of weeks ago but I thought I cleaned my system thoroughly.  Can you please help me ensure I don't have any viruses?

 

Attached is a screenshot of the page I go to when I visit my wedding site as well as the results from running DDS.

 

Thank you!

 

Scott

Attached Files


Edited by Scott3232, 18 December 2014 - 04:31 PM.


BC AdBot (Login to Remove)

 


m

#2 Scott3232

Scott3232
  • Topic Starter

  • Members
  • 29 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:31 AM

Posted 19 December 2014 - 12:43 PM

I would also like to add that so far the only site this is effecting is my wedding site. So weird.



#3 Scott3232

Scott3232
  • Topic Starter

  • Members
  • 29 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:31 AM

Posted 22 December 2014 - 12:46 PM

Bump, just in case this got lost in the shuffle.  Thanks!



#4 HelpBot

HelpBot

    Bleepin' Binary Bot


  • Bots
  • 12,549 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:10:31 AM

Posted 23 December 2014 - 06:35 PM

Hello and welcome to Bleeping Computer!

I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.

We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.

To help Bleeping Computer better assist you please perform the following steps:

***************************************************

step1.gif In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.

CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/560296 <<< CLICK THIS LINK



If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.

***************************************************

step2.gifIf you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of this page). In that reply, please include the following information:

  • If you have not done so already, include a clear description of the problems you're having, along with any steps you may have performed so far.
  • A new DDS log. For your convenience, you will find the instructions for generating these logs repeated at the bottom of this post.
    • Please do this even if you have previously posted logs for us.
    • If you were unable to produce the logs originally please try once more.
    • If you are unable to create a log please provide detailed information about your installed Windows Operating System including the Version, Edition and if it is a 32bit or a 64bit system.
    • If you are unsure about any of these characteristics just post what you can and we will guide you.
  • Please tell us if you have your original Windows CD/DVD available.
  • Upon completing the above steps and posting a reply, another staff member will review your topic and do their best to resolve your issues.

Thank you for your patience, and again sorry for the delay.

***************************************************

We need to see some information about what is happening in your machine. Please perform the following scan again:

  • Download DDS by sUBs from the following link if you no longer have it available and save it to your destop.

    DDS.com Download Link
  • Double click on the DDS icon, allow it to run.
  • A small box will open, with an explanation about the tool. No input is needed, the scan is running.
  • Notepad will open with the results.
  • Follow the instructions that pop up for posting the results.
  • Close the program window, and delete the program from your desktop.
Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet.

Information on A/V control can be found HERE.

As I am just a silly little program running on the BleepingComputer.com servers, please do not send me private messages as I do not know how to read and reply to them! Thanks!

#5 Scott3232

Scott3232
  • Topic Starter

  • Members
  • 29 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:31 AM

Posted 23 December 2014 - 07:48 PM

Some more info...  When I go to miriamandscott.com and the searchpagefix.com page comes up, on the top right it reads "Looksafe has blocked a hijacking page known for harmful content. You have been forwarded to our Safe Search Page. Learn More

".
 
The Dell rep ran a bunch of diagnostics, malware programs, trojan removal, virus removal, and the page still comes up.  They said I might need to restore my computer to factory settings.  I sure hope that's not the case because it's a big pain in the rear end.
 
Thanks for your help.

Edited by Mako, 25 December 2014 - 03:53 AM.
Removed hyperlink


#6 Mako

Mako

  • Malware Response Team
  • 238 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Belgium
  • Local time:03:31 PM

Posted 24 December 2014 - 09:28 AM

Hi Scott,

Welcome to the BleepingComputer's Virus/Trojan/Spyware/Malware Removal forum. :welcome:
My name is Mako and I will be helping you with your computer problems.

Before we begin, please note the following:

  • Please stay with the topic until I tell you that your system is clean. Missing symptoms does not mean that everything is okay.
  • The instructions given are for your system only!
  • Please do not run any tools until requested! The reason for this is so I know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.
  • If you don't understand something don't hesitate to ask before running the tools.
  • As you may have noticed: I live in Belgium. Meaning that due to the time difference it can take some time before I'm able to get back to you. Please allow me 24h to reply to your topic before sending me a PM or giving this topic a bump.

Now let's get started...

Could you make a new DDS log in order to get a more recent view on your machine, please. The problems you describe sound like a browser hijacker which we should be able to remove. That's good news, since it makes a factory restore superfluous :).

 

Merry Christmas,

Mako


Regards,

Mako

 

Member of UNITE Unified Network of Instructors and Trained Eliminators

Noticed any spelling or grammar errors in my reply? Please feel free to point them out to me, I'm always eager to learn. 


#7 Scott3232

Scott3232
  • Topic Starter

  • Members
  • 29 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:31 AM

Posted 24 December 2014 - 06:24 PM

Hi Mako, happy holidays!  Attached please find the 2 new DDS files.  2 other issues I'm having with the computer now...  1, if I try and open a file using the file folder on the bottom left corner of the screen (I don't think it's explorer but it works similarly), it says "There was a problem sending the command to the program" and the program won't open.  It appears to happen with Excel files.  I can open the files if I open through Excel though.  The 2nd issue is Programs & Features in the Control Panel do not work.  This includes Uninstall A Program which does nothing, as well as error messages for View Installed Updates (I've attached a screen shot titled "Installed") and Turn Windows Features On and Off.  I have no idea what's going on with this computer but these things never had issues before.  Thanks so much!

Attached Files



#8 Mako

Mako

  • Malware Response Team
  • 238 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Belgium
  • Local time:03:31 PM

Posted 25 December 2014 - 04:29 AM

Hello Scott,
 
I'm afraid these problems doesn't sound very well... :(
Some of the entries in your log file indicate you've recently used Registry Nuke of WinZip Registry Optimizer? Unfortunately I have very bad experiences with those tools (all registry tools in general in fact). Most of the time they do more harm than good.
 
From what I can see in your log file I would guess you've used WinZip Registry Optimizer and Registry Reviver Restore Point yesterday evening? The next morning the log shows some critical Windows Kernel errors. Might it be possible that running one of these tools has caused (some) of these problems?
 
With this kind of severe errors I'm afraid we'll have to postpone our malware treatment and try to get your system again stable, as soon as possible.
I would suggest you go back to an earlier system restore point, like the one of 6:19 PM on 12/23/2014.

RP290: 12/23/2014 6:19:11 PM - Restore Operation

 
Here you can find some information about the procedure.
 
When you have done so, please run the following scan:

Go to Start - All Programs - Accessories
Right-click the icon for the Command Prompt and choose Run As Administrator to open the Command Prompt.
Type sfc /scannow and hit Enter. (Pay attention to the space in front of the / )
All system files on your computer will now be checked and repaired if necessary. Please keep your Windows Installation Disk at hand since you might need it.
When finished you will see an overview of the scan results and a reference to a CBS log file, which we will handle later on.

If you receive the following message you don't have to do the following steps. Just let me know in your next reply:
"Windows Resource Protection did not find any integrity violations."
If you do not see this message, please continue...

Type findstr /c:"[SR]" %windir%\\Logs\\CBS\\CBS.log > "%userprofile%\\Desktop\\sfcdetails.txt" and hit Enter.

You can copy the section above and paste it into the Command Prompt or type it yourself. If you choose to do so, please pay attention to the space in frontof the / and %windir% and before and after the >.

You should now see a file called sfcdetails.txt on your desktop.
Paste the content of this file in your next post.

 

Good luck!


Regards,

Mako

 

Member of UNITE Unified Network of Instructors and Trained Eliminators

Noticed any spelling or grammar errors in my reply? Please feel free to point them out to me, I'm always eager to learn. 


#9 Mako

Mako

  • Malware Response Team
  • 238 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Belgium
  • Local time:03:31 PM

Posted 27 December 2014 - 12:51 PM

Hello there,

 

How are you doing with these instructions...?


Regards,

Mako

 

Member of UNITE Unified Network of Instructors and Trained Eliminators

Noticed any spelling or grammar errors in my reply? Please feel free to point them out to me, I'm always eager to learn. 


#10 Scott3232

Scott3232
  • Topic Starter

  • Members
  • 29 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:31 AM

Posted 28 December 2014 - 07:05 PM

Hi, I wasn't aware you had responded. Thank you for following up.  I just back into town and will follow your instructions.

 

FYI I used the registry programs as suggested by a Dell technical support representative.



#11 Scott3232

Scott3232
  • Topic Starter

  • Members
  • 29 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:31 AM

Posted 28 December 2014 - 07:30 PM

Hi, I restored to the location you suggested and now when I type in my user password in order to login I get the message "user profile service failed to logon". I can't logon now. Please advise asap. Thanks

#12 Scott3232

Scott3232
  • Topic Starter

  • Members
  • 29 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:31 AM

Posted 29 December 2014 - 12:11 AM

Wow this is really bad. My entire profile doesn't load. Trying an earlier restore point. Maybe i should restore to factory settings. Please advise.

#13 Mako

Mako

  • Malware Response Team
  • 238 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Belgium
  • Local time:03:31 PM

Posted 29 December 2014 - 03:56 AM

Hello Scott,

Unfortunately my ideas and (probable) solutions are running thin... I would advise you to try and run these two scans. If none of them work I'm afraid that a restore to factory settings might be an unfortunate, but better solution.

Alright, let's give this one final shot... fingerscrossed.gif

Start your computer in Safe Mode. You can find some information about how you can achieve this in this article.
Choose Safe Mode with Network Options.

Should you fail to proceed to the next steps try starting in just Safe Mode without the network options and use a USB stick to copy the tools.

:step1: ====SFC /Scannow====

Go to Start - All Programs - Accessories
Right-click the icon for the Command Prompt and choose Run As Administrator to open the Command Prompt.
Type sfc /scannow and hit Enter. (Pay attention to the space in front of the / )
All system files on your computer will now be checked and repaired if necessary. Please keep your Windows Installation Disk at hand since you might need it.
When finished you will see an overview of the scan results and a reference to a CBS log file, which we will handle later on.

If you receive the following message you don't have to do the following steps. Just let me know in your next reply:
"Windows Resource Protection did not find any integrity violations."
If you do not see this message, please continue...

Type findstr /c:"[SR]" %windir%\\Logs\\CBS\\CBS.log > "%userprofile%\\Desktop\\sfcdetails.txt" and hit Enter.

You can copy the section above and paste it into the Command Prompt or type it yourself. If you choose to do so, please pay attention to the space in frontof the / and %windir% and before and after the >.

You should now see a file called sfcdetails.txt on your desktop.
Paste the content of this file in your next post.


:step2: ====ComboFix====

We will begin with ComboFix.exe. Please visit this webpage for download links, and instructions for running the tool:

http://www.bleepingcomputer.com/combofix/how-to-use-combofix

* Ensure you have disabled all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

Please include the C:\ComboFix.txt in your next reply for further review.

Best of luck!
Mako


Regards,

Mako

 

Member of UNITE Unified Network of Instructors and Trained Eliminators

Noticed any spelling or grammar errors in my reply? Please feel free to point them out to me, I'm always eager to learn. 


#14 Scott3232

Scott3232
  • Topic Starter

  • Members
  • 29 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:31 AM

Posted 29 December 2014 - 02:44 PM

I'm resetting my computer back to factory settings.  It's having too many problems.  I will follow-up if I'm still having issues after completion.  Thanks!



#15 Mako

Mako

  • Malware Response Team
  • 238 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Belgium
  • Local time:03:31 PM

Posted 30 December 2014 - 03:45 AM

Hi Scott,

 

Thanks for touching base! Sorry to hear it had to come to this, but I think this might be the best solution.

Please let me know how the computer is behaving after the reset.


Regards,

Mako

 

Member of UNITE Unified Network of Instructors and Trained Eliminators

Noticed any spelling or grammar errors in my reply? Please feel free to point them out to me, I'm always eager to learn. 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users