Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Address bar search hijacked


  • This topic is locked This topic is locked
6 replies to this topic

#1 Cassiopeia

Cassiopeia

  • Members
  • 229 posts
  • OFFLINE
  •  
  • Local time:03:21 AM

Posted 03 March 2015 - 08:19 AM

Here we go again!

 

I received ONE email about this topic and that was a message telling me someone contacted me through private message.

 

I know you are backlogged and that everyone who works on the forum is a volunteer, so I know it takes a while to get a response.

 

Since I received no further emails, I did not realize that not only was there an answer, the topic was yet again closed.

 

I never received a message telling me there was a response and my topic was closed and locked.

 

I have followed the instructions from several different sites and several discussion of the same topic in this forum.  Not one has succeeded.

 

If I enter an incorrect url into Firefox 35, Chrome 40,  or Internet Explorer (IE) 11, the response redirects to http://www.dnsrsearch.com/ and the page itself reads "Time Warner".  As I now have Time Warner as a provider, I blamed it on Time Warner.  Dragon just displays its own search results with a note that the entry was invalid.

 

I have used "add/remove" programs to seek dnsrsearch without success.  There is no listing for that.  I have reset all the search engines in all the browsers.  I have four on my pc: Firefox, IE, Dragon, and Chrome.  Only one actually had it listed in the add-ons. 

 

My Outlook 2007 is still giving an error message about the setting for dnsrsearch. 

 

Ccleaner does not find a problem.  Malwarebytes does not find a problem.  AVG antivirus does not find a problem.  Panda Security did not find a problem.  (The pc was rebooted into safe mode with the same non-results.)

 

Thank you.

 

Catherine

 



BC AdBot (Login to Remove)

 


#2 shelf life

shelf life

  • Malware Response Team
  • 2,657 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:@localhost
  • Local time:03:21 AM

Posted 07 March 2015 - 09:02 AM

hi Catherine

 

Thats by design by your ISP for whatever reason. Probably to shove ads in your face for profit.

 

Theres no software on your machine to uninstall. As you found out its your ISP redirecting a bad URL to there own page. Looks like you can opt of this redirection. Or just change your DNS lookup provider. You dont have to use your ISP's DNS service.  Or  better yet find another ISP.


How Can I Reduce My Risk to Malware?


#3 Cassiopeia

Cassiopeia
  • Topic Starter

  • Members
  • 229 posts
  • OFFLINE
  •  
  • Local time:03:21 AM

Posted 07 March 2015 - 10:35 AM

No, it is not.  That was my first contact.  Time Warner Cable insists it is malware or a virus.



#4 shelf life

shelf life

  • Malware Response Team
  • 2,657 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:@localhost
  • Local time:03:21 AM

Posted 07 March 2015 - 08:55 PM

Any serious malware/virus would be redirecting every URL, not just misspelled . some links below for reference:

 

http://forums.timewarnercable.com/t5/Web-Browsing/HATE-the-TWC-dead-link-page/m-p/3646#M44

 

http://www.dslreports.com/forum/r28670779-Internet-dnsrsearch.com-DNS-redirect-by-TWC-Bing-users-only

 

https://answers.microsoft.com/en-us/bing/forum/bing_websearch-bing_unex_search/dnsrsearchcom/6b7a4c3e-5805-456f-a6c6-63c4cf8703dc

 

http://forums.windowscentral.com/cortana/277008-fix-cortana-wifi-issue.html#post2474161

 

https://answers.microsoft.com/en-us/ie/forum/ie11-iewindows8_1/ie-11-search-in-url-bar-goes-to-time-warner-cable/6bdffce2-8115-4be7-8b1f-b5df08a83832

 

Please download and post a FRST log:

 

Please download Farbar Recovery Scan Tool and save it to your Desktop.

 

http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/

 

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system, download both of them and try to run them. Only one of them will run on your system, that will be the right version.

 

    Right-click FRST then click "Run as administrator"

    When the tool opens click Yes to disclaimer.

    Press the Scan button.

    When finished, it will produce a log called FRST.txt in the same directory the tool was run from. Your Desktop

    Please copy and paste the log in your next reply.

 

The first time the tool is run it generates another log (Addition.txt - also located in the same directory the tool was run from). Please also paste that, along with the FRST.txt into your next reply.


How Can I Reduce My Risk to Malware?


#5 Cassiopeia

Cassiopeia
  • Topic Starter

  • Members
  • 229 posts
  • OFFLINE
  •  
  • Local time:03:21 AM

Posted 09 March 2015 - 10:20 AM

It is not simply misspelt words.  If I fail to place the www. in front of URLs, it redirects.  If I fail to place the s after http, it redirects.

 

I am really sorry for bothering  you about this problem.  I thought this was a place to receive assistance.  Instead I am inundated with personal messages that are far from polite and responses that show my original messages, all six of them, were not read and fully comprehended prior to posting.

 

It is NOT TWC as that was my first contact.  There is something on the pc, so I will do what I feel is necessary since I cannot get assistance from here.

 

This is my sixth posting because the others were closed because there is a glitch at bleepingcomputer's end that failed to send out notifications of responses.  Obviously the glitch has been fixed because I got this notice.

 

Thanks for your assistance.



#6 shelf life

shelf life

  • Malware Response Team
  • 2,657 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:@localhost
  • Local time:03:21 AM

Posted 09 March 2015 - 05:17 PM

No problem. Your are at the correct place for assistance.  I dont know about the PM's you have gotten regarding this issue but they werent from me. The only post I have read from you is the two from above. I see you have a few other posts but I didnt look at them, but I will if they relate to this issue.

 

We can proceed like I would with a typical Malware issue, but Iam not implying its malware related. I hate to tell you this but malware redirections arent selective like you describe. Iam willing to check it out though.

 

We can run some tools and generate logs looking for things. Reset your browsers etc. If your game you can run FRST as posted.  And get two more downloads. You may have already run these at another time but lets start with updated information and we will go from there.

 

So if you want to proceed:

 

1) Run FRST as posted above

 

2) Please download AdwCleaner by Xplode and save to your Desktop.

 

     http://www.bleepingcomputer.com/download/adwcleaner/

 

    Double click on AdwCleaner.exe to run the tool.

    Vista/Windows 7/8 users right-click and select Run As Administrator.

    Click on the Scan button.

    AdwCleaner will begin to scan your computer.

    After the scan has finished click on the Clean button.

    Press OK when asked to close all programs and follow the onscreen prompts.

    Press OK again to allow AdwCleaner to restart the computer and complete the removal process.

    After rebooting, a logfile report (AdwCleaner[S0].txt) will open automatically.

    Copy and paste the contents of that logfile in your next reply.

    A copy of that logfile will also be saved in the C:\AdwCleaner folder.

 

3)  Please download Junkware Removal Tool to your desktop.

 

     http://thisisudax.org/downloads/JRT.exe

 

    Shutdown your antivirus to avoid any conflicts.

    Double click the icon or Right click for Vista/W7,8 and select Run as administrator

    The tool will open and start scanning.

    Please be patient as this can take a while to complete.

    On completion, a log (JRT.txt) is saved to your desktop and will automatically open.

    Post the contents of JRT.txt into your next message

 


How Can I Reduce My Risk to Malware?


#7 shelf life

shelf life

  • Malware Response Team
  • 2,657 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:@localhost
  • Local time:03:21 AM

Posted 14 March 2015 - 02:41 PM

Due to the lack of feedback, this topic is now closed.

In the event you still have problems, please send me or any Moderator a Private Message and ask them to reopen this topic within the next 5 days.

Please include a link to your topic in the Private Message. Thank you.

How Can I Reduce My Risk to Malware?





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users