Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


Search Engine Redirect

  • Please log in to reply
1 reply to this topic

#1 Pioneer74


  • Members
  • 1 posts
  • Local time:05:52 AM

Posted 23 April 2007 - 05:35 PM

Approx 70% of the time when I do a search on a subject, mostly in Yahoo, then click on a link, I am redirected to a different site. Sometimes EBay, sometimes another search site. It's really starting to get annoying having to hit the back button and clicking the link again. When I do that, most of the time I get directed to the site I want.

Thanks for the help.

Fixwareout Last edited 4/5/2007
Post this report in the forums please
»»»»»Prerun check
HKLM\SOFTWARE\~\Winlogon\ "System"="kdwbz.exe"

»»»»» System restarted

»»»»» Postrun check
HKLM\SOFTWARE\~\Winlogon\ "system"=""
»»»»» Misc files.
»»»»» Checking for older varients.

Search five digit cs, dm, kd, jb, other, files.
The following files NEED TO BE SUBMITTED to one of the following URL'S for further inspection.

Click browse, find the file then click submit.
Or http://virusscan.jotti.org/

»»»»» Other

»»»»» Current runs
"ATIPTA"="C:\\Program Files\\ATI Technologies\\ATI Control Panel\\atiptaxx.exe"
"SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.5.0_10\\bin\\jusched.exe\""
"hpWirelessAssistant"="C:\\Program Files\\hpq\\HP Wireless Assistant\\HP Wireless Assistant.exe"
"SynTPLpr"="C:\\Program Files\\Synaptics\\SynTP\\SynTPLpr.exe"
"SynTPEnh"="C:\\Program Files\\Synaptics\\SynTP\\SynTPEnh.exe"
"eabconfg.cpl"="C:\\Program Files\\HPQ\\Quick Launch Buttons\\EabServr.exe /Start"
"Cpqset"="C:\\Program Files\\HPQ\\Default Settings\\cpqset.exe"
"ccApp"="\"C:\\Program Files\\Common Files\\Symantec Shared\\ccApp.exe\""
"HP Software Update"="C:\\Program Files\\Hp\\HP Software Update\\HPWuSchd2.exe"

"Window Washer"="C:\\Program Files\\Webroot\\Washer\\wwDisp.exe"
"swg"="C:\\Program Files\\Google\\GoogleToolbarNotifier\\1.2.1128.5462\\GoogleToolbarNotifier.exe"
"updateMgr"="C:\\Program Files\\Adobe\\Acrobat 7.0\\Reader\\AdobeUpdateManager.exe AcRdB7_0_9"
Hosts file was reset, If you use a custom hosts file please replace it
»»»»» End report »»»»»

BC AdBot (Login to Remove)


#2 buddy215


  • Moderator
  • 13,314 posts
  • Gender:Male
  • Location:West Tennessee
  • Local time:04:52 AM

Posted 23 April 2007 - 10:13 PM

What else have you scanned with?
Try these two programs to help identify the malware and possibly remove it.

Install Super Antispyware. Run it in safe mode. Allow it to quarantine whatever it finds.

Run the online scan for Bit Defender in normal mode. Allow it to quarantine whatever it finds.


Post a Hijack This log in the Hijack This Forum by following the directions in the link below if the programs above have not removed ALL malware. DO NOT post the log in this forum.

Getting into Windows Safe Mode
(pre-Vista OS's)
“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users