Jump to content


Photo

Google search diverts to random search engines


  • This topic is locked This topic is locked
5 replies to this topic

#1 noise667

noise667

    Member

  • Full Member
  • Pip
  • 2 posts

Posted 25 June 2007 - 12:37 PM

Hi Hope someone can help because it's driving me up the wall
whenever I search something on google it diverts the result I've clicked to a search engine or random pages about adult search services, alot of the pages seem to have a similar look but nothing else in common, they also all activate my pop up blocker.The main pages it seems to divert to are maxfiles.com,heavy.com and monster.com although clothes pages and finacial pages have all come up. It also happens on ask.com, it normally takes three attempts to get the page you want. If you can help please tell me what to do in idiot speak because I'm a bit of a novice. thanks. here's the avg report thing
+ Created at: 18:16:36 25/06/2007

+ Scan result:



C:\Documents and Settings\Ian\Cookies\ian@adopt.euroclick[2].txt -> TrackingCookie.Euroclick : No action taken.
C:\Documents and Settings\Ian\Cookies\ian@realmedia[1].txt -> TrackingCookie.Realmedia : No action taken.
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP146\A0030320.exe -> Trojan.DNSChanger.jb : No action taken.


::Report end

The DNSChanger trojan has come up a couple of times before when I've done Adaware and Spybot, Hijack this shows no suspect files as does A Squared. hope you can help
Thanks :techsupport: :techsupport:

#2 Jarbs

Jarbs

    Member

  • Full Member
  • Pip
  • 10 posts

Posted 25 June 2007 - 01:45 PM

Just a possibility, but your hosts file might have been changed.

Navigate to C:\WINDOWS\system32\drivers\etc\ and open the "hosts" file with Notepad. It should have a bunch of mumbo-jumbo with #'s beginning. The only entry without the #'s should be:

127.0.0.1 localhost

Post back here if you have any other entries in that file besides this.

#3 noise667

noise667

    Member

  • Full Member
  • Pip
  • 2 posts

Posted 25 June 2007 - 04:09 PM

Just a possibility, but your hosts file might have been changed.

Navigate to C:\WINDOWS\system32\drivers\etc\ and open the "hosts" file with Notepad. It should have a bunch of mumbo-jumbo with #'s beginning. The only entry without the #'s should be:

127.0.0.1 localhost

Post back here if you have any other entries in that file besides this.


Here's what it had in it


# Copyright © 1993-1999 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost

#4 SWI Support Robot

SWI Support Robot

    Helper robot

  • SWI Bot
  • PipPipPipPipPip
  • 23,520 posts

Posted 28 June 2007 - 06:30 AM

Welcome to SWI. We apologize for the delay; our helpers have been very busy.
If you have not received help after 3 days, please CLICK HERE, and post a link to your log and the date it was originally posted.

Thank you for your patience.

[this is an automated reply]
This is an automated message. It does not count as help.

#5 nasdaq

nasdaq

    Forum Deity

  • Global Moderator
  • PipPipPipPipPip
  • 49,081 posts

Posted 30 June 2007 - 09:21 AM

HI noise667,

Please read this article and follow the protocol.
http://forums.spywar...showtopic=23382
Then submit a fresh HijackThis log. It's the only way we can give you sound advice.


Jarbs IS NOT authorised to post in live logs.
nasdaq

Favorite tools: [ SpywareBlaster ] [ Spybot ] [ AdAware ] [ HijackThis ]
[ Housecall online virus scan ] [ Bitdefender online virus scan ]
[ AVG antivirus ] [ Sunbelt Personal Firewall ] [ ZoneAlarm firewall ]

My help is free, but if we have helped you in anyway,please considerDonating ,
see this topic for details.
We need members like you.

========
Shouldn't water be worth more than diamonds?
Adam Smith Glasgow, 1760

#6 nasdaq

nasdaq

    Forum Deity

  • Global Moderator
  • PipPipPipPipPip
  • 49,081 posts

Posted 11 July 2007 - 08:08 AM

Due to the lack of feedback this Topic is closed.

If you need this topic reopened, please tell the moderating team by replying here with the address of the thread. This applies only to the original topic starter.

Everyone else please begin a New Topic.
nasdaq

Favorite tools: [ SpywareBlaster ] [ Spybot ] [ AdAware ] [ HijackThis ]
[ Housecall online virus scan ] [ Bitdefender online virus scan ]
[ AVG antivirus ] [ Sunbelt Personal Firewall ] [ ZoneAlarm firewall ]

My help is free, but if we have helped you in anyway,please considerDonating ,
see this topic for details.
We need members like you.

========
Shouldn't water be worth more than diamonds?
Adam Smith Glasgow, 1760




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

Member of ASAP and UNITE
Support SpywareInfo Forum - click the button