TechSpot

Google (and Yahoo) search failures. Used to have the "redirect" symptoms

By hello0987
Dec 27, 2009
  1. Google (and Yahoo) search failures. 8 steps completed!

    Hey everyone,

    I have what used to appear to be the same problem as all the other recent threads in the google searches were redirected, in all browers (IE, Firefox and Chrome) to something else.

    Since then, google and yahoo searches now simply fail to load. I type a search into the search bar, click on enter, and nothing happens at all. It just takes me to a blank page, with the URL: http://www.google.co.uk/search?hl=en&source=hp&q=help&rlz=1R2GGLL_en (I searched for "help".)

    Attached are the three log files produced after following the 8 steps suggested.

    Any help would be HUGELY appreciated! I'm lost without google!
     
  2. hello0987

    hello0987 TS Rookie Topic Starter

    I know its probably quite tough to fix this, but anyone have any suggestions at all?
     
  3. Bobbye

    Bobbye Helper on the Fringe Posts: 16,335   +36

    Welcome to TechSpot. Sorry for the delay. This is a busy place.

    Your host files have been hijacked. Your are being taken to Poland instead of where you want to go.

    Please reopen HijackThis to 'do system scan only' and check the following if present:
    O1 - Hosts: 78.159.110.43 www.google.com
    O1 - Hosts: 78.159.110.43 www.google.de
    O1 - Hosts: 78.159.110.43 www.google.fr
    O1 - Hosts: 78.159.110.43 www.google.co.uk
    O1 - Hosts: 78.159.110.43 www.google.com.br
    O1 - Hosts: 78.159.110.43 www.google.it
    O1 - Hosts: 78.159.110.43 www.google.es
    O1 - Hosts: 78.159.110.43 www.google.co.jp
    O1 - Hosts: 78.159.110.43 www.google.com.mx
    O1 - Hosts: 78.159.110.43 www.google.ca
    O1 - Hosts: 78.159.110.43 www.google.com.au
    O1 - Hosts: 78.159.110.43 www.google.nl
    O1 - Hosts: 78.159.110.43 www.google.co.za
    O1 - Hosts: 78.159.110.43 www.google.be
    O1 - Hosts: 78.159.110.43 www.google.gr
    O1 - Hosts: 78.159.110.43 www.google.at
    O1 - Hosts: 78.159.110.43 www.google.se
    O1 - Hosts: 78.159.110.43 www.google.ch
    O1 - Hosts: 78.159.110.43 www.google.pt
    O1 - Hosts: 78.159.110.43 www.google.dk
    O1 - Hosts: 78.159.110.43 www.google.fi
    O1 - Hosts: 78.159.110.43 www.google.ie
    O1 - Hosts: 78.159.110.43 www.google.no
    O1 - Hosts: 78.159.110.43 search.yahoo.com
    O1 - Hosts: 78.159.110.43 us.search.yahoo.com
    O1 - Hosts: 78.159.110.43 uk.search.yahoo.com


    Close all Windows except HijackThis and click on "Fix Checked."

    Please download ComboFix HERE:
    • With ComboFix, at the download window, please rename it to Combo-Fix(.exe) before downloading it.
    • Please disable all security programs, such as antiviruses, antispywares, and firewalls. Also disable your internet connection.
    • Run Combo-Fix.exe and follow the prompts.
      (Understand that things like your system clock changing and your desktop disappearing might happen. Do not worry, because all will be restored later.)
    • Wait for the scan to be completed.
    • If it requires a reboot, please do it.
    • After the scan has completed entirely, please post the log here. The log will be located at C:\ComboFix(.txt)

    Notes:

    • 1.Do not mouse-click Combofix's window while it is running. That may cause it to stall.
      2. ComboFix may reset a number of Internet Explorer's settings, including making I-E the default browser.
      3. Combofix prevents autorun of ALL CD, floppy and USB devices to assist with malware removal & increase security. If this is an issue or makes it difficult for you -- please tell your helper.
      4. CF disconnects your machine from the internet. The connection is automatically restored before CF completes its run. If CF runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your machine.

    Run Eset NOD32 Online AntiVirus Scanner HERE

    Note: You will need to use Internet Explorer for this scan.
    • Tick the box next to YES, I accept the Terms of Use.
    • Click Start
    • When asked, allow the Active X control to install
    • Disable your current Antivirus software. You can usually do this with its Notification Tray icon near the clock.
    • Click Start
    • Make sure that the option "Remove found threats" is Unchecked, and the option "Scan unwanted applications" is checked
    • Click Scan
    • Wait for the scan to finish
    • Re-enable your Antivirus software.
    • A logfile is created and located at C:\Program Files\EsetOnlineScanner\log.txt. Please include this on your post.
    Follow with a new scan for HijackThis.

    Attach the following to your next reply:
    Combofix report
    Eset log
    New HJT log.
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...