Google results redirect to sites like Britannia and slows down my connection

Status
Not open for further replies.
Hey there,
since a few days now every time I click a link after searching with google it redirects me to either a Britannia website or some virus scanner advertisement website and slows down my overall connection...

Ive tried to look it up on several forums and tried many different solutions including many spyware programs but none have worked and im with my hands in my hair as its messing with my system :(

Could someone do me a great favor and look at my log files and see if they can find whats causing this problem?

Any help is very much apriciated!


Edit- incase it matters -> i use Opera, but does the same in IE and Firefox.
 
Hey,
Already used Ad-aware among about 4 other spyware programs before but didnt work, tried again but no difference.

Ran smitfraudfix

Result:
SmitFraudFix v2.423

Scan done at 17:53:19,43, za 22-08-2009
Run from C:\Documents and Settings\Joost\Bureaublad\SmitfraudFix
OS: Microsoft Windows XP [versie 5.1.2600] - Windows_NT
The filesystem type is NTFS
Fix run in safe mode

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Before SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» Killing process


»»»»»»»»»»»»»»»»»»»»»»»» hosts

127.0.0.1 localhost

»»»»»»»»»»»»»»»»»»»»»»»» VACFix

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix

S!Ri's WS2Fix: LSP not Found.


»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

GenericRenosFix by S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Deleting infected files


»»»»»»»»»»»»»»»»»»»»»»»» IEDFix

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri



»»»»»»»»»»»»»»»»»»»»»»»» Agent.OMZ.Fix

Agent.OMZ.Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» 404Fix

404Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» RK


»»»»»»»»»»»»»»»»»»»»»»»» DNS

Description: Marvell Yukon 88E8001/8003/8010 PCI Gigabit Ethernet Controller - Pakketplanner-minipoort
DNS Server Search Order: 192.168.1.1

Description: Marvell Yukon 88E8001/8003/8010 PCI Gigabit Ethernet Controller - Pakketplanner-minipoort
DNS Server Search Order: 213.51.144.37
DNS Server Search Order: 213.51.129.37

HKLM\SYSTEM\CCS\Services\Tcpip\..\{75831772-2079-446F-A79D-9D8801463479}: NameServer=192.168.1.1
HKLM\SYSTEM\CCS\Services\Tcpip\..\{A5F5B2F0-4986-4EF6-8B62-FCFA1C1387FF}: DhcpNameServer=213.51.144.37 213.51.129.37
HKLM\SYSTEM\CS2\Services\Tcpip\..\{75831772-2079-446F-A79D-9D8801463479}: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS2\Services\Tcpip\..\{A5F5B2F0-4986-4EF6-8B62-FCFA1C1387FF}: DhcpNameServer=213.51.144.37 213.51.129.37
HKLM\SYSTEM\CS3\Services\Tcpip\..\{75831772-2079-446F-A79D-9D8801463479}: NameServer=192.168.1.1
HKLM\SYSTEM\CS3\Services\Tcpip\..\{A5F5B2F0-4986-4EF6-8B62-FCFA1C1387FF}: DhcpNameServer=213.51.144.37 213.51.129.37
HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1


»»»»»»»»»»»»»»»»»»»»»»»» Deleting Temp Files


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, following keys are not inevitably infected!!!

"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» RK.2



»»»»»»»»»»»»»»»»»»»»»»»» Registry Cleaning

Registry Cleaning done.

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler After SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» End


Problem still here, im beginning to doubt any anti-virus/spyware program can fix it. I would reinstall windows xp but I dont have the disk nor serial becaus ive moved to a different country.
 
Unfortunately, there are no trained malware helpers on TechSpot at this time. This is temporary. However, you do have malware and you do need help. Rather than starting to run random programs, I suggest you go HERE and let trained malware helpers clean your system.

Give the same information about the system problems. If additional, specific cleaning programs are indicated, they will;l tell you to run them, then interpret the results. Please advise them if you are aware of a second language on the system.
 
sorry i think.... i think ive given this user another user's solution. :eek: Anyways its still helpful.
 
ok fix in hijackthis:

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen

F3 - REG:win.ini: run=
 
being helped by me on tech-101.

No need for further replies.

Also all the entries you listed are legit. Go study more.

And it is never helpfull to run SmitfraudFix on a computer that doesn't need it.
 
Status
Not open for further replies.
Back