TechSpot

Google results redirect to sites like Britannia and slows down my connection

By joostlobe
Aug 20, 2009
  1. Hey there,
    since a few days now every time I click a link after searching with google it redirects me to either a Britannia website or some virus scanner advertisement website and slows down my overall connection...

    Ive tried to look it up on several forums and tried many different solutions including many spyware programs but none have worked and im with my hands in my hair as its messing with my system :(

    Could someone do me a great favor and look at my log files and see if they can find whats causing this problem?

    Any help is very much apriciated!


    Edit- incase it matters -> i use Opera, but does the same in IE and Firefox.
     
  2. Jawshh

    Jawshh TS Enthusiast Posts: 392

  3. joostlobe

    joostlobe TS Rookie Topic Starter

    Hey,
    Already used Ad-aware among about 4 other spyware programs before but didnt work, tried again but no difference.

    Ran smitfraudfix

    Result:
    SmitFraudFix v2.423

    Scan done at 17:53:19,43, za 22-08-2009
    Run from C:\Documents and Settings\Joost\Bureaublad\SmitfraudFix
    OS: Microsoft Windows XP [versie 5.1.2600] - Windows_NT
    The filesystem type is NTFS
    Fix run in safe mode

    »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Before SmitFraudFix
    !!!Attention, following keys are not inevitably infected!!!

    SrchSTS.exe by S!Ri
    Search SharedTaskScheduler's .dll

    »»»»»»»»»»»»»»»»»»»»»»»» Killing process


    »»»»»»»»»»»»»»»»»»»»»»»» hosts

    127.0.0.1 localhost

    »»»»»»»»»»»»»»»»»»»»»»»» VACFix

    VACFix
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri


    »»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix

    S!Ri's WS2Fix: LSP not Found.


    »»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

    GenericRenosFix by S!Ri


    »»»»»»»»»»»»»»»»»»»»»»»» Deleting infected files


    »»»»»»»»»»»»»»»»»»»»»»»» IEDFix

    IEDFix
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri



    »»»»»»»»»»»»»»»»»»»»»»»» Agent.OMZ.Fix

    Agent.OMZ.Fix
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri


    »»»»»»»»»»»»»»»»»»»»»»»» 404Fix

    404Fix
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri


    »»»»»»»»»»»»»»»»»»»»»»»» RK


    »»»»»»»»»»»»»»»»»»»»»»»» DNS

    Description: Marvell Yukon 88E8001/8003/8010 PCI Gigabit Ethernet Controller - Pakketplanner-minipoort
    DNS Server Search Order: 192.168.1.1

    Description: Marvell Yukon 88E8001/8003/8010 PCI Gigabit Ethernet Controller - Pakketplanner-minipoort
    DNS Server Search Order: 213.51.144.37
    DNS Server Search Order: 213.51.129.37

    HKLM\SYSTEM\CCS\Services\Tcpip\..\{75831772-2079-446F-A79D-9D8801463479}: NameServer=192.168.1.1
    HKLM\SYSTEM\CCS\Services\Tcpip\..\{A5F5B2F0-4986-4EF6-8B62-FCFA1C1387FF}: DhcpNameServer=213.51.144.37 213.51.129.37
    HKLM\SYSTEM\CS2\Services\Tcpip\..\{75831772-2079-446F-A79D-9D8801463479}: DhcpNameServer=192.168.1.1
    HKLM\SYSTEM\CS2\Services\Tcpip\..\{A5F5B2F0-4986-4EF6-8B62-FCFA1C1387FF}: DhcpNameServer=213.51.144.37 213.51.129.37
    HKLM\SYSTEM\CS3\Services\Tcpip\..\{75831772-2079-446F-A79D-9D8801463479}: NameServer=192.168.1.1
    HKLM\SYSTEM\CS3\Services\Tcpip\..\{A5F5B2F0-4986-4EF6-8B62-FCFA1C1387FF}: DhcpNameServer=213.51.144.37 213.51.129.37
    HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1


    »»»»»»»»»»»»»»»»»»»»»»»» Deleting Temp Files


    »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
    !!!Attention, following keys are not inevitably infected!!!

    "System"=""


    »»»»»»»»»»»»»»»»»»»»»»»» RK.2



    »»»»»»»»»»»»»»»»»»»»»»»» Registry Cleaning

    Registry Cleaning done.

    »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler After SmitFraudFix
    !!!Attention, following keys are not inevitably infected!!!

    SrchSTS.exe by S!Ri
    Search SharedTaskScheduler's .dll


    »»»»»»»»»»»»»»»»»»»»»»»» End


    Problem still here, im beginning to doubt any anti-virus/spyware program can fix it. I would reinstall windows xp but I dont have the disk nor serial becaus ive moved to a different country.
     
  4. Bobbye

    Bobbye Helper on the Fringe Posts: 16,335   +36

    Unfortunately, there are no trained malware helpers on TechSpot at this time. This is temporary. However, you do have malware and you do need help. Rather than starting to run random programs, I suggest you go HERE and let trained malware helpers clean your system.

    Give the same information about the system problems. If additional, specific cleaning programs are indicated, they will;l tell you to run them, then interpret the results. Please advise them if you are aware of a second language on the system.
     
  5. kritius

    kritius TS Guru Posts: 2,084

  6. Jawshh

    Jawshh TS Enthusiast Posts: 392

    sorry i think.... i think ive given this user another user's solution. :eek: Anyways its still helpful.
     
  7. Jawshh

    Jawshh TS Enthusiast Posts: 392

    ok fix in hijackthis:

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen

    F3 - REG:win.ini: run=
     
  8. kritius

    kritius TS Guru Posts: 2,084

    being helped by me on tech-101.

    No need for further replies.

    Also all the entries you listed are legit. Go study more.

    And it is never helpfull to run SmitfraudFix on a computer that doesn't need it.
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...