Followed the 8 steps, still getting redirected
- Thread starter dcory
- Start date
- Status
Bobbye
Posts: 16,313 +36
Welcome to TechSpot, dcory. My apology for the delay.
Please check the status of your antivirus program. It appears that it might be AVG v8 but you also have entries for McAfee. You need to decide which to keep and remove the other- but make sure it is updated and fully functional.
I don't see anything in these logs that would cause the redirect. So I need a description from you of the type of sites you're getting directed to.
Until then, you can do some housekeeping:
Please reopen HijackThis to 'do system scan only'. Check the processes below if present:
CHECK these if you want to remove McAfee:
C:\Program Files\McAfee Security Scan\1.0.150\SSScheduler.exe
O4 - Global Startup: McAfee Security Scan.lnk = ?
CHECK these if you want to remove AVG:
C:\PROGRA~1\AVG\AVG8\avgtray.exe
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
I can give you an additional removal tool if needed for any remnants of the AV programs you have removed.
You have Viewpoint Media Player installed on your system. This program is not malware but it is foistware in that it is usually installed without the user's knowledge or approval, and for this reason I recommend you remove it. But this is optional. If you actually use this program, I recommend you try using safe and free alternatives such as VLC Media Player:
CHECK these processes to remove Viewpoint:
C:\Program Files\Viewpoint\Common\ViewpointService.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe
O24 - Desktop Component 0: (no name) - file:///C:/DOCUME~1/dcory/LOCALS~1/Temp/msohtml1/01/clip_image002.jpg
Close all Windows except HijackThis and click on "Fix Checked"
Boot into Safe Mode
To fully remove the 24 Desktop entry:
Click on Start> Control Panel> Display> Desktop> Customize Desktop> Web tab> uncheck and delete everything you find in there (except for "My current home page")> Also remove the check mark from the the Lock Desktop Items box if it is checked> Apply> OK> Close.
IF you want to complete the Viewpoint removal:
Click on Start> Run> type in services.msc> double-click "Viewpoint Manager Service"
Click on Stop
Change the Startup type to Disabled
Click on Apply> OK> Close Services
Click on Start> Control Panel > Add/Remove Programs > highlight and remove all references to Viewpoint - i.e. Viewpoint, Viewpoint Manager, Viewpoint Media Player.
Open Windows Explorer> Programs:
C:\Program Files\ViewManager\ <-- and delete this folder
C:\Program Files\Viewpoint\ <-- and delete this folder
Close and Empty the Recycle Bin
When you give me some details on the redirects, I will know better what program might better find the cause.
Please check the status of your antivirus program. It appears that it might be AVG v8 but you also have entries for McAfee. You need to decide which to keep and remove the other- but make sure it is updated and fully functional.
I don't see anything in these logs that would cause the redirect. So I need a description from you of the type of sites you're getting directed to.
Until then, you can do some housekeeping:
Please reopen HijackThis to 'do system scan only'. Check the processes below if present:
CHECK these if you want to remove McAfee:
C:\Program Files\McAfee Security Scan\1.0.150\SSScheduler.exe
O4 - Global Startup: McAfee Security Scan.lnk = ?
CHECK these if you want to remove AVG:
C:\PROGRA~1\AVG\AVG8\avgtray.exe
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
I can give you an additional removal tool if needed for any remnants of the AV programs you have removed.
You have Viewpoint Media Player installed on your system. This program is not malware but it is foistware in that it is usually installed without the user's knowledge or approval, and for this reason I recommend you remove it. But this is optional. If you actually use this program, I recommend you try using safe and free alternatives such as VLC Media Player:
CHECK these processes to remove Viewpoint:
C:\Program Files\Viewpoint\Common\ViewpointService.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe
O24 - Desktop Component 0: (no name) - file:///C:/DOCUME~1/dcory/LOCALS~1/Temp/msohtml1/01/clip_image002.jpg
Close all Windows except HijackThis and click on "Fix Checked"
Boot into Safe Mode
- Restart your computer and start pressing the F8 key on your keyboard.
- Select the Safe Mode option when the Windows Advanced Options menu appears, and then press ENTER.
To fully remove the 24 Desktop entry:
Click on Start> Control Panel> Display> Desktop> Customize Desktop> Web tab> uncheck and delete everything you find in there (except for "My current home page")> Also remove the check mark from the the Lock Desktop Items box if it is checked> Apply> OK> Close.
IF you want to complete the Viewpoint removal:
Click on Start> Run> type in services.msc> double-click "Viewpoint Manager Service"
Click on Stop
Change the Startup type to Disabled
Click on Apply> OK> Close Services
Click on Start> Control Panel > Add/Remove Programs > highlight and remove all references to Viewpoint - i.e. Viewpoint, Viewpoint Manager, Viewpoint Media Player.
Open Windows Explorer> Programs:
C:\Program Files\ViewManager\ <-- and delete this folder
C:\Program Files\Viewpoint\ <-- and delete this folder
Close and Empty the Recycle Bin
When you give me some details on the redirects, I will know better what program might better find the cause.
Thank you very much for the reply Bobbye. Much appreciated. The redirects I am getting are sometimes random and sometimes relevant to the subject matter of the link that I clicked. For example, I did a Google search for "Health care" and then clicked on a link to a gov't site concerning Medicare...I was redirected to http://www.pharmacydiscountnetwork.com/
Here are some more examples:
Clicked on link re: spyware removal
http://www.stopsign.com/se/se574a.p...qq_docbook.com&pg=&mss_se_spin&SV=mss_se_spin
Clicked on Career Builder link re: health care jobs:
http://shop.simpli.com/search.php?q=health care
Clicked on link to an “album” on Amazon:
http://www.findstuff.com/home/searc...nlXE3gU_RLqCd1MXLEOBqIMjlHeykBHAqcWFDHCUYUqQ*
Clicked on a link to a list of Pearl Jam albums:
http://www.momversation.com/episodes/dealing-miscarriage?f=7014&partner=7776-32730_7987
I am getting redirected 9 out of 10 times I click on a search result. Thanks in advance for your help. Let me know if you need any additional information.
Here are some more examples:
Clicked on link re: spyware removal
http://www.stopsign.com/se/se574a.p...qq_docbook.com&pg=&mss_se_spin&SV=mss_se_spin
Clicked on Career Builder link re: health care jobs:
http://shop.simpli.com/search.php?q=health care
Clicked on link to an “album” on Amazon:
http://www.findstuff.com/home/searc...nlXE3gU_RLqCd1MXLEOBqIMjlHeykBHAqcWFDHCUYUqQ*
Clicked on a link to a list of Pearl Jam albums:
http://www.momversation.com/episodes/dealing-miscarriage?f=7014&partner=7776-32730_7987
I am getting redirected 9 out of 10 times I click on a search result. Thanks in advance for your help. Let me know if you need any additional information.
- Status
