Google redirect

By Gecko1 · 7 replies
Jun 20, 2009
  1. I have a Google redirect problem. I keep getting redirected to merchendising websites on my third or fourth click on Google searches. I'm using Google Chrome also. My hijackthis log is provided.
  2. touch

    touch TS Rookie Posts: 978

    Hello Gecko1

    Remove/uninstall from " add/remove programs " in controlpanel:
    One of your antivirus programs

    AVG8 or Norton/Symantec.

    Then please run the steps in this guide:

    8-step Viruses/Spyware/Malware Preliminary Removal Instructions

    Post attached log´s from:


    In your next reply
  3. Gecko1

    Gecko1 TS Rookie Topic Starter

    Ok, i have done what you have told me and uploaded the three logs.
  4. touch

    touch TS Rookie Posts: 978


    Please download Combofix:
    Here: ComboFix
    And save to the desktop.

    Close all other browser windows.

    Double-click on the combofix icon found on your desktop.

    Please note, that once you start combofix you should not click anywhere on the combofix window as it can cause the program to stall. In fact, when combofix is running, do not touch your computer at all and just take a break as it may take a while for it to complete.

    Combofix will create a logfile and display it after your computer has rebooted. Usually located in c:\combofix.txt, please attach it to your next post.
  5. Gecko1

    Gecko1 TS Rookie Topic Starter

    Ok, I have the log right here.
  6. touch

    touch TS Rookie Posts: 978

    Looks clean. Please attach new hijackthis log, and tell how things are running ?
  7. Gecko1

    Gecko1 TS Rookie Topic Starter

    Everything looks clean, the redirects look to have stopped.
  8. touch

    touch TS Rookie Posts: 978

    Sounds good.

    Run a scan in HijackThis. Check each of the following and hit 'Fix checked' (after checking them) if they still exist (make sure not to miss any):
    O2 - BHO: (no name) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
    O2 - BHO: (no name) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - (no file)
    O2 - BHO: (no name) - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - (no file)

    Reboot, and you´re good to go.

    You should Create a New Restore Point to prevent possible reinfection from an old one.
    The easiest and safest way to do this is:
    Go to Start > All Programs > Accessories > System Tools > System Restore
    Select Create a restore point, and Ok it.
    Next, go to Start > Run and type in cleanmgr
    Select the More options tab
    Choose the option to clean up system restore and OK it.

    This will remove all restore points except the new one you just created.

    Click START then RUN
    Now type Combofix /u in the runbox and click OK. Note the space between the X and the U, it needs to be there.
    The above procedure will:
    Delete the following:
    ComboFix and its associated files and folders.
    Reset the clock settings.
    Hide file extensions, if required.
    Hide System/Hidden files, if required.

    To learn more about how to protect yourself while on the internet, please read Tony Klein´s guide:How did I get infected in the first place?
Topic Status:
Not open for further replies.

Similar Topics

Add your comment to this article

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...