?
Solved

Search engine virus?

Posted on 2007-04-03
2
Medium Priority
?
348 Views
Last Modified: 2013-11-22
I use a Dell Latitude D620 with Windows XP.  Everytime I go to a search engine (Yahoo, Google etc...), type in a search for whatever im looking for  ( Atlas Copco Compressors), click on the link that comes up in the search for the main webpage or any other one, I get redirected to a totally different site.  Happens with whatever I search for.  Ran numerous spyware and virus scans and it found nothing.
0
Comment
Question by:otwo
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
2 Comments
 
LVL 47

Accepted Solution

by:
rpggamergirl earned 1000 total points
ID: 18842813
Hi,
It sounds like a wareout infection.
Check in your add/remove programs for "UnSpyPC or KillAndClean" and uninstall if listed.
 
Please download FixWareout from one of these sites:
http://downloads.subratam.org/Fixwareout.exe
http://www.bleepingcomputer.com/files/lonny/Fixwareout.exe

Save it to your desktop and run it. Click Next, then Install, then make sure "Run fixit" is checked and click Finish. The fix will begin; follow the prompts. You will be asked to reboot your computer; please do so. Your system may take longer than usual to load; this is normal.

At the end of the fix, you may need to restart your computer again.


OR:
Can you show us a hijackthis log please?
http://danborg.org/spy/hjt/alternativ.exe
Open Hijackthis, click "Do a system scan and save a logfile" don't fix anything yet.

You can either upload the log to any hosting sites,
or go to the below link and login using your Experts-Exchange username and password.
http://www.ee-stuff.com
Click on "Expert Area" tab
type or paste the link to your Question
"Browse" your pc to the location of your Hijackthis log and click "Upload"
Copy the resulting "url" and post it back here.

OR: either these sites:
http://www.rafb.net/paste/
then at the bottom left corner click "paste"
Copy the address/url and post it here:
0
 
LVL 47

Expert Comment

by:rpggamergirl
ID: 18847632
So was it wareout then?

Sometimes there are still file/files in the wareout.txt that needs to be removed manually, can you post the wareout.txt so we can see if everything is okay?
Wareout entries also show up in the hijackthis log(017 entries) that would need to be fixed if still present.

Thanks!
0

Featured Post

Bringing Advanced Authentication to the SMB Market

WatchGuard announces the acquisition of advanced authentication provider, Datablink, with one mission – to bring secure authentication to SMB, mid-market, and distributed enterprises with a cloud-based solution, ideal for resale via their established channel & MSSP community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Google always has something new and amazing up its sleeve, and the most current thing that they have been working on is another step in the evolution of Google Search, from machine learning to its brilliant successor, deep learning.
Although a lot of people devote their energy toward marketing for specific industries, there are some basic principles that can be applied to any sector imaginable. We’ll look at four steps to take and examine how those steps were put into action fo…
This Micro Tutorial will demonstrate how to add subdomains to your content reports. This can be very importing in having a site with multiple subdomains.
Established in 1997, Technology Architects has become one of the most reputable technology solutions companies in the country. TA have been providing businesses with cost effective state-of-the-art solutions and unparalleled service that is designed…

764 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question