We help IT Professionals succeed at work.

Internet Explorer - Links redirecting to strange sites

garryshape
garryshape asked
on
I'm running IE 7 on Windows XP, and I've got a strange spyware or malware problem, I think.

If I search for something on Google or Bing, and I click one of the results (which are actually on popular websites), sometimes - not all the time - it redirects to some strange website with products, like I'm infected with affiliate spyware or something.

Though I've run SuperAntiSpyware, Malwarebytes, Spybot, Trend Micro, Sunbelt CounterSpy, and they have found no infections.

After I noticed this issue with IE, I installed FireFox, and the issue is happening there apparently, too.

I've attached a hijack this log in case this is helpful for someone to help mew. hijackthis.txt
Comment
Watch Question

Commented:
check you hosts file located in windows/system32/drivers/etc. Sounds like you may have some redirect entries there
dbruntonQuid, Me Anxius Sum?  Illegitimi non carborundum.

Commented:
C:\WINDOWS\TEMP\NB7D9D.EXE

That I believe should not be there for starters.
Jason WatkinsIT Project Leader

Commented:
You could also try switching your computer's DNS server from it's current setting to another.

OpenDNS; 208.67.220.220, 208.67.222.222
Google; 4.4.4.4, 8.8.8.8
Commented:
I saw this a few weeks ago. If it is the same one, disabling Google toolbar stops the redirects. I got it out with ComboFix.
Please follow the instructions carefully.
http://www.bleepingcomputer.com/combofix/how-to-use-combofix 
 
Jason WatkinsIT Project Leader

Commented:
I hate Google toolbar.... :)

Author

Commented:
I don't have the Google Toolbar installed on this computer.
The search result hyperlinks sometimes are redirecting me to completely different URL's that contain Affiliate ID's, so I know it's some type of infection that's making someone some money.

Author

Commented:
I'll try some of the other solutions here, will report back.
Top Expert 2007
Commented:

"That I believe should not be there for starters."
C:\WINDOWS\TEMP\NB7D9D.EXE <-- this is a very legit process.
 
Also run TDSSKiller and show us the log.....same when using ComboFix, show us the log to make sure it doesn't have any bad files needing to be removed.
Download TDSSKiller and save it to your Desktop.
http://support.kaspersky.com/downloads/utils/tdsskiller.zip 

Author

Commented:
I ran the Combo Fix and apparently that fixed it. I went through 3 pages on Google search results looking using 3 different keywords, and so far none of them has redirected.

Author

Commented:
google toolebar was not present on the computer, however "Combofix" resolved the issue.
Top Expert 2007

Commented:
Glad to know it's now resolved.
ComboFix has done it again!

To uninstall Combofix:
Go to Start > Run and 'copy and paste' next command in the field:

ComboFix /Uninstall

Or simply rename ComboFix.exe to Uninstall.exe and double click it.
Thanks!