Solved

Search Engine Hijacked

Posted on 2010-11-16
7
1,091 Views
Last Modified: 2013-12-06
I have a problem with a hijack of my search engine. When I go to a search engine (Google, Yahoo, Etc) the sites I previous visited I can navigate to with no problem, the sites I never been to I get redirected to an ad. When I hit back to return to the search engine and try the link again it works fine.

What I tried...

Reset IE and disabled all add-ons, set auto detect for proxy setting.
Uninstalled and reinstalled IE.
Ran Malware Byes, Symantec Virus Scan, Advanced System Care, HijackThis, System Restore.
Checked the DNS address on another computer in the same domain which is working fine and compared it to the computer that has the issue....same address.
Tried Firefox and Firefox safe-mode worked fine till a few minutes later and starting showing the same redirection.
0
Comment
Question by:bmtservicedesk
  • 3
  • 2
  • 2
7 Comments
 
LVL 12

Expert Comment

by:alikaz3
ID: 34151220
Go to internet options>connections>LAN settings (control panel) and check if you have anything in your proxy configuration. A new bug I've been cleaning out of systems installs some proxy app that your requests are forwarded to via the proxy settings. Also, check your firefox internal proxy settings (options>advanced>network>connection-settings, make sure it's on "use system proxy settings"
proxy-xp2.gif
0
 
LVL 12

Expert Comment

by:alikaz3
ID: 34151224
I wasn't that clear, make sure you are unchecking "Use a proxy server for your LAN" If it's checked
0
 
LVL 66

Accepted Solution

by:
johnb6767 earned 500 total points
ID: 34152459
How to remove malware belonging to the family Rootkit.Win32.TDSS ...
http://support.kaspersky.com/viruses/solutions?qid=208280684

Run this to make sure it is clean. The TDSS rootkits are known to hijack DNS and redirect your google search results.....

Post your HJT log if needed.....
0
Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

 

Author Comment

by:bmtservicedesk
ID: 34154631
unchecking "Use a proxy server for your LAN" was one of the first things I tried...Firefox has the same issue...the problem is also not limited to Google searches.


I will try Rootkit fix.
0
 
LVL 12

Expert Comment

by:alikaz3
ID: 34156768
john has a good suggestion. Also, try Super Anti Spyware
0
 

Author Closing Comment

by:bmtservicedesk
ID: 34159865
The best removal tool...puts all other to software that I tried to shame
0
 
LVL 66

Expert Comment

by:johnb6767
ID: 34161591
LOL, but keep in mind that one is only targetted at a specific family of nastys....... Wont do the general cleanup....

Glad your fixed.....
0

Featured Post

What Is Threat Intelligence?

Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

Join & Write a Comment

Suggested Solutions

Title # Comments Views Activity
Is TightVNC easily hacked on Windows 10 ? 13 253
Help with possible virus 16 121
How do I Uninstall Sophos endpoint Security 8 50
PCAnywhere 2 58
Sub-Titled: “My Way” (with apologies to Francis Albert Sinatra) Let me start by stating emphatically that I am one of those Experts who prefer doing things “My Way”. It’s kind of a no-brainer. “The following procedure works for me, so here is …
It started not too long ago. It was at first annoying. My keystrokes seemed to be randomly generated, not the ones I typed on the keyboard. For some reason this only happened in certain applications (especially browsers such as IE11, Firefox and Chr…
In this seventh video of the Xpdf series, we discuss and demonstrate the PDFfonts utility, which lists all the fonts used in a PDF file. It does this via a command line interface, making it suitable for use in programs, scripts, batch files — any pl…
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.

760 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now