Google search results now require extra step to get to the page I want

I noticed about two weeks ago that nearly all my google search results were not directly reachable. When I clicked on one of the search results, it brings me to an unrelated advertising page.
Also for Google search results there now is a little tab that appears to the left of main search results. This tab appears if I hover the mouse over the main search result. If I click on the tab I can see the normal page, and this is my work around to going directly to a search result. So I now have to click the tab, and then click the tab-page that comes up...two extra clicks to go where I want!!! Why can't I just click any of the main links that result from a search??? Also it takes two clicks to go back from the Ad-page to my search results, where normally just clicking the back button once does it from a direct link. Finally it doesn't happen to every search...some I can go to directly but since most bring me to a unrelated advertising page, why bother to find out every time? I usually just use the tab's page to go where I want...what a unnecessary pain, 2 extra clicks.
My security s/w shows several filesquarantined about 10 days ago.
Adobeupdt32.exe
ExplorerWin32.dll
IntelTrayTray.dll
All have the reason of a variant of Win32/Kryptik.TGT trojan but I've looked at removal instructions and none of the files are in the registry and doesn't appear to be installed on my system. I am now doing a full scan of hard drive (should have done before posting)
I'm using Firefox 7.0.1 if it matters.
Does anyone know what the IntelTrayTray.dll does? When I reboot the PC it reports this file is not found, (I guess since it was quarantined)....do I need it?


LinkAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

LinkAuthor Commented:
Does anyone know what the IntelTrayTray.dll does? When I reboot the PC it reports this file is not found, (I guess since it was quarantined)....do I need it?
0
0x6Commented:
It was most likely a trojan. Was the path c:\programdata\IntelTrayTray.dll?
What is your OS?
What is the security software?

Would suggest using MalwareBytes to scan your PC.
0
LinkAuthor Commented:
When computer starts I now get a message that says "Error loading C:\Documents and Settings\All Users\Application Data\IntelTrayTray.dll.

OS is XP-SP3
Security S/W is ESET Smart Security 4
0
Cloud Class® Course: Microsoft Office 2010

This course will introduce you to the interfaces and features of Microsoft Office 2010 Word, Excel, PowerPoint, Outlook, and Access. You will learn about the features that are shared between all products in the Office suite, as well as the new features that are product specific.

0x6Commented:
Looks like your Security software removed the file from the above location, but it is still being called up during the OS start up. Since the file is not there, hence the error message. Type following in the Run box:
msconfig

Go to the Startup tab:
Uncheck the IntelTrayTray App/File if there. After clicking ok, restart the PC.
After restarting you will get a message about selective startup, select 'Don't show this again...'

If the error is gone, go back to the msconfig utility and the startup tab and check each application to make sure you recognize what it is and not some other malware that is running in the background. Better yet post screenshots if possible.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
0x6Commented:
Please don't uncheck any other application without fully researching what it is and if it is needed.
0
johnb6767Commented:
Two things....

How to remove malware belonging to the family Rootkit.Win32.TDSS ...
http://support.kaspersky.com/viruses/solutions?qid=208280684

Run this to make sure it is clean. The TDSS rootkits are known to hijack DNS and redirect your google search results.....

Secondly, make sure your HOSTS file is cleaned, and doesnt have any entries for google.com.....

It is in c:\windows\system32\drivers\etc\HOSTS (no extension). Just click it and open in Notepad.....

It should only have the following towards the bottom...  (note: Lines beginning with # are ignored, and there is a lot of informational data there, preceeded with a # on each line, those are fine)....

127.0.0.1    localhost
0
LinkAuthor Commented:
Problem is gone, thx for the advice. Just wondering in closing what the IntelTrayTray.dll file is (was) for?

Thanks again
0
johnb6767Commented:
Im glad you found an answer, but is the Google issue resolved as well?

And that .DLL was probably just a viral file, that doesnt belong to anything....
0
LinkAuthor Commented:
Yes the google search is working correctly, thx
0
Bill DohertyNetwork AdministratorCommented:
Hi,
I wanted to add to this discussion that I had similar search issues but on all browsers and all search engines.

Johnb6767's mention of the rootkit killer found what 4 other scans missed. Apparently the MBR file on the hard drive reported Rootkit.Boot.SST.a as infected.

The scan cured and search results take me to the correct sites (good or bad) once again.

Thanks!

bill
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Legacy OS

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.