google ridirect virus

has anyone here had to deal with this?Any info would be ap0preciated.Thanks,12(Ted)

Search results being redirected to spam advertising pages? Unfortunately, as far as I'm aware the only "cure" once a machine is infected is to completely reinstall windows, then do a complete virus scan of the hard drive to find and destroy the backup copies.

nt

I had almost the exact same problem today and none of my anti-spyware programs (SpyBot, AdAware, MalwareBytes, Housecall) could fix it. Fortunately, I found the solution on another board. As a little bit of background, viruses sometimes will alter your "hosts" file, which is basically a file that controls the redirecting for your browsers (specifically, this file makes it faster for your computer to convert URLs into the relevant IP addresses by having a shortcut list of IP addresses instead of having to look them up when you type in the URL).

Anyway, enough background, here's what you need to do to fix:

(1) Click START > RUN > and type in "C:\windows\system32\drivers\etc\hosts"
(2) When prompted, open the HOSTS file in either Notepad or Wordpad
(3) Delete all the lines of IP addresses in the text document except for "127.0.0.1 localhost".

If you find several lines of IP numbers other than localhost in your hosts file, then this is almost definitely your problem and will be fixed right away. If not, then this probably isn't the issue, but it's worth a look.


http://www.google.co.jp/support/forum/p/Web+Search/thread?tid=6df7e15519290612&hl=en

Seems to be a nasty malware, I didn't know about it.

http://majorgeeks.com/Kaspersky_Free_Cleaner_d4515.html

it is the ONLY scanner that kills this piece of shit rootkit that I have found, JUST used it successfully on my beautiful Daughter's boyfriend's laptop. AND I did a thread on this (Virus Total) that was largely ignored.

http://upload.democraticunderground.com/discuss/duboard.php?az=show_mesg&forum=439&topic_id=1041606&mesg_id=1044365


Kaspersky Virus Removal Tool is a utility designed to remove all types of threats from computers. Kaspersky Virus Removal Tool uses the effective detection algorithms realized in Kaspersky Anti-Virus and AVZ.

Kaspersky Virus Removal Tool does not provide resident protection for your computer. After disinfecting a computer, you are supposed to remove the tool and install a full version of antivirus software.

Advantages:


Simplified interface.

Can be installed to an infected computer (Safe Mode supported).

Composite scan and disinfection system: signature detection and heuristic analyzer.

Gathering system information and interactive creation of scripts for disinfection.

General functions:


Automatic and manual removal of virus, Trojans and worms.

Automatic and manual removal of Spyware and Adware modules.

Automatic and manual removal of all types of rootkits.

Known issues:


System memory scan is unavailable in x64 versions of Windows XP / Vista / 7 due to specific features of application system drivers.

Impossible to rename application folder if User Account Control is enabled in Windows Vista settings and application Self-Defence disabled.

http://devbuilds.kaspersky-labs.com/devbuilds/AVPTool/ (direct download)



(And click the MY COMPUTER box too)

I have a feeling I am not welcome by the OP. Guess he's on his own, goodnight...

I very much appreciate the info and will try it and let you know the outcome.I haven't had my PC on much since getting this damned virus,usually just when trying to battle it which so far has been unsuccessful and am trying not to spend more money on promises that don't seem to work.It is a very invasive bug that caused me to spend ten minutes and two attempts just to get this reply to you.Once again,thank you very much for your reply.Ted Harris,AKA 12string.

My 2 go to products & I have done this for numerous PCs with malware including redirect malware.

Both are free. Make sure to get Combofix from Bleepingcomputer website. Also a good help forum there. And they can recommend any other malware & rootkit removal tools you might need.

Also Kaspersky TDSSKiller for rootkits.

Check out this discussion on Google Redirect on BleepingComputer. http://www.bleepingcomputer.com/forums/topic395104.html/page__p__2241257__hl__redirect__fromsearch__1#entry2241257

And DU has a computer help forum.

BTW it was Combofix that fixed the Google redirect on a coworker's PC. TDSSKiller may work as well. If you get rid of it I'd followup with MalwareBytes.