HardwareHeaven.com

HardwareHeaven.com

Looking for the skin chooser?
 
 
  • Home

  • Hardware reviews

  • Articles

  • News

  • Tools

  • Gaming at HardwareHeaven

  • Forums

 

Go Back   HardwareHeaven.com > Forums > Software Discussion > Windows & Other OS Discussion & Support


Windows & Other OS Discussion & Support Discuss all versions of Microsoft Windows and any other operating system, and get support if you need it.

Reply
 
Thread Tools
Old May 31, 2012, 07:32 PM   #1
HardwareHeaven Lover
 
EfrainMan's Avatar
 
Join Date: Sep 2004
Location: Los Angeles
Posts: 202
Rep Power: 62
EfrainMan is just really niceEfrainMan is just really niceEfrainMan is just really niceEfrainMan is just really nice
System Specs

Searches being redirected

I can't for the life of me find the cause. Searches in Google and Bing are being redirected to some random pages. Only clicking the search results does this, manually entering links is fine. This is an employee's laptop that got infected, and I'm cleaning out. I've run Malwarebytes Antimalware and SuperAntiSpyware, and after the initial cleanings they only come out clean now. I've tried it with IE, Chrome and Firefox, they all do it, and Firefox was installed after the spyware scans came out clean. I've only done a cursory look inside the registry for anything obvious, but I really don't know what else to look for. My hosts file is normal, nothing extra or different there. I am definitely at my wit's end here, where else should I be looking? Windows XP Pro 32-bit, all updated.
__________________
My modest video card history: S3 Virge, 3DLabs Permedia 2, 3dfx Voodoo3 2000, 3dfx Voodoo5 5500, GeForce 3 Ti500, GeForce 4 Ti4600, Radeon 9700 Pro, Radeon X800XT, Radeon X1900XT+Crossfire, GeForce 8800GTX, Radeon HD4870x2, Radeon HD5870, 2x Radeon HD6970, GeForce GTX 680
EfrainMan is offline   Reply With Quote


Old Jun 1, 2012, 12:49 AM   #2
HH's Nokia shareholder!
 
Join Date: Dec 2004
Location: Vantaa, Finland
Posts: 8,251
Rep Power: 219
temeteus82 is godlike in his statustemeteus82 is godlike in his statustemeteus82 is godlike in his statustemeteus82 is godlike in his statustemeteus82 is godlike in his statustemeteus82 is godlike in his statustemeteus82 is godlike in his statustemeteus82 is godlike in his statustemeteus82 is godlike in his statustemeteus82 is godlike in his statustemeteus82 is godlike in his status
System Specs

Re: Searches being redirected

Look your DNS settings. Sounds like some one is using DNS server to redirect you.
__________________
Quote:
Originally Posted by dj_stick View Post
no, stupidity is a WMD in itself

temeteus82 is offline   Reply With Quote
Old Jun 1, 2012, 08:19 AM   #3
Unus offa, unus iuguolo
 
Takaharu's Avatar
 
Join Date: Aug 2009
Location: England, UK
Posts: 2,678
Rep Power: 234
Takaharu is godlike in his statusTakaharu is godlike in his statusTakaharu is godlike in his statusTakaharu is godlike in his statusTakaharu is godlike in his statusTakaharu is godlike in his statusTakaharu is godlike in his statusTakaharu is godlike in his statusTakaharu is godlike in his statusTakaharu is godlike in his statusTakaharu is godlike in his status
System Specs

Re: Searches being redirected

I'm with tem on this one.
Use ipconfig /all from the command prompt and see what the DNS servers say. That's quite a common issue when dealing with spyware and it won't be rectified automatically by spyware removers.
__________________
Time is Eternal, Life is not.

I don't get paid to know the answer, therefore I'm far more likely to give you a straight and honest answer.
Takaharu is offline   Reply With Quote
Old Jun 1, 2012, 10:04 AM   #4
HH's Nokia shareholder!
 
Join Date: Dec 2004
Location: Vantaa, Finland
Posts: 8,251
Rep Power: 219
temeteus82 is godlike in his statustemeteus82 is godlike in his statustemeteus82 is godlike in his statustemeteus82 is godlike in his statustemeteus82 is godlike in his statustemeteus82 is godlike in his statustemeteus82 is godlike in his statustemeteus82 is godlike in his statustemeteus82 is godlike in his statustemeteus82 is godlike in his statustemeteus82 is godlike in his status
System Specs

Re: Searches being redirected

Or just look what the ipv4 settings are in control panel. If they aren't set by DHCP server then that's the issue. Unless they are OpenDNS's servers that are ok.
__________________
Quote:
Originally Posted by dj_stick View Post
no, stupidity is a WMD in itself

temeteus82 is offline   Reply With Quote
Old Jun 1, 2012, 04:31 PM Threadstarter Thread Starter   #5
HardwareHeaven Lover
 
EfrainMan's Avatar
 
Join Date: Sep 2004
Location: Los Angeles
Posts: 202
Rep Power: 62
EfrainMan is just really niceEfrainMan is just really niceEfrainMan is just really niceEfrainMan is just really nice
System Specs

Re: Searches being redirected

I checked the DNS servers, and they are the same as any others connected to our router. And the network connection is set to automatically get the DNS servers and DHCP. No other machine on this network is being redirected.

Also, I tried doing something someone else suggested, which was set the DNS servers to Google's public ones, the 8.8.8.8 and 8.8.4.4, but the searches were still being redirected.
__________________
My modest video card history: S3 Virge, 3DLabs Permedia 2, 3dfx Voodoo3 2000, 3dfx Voodoo5 5500, GeForce 3 Ti500, GeForce 4 Ti4600, Radeon 9700 Pro, Radeon X800XT, Radeon X1900XT+Crossfire, GeForce 8800GTX, Radeon HD4870x2, Radeon HD5870, 2x Radeon HD6970, GeForce GTX 680
EfrainMan is offline   Reply With Quote
Old Jun 1, 2012, 05:02 PM   #6
Unus offa, unus iuguolo
 
Takaharu's Avatar
 
Join Date: Aug 2009
Location: England, UK
Posts: 2,678
Rep Power: 234
Takaharu is godlike in his statusTakaharu is godlike in his statusTakaharu is godlike in his statusTakaharu is godlike in his statusTakaharu is godlike in his statusTakaharu is godlike in his statusTakaharu is godlike in his statusTakaharu is godlike in his statusTakaharu is godlike in his statusTakaharu is godlike in his statusTakaharu is godlike in his status
System Specs

Re: Searches being redirected

There'll still be something lingering in the background. Look for something either obviously out of place in the running processes or something with a slight spelling mistake (eg: Esplorer). They're my only ideas.
__________________
Time is Eternal, Life is not.

I don't get paid to know the answer, therefore I'm far more likely to give you a straight and honest answer.
Takaharu is offline   Reply With Quote
Old Jun 1, 2012, 05:37 PM Threadstarter Thread Starter   #7
HardwareHeaven Lover
 
EfrainMan's Avatar
 
Join Date: Sep 2004
Location: Los Angeles
Posts: 202
Rep Power: 62
EfrainMan is just really niceEfrainMan is just really niceEfrainMan is just really niceEfrainMan is just really nice
System Specs

Re: Searches being redirected

Naw, I didn't notice any strange programs in task manager. Also, I checked the LAN settings and there are no proxies or anything.

I may have to just reinstall the OS, but it's a pain for this laptop.

EDIT: Got some advice from another forum, I was "dun been rootkit'd" and they recommended the Kaspersky live cd and combofix. They seemed to have resolved the issue. Thank you for your help
__________________
My modest video card history: S3 Virge, 3DLabs Permedia 2, 3dfx Voodoo3 2000, 3dfx Voodoo5 5500, GeForce 3 Ti500, GeForce 4 Ti4600, Radeon 9700 Pro, Radeon X800XT, Radeon X1900XT+Crossfire, GeForce 8800GTX, Radeon HD4870x2, Radeon HD5870, 2x Radeon HD6970, GeForce GTX 680

Last edited by EfrainMan; Jun 1, 2012 at 07:54 PM.
EfrainMan is offline   Reply With Quote
Old Jun 1, 2012, 11:04 PM   #8
Require backup .... NO
 
Mr cairo's Avatar
 
Join Date: Jul 2002
Location: Slightly to the left
Posts: 2,019
Rep Power: 130
Mr cairo has a reputation beyond refuteMr cairo has a reputation beyond refuteMr cairo has a reputation beyond refuteMr cairo has a reputation beyond refuteMr cairo has a reputation beyond refuteMr cairo has a reputation beyond refuteMr cairo has a reputation beyond refuteMr cairo has a reputation beyond refuteMr cairo has a reputation beyond refuteMr cairo has a reputation beyond refuteMr cairo has a reputation beyond refute
System Specs

Donator
Re: Searches being redirected

Quote:
Originally Posted by EfrainMan View Post
the Kaspersky live cd and combofix. They seemed to have resolved the issue. Thank you for your help
you got a link for that ??
__________________
I hate being Bipolar , Its Awesome
Mr cairo is offline   Reply With Quote
Old Jun 2, 2012, 04:48 AM   #9
HardwareHeaven Extreme Member
 
Tipstaff's Avatar
 
Join Date: Jul 2002
Location: Real capital of Canada: Torauna
Posts: 7,706
Rep Power: 390
Tipstaff is godlike in his statusTipstaff is godlike in his statusTipstaff is godlike in his statusTipstaff is godlike in his statusTipstaff is godlike in his statusTipstaff is godlike in his statusTipstaff is godlike in his statusTipstaff is godlike in his statusTipstaff is godlike in his statusTipstaff is godlike in his statusTipstaff is godlike in his status
System Specs

Gold Member
Re: Searches being redirected

Quote:
Originally Posted by Mr cairo View Post
you got a link for that ??
Kaskpersky Rescue Disk 10

I use this thing all the time. Just be aware that updating the definitions can take forever, and is only saved to the local machine. That's when I found a little utility called "Kaspersky Rescue Disk Update" that, when run, will decompress the ISO, download the new definitions, and rebuild the ISO file for you. Then it's just a matter of burning it to CD, or uploading it to a USB pen.
__________________


Portal: The Flash Version
_________________________________
Brain: So, you sacked the cocky khaki Kicky Sack sock plucker?
Mr. Sackett: The second cocky khaki Kicky Sack sock plucker I've sacked since the sixth sitting sheet slitter got sick.
Tipstaff is offline   Reply With Quote
Old Jun 2, 2012, 08:27 PM   #10
Unus offa, unus iuguolo
 
Takaharu's Avatar
 
Join Date: Aug 2009
Location: England, UK
Posts: 2,678
Rep Power: 234
Takaharu is godlike in his statusTakaharu is godlike in his statusTakaharu is godlike in his statusTakaharu is godlike in his statusTakaharu is godlike in his statusTakaharu is godlike in his statusTakaharu is godlike in his statusTakaharu is godlike in his statusTakaharu is godlike in his statusTakaharu is godlike in his statusTakaharu is godlike in his status
System Specs

Re: Searches being redirected

Good news!
Nah, not really, but I think I might have found the cause of the problem: DNs Changer Trojan.
__________________
Time is Eternal, Life is not.

I don't get paid to know the answer, therefore I'm far more likely to give you a straight and honest answer.
Takaharu is offline   Reply With Quote
Old Oct 21, 2012, 01:23 AM   #11
Just one crazy geek :)
 
caps_buster's Avatar
 
Join Date: Oct 2012
Location: Czech republic
Posts: 105
Rep Power: 39
caps_buster has a divinity and aura the likes we have never seencaps_buster has a divinity and aura the likes we have never seencaps_buster has a divinity and aura the likes we have never seencaps_buster has a divinity and aura the likes we have never seencaps_buster has a divinity and aura the likes we have never seencaps_buster has a divinity and aura the likes we have never seencaps_buster has a divinity and aura the likes we have never seencaps_buster has a divinity and aura the likes we have never seencaps_buster has a divinity and aura the likes we have never seencaps_buster has a divinity and aura the likes we have never seencaps_buster has a divinity and aura the likes we have never seen

Re: Searches being redirected

Kill it then with fire!

Damn annoying hacks...
caps_buster is offline   Reply With Quote
Reply

Thread Tools