3 Replies Latest reply on Dec 10, 2009 6:26 PM by Grif

    search engine redirect problem

      Mcafee scan says no problems, but links from search engines connect to unrelated sites.  Anyone else run into this?  Anyone have a cure?

        • 1. Re: search engine redirect problem

          Because it appears like malware may have sneaked by McAfee, please try the steps below download, install, update, and run a couple of free malware removal tools.:

           

          On a friend or family member's computer, download the Malwarebytes installer and update files from the links below, copy them to a CD or flash drive, then transfer the files to the problem machine and use them. If you can't start the computer into "normal" windows, try installing, updating, and running the scans AFTER the computer is started into Safe Mode.. I use the sites below to download the installer file and the manual updater:

           

          Once downloaded and before transferring them to the problem machine, rename the program installer "mbam-setup.exe" file to something else like "Gogetum.exe", then copy the installer file and the update file to a CD or flash drive.. Transfer the file to the problem machine, then install the "Gogetum.exe" file, then run the update to get the program current.. After that, run a full system scan and delete anything it finds.

           

          Malwarebytes Installer Download Link (Clicking on the links below will immediately start the download dialogue window.)
          http://www.besttechie.net/tools/mbam-setup.exe

           

          Malwarebytes Manual Updater link
          http://www.malwarebytes.org/mbam/database/mbam-rules.exe

           

          Next, download the SuperAntispyware program and the manual updater from the links below. After running the Malwarebytes tool above, if you still can't download and install it directly from the problem machine, download it on a friend or family member's computer as well. After installing and updating SuperAntispyware, run another full system scan and delete everything it finds as well. As before, you may need to rename the installer file to get the program to install.:

           

          SuperAntispyware
          http://www.superantispyware.com/

           

          SuperAntispyware Manual Updater
          http://www.superantispyware.com/definitions.html
          ____________

           

          In a few situations, in order for the program to run, it was also necessary to rename the main "mbam.exe" file also after installing it.. It resides in the C:\Programs Files\Malwarebytes Antimalware folder....
          _____________________

           

          Hope this helps.

           

          Grif

           

           

          Message was edited by: Grif on 12/7/09 3:49:34 PM PST
          • 2. Re: search engine redirect problem

            Thanks Grif.  Tried your suggestions to no avail, though superantispyware eliminated 168 "threats".  Still getting redirected.  After reading some of the posts, it looks like I may need to break down and take it to a pro for a fix.  Perhaps there is a program out there that can cure the problem, but you could spend a lot of time trying them all till you found the right one.

            • 3. Re: search engine redirect problem

              And what about Malwarebytes? (Sorry it took so long to get back to you but I've been performing WinUpdates on computers throughout our organization for the last couple of days.) Did Malwarebytes run correctly? Tried running repeated scannings in both "normal" Windows and Safe Mode? Because of the redirects, try a couple of other steps which can cause such issues. The items listed may, or may not be there but it's worth checking..:

               

               

              Look for the file below and if there...

               

              C:/Windows/system32/wdmaud.sys

               

              Delete it (or move/rename) and Reboot. (Delete the file ONLY if it resides in the System32 folder.)

              _________________

               

              Next,
              1.Click on the Start button, select "Run", then type "devmgmt.msc" in the blank area, without the quotes, then click on OK.
              2. Once in Device Manager, click "View" in the upper left, select "show hidden devices/drivers".
              3. Then click on "non plug and play drivers/devices", and find TDssserv.sys
              4. If it's there, right click it, then select disable, then restart the computer.
              5. then check if the problem still persists. good luck!

               

              Hope this helps.

               

              Grif