Internet Links keep getting redirected!?!?!?

Question

Hi,

I own an ACER Extensa 4420 laptop with Windows Vista. When I search for something in Google or Yahoo, the link keep getting redirected to the following site: http://newserversearch.com/.
What kind of VIRUS do I have and how do I get rid of it?

I scanned the computer with Malaware, Spybot, CCleaner, McAfee, and AVG . All the scans come up clean.

What do I do? Please Help.

Answer 1

A. someone played with your HOST file. (unlikely)





B. You have a rootkit infection. (likely)







Boot into safemode with networking (F7/F8 at startup)





then go to download.com and install malwarebytes & Spybot Search & Destroy.

Update - Full scan - Fix Problem







Note: if you don't have Safemode with networking, then you have two other options:

-Go into normal safemode, and transfer the programs through USB from another pc.

-startup normal. Start - Run - taskmgr.exe - processes - close some of the obvious unwanted things. Until you can get online and do the things above.







If you can get on MSN, then I could do it for you~

Doesn't work? Format your computer with a bootable cd.



( If you don't have one, then obtain one or burn Ubuntu mint - its free)

Answer 2

Alright well i'm gonna keep this jargon free so theres gonna be a lot of "noob" explaining. Sounds to me like you have a trojan. So what you have to do is first try to remember the last thing you may have downloaded before this started happening(but you have have also caught it by visiting a unsecure website, this is why i keep my kids off my computer and their myspace). If you for some reason do remember what it was then simple delete it and anything that has to do with it(which in cases of trojans will have to be done manually and can't be done with a simple uninstall). If not and heres the hard part.... Alright start by hitting Alt+Crtl+Delete to call up your task manager and click on the processes tab, press the Prt Scr button and open up paint and paste it in and save it(this will take a snapshot of your screen and save it). After doing that you should open up your web browser(internet explorer) and click on a link, at the same time you should look at your task manager and see if any new processes pop up during this time. If it does highlight it and right click it and hit properties and look at the location of the file, remember it, click end process on your task manager and try searching the web if the problem has stopped go to that location of that file and delete it and restart your computer. Hopefully this trojan is simple and that should fix it, although some have back up upon back up files that will restore the file you just deleted, if that happens you should go pull out your system restore disc that came with the computer when first bought and do a system restore bringing your computer back to the way it was the first day you bought it, but this will delete any files, music, everything you have.

Answer 3

Are you using AVG and McAfee at the same time? If so you've crippled both of them. Uninstall McAfee and retry the AVG scan.



Also CCleaner is NOT an anti-virus or anti-malware solution!



You need to go into spybot, and on the top theres a button called "mode"



Click Advanced, and hit ok to the warning. Then on the bottom left click on tools,



In the right-pane, check BHO's and ActiveX



Then on the left pane, under tools, click on BHO's and delete all of them listed on the right.

Do the same for the activeX.



(Note you may need to reinstall flash and java after this but it will ensure that the hijacker is removed)

Answer 4

Yes you have something in your computer try remembering when did it star, once you brake your head on this one, go to control panel and remove/programs try looking for a particular program around that day if is something you install yourself or if you don't remember try looking at the time of the installation. i had it before in my computer what i did was all of the above them i delete my internet connection made another and is been good ever since that. i had that them it was www.m.yahoo.com, www.googleserch.com/page. been here so i know what to do in this cases

Answer 5

it's tricky at best to remove, superantispyware scanner updated may help. malwarebytes might too, you can try it. this one is suspose to be able to do it. costs, but one full scan is free to try. and i don't know if it will or not. try hijack this from majorgeeks.com



http://www.simplysup.com/

Answer 6

Here ya go. https://support.mozilla.com/en-US/forum/1/529808

Answer 7

sounds like u are gettin hijacked.



spybot shoulda caught that crap tho. but i know that "vundo" one was a b*tch to remove.