1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Google keeps redirecting me to ads after clicking search result

Discussion in 'Virus & Other Malware Removal' started by Kaioshin_Sama, Apr 9, 2010.

Thread Status:
Not open for further replies.
  1. Kaioshin_Sama

    Kaioshin_Sama Thread Starter

    Apr 9, 2010
    It almost seems like this is some sort of outbreak judging by the frequency I've seen topics specific to this issue posted here and other forums and I'm hoping I'm not breaking any rules by posting another one of these, but the way I understand it a person is supposed to create their own help topic for their own particular case. Anyway I'm running Windows XP Service Pack 2 and have run Malwarebytes, Ad-Aware and AVG 9.0 and only one thing came up that has now been deleted and so far I still keep getting redirected from google results to seemingly random websites (some of which don't even appear to actually exist) but all of which frequently feature the same logo on my Opera browser which I'll post here:


    Also I noticed a suspicious folder in my base C:\ directory called 32788R22FWJFW with the file called nircmd.cfxxe in it along with one called C:\Qoobox, but the latter may have been created when I tried to run combofix before reading that it should only be run after being recommended. I never went beyond the first yes/no question that popped up nor installed it though. Also I quickly opened the taskmanager to see if I could find anything unusual as I was rebooting and noticed that there were three instances of a process called googleupdate.exe that ran and then vanished after the startup.

    The problem is recurring in Internet Explorer as well. This is my Malwarebytes log from the latest search in safe mode:

    Malwarebytes' Anti-Malware 1.45

    Database version: 3967

    Windows 5.1.2600 Service Pack 2 (Safe Mode)
    Internet Explorer 7.0.5730.13

    4/8/2010 3:41:02 PM
    mbam-log-2010-04-08 (15-41-02).txt

    Scan type: Full scan (C:\|D:\|E:\|F:\|G:\|H:\|I:\|)
    Objects scanned: 243875
    Time elapsed: 38 minute(s), 31 second(s)

    Memory Processes Infected: 0
    Memory Modules Infected: 0
    Registry Keys Infected: 0
    Registry Values Infected: 0
    Registry Data Items Infected: 0
    Folders Infected: 0
    Files Infected: 1

    Memory Processes Infected:
    (No malicious items detected)

    Memory Modules Infected:
    (No malicious items detected)

    Registry Keys Infected:
    (No malicious items detected)

    Registry Values Infected:
    (No malicious items detected)

    Registry Data Items Infected:
    (No malicious items detected)

    Folders Infected:
    (No malicious items detected)

    Files Infected:
    C:\Documents and Settings\Graham Maddeaux\Local Settings\Temporary Internet Files\Content.IE5\LRACF31L\setup[1].exe (Malware.Packer.Gen) -> Quarantined and deleted successfully.

    Hopefully we can all get to the bottom of this cause indeed it seems like a widespread problem.
  2. Kaioshin_Sama

    Kaioshin_Sama Thread Starter

    Apr 9, 2010
    The problem seems to have gotten a little worse today with a win32 process taking up an abnormal amount of resources and then closing on me. I'm also starting to get error messages from my browser with it then randomly closing down. Family members need to use the computer too so I'm hoping for help and a solution sooner rather than later otherwise I might just have to reformat or something for the quick fix.
As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/915754

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice