Welcome guest. Before posting on our computer help forum, you must register. Click here it's easy and free.

Author Topic: Google redirect problem  (Read 17766 times)

0 Members and 1 Guest are viewing this topic.

SuperDave

  • Malware Removal Specialist


  • Genius
  • Thanked: 1020
  • Certifications: List
  • Experience: Expert
  • OS: Windows 10
Re: Google redirect problem
« Reply #15 on: August 15, 2011, 05:00:21 PM »
You can use this tool to remove McAfee.

•McAfee Consumer Products Removal Tool  - Use on McAfee, AOL distributions of McAfee, CA distributions of McAfee - McAfee Consumer Products Removal tool (MCPR.exe)

Sorry. Please try doing this:
Note: If you still have HJT on your desktop you can skip number 1 and go to number 2.
1. Please download: HiJackThis to your Desktop.
2. Double Click the HijackThis icon, located on your Desktop.
By Default, it will install to: C:\Program Files\Trend Micro\HijackThis
3. Accept the license agreement.
4. Open HijackThis and select Do a system scan only

Place a check mark next to the following entries: (if there)

Trusted Zone: google.com\earth
Trusted Zone: internet
Trusted Zone: mcafee.com


Important: Close all open windows except for HijackThis and then click Fix checked.

Once completed, exit HijackThis.
*****************************************************
Please run RootRepeal even if HJT doesn't run for you.
Windows 8 and Windows 10 dual boot with two SSD's

bicyclist

    Topic Starter


    Rookie

    • Experience: Beginner
    • OS: Windows XP
    Re: Google redirect problem
    « Reply #16 on: August 26, 2011, 01:11:16 AM »
    Dave,

    I ran the McAfee Consumer products Removal Tool and all the old McAfee files are gone (I scanned my system as a check).   :)   Though there is a new McAffee file, McAfee.xml (in C:\Program Files\common Files\the shield deluxe\Setup Info\(alpha numeric code)\extern), from my re-installation of The Shield Deluxe antivirus checker (see next paragraph) that is part of that install.   

    I took a big detour in order to run the programs you requested in your last post.  I had to re-install the Shield Deluxe (I now have the 2011 version) because I forgot my password that is needed in order to disable the checker in order to run RootRepeal--really stupid mistake on my part losing my password.  I latter found the password buried in my notes.

    It was lucky I found my password because the re-install of Shield Deluxe still insisted on my password to change any settings.  By the way, I decided to password protect the Shield Deluxe antivirus setting because I think something (not me) changed only one of the settings, the real time protection, without my knowledge while the other settings were left alone (when I disable my virus checker I turn off all settings).

    I tried to run HiJackThis as you requested in your last post.   I could not get it to run on my system.  When I tried to run it I got a window that said "C:\Documents & Settings\User\Desktop\HiJackThisInstaller.exe is not a valid win32 application".   :(

    I tried to run RootRepeal, as you requested in your last post, after I turned off my Windows Firewall and the Shield Deluxe anti-virus checker.  I could not get it to run on my system.  When I tried to run it I got a pop-up window from the Shield Deluxe that said "RootRepeal has been terminated by Active Virus Control".  I turned off all the product settings on the preferences window of the Shield Deluxe in preparation for the RootRepeal run.  I must not be missing something somewhere and I didn't see the Shield Deluxe listed in your link to methods to disable programs.  :(

    What do I do next?

    Ken   
           

    SuperDave

    • Malware Removal Specialist


    • Genius
    • Thanked: 1020
    • Certifications: List
    • Experience: Expert
    • OS: Windows 10
    Re: Google redirect problem
    « Reply #17 on: August 26, 2011, 05:38:02 PM »
    I'd like to scan your machine with ESET OnlineScan

    •Hold down Control and click on the following link to open ESET OnlineScan in a new window.
    ESET OnlineScan
    •Click the button.
    •For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
    • Click on to download the ESET Smart Installer. Save it to your desktop.
    • Double click on the icon on your desktop.
    •Check
    •Click the button.
    •Accept any security warnings from your browser.
    •Check
    •Push the Start button.
    •ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
    •When the scan completes, push
    •Push , and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
    •Push the button.
    •Push
    A log file will be saved here: C:\Program Files\ESET\ESET Online Scanner\log.txt
    Windows 8 and Windows 10 dual boot with two SSD's

    bicyclist

      Topic Starter


      Rookie

      • Experience: Beginner
      • OS: Windows XP
      Re: Google redirect problem
      « Reply #18 on: August 31, 2011, 07:48:14 PM »
      Dave,

      I ran the ESET OnlineScanner and no threats were found.  It took about four hours to scan my system's seventy thousand files.

      My observations of my current system status:  my system does not have the redirect problem and I have sound thanks to your directions to remedy those problems.   

      However, I think I still have some less serious issues regarding connection.  During the mid-afternoon portion of the day (between about 2pm and 5pm) and mid-evening (about 7pm to 9pm) I have problems connecting to the Internet or, while on the Internet during those time periods, my system is so slow it seems as though my machine has locked up.   I think this might be a problem with the Internet service provider (Earthlink) because my wife's computer, with whom I share that service via a wireless connection, has a similar problem but her's is not as severe. 

      Also, I think some of my connection problem might be caused by my wireless network connection (Trendnet to Linksys router) since the signal strength changes occasionally; the signal strength is not steady since it changes from excellent or good to average on occasion. 

      Additionally, I think an icon in the system tray on my computer is indicating intermittent or loss of wireless network connection when the wave symbol, that normally lights up periodically (white color to green color) next to the monitor symbol, either freezes in the on position (green light) or fails to light (white color).   

      Any suggestions?  What do I do next?  I'm interested in making sure all viruses and malware have been removed from my system.

      I do appreciate all your help; my improved Internet experience due to your help has allowed me to explore and navigate all the health care options for my ailing father and mother in-law.  Again, thank you.         

      Ken

      SuperDave

      • Malware Removal Specialist


      • Genius
      • Thanked: 1020
      • Certifications: List
      • Experience: Expert
      • OS: Windows 10
      Re: Google redirect problem
      « Reply #19 on: September 01, 2011, 05:03:19 PM »
      Quote
      Any suggestions?  What do I do next?  I'm interested in making sure all viruses and malware have been removed from my system.
      I'm quite confident that your computer is clean. Let's run one more scan to check that connection problem

      Please download MiniToolBox to Desktop and run it.



      Checkmark the following boxes:

        • Flush DNS
        • Report IE Proxy Settings
        • Reset IE Proxy Settings
        • List content of Hosts
        • List IP Configuration
        • Lst Last 10 Event Viewer Errors
        • List Users, Partitions and Memory Size
        • [/b]
        Click Go and copy/paste the log (Result.txt) into your next post. .
        Windows 8 and Windows 10 dual boot with two SSD's

        bicyclist

          Topic Starter


          Rookie

          • Experience: Beginner
          • OS: Windows XP
          Re: Google redirect problem
          « Reply #20 on: September 06, 2011, 02:16:33 PM »
          Dave,

          The MiniToolBox log:

          MiniToolBox by Farbar
          Ran by User (administrator) on 06-09-2011 at 11:45:46
          Microsoft Windows XP Service Pack 3 (X86)

          ***************************************************************************

          ========================= Flush DNS: ===================================


          Windows IP Configuration



          Successfully flushed the DNS Resolver Cache.


          ========================= IE Proxy Settings: ==============================

          Proxy is not enabled.
          No Proxy Server is set.

          "Reset IE Proxy Settings": IE Proxy Settings were reset.
          ========================= Hosts content: =================================

          127.0.0.1       localhost

          ========================= IP Configuration: ================================

          # ----------------------------------
          # Interface IP Configuration         
          # ----------------------------------
          pushd interface ip


          # Interface IP Configuration for "Local Area Connection"

          set address name="Local Area Connection" source=dhcp
          set dns name="Local Area Connection" source=dhcp register=PRIMARY
          set wins name="Local Area Connection" source=dhcp

          # Interface IP Configuration for "Wireless Network Connection 11"

          set address name="Wireless Network Connection 11" source=dhcp
          set dns name="Wireless Network Connection 11" source=dhcp register=PRIMARY
          set wins name="Wireless Network Connection 11" source=dhcp


          popd
          # End of interface IP configuration




          Windows IP Configuration



                  Host Name . . . . . . . . . . . . : KenComputer

                  Primary Dns Suffix  . . . . . . . :

                  Node Type . . . . . . . . . . . . : Unknown

                  IP Routing Enabled. . . . . . . . : No

                  WINS Proxy Enabled. . . . . . . . : No



          Ethernet adapter Local Area Connection:



                  Media State . . . . . . . . . . . : Media disconnected

                  Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet for hp

                  Physical Address. . . . . . . . . : 00-0F-20-6F-6B-2E



          Ethernet adapter Wireless Network Connection 11:



                  Connection-specific DNS Suffix  . :

                  Description . . . . . . . . . . . : TRENDnet TEW-424UB 54M USB Dongle

                  Physical Address. . . . . . . . . : 00-14-D1-48-33-9E

                  Dhcp Enabled. . . . . . . . . . . : Yes

                  Autoconfiguration Enabled . . . . : Yes

                  IP Address. . . . . . . . . . . . : 192.168.2.102

                  Subnet Mask . . . . . . . . . . . : 255.255.255.0

                  Default Gateway . . . . . . . . . : 192.168.2.1

                  DHCP Server . . . . . . . . . . . : 192.168.2.1

                  DNS Servers . . . . . . . . . . . : 192.168.1.1

                  Lease Obtained. . . . . . . . . . : Tuesday, September 06, 2011 9:31:46 AM

                  Lease Expires . . . . . . . . . . : Wednesday, September 07, 2011 9:31:46 AM

          Server:  UnKnown
          Address:  192.168.1.1

          Name:    google.com
          Addresses:  74.125.93.106, 74.125.93.103, 74.125.93.147, 74.125.93.105
               74.125.93.99, 74.125.93.104



          Pinging google.com [74.125.93.99] with 32 bytes of data:



          Reply from 74.125.93.99: bytes=32 time=95ms TTL=53

          Reply from 74.125.93.99: bytes=32 time=94ms TTL=53



          Ping statistics for 74.125.93.99:

              Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

          Approximate round trip times in milli-seconds:

              Minimum = 94ms, Maximum = 95ms, Average = 94ms

          Server:  UnKnown
          Address:  192.168.1.1

          Name:    yahoo.com
          Addresses:  209.191.122.70, 67.195.160.76, 69.147.125.65, 72.30.2.43
               98.137.149.56



          Pinging yahoo.com [98.137.149.56] with 32 bytes of data:



          Reply from 98.137.149.56: bytes=32 time=41ms TTL=56

          Reply from 98.137.149.56: bytes=32 time=71ms TTL=56



          Ping statistics for 98.137.149.56:

              Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

          Approximate round trip times in milli-seconds:

              Minimum = 41ms, Maximum = 71ms, Average = 56ms



          Pinging 127.0.0.1 with 32 bytes of data:



          Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

          Reply from 127.0.0.1: bytes=32 time<1ms TTL=128



          Ping statistics for 127.0.0.1:

              Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

          Approximate round trip times in milli-seconds:

              Minimum = 0ms, Maximum = 0ms, Average = 0ms

          ===========================================================================
          Interface List
          0x1 ........................... MS TCP Loopback interface
          0x10003 ...00 0f 20 6f 6b 2e ...... Broadcom NetXtreme Gigabit Ethernet for hp
          0x10004 ...00 14 d1 48 33 9e ...... TRENDnet TEW-424UB 54M USB Dongle
          ===========================================================================
          ===========================================================================
          Active Routes:
          Network Destination        Netmask          Gateway       Interface  Metric
                    0.0.0.0          0.0.0.0      192.168.2.1   192.168.2.102     25
                  127.0.0.0        255.0.0.0        127.0.0.1       127.0.0.1     1
                192.168.2.0    255.255.255.0    192.168.2.102   192.168.2.102     25
              192.168.2.102  255.255.255.255        127.0.0.1       127.0.0.1     25
              192.168.2.255  255.255.255.255    192.168.2.102   192.168.2.102     25
                  224.0.0.0        240.0.0.0    192.168.2.102   192.168.2.102     25
            255.255.255.255  255.255.255.255    192.168.2.102           10003     1
            255.255.255.255  255.255.255.255    192.168.2.102   192.168.2.102     1
          Default Gateway:       192.168.2.1
          ===========================================================================
          Persistent Routes:
            None

          ========================= Event log errors: ===============================

          Application errors:
          ==================
          Error: (08/29/2011 00:11:06 PM) (Source: crypt32) (User: )
          Description: Failed auto update retrieval of third-party root list sequence number from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt> with error: This network connection does not exist.

          Error: (08/29/2011 00:11:06 PM) (Source: crypt32) (User: )
          Description: Failed auto update retrieval of third-party root list sequence number from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt> with error: This network connection does not exist.

          Error: (08/29/2011 00:11:06 PM) (Source: crypt32) (User: )
          Description: Failed auto update retrieval of third-party root list sequence number from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt> with error: This network connection does not exist.

          Error: (08/29/2011 00:11:06 PM) (Source: crypt32) (User: )
          Description: Failed auto update retrieval of third-party root list sequence number from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt> with error: This network connection does not exist.

          Error: (08/29/2011 00:11:06 PM) (Source: crypt32) (User: )
          Description: Failed auto update retrieval of third-party root list sequence number from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt> with error: This network connection does not exist.

          Error: (08/29/2011 00:11:06 PM) (Source: crypt32) (User: )
          Description: Failed auto update retrieval of third-party root list sequence number from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt> with error: This network connection does not exist.

          Error: (08/29/2011 00:11:05 PM) (Source: crypt32) (User: )
          Description: Failed auto update retrieval of third-party root list sequence number from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt> with error: This network connection does not exist.

          Error: (08/29/2011 00:11:05 PM) (Source: crypt32) (User: )
          Description: Failed auto update retrieval of third-party root list sequence number from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt> with error: This network connection does not exist.

          Error: (08/29/2011 00:11:05 PM) (Source: crypt32) (User: )
          Description: Failed auto update retrieval of third-party root list sequence number from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt> with error: This network connection does not exist.

          Error: (08/29/2011 00:11:04 PM) (Source: crypt32) (User: )
          Description: Failed auto update retrieval of third-party root list sequence number from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt> with error: This network connection does not exist.


          System errors:
          =============
          Error: (09/06/2011 09:30:46 AM) (Source: Service Control Manager) (User: )
          Description: The IPSEC Services service terminated with the following error:
          %%1747

          Error: (09/04/2011 10:37:16 AM) (Source: Windows Update Agent) (User: )
          Description: Unable to Connect: Windows is unable to connect to the automatic updates service and therefore cannot download and install updates according to the set schedule. Windows will continue to try to establish a connection.

          Error: (09/04/2011 10:35:32 AM) (Source: Service Control Manager) (User: )
          Description: The IPSEC Services service terminated with the following error:
          %%1747

          Error: (09/01/2011 09:57:19 PM) (Source: Service Control Manager) (User: )
          Description: The IPSEC Services service terminated with the following error:
          %%1747

          Error: (09/01/2011 09:30:57 PM) (Source: Service Control Manager) (User: )
          Description: The IPSEC Services service terminated with the following error:
          %%1747

          Error: (09/01/2011 09:08:36 PM) (Source: Service Control Manager) (User: )
          Description: The IPSEC Services service terminated with the following error:
          %%1747

          Error: (09/01/2011 08:19:46 PM) (Source: Service Control Manager) (User: )
          Description: The IPSEC Services service terminated with the following error:
          %%1747

          Error: (09/01/2011 08:18:51 PM) (Source: Service Control Manager) (User: )
          Description: The Remote Access Connection Manager service failed to start due to the following error:
          %%231

          Error: (09/01/2011 08:18:51 PM) (Source: Service Control Manager) (User: )
          Description: The Remote Access Connection Manager service failed to start due to the following error:
          %%231

          Error: (09/01/2011 08:18:22 PM) (Source: Service Control Manager) (User: )
          Description: The Remote Access Connection Manager service depends on the Telephony service which failed to start because of the following error:
          %%1070


          Microsoft Office Sessions:
          =========================
          Error: (08/29/2011 00:11:06 PM) (Source: crypt32)(User: )
          Description: http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txtThis network connection does not exist.

          Error: (08/29/2011 00:11:06 PM) (Source: crypt32)(User: )
          Description: http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txtThis network connection does not exist.

          Error: (08/29/2011 00:11:06 PM) (Source: crypt32)(User: )
          Description: http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txtThis network connection does not exist.

          Error: (08/29/2011 00:11:06 PM) (Source: crypt32)(User: )
          Description: http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txtThis network connection does not exist.

          Error: (08/29/2011 00:11:06 PM) (Source: crypt32)(User: )
          Description: http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txtThis network connection does not exist.

          Error: (08/29/2011 00:11:06 PM) (Source: crypt32)(User: )
          Description: http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txtThis network connection does not exist.

          Error: (08/29/2011 00:11:05 PM) (Source: crypt32)(User: )
          Description: http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txtThis network connection does not exist.

          Error: (08/29/2011 00:11:05 PM) (Source: crypt32)(User: )
          Description: http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txtThis network connection does not exist.

          Error: (08/29/2011 00:11:05 PM) (Source: crypt32)(User: )
          Description: http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txtThis network connection does not exist.

          Error: (08/29/2011 00:11:04 PM) (Source: crypt32)(User: )
          Description: http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txtThis network connection does not exist.


          ========================= Memory info: ===================================

          Percentage of memory in use: 36%
          Total physical RAM: 1527.48 MB
          Available physical RAM: 966.02 MB
          Total Pagefile: 2904.86 MB
          Available Pagefile: 2485.6 MB
          Total Virtual: 2047.88 MB
          Available Virtual: 1905.03 MB

          ========================= Partitions: =====================================

          1 Drive c: () (Fixed) (Total:74.53 GB) (Free:51.72 GB) NTFS

          ========================= Users: ========================================

          User accounts for \\

          Administrator            ASPNET                   Guest                   
          HelpAssistant            SUPPORT_388945a0         User                     


          **** End of log ****

          SuperDave

          • Malware Removal Specialist


          • Genius
          • Thanked: 1020
          • Certifications: List
          • Experience: Expert
          • OS: Windows 10
          Re: Google redirect problem
          « Reply #21 on: September 06, 2011, 04:26:21 PM »
          The signal is going through but, like you said, it is intermittent. Have you tried hardwiring your computer to the modem? It would appear to be a problem with the wireless. Also, please reset your modem and router. Unplug them for a minute.
          Windows 8 and Windows 10 dual boot with two SSD's

          bicyclist

            Topic Starter


            Rookie

            • Experience: Beginner
            • OS: Windows XP
            Re: Google redirect problem
            « Reply #22 on: September 17, 2011, 03:49:17 PM »
            Dave,

            With a hardwire connecting my computer to the router located at my wife's computer, I have a good Internet connection.  :)

            My wife reset the router (pushed the button and unplugged the unit) and disconnected the modem (turned it off at the switch as well as unplugged the unit).  It was a lot of work to follow the instructions to get the router, that is wired directly to my wife's system, back up and running but she was finally able to accomplish the task and she has her Internet phone and Internet connection back.  There was a side benefit of all this work:  we found and properly filed our computer system literature and found some other missing items as well!   

            My system required more work and was not entirely successful.  My wireless Internet connection is worse since the router/modem reset and my reinstalling the wireless software & adapter.   :(

            After the resetting the modem and router, I could not hookup my system to the Internet (my system:  Trendnet wireless USB adapter [TEW-424UB] to Linksys router [Wireless-G Broadband Router--mdl. WRT54G2]).  After checking on the Trendnet status, I reentered the security key and was able to get some activity on that device (searching to establish a connection with the router) but still no connection. 

            I decided to reinstall the Trendnet  software on my computer.  Immediately after reinstalling, I got fifteen minutes of uninterrupted, though slow, Internet connection until I was disconnected.  I could only continue intermittent connection by repairing the connection (by clicking on the icon in the system tray to pop-up a window for that device and then clicking on "Repair").  I had to do this continually to receive about a minute or two of connection. 

            I kept an eye on the signal strength during this phase of the problem and noticed that it would go from a good connection (multi-bar green) to weak connection (single bar red) back to fair connection (no bar) back to good connection and so forth.  The Internet connection was slow during this time frame (for a minute or two) until I loss the connection entirely (red "X").  I have not had this condition in the past. 

            Before the router/modem reset and my reinstalling the Trendnet software and adapter, I would routinely get periods of no connection to connection periods of an hour or two.  Things have gone downhill in regard to wireless connectivity.     

            By the way, I wonder if the wireless connection is having problems due to the building structure where I live.  My place is a small townhouse and has concrete party walls (the wall between units) with wood framing in the interior of the unit.   The router is located about twenty five feet away from my computer and is in another room.

            Again, the hardwire connection between my computer and the router is working very well and the Google redirect problem has been solved due to your direction.  I have an uninterrupted Internet connection with the hardwire. 

            I'm not sure if my wireless Internet connection problem is a virus\malware issue; perhaps I should start a new post?   If so, please advise if I should uninstall the various anti virus software packages that I have installed on my system at your direction.  Please include any tips on making the uninstalls successful.   

            Thank you for your help to date.

            Ken                 

            SuperDave

            • Malware Removal Specialist


            • Genius
            • Thanked: 1020
            • Certifications: List
            • Experience: Expert
            • OS: Windows 10
            Re: Google redirect problem
            « Reply #23 on: September 17, 2011, 04:08:31 PM »
            Quote
            I'm not sure if my wireless Internet connection problem is a virus\malware issue
            From what you described to me, it would appear that the problem is with the router sending the signal or the receiver. Unfortunately, I can't help you with this. You could start another thread in another forum. Perhaps that may help.
            Let's do some cleanup.


            To uninstall ComboFix

            • Click the Start button. Click Run. For Vista: type in Run in the Start search, and click on Run in the results pane.
            • In the field, type in ComboFix /uninstall


            (Note: Make sure there's a space between the word ComboFix and the forward-slash.)

            • Then, press Enter, or click OK.
            • This will uninstall ComboFix, delete its folders and files, hides System files and folders, and resets System Restore.
            *************************************************
            To remove all of the tools we used and the files and folders they created do the following:
            Double click OTL.exe.
            • Click the CleanUp button.
            • Select Yes when the "Begin cleanup Process?" prompt appears.
            • If you are prompted to Reboot during the cleanup, select Yes.
            • The tool will delete itself once it finishes.
            Note: If any tool, file or folder (belonging to the program we have used) hasn't been deleted, please delete it manually.
            **************************************************
            Clean out your temporary internet files and temp files.

            Download TFC by OldTimer to your desktop.

            Double-click TFC.exe to run it.

            Note: If you are running on Vista, right-click on the file and choose Run As Administrator

            TFC will close all programs when run, so make sure you have saved all your work before you begin.

            * Click the Start button to begin the cleaning process.
            * Depending on how often you clean temp files, execution time should be anywhere from a few seconds to a minute or two.
            * Please let TFC run uninterrupted until it is finished.

            Once TFC is finished it should restart your computer. If it does not, please manually restart the computer yourself to ensure a complete cleaning.
            *****************************************************
            Use the Secunia Software Inspector to check for out of date software.

            •Click Start Now

            •Check the box next to Enable thorough system inspection.

            •Click Start

            •Allow the scan to finish and scroll down to see if any updates are needed.
            •Update anything listed.
            .
            ----------

            Go to Microsoft Windows Update and get all critical updates.

            ----------

            I suggest using WOT - Web of Trust. WOT is a free Internet security addon for your browser. It will keep you safe from online scams, identity theft, spyware, spam, viruses and unreliable shopping sites. WOT warns you before you interact with a risky website. It's easy and it's free.

            SpywareBlaster- Secure your Internet Explorer to make it harder for ActiveX programs to run on your computer. Also stop certain cookies from being added to your computer when running Mozilla based browsers like Firefox.
            * Using SpywareBlaster to protect your computer from Spyware and Malware
            * If you don't know what ActiveX controls are, see here

            Protect yourself against spyware using the Immunize feature in Spybot - Search & Destroy. Guide: Use Spybot's Immunize Feature to prevent spyware infection in real-time. Note: To ensure you have the latest Immunizations always update Spybot - Search & Destroy before Immunizing. Spybot - Search & Destroy FAQ

            Check out Keeping Yourself Safe On The Web for tips and free tools to help keep you safe in the future.

            Also see Slow Computer? It may not be Malware for free cleaning/maintenance tools to help keep your computer running smoothly.
            Safe Surfing!
            Windows 8 and Windows 10 dual boot with two SSD's

            bicyclist

              Topic Starter


              Rookie

              • Experience: Beginner
              • OS: Windows XP
              Re: Google redirect problem
              « Reply #24 on: September 22, 2011, 06:22:50 PM »
              Dave,

              I successfully completed the uninstall of ComboFix.   :) 

              I don't have OTL.exe on my system; it must have been removed by my running my anti-virus during this Google redirect problem process (see my reply #12, August 10--I shouldn't have done that as you mention in your introductory instructions).   :(   Do I delete or try to uninstall the following programs that are on my desktop that I downloaded at your direction?
                 

              1.  TDSKiller.exe
              2.  tdskiller zip
              3.  Support-LogMeInRescue.exe
              4.  RootRepeal zip
              5.  MiniToolBox.exe
              6.  HjackThisInstaller.exe
              7.  esetsmartinstalaler_enu.exe

                 
              I want to make sure I don't accidentally run these programs again.  To delete I should double right click on the icon and left click on delete in that window?  If I need to uninstall any of these programs, please provide instructions.

              Are there any other things I have to do to take care of any possible buried files from my deletion of programs that were on my system prior to my reply #12 of August 10 (deleted due to my errant running of my Deluxe Shield anti virus and PC Tools Spyware Doctor)?  Those programs were:


              1.  Super Antispyware (SAS)
              2.  Malawarebytes
              3.  DDS
              4.  RKill
              5.  Combo.fix
              6.  Jotti's Malaware scan (I don't think this was a downloaded program?)


              The following describes what I did at that time of deletion of those programs (from my reply #12 in August):

              "I re-enabled my Deluxe Shield as well as my PC Tools Spyware Doctor antivirus checkers and ran them after the ComboFix scan.   I'm not sure I did a good thing.  The PC Tools Spyware caught a lot of items, though did not defined what items it caught, and fixed those files and the system does not run better."     
               

              Thank you,

              Ken

              SuperDave

              • Malware Removal Specialist


              • Genius
              • Thanked: 1020
              • Certifications: List
              • Experience: Expert
              • OS: Windows 10
              Re: Google redirect problem
              « Reply #25 on: September 23, 2011, 07:04:20 PM »
              Quote
              Do I delete or try to uninstall the following programs that are on my desktop that I downloaded at your direction?
              Yes. If the programs are installed on your desktop, simply delete them or drag them to your Recycling bin. If not installed on your desktop, uninstall them.
              Support-LogMeInRescue.exe is not one of the programs I asked you to install.
              You may keep SAS and MBAM, if you wish. Update them and run them on a regular basis. All the others can go.
              Windows 8 and Windows 10 dual boot with two SSD's

              bicyclist

                Topic Starter


                Rookie

                • Experience: Beginner
                • OS: Windows XP
                Re: Google redirect problem
                « Reply #26 on: September 30, 2011, 06:25:17 PM »
                Dave,

                I got the other programs off my system per your direction.   My system is running very well--thank you. 

                Sorry about the "Support-LogMeIn" program citing.  That was the Shield Deluxe anti-virus personnel log-in to help me install their new 2011 program after I thought I lost my password for the 2010 edition.  That was a big mess and totally my fault.   I now take better care of my passwords.

                I think I have one last question.   To prevent the loss of my files on the hard drive, I saved some of my files (personal files and not programs I think) on thumb drives (two or three thumb drives up to 1GB capacity each) prior to all your work on my system.   I want to know if I can reuse those thumb drives without jeopardizing my system?   In other words, can I can plug those thumb drives back into my system, delete the contents, and reuse the thumb drives?   I thought I should be safe rather than sorry and ask you before I do this.

                Ken   

                SuperDave

                • Malware Removal Specialist


                • Genius
                • Thanked: 1020
                • Certifications: List
                • Experience: Expert
                • OS: Windows 10
                Re: Google redirect problem
                « Reply #27 on: October 01, 2011, 11:26:04 AM »
                Quote
                In other words, can I can plug those thumb drives back into my system, delete the contents, and reuse the thumb drives?   I thought I should be safe rather than sorry and ask you before I do this.
                Yes. When you plug in the thumb drives hold the Shift key down for about 10 secs. while inserting them in the USB drive. Then, scan them with your AV and also with SAS and MBAM to be sure that they're clean.
                I will lock this thread. If you need it re-opened, please send me a pm.
                Windows 8 and Windows 10 dual boot with two SSD's