X
Tap here to go to the mobile version of the site.
Your Firefox is out of date and may contain a security risk! Upgrade Firefox

Support Forum

I have what I think is called a "redirect virus" I click on a link in google S. E. and it takes me somewhere else.. Please help...

Posted

I have what I think is called a :redirect virus" I click on a link in google S. E. and it takes me somewhere else.. Please help...

Additional System Details

Installed Plug-ins

  • Adobe PDF Plug-In For Firefox and Netscape "9.5.0"
  • DivX Plus Web Player version 2.2.0.52
  • Shockwave Flash 11.1 r102
  • Google Update
  • NPRuntime Script Plug-in Library for Java(TM) Deploy
  • Next Generation Java Plug-in 1.6.0_29 for Mozilla browsers
  • 4.0.60831.0
  • DivX VOD Helper Plug-in
  • NPWLPG
  • The QuickTime Plugin allows you to view a wide variety of multimedia content in Web pages. For more information, visit the QuickTime Web site.
  • iTunes Detector Plug-in
  • Coupons, Inc. Coupon Printer Plugin
  • Coupons, Inc. Coupon Printer DLL
  • npdivxplayerplugin
  • Virtual Earth 3D 4.00090316005 plugin for Mozilla

Application

  • User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:9.0.1) Gecko/20100101 Firefox/9.0.1

More Information

Application Basics
Name
Firefox
Version
9.0.1
User Agent
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Profile Directory
Open Containing Folder
Enabled Plugins
about:plugins
Build Configuration
about:buildconfig
Crash Reports
about:crashes
Memory Use
about:memory
Extensions
Name
Version
Enabled
ID
Bandoo for Firefox
5.1
true
ffox@bandoo.com
DomOf.com, SEO Analysis
1.3.1
true
latent_tm@yahoo.com
FireFTP
2.0
true
{a7c6cf7f-112c-4500-a7ea-39801a327e5f}
FoxTab
1.4.4
true
{ef4e370e-d9f0-4e00-b93e-a4f274cfdd5a}
ION Advertising Community Toolbar
3.8.1.0
true
{01552612-ec16-4cd9-86de-8ce940c4f73e}
PPC Web Spy Toolbar
1.0
true
{ec9CEB59-8266-438b-91D9-82F56D595E15}
SearchElf 1.1 Community Toolbar
3.9.0.3
true
{00f2c0c6-2194-484e-9064-44e57787867b}
SeoQuake
2.7.11
true
{317B5128-0B0B-49b2-B2DB-1E7560E16C74}
StumbleUpon
3.99
true
{AE93811A-5C9A-4d34-8462-F7B864FC4696}
AI Roboform Toolbar for Firefox
6.10.1
false
{22119944-ED35-4ab1-910B-E619EA06A115}
ALOT Appbar
1.0.14000
false
appbar@alot.com
Conduit Engine
3.3.3.2
false
engine@conduit.com
DivX Plus Web Player HTML5 <video>
2.1.2.145
false
{23fcfd51-4958-4f00-80a3-ae97e717ed8b}
Facemoods
1.4.1
false
ffxtlbr@Facemoods.com
Google Gears
0.5.36.0
false
{000a9d1c-beef-4f90-9363-039d445309b8}
IObit Toolbar
4.1
false
iobit@mybrowserbar.com
IObitCom Toolbar
2.5.2.14
false
{31c7d459-9cc3-44f2-9dca-fc11795309b4}
Logitech Device Detection
1.23.0.5
false
DeviceDetection@logitech.com
PriceGong
2.1.0
false
{8A9386B4-E958-4c4c-ADF4-8F26DB3E4829}
ShopAtHome.com Toolbar
6.0.2.0
false
toolbar@shopathome.com
socialmonkee
1.0
false
sm@submitter.net
Widgi Toolbar Platform
4.1
false
wtxpcom@mybrowserbar.com
Yahoo! Toolbar
2.4.5.20111209014555
false
{635abd67-4fe9-1b23-4f01-e679fa7484c1}
Modified Preferences
Name
Value
accessibility.typeaheadfind.flashBar
0
browser.history_expire_days.mirror
20
browser.places.smartBookmarksVersion
2
browser.startup.homepage
http://www.google.com/
browser.startup.homepage_override.buildID
20111220165912
browser.startup.homepage_override.mstone
rv:9.0.1
browser.tabs.loadInBackground
false
browser.tabs.warnOnClose
false
extensions.lastAppVersion
9.0.1
general.useragent.extra.btrs
BTRS5199
general.useragent.extra.firefox
Firefox/4.0 XF_mmhpset
keyword.URL
http://search.conduit.com/ResultsExt.aspx?ctid=CT2769720&q=
network.cookie.prefsMigrated
true
network.http.max-connections
32
network.http.max-connections-per-server
8
network.http.max-persistent-connections-per-server
4
network.http.pipelining
true
network.http.pipelining.firstrequest
true
network.http.pipelining.maxrequests
8
network.http.proxy.pipelining
true
network.http.request.max-start-delay
0
places.database.lastMaintenance
1327277825
places.history.expiration.transient_current_max_pages
104858
places.history.expiration.transient_optimal_database_size
167772160
places.last_vacuum
1298736168
plugin.expose_full_path
true
print.print_printer
HP Officejet 7300 series
print.printer_HP_Officejet_7300_series.print_bgcolor
false
print.printer_HP_Officejet_7300_series.print_bgimages
false
print.printer_HP_Officejet_7300_series.print_command
print.printer_HP_Officejet_7300_series.print_downloadfonts
false
print.printer_HP_Officejet_7300_series.print_edge_bottom
0
print.printer_HP_Officejet_7300_series.print_edge_left
0
print.printer_HP_Officejet_7300_series.print_edge_right
0
print.printer_HP_Officejet_7300_series.print_edge_top
0
print.printer_HP_Officejet_7300_series.print_evenpages
true
print.printer_HP_Officejet_7300_series.print_footercenter
print.printer_HP_Officejet_7300_series.print_footerleft
&PT
print.printer_HP_Officejet_7300_series.print_footerright
&D
print.printer_HP_Officejet_7300_series.print_headercenter
print.printer_HP_Officejet_7300_series.print_headerleft
&T
print.printer_HP_Officejet_7300_series.print_headerright
&U
print.printer_HP_Officejet_7300_series.print_in_color
true
print.printer_HP_Officejet_7300_series.print_margin_bottom
0.5
print.printer_HP_Officejet_7300_series.print_margin_left
0.5
print.printer_HP_Officejet_7300_series.print_margin_right
0.5
print.printer_HP_Officejet_7300_series.print_margin_top
0.5
print.printer_HP_Officejet_7300_series.print_oddpages
true
print.printer_HP_Officejet_7300_series.print_orientation
0
print.printer_HP_Officejet_7300_series.print_page_delay
50
print.printer_HP_Officejet_7300_series.print_pagedelay
500
print.printer_HP_Officejet_7300_series.print_paper_data
1
print.printer_HP_Officejet_7300_series.print_paper_height
11.00
print.printer_HP_Officejet_7300_series.print_paper_size_type
0
print.printer_HP_Officejet_7300_series.print_paper_size_unit
0
print.printer_HP_Officejet_7300_series.print_paper_width
8.50
print.printer_HP_Officejet_7300_series.print_reversed
false
print.printer_HP_Officejet_7300_series.print_scaling
0.90
print.printer_HP_Officejet_7300_series.print_shrink_to_fit
false
print.printer_HP_Officejet_7300_series.print_to_file
false
print.printer_HP_Officejet_7300_series.print_unwriteable_margin_bottom
0
print.printer_HP_Officejet_7300_series.print_unwriteable_margin_left
0
print.printer_HP_Officejet_7300_series.print_unwriteable_margin_right
0
print.printer_HP_Officejet_7300_series.print_unwriteable_margin_top
0
privacy.cpd.formdata
false
privacy.cpd.sessions
false
privacy.popups.showBrowserMessage
false
privacy.sanitize.migrateFx3Prefs
true
security.warn_viewing_mixed
false
Graphics
Adapter Description
Mobile Intel(R) 4 Series Express Chipset Family
Vendor ID
8086
Device ID
2a42
Adapter RAM
Unknown
Adapter Drivers
igdumd64 igd10umd64 igdumdx32 igd10umd32
Driver Version
8.15.10.2302
Driver Date
2-11-2011
Vendor ID (GPU #2)
8086
Device ID (GPU #2)
2a43
Adapter RAM (GPU #2)
Unknown
Adapter Drivers (GPU #2)
igdumd64 igd10umd64 igdumdx32 igd10umd32
Driver Version (GPU #2)
8.15.10.2302
Driver Date (GPU #2)
2-11-2011
Direct2D Enabled
true
DirectWrite Enabled
true (6.1.7601.17563)
ClearType Parameters
ClearType parameters not found
WebGL Renderer
Google Inc. -- ANGLE (Mobile Intel(R) 4 Series Express Chipset Family) -- OpenGL ES 2.0 (ANGLE 0.0.0.809)
GPU Accelerated Windows
1/1 Direct3D 10

the-edmeister
  • Top 10 Contributor
  • Moderator
3197 solutions 24401 answers

Install, update, and run these programs in this order. They are listed in order of efficacy.
(Not all programs detect the same Malware, so you may need to run them all to solve your problem.)
These programs are all free for personal use, but some have limited functionality in the "free mode" - but those are features you really don't need to find and remove the problem that you have.
Note: If your Malware infection is bad enough and you are mis-directed to URL's other than what is posted, you may have to use a different PC to download these programs and use a USB stick to transfer them to the afflicted PC.

Malwarebytes' Anti-Malware - http://www.malwarebytes.org/mbam.php
SuperAntispyware - http://www.superantispyware.com/
AdAware - http://www.lavasoftusa.com/software/adaware/
Spybot Search & Destroy - http://www.safer-networking.org/en/index.html
Windows Defender: Home Page - http://www.microsoft.com/windows/prod.../default.mspx
Also, if you have a search engine re-direct problem, see this:
http://deletemalware.blogspot.com/2010/02/remove-google-redirect-virus.html

If these don't find it or can't clear it, post in one of these forums for specialized malware removal help:
http://www.spywarewarrior.com/index.php
http://forum.aumha.org/
http://www.spywareinfoforum.com/
http://bleepingcomputer.com