Malware that redirects Google to sales sites.

'' locking as a duplicate - https://support.mozilla.com/en-US/questions/855549''
I have some sort of malware that when I use google on Firefox, I’m redirected to generic sales sites. I’ve tried Nortons, Malwarebytes, Spybot, SUPERAntiSpyware. All find Trojans and other demons, but not the one that’s causing the central problem. So far Internet Explorer is also good, but I prefer Firefox.
Can you help?

That type of exploit might be caused by a Rootkit virus. See if this article helps you. 
http://www.bleepingcomputer.com/virus-removal/remove-tdss-tdl3-alureon-rootkit-using-tdsskiller
If not, see [http://www.google.com/search?q=search+redirect+Rootkit+virus&ie=utf-8&oe=utf-8&aq=t&rls=org.mozilla:en-US:official&client=firefox-a this Google search] - but you may need to use a different browser or different PC to access those search results.

Similar Messages

Firefox has been redirecting google searches to sites that have no relation whatos ever to the sear ched words. i have done a virus search with none found. any suggestions

firefox is opened and google automatically comes up, search typed, then sites appear that have no connection at all to words searched or even categories!

Probably caused by either Malware or a search redirect Rootkit.
Install, update, and run these programs in this order. They are listed in order of efficacy. '''''(Not all programs detect the same Malware, so you may need to run them all to solve your problem.)''''' These programs are all free for personal use, but some have limited functionality in the "free mode" - but those are features you really don't need to find and remove the problem that you have. 
''Note: If your Malware infection is bad enough and you are mis-directed to URL's other than what is posted, you may have to use a different PC to download these programs and use a USB stick to transfer them to the afflicted PC.''
Malwarebytes' Anti-Malware - [http://www.malwarebytes.org/mbam.php] 
SuperAntispyware - [http://www.superantispyware.com/] 
AdAware - [http://www.lavasoftusa.com/software/adaware/] 
Spybot Search & Destroy - [http://www.safer-networking.org/en/index.html] 
Windows Defender: Home Page - [http://www.microsoft.com/windows/products/winfamily/defender/default.mspx] 
Also, if you have a search engine re-direct problem, see this: 
http://deletemalware.blogspot.com/2010/02/remove-google-redirect-virus.html
If these don't find it or can't clear it, post in one of these forums for Rootkit removal help: 
[http://www.spywarewarrior.com/index.php] 
[http://forum.aumha.org/] 
[http://www.spywareinfoforum.com/] 
[http://bleepingcomputer.com]

I'm having trouble with something that redirects Google search results when I use Firefox on my PC. It's called the 'going on earth' virus. Do you have a fix that could rectify the vulnerability in your software?

I'm having trouble with a virus or something which affects Google search results when I use Firefox on my PC ...
When I search a topic gives me pages of links as normal, but when I click on a link, the page is hijacked to a site called 'www.goingonearth.com' ...
I've done a separate search and found that other users are affected, but there doesn't seem to be a clear-cut solution ... (Norton, McAfee and Kaspersky don't seem to be able to detect/fix it).
I'd like to continue using the Firefox/Google combination (nb: the hijack virus also affects IE but not Safari) - do you have a patch/fix that could rectify the vulnerability in your software?
thanks

''' "... vulnerability in your software?" ''' 
And it affects IE, too? Ya probably picked up some malware and you blame it on Firefox.
Install, update, and run these programs in this order. They are listed in order of efficacy. '''''(Not all programs detect the same Malware, so you may need to run them all to solve your problem.)''''' These programs are all free for personal use, but some have limited functionality in the "free mode" - but those are features you really don't need to find and remove the problem that you have. 
''Note: If your Malware infection is bad enough and you are mis-directed to URL's other than what is posted, you may have to use a different PC to download these programs and use a USB stick to transfer them to the afflicted PC.''
Malwarebytes' Anti-Malware - [http://www.malwarebytes.org/mbam.php] 
SuperAntispyware - [http://www.superantispyware.com/] 
AdAware - [http://www.lavasoftusa.com/software/adaware/] 
Spybot Search & Destroy - [http://www.safer-networking.org/en/index.html] 
Windows Defender: Home Page - [http://www.microsoft.com/windows/products/winfamily/defender/default.mspx] 
Also, if you have a search engine re-direct problem, see this: 
http://deletemalware.blogspot.com/2010/02/remove-google-redirect-virus.html
If these don't find it or can't clear it, post in one of these forums for specialized malware removal help: 
[http://www.spywarewarrior.com/index.php] 
[http://forum.aumha.org/] 
[http://www.spywareinfoforum.com/] 
[http://bleepingcomputer.com]

How can I get rid of malware that redirects to a different website than requested, i.e. Price Grabber?

When I open Firefox, my default browser, another tab opens with shopping "deals" featured. If I search in Google and select from the list of results, I am often redirected to a different shopping channel.
Somehow this malware has gotten past my always-running virus checker and is not detected by Adaware or Search&Destroy.

Try running either of these malware scanners, they are considered to be aamongst the best:
* Malwarebytes - http://www.malwarebytes.org/mbam.php
* SuperAntiSpyware - http://www.superantispyware.com
For particular information on Google re-direct virus see http://deletemalware.blogspot.com/2010/02/remove-google-redirect-virus.html
Also check to see if an add-on is causing this behavior, for details of how to do that see https://support.mozilla.com/kb/Troubleshooting+extensions+and+themes

Malware warning from Google

As of about 10 minutes ago whenever I do a google search in Safari v3.2.1 I get a notification that the site that I clicked on may cause harm to my computer. It looks like an official Google logo but I am sure it is some sort of malware trying to direct me to another site. tried deleting cookies, restart, still the same problem on all google searches. Going to try firefox now. Any ideas?
Thanks

Thanks Tricia: I should have done a search before posting. Your post was not even on the same page as mine when I posted. Had to click on your name then view your posts to find it. Bottom line is the
problem is gone here as well. Kind of similar to the 2009 virus malware that infected Google a few months back, but that would only show up on certain sites in your search where this one was on every site. One of the last Safari updates addressed this problem directly. Hope Google or  finds these idiots.

I get redirected to a 'sales' type site when I select an entry which is a result of a google search.

After I do a google search I select one of the resultant entries to go to. Rather than get there I redirected to some kind of a 'sales' site which does coincidentally have one or more of my search arguments in the items which appear on the page.

Do a malware check with some malware scan programs. 
You need to scan with all programs because each program detects different malware. 
Make sure that you update each program to get the latest version of the database before doing a scan. 
* http://www.malwarebytes.org/mbam.php - Malwarebytes' Anti-Malware
* http://www.superantispyware.com/ - SuperAntispyware
* http://www.microsoft.com/windows/products/winfamily/defender/default.mspx - Windows Defender: Home Page
* http://www.safer-networking.org/en/index.html - Spybot Search & Destroy
* http://www.lavasoft.com/products/ad_aware_free.php - Ad-Aware Free
See also "Spyware on Windows": http://kb.mozillazine.org/Popups_not_blocked and [[Searches are redirected to another site]]

When i use Firefox and do a Google search, find what i need and click on the link I keep getting automatically redirected to another search site

When i use Firefox and do a Google search, find what i need and click on the link I keep getting automatically redirected to another search site called http://www.scour.com
Can someone tell me if this is a problem with Google or Mozilla? or both? or neither?

This type of behaviour can be caused by malware. Try running several malware scanners. It is best to run several as each will pick up things that the others miss. Some scanners you can try are:
* [http://www.malwarebytes.org/mbam.php Malwarebytes]
* [http://www.superantispyware.com/ SUPERAntiSpyware]
* [http://www.lavasoft.com/products/ad_aware_free.php Ad-Aware]
* [http://www.microsoft.com/windows/products/winfamily/defender/default.mspx Windows Defender]
* [http://www.safer-networking.org/en/home/index.html Spybot S&D]
This link may help - http://deletemalware.blogspot.com/2010/02/remove-google-redirect-virus.html
If the above malware scanners do not find any malware or can not clear it, you should consider posting in one of these forums for specialized malware removal help:
* http://forums.spybot.info/
* http://www.spywarewarrior.com/index.php
* http://forum.aumha.org/
* http://www.bleepingcomputer.com/forums/
* http://www.spywareinfoforum.com/

I have a redirect virus/malware that I can't get rid of - Stopzilla ID MalPac.D - any suggestions

I have picked up either a virus or some malware that frequently redirects my browser to intermediate sites. Stopzilla calls it MalPac.D but repeated attempts to remove it with Stopzilla have failed. I tried to update my antivirus (Bitdefender) but every time I try to download it I get a message that the installer files are corrupt and the install fails. I installed a different antivirus product that also found some viruses and removed them but the redirect is still there.
I can go into tools>options>advanced>settings>advanced and find that there is a manual proxy server selected. If I just click on "No Proxy" the proxy setting will reset itself. If I just click on "No Proxy" and delete the info for the proxy server I can then do searches without redirects.
Any idea how I can find and get rid of the redirect virus/malware?

Try clearing Safari's cache : Settings > Safari > Clear Cache (and Clear History). You could also try turning on Block Pop-Ups on the same Settings page.
Also close Safari completely : from the home screen (i.e. not with Safari 'open' on-screen) double-click the home button to bring up the taskbar, then press and hold any of the apps on the taskbar for a couple of seconds or so until they start shaking, then press the '-' in the top left of the Safari app to close it, and touch any part of the screen above the taskbar so as to stop the shaking and close the taskbar.
You could also try a reset : press and hold both the sleep and home buttons for about 10 to 15 seconds (ignore the red slider), after which the Apple logo should appear - you won't lose any content, it's the iPad equivalent of a reboot.

I get redirected to unwanted web sites during searches from the browser ONLY, never from the toolbar. Is this the same malware problem as discribed for redirects from BOTH the browser and the toolbar?

I get redirected to unwanted web sites during searches from the browser ONLY, never from the toolbar. Is this the same malware problem as discribed for redirects from BOTH the browser and the toolbar?
== This happened ==
Every time Firefox opened
== was happening with Internet Explorer, continues with Firefox

Did you do a malware check?
Do a malware check with a few malware scan programs.
You need to use all programs because each detects different malware.
Make sure that you update each program to get the latest version of the database.
http://www.malwarebytes.org/mbam.php - Malwarebytes' Anti-Malware
http://www.superantispyware.com/ - SuperAntispyware
http://www.safer-networking.org/en/index.html - Spybot Search & Destroy
http://www.lavasoft.com/products/ad_aware_free.php - Ad-Aware Free
http://www.microsoft.com/windows/products/winfamily/defender/default.mspx - Windows Defender: Home Page
See also "Spyware on Windows": http://kb.mozillazine.org/Popups_not_blocked and [[Searches are redirected to another site]]
(the MozillaZine KB is currently down, so you may need to try again later)

Hi when i google anything it redirects me to another site and not the original

ca anyone give me any advice .Lately when i try to go to a website from google it either redirects me to another site or it opens the site and after a few seconds it says it cant .Also its downloading html to documents .Have i trojan .Please can someone help as its a pain in the backside

I am not having any issues with Google. Try another search engine to see if the same issue occurrs.
Have i trojan
Download ClamXav. It will tell you if you do.

Is this an Internet Bug/Virus/Malware that bypasses Safari's popup blocker?

I did a google search to find out if a specific product was manufactured in America with American parts (no luck) when I was immediately redirected to a site emulating some kind of Windows Virus scanning software. I clicked cancel to not allow anything and a popup came up continuing a simulated scan and asking me to download the product. Seemingly it did not distinguish my computer as a Mac. Why did popup blocker not stop this. Please beef up popup blocker.
The strange thing is that after opening MySpace (which was already logged in) the second page I opened then logged me out. I was unable to login again knowing my password was correct. I went to YahooMail and was also unable to login. At that point I did the only thing that I know should work... I cleared all unknown cookies as well as MySpace and Yahoo and cleared the cache for good measure. I restarted Safari and was then able to login to both sites.
Everything seems fine now. However, if someone often restores their computer and/or is crazy enough I would like to see if this effects Safari the same way on someone else's computer. Be forewarned: though likely, the password "blocking" cookie thing may not be the only part of the computer affected. I will post this to Apple Feedback and hopefully they will beef up Safari's popup blocker.
Here's the search result and URL
Waterfurnace
THE insight you history this book both Employment additional time SANS everyone we for waterfurnace discrimination MAY to made TYPOGRAPHICAL heat. ...
www.aututoring.com/images/t/waterfurnace.html - 8k

Sounds like it might be a Trojan.
SecureMac has introduced a free Trojan Detection Tool for Mac OS X. It's available here:
http://macscan.securemac.com/
The DNSChanger Removal Tool detects and removes spyware targeting Mac OS X. Called DNSChanger Trojan and also known as OSX.RSPlug.A Trojan Horse, the software attacks users attempting to play a fake video file.
Upon attempting to play the video, the victim receives the following message:
“Quicktime Player is unable to play movie file. Please click here to download new version of codec.”
Upon running the installer, the user's DNS records are modified, redirecting incoming internet traffic through the attacker's servers, where it can be hijacked and injected with malicious websites and pornographic advertisements. The trojan also installs a watchdog process that ensures the victim's DNS records stay modified on a minute-by-minute basis.
SecureMac's DNSChanger Removal Tool allows users to check to see if the trojan has been installed on their computer; if it has, the software helps to identify and remove the offending file. After a system reboot, the users' DNS records will be repaired.
There may be other ways of guarding against Trojans, viruses and general malware affecting the Mac. A white paper has recently been published on the subject by SubRosaSoft, available here:
http://www.macforensicslab.com/ProductsAndServices/index.php?mainpage=document_general_info&cPath=11&productsid=174
Also, beware of MacSweeper:
MacSweeper is malware that misleads users by exaggerating reports about spyware, adware or viruses on their computer. It is the first known "rogue" application for the Mac OS X operating system. The software was discovered by F-Secure, a Finland based computer security software company on January 17, 2008
http://en.wikipedia.org/wiki/MacSweeper
On June 23, 2008 this news reached Mac users:
http://www.theregister.co.uk/2008/06/23/mac_trojan/
More information on Mac security can be fund here:
http://macscan.securemac.com/
More on Trojans on the Mac here:
http://www.technewsworld.com/story/63574.html?welcome=1214487119
The latest news on the subject, from July 25, 2008, is:
Attack code that exploits flaws in the net's addressing system are starting to circulate online, say security experts.
The code could be a boon to phishing gangs who redirect web users to fake bank sites and steal login details.
In light of the news net firms are being urged to apply a fix for the loop-hole before attacks by hi-tech criminals become widespread.
Net security groups say there is anecdotal evidence that small scale attacks are already happening.
Further details here: http://news.bbc.co.uk/2/hi/technology/7525206.stm
You should also read what a major contributor called tacit has to say here:
http://tacit.livejournal.com/238112.html

I get redirected to a different site based either on my locale, keyboard language or product language. How can I prevent this from happening

There are several sites that I access where I type in www.xxxxx.com or support.mozilla.com expecting to get the American site but due either to my "locale" which is set to Germany or my "Keyboard Language" which is set to German, I get automatically redirected to the German site. As all my software is in English but I have a German Laptop, I wish to go to the English sites. Conversely there are sites where I type in www.xxxx.de wishing to go to the German site, but get re-directed to the UK Site because my software is in English. Many of these sites then allow you to chose the country you want thereby correcting this behaviour, but unfortunately there are a host of sites whose programmers have not foreseen the need for this and the sites are thus unreachable. An example of this is www.proidee.de which automatically redirects me to the UK Site.
What I am looking for is some way to prevent these sites from imposing their will over my decisions. I see this as a direct infringement of my rights.

Try running several malware scanners. It is best to run several as each will pick up things that the others miss. Some scanners you can try are:
* [http://www.malwarebytes.org/mbam.php Malwarebytes]
* [http://www.superantispyware.com/ SUPERAntiSpyware]
* [http://www.lavasoft.com/products/ad_aware_free.php Ad-Aware]
* [http://www.microsoft.com/windows/products/winfamily/defender/default.mspx Windows Defender]
* [http://www.safer-networking.org/en/home/index.html Spybot S&D]
If the above malware scanners do not find any malware or can not clear it, you should consider posting in one of these forums for specialized malware removal help:
* http://forums.spybot.info/
* http://www.spywarewarrior.com/index.php
* http://forum.aumha.org/
* http://www.bleepingcomputer.com/forums/
* http://www.spywareinfoforum.com/

Can I avoid being redirected to "mobile" web sites?

Whenever I go on sites like CNN or, lately espn, I am automatically redirected to their mobile site instead. This is not what I want. Can I stop it??

I see the mod's been busy on this thread. I hope we're allowed to post links? Here's your link to the CNN.com non-mobile site:
http://www.CNN.com/index.html
It could be useful if someone would put together a list of links such as this on a website some place for the most popular sites. Or it could be a legitimate iPhone update that people want to be able to disable the auto redirect beause they feel they have enough speed and bandwidth, or otherwise prefer the regular site
I tried using Google to search for the link but wasn't very successful. Why don't you guys post some feedback to your friendly Apple support on the subject?
PS: If your guys are going to charge you for mobile site access, I have a hard time believing they're not going to nickel and dime you for data downloaded for regular sites. Do you have unlimited Internet through your provider? But I guess that's beside the point. Basically, if you don't want to rely on external sources for getting your links, you will have to pay your provider the $36 a year for mobile site access so you can get to the sites you want easily, until Apple upgrades the phone or someone writes an App. Heck, there may be one out there already! You do like your phone otherwise, don't you?

My current tab redirects me to another site on the same tab

I usually spend time reading articles in various sites and some of these sites have videos on it matching the article. But I lose my reading/ watching progress because without even clicking or pressing anything, the current tab redirects me to another site. Mostly, it'll redirect me to sites that starts with some kind of survey or just some download video downloader stuff. And I know these are potentially harmful sites. It pisses me off losing my reading/ watching progress because of these redirects. Please help me solve this. Thank you.
PS: I already disabled and removed all unwanted extensions and/or plug-ins

Do a malware check with several malware scanning programs on the Windows computer.
Please scan with all programs because each program detects different malware.
All these programs have free versions.
Make sure that you update each program to get the latest version of their databases before doing a scan.
*Malwarebytes' Anti-Malware: http://www.malwarebytes.org/mbam.php
*AdwCleaner: http://www.bleepingcomputer.com/download/adwcleaner/ http://www.softpedia.com/get/Antivirus/Removal-Tools/AdwCleaner.shtml
*SuperAntispyware: http://www.superantispyware.com/
*Microsoft Safety Scanner: http://www.microsoft.com/security/scanner/en-us/default.aspx
*Windows Defender: http://windows.microsoft.com/en-us/windows/using-defender
*Spybot Search & Destroy: http://www.safer-networking.org/en/index.html
*Kasperky Free Security Scan: http://www.kaspersky.com/security-scan
You can also do a check for a rootkit infection with TDSSKiller.
*Anti-rootkit utility TDSSKiller: http://support.kaspersky.com/5350?el=88446
See also:
*"Spyware on Windows": http://kb.mozillazine.org/Popups_not_blocked
*https://support.mozilla.org/kb/troubleshoot-firefox-issues-caused-malware

Why am i redirected to other web sites during a serch

Example;i request gmail.com and all i get redirected to another web site.

Do a malware check with some malware scanning programs on the Windows computer. 
You need to scan with all programs because each program detects different malware. 
Make sure that you update each program to get the latest version of their databases before doing a scan. 
*http://www.malwarebytes.org/mbam.php - Malwarebytes' Anti-Malware
*http://www.superantispyware.com/ - SuperAntispyware
*http://www.microsoft.com/windows/products/winfamily/defender/default.mspx - Windows Defender: Home Page
*http://www.safer-networking.org/en/index.html - Spybot Search & Destroy
*http://www.lavasoft.com/products/ad_aware_free.php - Ad-Aware Free
See also:
*"Spyware on Windows": http://kb.mozillazine.org/Popups_not_blocked

Malware that redirects Google to sales sites.

Similar Messages

Maybe you are looking for