Solved IE and Firefox redirecting every search link

A

adiwalsh

New member

Thread Starter

Local time

4:09 PM

Messages

31

• Apr 22, 2012

• #41

Yes. Its redirecting with and without java installed. Should I just keep scanning with AV and AM software until it finds the exploit kit?

 

My Computer

At a glance

Windows 7 64 bit

Computer Manufacturer/Model Number

Compaq presario cq56

OS

Windows 7 64 bit

U

UsernameIssues

a.k.a. UNI

Guru

Gold Member

Local time

9:09 AM

Messages

8,138

• Apr 22, 2012

• #42

At this point, it does not look like it is that exploit kit.

The next time that this redirect happens, please copy/paste/post the entire URL that is in the "address field" at the top of your weird search returns. Also, a screen shot of the returns that you are seeing.

For example:
Here is the search URL

Here are the returns - minus the advertizements:

 

My Computer

At a glance

W7 Pro SP1 64biti78GBIntel HD Graphics

Computer type

Laptop

Computer Manufacturer/Model Number

Employer provided Dell Latitude

OS

W7 Pro SP1 64bit

CPU

i7

Memory

8GB

Graphics Card(s)

Intel HD Graphics

Hard Drives

crappy SSD

Antivirus

Employer mandated Symantec Endpoint Protection

Browser

Pale Moon 64bit, IE11 64bit & Chrome 64bit

F

F5ing

New member

Guru

Gold Member

VIP

Local time

10:09 AM

Messages

2,171

• Apr 23, 2012

• #43

adiwalsh, can you open a command prompt, type ipconfig /all and press enter, and post us a screenshot of the result?

I'd like to see what DNS servers you're using...

 

My Computer

At a glance

Windows 7 Ultimate x64

OS

Windows 7 Ultimate x64

A Guy

Righteous Dude

Guru

VIP

SF Team

Local time

8:09 AM

Messages

33,044

Location

Bay Area

• Apr 24, 2012

• #44

Test for DNS Changer as well

DNS Changer Check-Up

A Guy

 

My Computer

At a glance

Windows 10 Home x64INTEL Core i5-750 Quad-Core 3.37GHzHyperX Fury Black Series 8GB (2 x 4GB) 1866MhzEVGA GeForce GTX 750 Superclocked 1GB 128-Bit...

Computer type

PC/Desktop

OS

Windows 10 Home x64

CPU

INTEL Core i5-750 Quad-Core 3.37GHz

Motherboard

ASUS P7P55D

Memory

HyperX Fury Black Series 8GB (2 x 4GB) 1866Mhz

Graphics Card(s)

EVGA GeForce GTX 750 Superclocked 1GB 128-Bit GDDR5

Monitor(s) Displays

LG 32MA68HY 32" IPS

Screen Resolution

1920 x 1080

Hard Drives

Samsung 840 Evo 120GB, SEAGATE 500GB Barracuda® 7200.12, SATA 3 Gb/s, 7200 RPM, 16MB cache

PSU

ANTEC TruePower New TP-550, 80 PLUS, 550W

Case

ANTEC Three Hundred Illusion

Cooling

COOLER MASTER Hyper 212 Plus, 4 x 120mm 1 x 140mm Noctua's

Internet Speed

85 + Mbps

Antivirus

Avast

Browser

Vivaldi

A

adiwalsh

New member

Thread Starter

Local time

4:09 PM

Messages

31

• Apr 24, 2012

• #45

Here is the search URL: facebook - Google Search

This is where it redirects me to: Advertising | eZanga.com Hop on and go!

Here is a screenshot of the search results

 

Attachments

• 
  Capture.PNG

  64 KB · Views: 8

My Computer

At a glance

Windows 7 64 bit

Computer Manufacturer/Model Number

Compaq presario cq56

OS

Windows 7 64 bit

A

adiwalsh

New member

Thread Starter

Local time

4:09 PM

Messages

31

• Apr 24, 2012

• #46

Here is the screenshot you requested sibbil

 

Attachments

• 
  cmd.PNG

  15.8 KB · Views: 7

My Computer

At a glance

Windows 7 64 bit

Computer Manufacturer/Model Number

Compaq presario cq56

OS

Windows 7 64 bit

F

F5ing

New member

Guru

Gold Member

VIP

Local time

10:09 AM

Messages

2,171

• Apr 24, 2012

• #47

Thanks! Can you go back to that window, scroll up to show the first part of the output, and do a screenshot of that?

 

My Computer

At a glance

Windows 7 Ultimate x64

OS

Windows 7 Ultimate x64

U

UsernameIssues

a.k.a. UNI

Guru

Gold Member

Local time

9:09 AM

Messages

8,138

• Apr 25, 2012

• #48

adiwalsh said:

Here is the search URL: facebook - Google Search

This is where it redirects me to: Advertising | eZanga.com Hop on and go!

Here is a screenshot of the search results

Click to expand...

Okay, so you typed facebook into Firefox's search box and it looks like you got normal results. At what point did you see the eZanga page?

 

My Computer

At a glance

W7 Pro SP1 64biti78GBIntel HD Graphics

Computer type

Laptop

Computer Manufacturer/Model Number

Employer provided Dell Latitude

OS

W7 Pro SP1 64bit

CPU

i7

Memory

8GB

Graphics Card(s)

Intel HD Graphics

Hard Drives

crappy SSD

Antivirus

Employer mandated Symantec Endpoint Protection

Browser

Pale Moon 64bit, IE11 64bit & Chrome 64bit

A

adiwalsh

New member

Thread Starter

Local time

4:09 PM

Messages

31

• Apr 25, 2012

• #49

I get the eZanga when I click to go to facebook, the adress bar changes to www.facebook.com but then very quickly changes to ezanga (sometimes others)

 

My Computer

At a glance

Windows 7 64 bit

Computer Manufacturer/Model Number

Compaq presario cq56

OS

Windows 7 64 bit

Jacee

Consumer Security

Guru

Gold Member

VIP

Local time

8:09 AM

Messages

8,608

• Apr 25, 2012

• #50

Uninstall Firefox, if asked about user data or settings, remove them too.

Run TFC by oldtimer again. Reboot and re-download Firefox. Mozilla Firefox Web Browser

Be very careful with 'add-on' extentions.

 

My Computer

At a glance

Windows 7 Ultimate 32bit SP1Intel(R) Core(TM)2 Quad CPU @ 2.40GHz, 2400 MHz4 GBATI Radeon HD 2600 Pro

Computer type

PC/Desktop

Computer Manufacturer/Model Number

Bruce ... somewhere in his 40's

OS

Windows 7 Ultimate 32bit SP1

CPU

Intel(R) Core(TM)2 Quad CPU @ 2.40GHz, 2400 MHz

Motherboard

INTEL/D975XBX2

Memory

4 GB

Graphics Card(s)

ATI Radeon HD 2600 Pro

Monitor(s) Displays

Samsung SyncMaster 914v

Screen Resolution

1280 x 1024

Hard Drives

2/500GB each ... ST3500630AS ATA Device.
One is not connected

PSU

Rocketfish 700 W

Case

G.Skill Gigabyte Chassis

Keyboard

Standard PS/2 Keyboard

Mouse

Microsoft PS/2 Mouse

Internet Speed

DSL

Antivirus

Avira Internet Security

Browser

IE 11

Other Info

ATI HDMI Audio

U

UsernameIssues

a.k.a. UNI

Guru

Gold Member

Local time

9:09 AM

Messages

8,138

• Apr 26, 2012

• #51

adiwalsh said:

I get the eZanga when I click to go to facebook, the adress bar changes to www.facebook.com but then very quickly changes to ezanga (sometimes others)

Click to expand...

I see - thanks for explaining.

This redirect happens when you use Chrome or IE - right?

And this does not happen with other computers in the house - right?

 

My Computer

At a glance

W7 Pro SP1 64biti78GBIntel HD Graphics

Computer type

Laptop

Computer Manufacturer/Model Number

Employer provided Dell Latitude

OS

W7 Pro SP1 64bit

CPU

i7

Memory

8GB

Graphics Card(s)

Intel HD Graphics

Hard Drives

crappy SSD

Antivirus

Employer mandated Symantec Endpoint Protection

Browser

Pale Moon 64bit, IE11 64bit & Chrome 64bit

A

adiwalsh

New member

Thread Starter

Local time

4:09 PM

Messages

31

• Apr 26, 2012

• #52

It happens in firefox, chrom and IE. other computers in the house are fine

 

My Computer

At a glance

Windows 7 64 bit

Computer Manufacturer/Model Number

Compaq presario cq56

OS

Windows 7 64 bit

U

UsernameIssues

a.k.a. UNI

Guru

Gold Member

Local time

9:09 AM

Messages

8,138

• Apr 26, 2012

• #53

adiwalsh said:

It happens in firefox, chrom and IE. other computers in the house are fine

Click to expand...

Thanks for answering - but please respond to the other posts.

This one asked you to post all of your ipconfig/all info.

This one asked you to try and fix one of the browser.

You have several people attempting to help - please read back thru and respond.

 

My Computer

At a glance

W7 Pro SP1 64biti78GBIntel HD Graphics

Computer type

Laptop

Computer Manufacturer/Model Number

Employer provided Dell Latitude

OS

W7 Pro SP1 64bit

CPU

i7

Memory

8GB

Graphics Card(s)

Intel HD Graphics

Hard Drives

crappy SSD

Antivirus

Employer mandated Symantec Endpoint Protection

Browser

Pale Moon 64bit, IE11 64bit & Chrome 64bit

A

adiwalsh

New member

Thread Starter

Local time

4:09 PM

Messages

31

• Apr 27, 2012

• #54

sibbil here is the top part of the thing you wanted to see.

 

Attachments

• 
  ghhrgtd.PNG

  21.4 KB · Views: 12

My Computer

At a glance

Windows 7 64 bit

Computer Manufacturer/Model Number

Compaq presario cq56

OS

Windows 7 64 bit

U

UsernameIssues

a.k.a. UNI

Guru

Gold Member

Local time

9:09 AM

Messages

8,138

• Apr 27, 2012

• #55

Based on the screenshot of your ipconfig/all - it would seem that this computer is not behind a NAT. Are your other computers behind a NAT? Maybe you could post the ipconfig/all for one of the other computers that does not have the redirect issue.

Also, did you manually assign those DNS IP addresses?

 

My Computer

At a glance

W7 Pro SP1 64biti78GBIntel HD Graphics

Computer type

Laptop

Computer Manufacturer/Model Number

Employer provided Dell Latitude

OS

W7 Pro SP1 64bit

CPU

i7

Memory

8GB

Graphics Card(s)

Intel HD Graphics

Hard Drives

crappy SSD

Antivirus

Employer mandated Symantec Endpoint Protection

Browser

Pale Moon 64bit, IE11 64bit & Chrome 64bit

A

adiwalsh

New member

Thread Starter

Local time

4:09 PM

Messages

31

• Apr 27, 2012

• #56

I dont know what NAT or DNS is, I dont think I have changed any settings, i just plug my ethernet cable from the model into my laptop. I will take a screenshot of the other computer tomorrow

 

My Computer

At a glance

Windows 7 64 bit

Computer Manufacturer/Model Number

Compaq presario cq56

OS

Windows 7 64 bit

F

F5ing

New member

Guru

Gold Member

VIP

Local time

10:09 AM

Messages

2,171

• Apr 27, 2012

• #57

adiwalsh said:

i just plug my ethernet cable from the model into my laptop. I will take a screenshot of the other computer tomorrow

Click to expand...

When you say "model" I'm assuming you mean "modem". If that's correct, then that's not advised. For protection against attacks and infiltration from the internet you should really have a router (NAT) between the modem and all your computers. The router keeps your machines from being exposed to the internet (keeps them hidden from the rest of the world).

Looking forward to your screenshot tomorrow. Would also like to know if you connect the other computers that you have the same way as this one (direct to the modem or other ways). If different, let us know exactly how you connect them.

Those addresses that appear in your screenshot are all assigned to Virgin Media Broadband service. Does that sound right? That includes the DNS addresses UsernameIssues was speaking of.

 

My Computer

At a glance

Windows 7 Ultimate x64

OS

Windows 7 Ultimate x64