Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: Most links redirecting to ads

18 Mar 2011   #11

Windows 10 Pro x64

Not really sure what to suggest on how to fix it, I'll let one of our security experts advise you on that, but for now, try this; [How-To] Stop Automatic Redirects To Other Websites with Firefox 3 it will at least stop the redirects (hopefully)

Or this addon: (buggy with Firefox 4.0 if your using that version)

My System SpecsSystem Spec
18 Mar 2011   #12
Microsoft MVP

Windows 7 Ultimate 32bit SP1

O10 - Unknown file in Winsock LSP: c:\windows\system32\msible.dll
Troj/Agent-QHC Trojan (Trojan.gen, Trojan.Win32.Agent.hfpw) - Sophos security analysis

Copy and paste these lines in Note pad.

@Echo on
attrib -h -s -r hosts
echo localhost>HOSTS
attrib +r +h +s hosts
ipconfig /release
ipconfig /renew
ipconfig /flushdns
netsh winsock reset all
netsh int ip reset all
shutdown -r -t 1
del %0

Save as flush.bat to your desktop. Right click to run as Administrator. Your Computer will reboot itself.

Download Combofix from any of the links below, and save it to your desktop.<--Important
Link 1
Link 2
Link 3

Click on this link Here to see a list of programs that should be disabled.
The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.
If your anti-virus or firewall complains, please allow this script to run as it is not malicious.
Next: Disconnect from the internet. If you are on Cable or DSL, unplug your computer from the modem.
Next: Please disable all onboard security programs (all running with back ground protection) as it may hinder the scanner from working.
This includes Antivirus, Firewall, and any Spyware scanners that run in the background.
  • Double click combofix.exe and follow the prompts.
  • When finished, it will produce a log for you. Post that log and a HiJackthis log in your next reply
Note: Do not mouseclick combofix's window while its running. That may cause it to stall
Please be patient while the scan runs, at times it may appear to stall.
When finished and after reboot (in case it asks to reboot), it should open a log, combofix.txt.
Post this log in your next reply together with a new hijackthislog.
After rebooting ensure your Security applications have been re-enabled.

In your next reply post:
New HJT log taken after the above scan has run

***A guide and tutorial on "How to use Combofix" can be found here:
A guide and tutorial on using ComboFix
My System SpecsSystem Spec
18 Mar 2011   #13

Windows 7 Pro

The latest AVG update recognised it. Seeing if that does the trick first.

And so far it's picked up PSW.Agent.ALCB, Dropper.Genertic3.AGKF, and PSW.Agent.ALCD.dropper - which is a positive result for the AVG team, when yesterday it found nothing at all!
My System SpecsSystem Spec

18 Mar 2011   #14

Windows 7 Pro

The moment I attempted your fix - I got as far as resetting my ips and the "DRIVER IRQL NOT LESS THAN OR EQUAL" infinite bluescreen loop returned with a vengeance.

I'm starting to suspect the trojan has replaced or modified my network drivers, and this is how it's able to bypass needing to modify everything else like my hosts file and also what's causing my bluescreens when I boot to regular windows or safe mode with networking enabled.
My System SpecsSystem Spec
18 Mar 2011   #15
Microsoft MVP

Windows 7 Ultimate 32bit SP1

The Winsock has been corrupted by the infected .dll file ...

Repair and Reset Windows Vista TCP/IP Winsock Catalog Corruption My Digital Life
My System SpecsSystem Spec
18 Mar 2011   #16

Windows 7 Pro

Gah. Once again no infection is detected - but it's STILL redirecting.

Also - it gets worse as the constant bluescreens that started after resetting winsock have now got me stuck in safe mode 100% of the time.

*Edit* Got back into normal mode for about 3 minutes. Long enough to learn that the trojan seems to have gotten wise to my antivirus and disabled it completely. Didn't find out any more since immediately afterward, another bluescreen hit and I'm back in safe mode.
My System SpecsSystem Spec
18 Mar 2011   #17

Windows 7 Pro

After several attempts I've given up on Combofix. Each time I run it I get another IRQL NOT LESS THAN OR EQUAL bluescreen.

Bleepingcomputer threads on this topic suggested I attempt sticking a flash drive with farbar recovery scanner on it in, so while I wait for more suggestions I'll give that a try.
My System SpecsSystem Spec
18 Mar 2011   #18

Windows 8.1 Pro RTM x64

Sorry about the OpenDNS. I use them, and have no problem with them. It is very likely that this issue you're currently having is causing the slow response.

What do the following registry locations show (exact spellings, please):

My System SpecsSystem Spec
18 Mar 2011   #19

Windows 7 Pro

My firewall (@OnlineArmor GUI "C:\Program Files (x86)\Online Armor\oaui.exe"), google updater (Google update "C:\Users\Washu\AppData\Local\Google\Update\GoogleUpdate.exe" /c) (Which always restores the entry every time I update chrome or Google Earth no matter how often I delete it), and my audio manager (which I need to make my onboard sound work) (VIAAUD C:\Program Files (x86)\VIA\VIAudioi\VDeck\VIAAUD.exe.)

So in summary:
One application I installed myself just today while trying to fix my problems, after being led to believe a zonealarm file was causing my crashes.
One application that reinstalls itself every time I install any google software.
One application that came with my motherboard and I need to have sound.

*Edit* And yes, I'll try benchmarking the DNS servers again once my system can manage more than a couple of minutes uptime.
My System SpecsSystem Spec
18 Mar 2011   #20
Microsoft MVP

Windows 7 Ultimate 32bit SP1

PSW.Agent.ALCB <-- this is a password stealer ... I advise you to change all your passwords using a known "clean" computer.

Download RKill to a flash drive, then use it on the infected computer.
This log file is located at C:\rkill.log.
Please post the log
My System SpecsSystem Spec

 Most links redirecting to ads

Thread Tools

Similar help and support threads
Thread Forum
links is missing when pasting text with links in any browser or office
Hi, When I'm copying text withe links from the web and trying to paste it, The links is missing. I try to paste it into word or excel, and in all kinds of html editors in all browsers but the links are still missing. only text is shown. Is anybody here knows how to fix it? Tx very much...
Browsers & Mail
Clicking web links now redirecting me to survey and ad sites!
Last few weeks I've been viewing my normal web news or shopping pages and when I click on a link for more details or a news story, all of a sudden I'm switched to a survey site! This is happening 24/7 to me on every web site I visit. I've been keeping track of the addresses of these switched sites...
Browsers & Mail
Strange Problem IE redirecting links to Firefox
Hi, I am using IE8. Whenever I open some links in Internet explorer, it redirects the links to Firefox. For example, If I type www. vibhavram. com in IE address bar and press Enter, the site gets opened in another window in Firefox. It also opens a blank IE window. Please tell me what was...
Browsers & Mail

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 01:00.
Twitter Facebook Google+