How to remove google redirect virus

Posted by egomoo on April 06, 2009
Manual removal instructions, Removal Tools, Trojan

what ’s google redirect virus

when your computer has infected the “google redirect virus” , every search engine you go to is giving your random redirects no matter what browser you use.Your computer will being really slow … aswell when going into google the links you click into direct you to other ads and nonrelated sites… only after clicking two or three times may get into the original site intended.if you have find those problems,your computer may have the google redirect virus.

How to Get rid of google redirect virus using XDelBox

Step1: Please download Safe Returner from Here to your Desktop.

If you are using Firefox, make sure that your download settings are as follows:
- Tools->Options->Main tab
- Set to "Always ask me where to Save the files".

Step 2:

Safe Returner

here

Step 3:

Safe Returner

Step 4:Waiting less than 5 minutes after scan finished.

Step 5:Click "Remove" to remove spyware or malware threats.

Step6:

Why should you need Regtweaker?

As we know, virus and Trojans make the computer malfunction by destroying and modifying the registry so that the computer will not run normally. After the virus and Trojans are removed, the registry is still destroyed or modified, so the computer still has problems. That's why you need to repair the registry. Also, some virus and Trojans leave some DLL files in the registry and this will cause strange DLL errors and affect the computer performance.

Installing or uninstalling software still can leave your Windows registry fragmented,with obsolete,corrupted and harmful files.Check your registry with RegTweaker tody.Download RegTweaker Now

To make your computer run as fast as before or much faster than before,
1. Download and install Regtweaker.
2.Run a full scan of your computer.
3. Click Repair Now and repair all errors detected.

After these 3 easy steps, your computer will run much faster than before!

NEXT for more add by admin 2009-12-16

Please download ATF Cleaner by Atribune From Here and save it to your Desktop.
Follow the instructions for the browser you use.
Read the instructions about the cookies. Delete what you do not need.

Double click ATF-Cleaner.exe to run the program.
Check the boxes to the left of:
Windows Temp
Current User Temp
All Users Temp
Temporary Internet Files
Java Cache
The rest are optional – if you want to remove the lot, check “Select All”.
Finally click Empty Selected. When you get the “Done Cleaning” message, click OK.
If you use the Firefox or Opera browsers, you can use this program
as a quick way to tidy those up as well.
When you have finished, click on the Exit button in the Main menu.
====================================================================
PS:If your IE google work well but firefox or safari redirect,please do follow steps

1.backup and export your bookmarks
How to Backup Your Bookmarks Manually for more detial ,please visit here
2.delete the whole folder of firefox or safari

3.download new from official site ,and reinstall it

Tags: gaopdxserv.sys, google redirect problem, google redirect spyware, google redirect virus, google redirecting virus, mtn5.goole.ws, popup.adv.net, redirect google search, remove google redirect virus, TDSSserv.sys, Trojan.DNSChanger

74 Comments to How to remove google redirect virus

Legs
May 8, 2009 IP:24.154.17.55

This finally fixed my broswer redirect problem. Thanks!!!!!

bart Reply:
May 31st, 2010 at 9:33 am

same here. i have been looking for a solution non-stop for the past 12 hours and im happy to say that this was it

D-$
May 14, 2009 IP:70.110.88.232

Thank you, this actually worked. I didn’t think it was going to!

D93
June 10, 2009 IP:65.27.41.97

I did that but google is still redirecting me. Do I scan again? Plz help

Stevie Reply:
March 11th, 2010 at 9:25 am

Check the web and download something called Combofix. My computer has personally been F***ed by this problem, but Combofix fixed it.

Don’t bother with scanners like Spybot, Malwarebytes, Spy Sweeper, or other spy scanner crap.

Sure, they’ll get some pests out, but they won’t reverse the damage caused by the trojan, virus or however you want to call it. You’re still gonna get redirected.

kevin
June 14, 2009 IP:74.184.153.5

I used anti-malware 1.37 and and it found 6 registy errors and said it was fixed. But when I reboot they are back. help

Database version: 2182
Windows 5.1.2600 Service Pack 2

6/14/2009 3:14:56 PM
mbam-log-2009-06-14 (15-14-56).txt

Scan type: Quick Scan
Objects scanned: 78528
Time elapsed: 1 minute(s), 26 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 6
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\DhcpNameServer (Trojan.DNSChanger) -> Data: 85.255.116.141 85.255.112.90 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{ab3d93c4-e350-4b67-9b79-2c3e38be513f}\DhcpNameServer (Trojan.DNSChanger) -> Data: 85.255.116.141 85.255.112.90 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\DhcpNameServer (Trojan.DNSChanger) -> Data: 85.255.116.141 85.255.112.90 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces\{ab3d93c4-e350-4b67-9b79-2c3e38be513f}\DhcpNameServer (Trojan.DNSChanger) -> Data: 85.255.116.141 85.255.112.90 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Tcpip\Parameters\DhcpNameServer (Trojan.DNSChanger) -> Data: 85.255.116.141 85.255.112.90 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Tcpip\Parameters\Interfaces\{ab3d93c4-e350-4b67-9b79-2c3e38be513f}\DhcpNameServer (Trojan.DNSChanger) -> Data: 85.255.116.141 85.255.112.90 -> Quarantined and deleted successfully.

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

x
July 3, 2009 IP:117.193.168.71

Didnt work for WinXP

John
July 15, 2009 IP:71.56.40.236

Didn’t work. I am redirected even when not using google or yahoo. Any link on any page could redirect me to some random site. Anyone know how to remove this?

Nothing I have tried so far has worked. Bitdefender 2008, Malwarebytes’Anti-Malware, SuperAntiSpyware, SpyBot Search and Destroy. None of these worked.

Jason
July 25, 2009 IP:67.161.58.222

Norton 360 cost me 70 bucks and couldn’t find the virus. The link you posted was free, found 5 items and fixed my redirect problem. THANKS!!

Bill
July 31, 2009 IP:86.148.16.218

didn’t work for me, as with John above.

Ed
August 13, 2009 IP:207.233.77.171

Agree with Bill, same thing with John.

Ed
August 13, 2009 IP:207.233.77.171

I solved it by renaming mbam.exe to mbam1.exe and it works without showing the program is closed due to an error.

John-Chadwick.com Google Redirect Virus FIXED
August 16, 2009 IP:99.198.110.194

[...] http://www.xdelbox.com/how-to-remove-google-redirect-virus/ [...]

Tola
September 2, 2009 IP:86.149.229.149

O my Gosh! I cant believe it worked. This virus infected my work laptop and I was almost pulling out my hair trying to resolve the issue and then i came accross this post. Thank you so very much. I am very grateful. I can now not only access my google and yahoo links from both IE and Firefox, I can also access websites such as lavasoft and update the malwarebytes program on my laptop. All these were things i was unable to do before. Thanks a whole bunch!!

(A very happy girl called Tola)

Ben
September 12, 2009 IP:68.14.139.89

Obviously didn’t work. This exact solution is floating around the forums, with the same amount of people dissapointed.

Dave
September 12, 2009 IP:128.235.169.146

Yes! This worked, Thank You So Much

J Ross
September 15, 2009 IP:76.99.34.121

This was the ONLY thing that finally worked for me!

matt
September 17, 2009 IP:65.44.177.2

ComboFix worked for me. Registry Easy found tons of stuff too bad you have to pay to remove them.

pete
September 25, 2009 IP:65.28.10.20

This solution worked for me. wonder what’s up with the ones it did not work for..

Carie
October 7, 2009 IP:69.218.72.82

IT WORKED! Thank you so much.

Lizzard
October 9, 2009 IP:70.240.225.218

this totally worked! thanks soo much! don’t even know how I got the google redirect thingy…

tracey
October 9, 2009 IP:24.62.155.103

YAY!!! Finally something that worked!
All gone, woo hoo!
Thanks!~

Abby
October 13, 2009 IP:75.141.232.64

Thank you SO much! I tried EVERYTHING and I couldn’t get rid of it! Then I read this, followed the instructions, and it finally is gone. Thankyoooouuu!

Sean
October 18, 2009 IP:67.174.230.65

Finally worked, I’ve tried almost everything including the spydoctor thinghie that didn’t work at all..

took me some time to scan using the combo fix including some reboots but it’s worth the time.. finally fixed the google redirect virus.. thanks!!!

Jeff
October 20, 2009 IP:75.174.80.146

This worked for me after trying malewarebytes, spybot search and destroy, and ms malicious software removal tool. Follow the directions carefully. I have XP home sp3. Good luck!

Bob
October 30, 2009 IP:70.44.186.161

This works! McAfee, AVG, and SUPERAntiSpyware couldn’t find anything wrong, but this did it! (Windows XP)

thisisit
November 2, 2009 IP:99.33.167.1

WORKED GREAT!

Norton has nothing on this

thankx

Nick
November 13, 2009 IP:12.36.18.130

This worked!!! I tried everything. Was about to reinstall windows; this was my last hope. Thank you so much!

Google redirect problem please help - TechSpot OpenBoards
November 15, 2009 IP:74.55.96.66

[...] Originally Posted by hatemalware Hi, I am still having problems despite doing the 8 step process. Can anyone help? I posted a new link and post about having a fix for the google redirect issue: http://www.xdelbox.com/how-to-remove…edirect-virus/ [...]

Syed
November 17, 2009 IP:24.228.29.178

This worked! thanks a lot.

Jason
November 20, 2009 IP:24.7.71.182

Wow, it worked. THANK YOU!!!!

Chuck
November 21, 2009 IP:66.66.205.128

i was ready to throw the notebook out the window. Nothing worked. Spent $50 on “top line” antivirus software to no avail.

This worked first time.

THANK YOU!

Bodeen3
November 28, 2009 IP:207.68.51.246

My home page is set to http://www.google.com.
After about 2 seconds I continually get redirected to http://www.google.nl
Nothing has worked for me. I’ve tried almost everything even Combo-Fix and Malwarebytes.
No luck.
If anyone has a magic Silver bullet please share.

Thanks

Bodeen3

michael
November 28, 2009 IP:66.142.58.7

Thank you so much this worked was at my wits end with this. 1st time for me too.

Jason
November 29, 2009 IP:24.7.71.182

OK, I’m the same Jason that posted on 11-20-09. The above process did remove the google redirect virus and everything was great. Then….the first time I shut down the computer and went to turn it on again, windows could “not start successfully”. I could not go to safe mode or any of the other options anywhere, it would just come right back to the recovery console screen. I tried all kinds of stuff but eventually had to do a full “recover”…lost everything on the machine. I’m certainly not blaming anything on the directions or software here, but I just thought I should come back and post what happened. Good luck!

Not a professional
November 29, 2009 IP:75.17.220.153

Jason:

Using combo fix and the like finds things that are infected, seeing as this is a virus and not something that keeps to itself. If you don’t ‘clean’ the files but just delete them, that can cause serious damage to your system. You could be deleting vital files to your system that simply needed to be cleaned instead of killed. It’s kind of like giving a person a flu shot instead of shooting them because they’re sick.

That said, I have this redirect virus and I have no idea how to get rid of it effectively.. I know what needs to be done, but I don’t know how. Yayyy!

egomoo
November 29, 2009 IP:60.183.13.111

to jason,I’m sorry to hear that.

Maybe there are some other problem in your windows system while most of infected in my blog post comments do work well .

this guy
December 1, 2009 IP:98.232.150.235

this worked!!
thanks man

James
December 1, 2009 IP:67.101.29.37

worked for me! Thanks so much!

Jay
December 3, 2009 IP:174.26.6.191

It worked! Thank you, thank you, thank you!

Billy
December 3, 2009 IP:74.227.148.64

Worked great. Thank you so much.

Jason
December 4, 2009 IP:75.117.114.2

It worked for me – on Windows 7 Ultimate!

Monique
December 4, 2009 IP:24.255.99.213

Thanks, it worked! =]

Dylan
December 5, 2009 IP:68.32.147.7

Nope it quarantined viewpointservice but I still have my problem

Jason
December 5, 2009 IP:75.117.114.2

I take that back… It is still there.

Jason
December 7, 2009 IP:75.117.114.65

Ok, I finally beat this thing. The free trial of Hitman Pro 3.5 knocked the virus out in one pass and only took like 5 minutes. amazing.

Marc
December 8, 2009 IP:58.160.137.170

I just used Hitman Pro 3.5 as well, found problem with Windows\system32\drivers\atapi.sys

All fixed now..phew.

Scans that didn’t find it: Avira, Trendnet, Trojan Remover.

eddy
December 8, 2009 IP:206.51.203.227

hitman 3 worked for me

Test
December 9, 2009 IP:205.229.151.150

Just testing to see if these comments are fake.

jas
December 9, 2009 IP:208.255.202.132

hitman did not work for me, nor has any of the other suggestions…

Bethe
December 10, 2009 IP:75.108.251.111

Thank you so much! I can’t believe this worked so quickly. I was getting so frustrated.

meanoldrunk
December 11, 2009 IP:166.194.54.135

worked excellent! thanks you can get regace patch @ pirate bay

louise
December 12, 2009 IP:68.7.14.238

I NEED HELP WITH THIS AWFUL GOOGLE REDIRECT OFF THE COMPUTER..I TRIED EVERY THING ,,,,NOTHING SEEMS TO WORK!!!

Angantyr
December 14, 2009 IP:86.131.246.41

Hmmm. Maybe these comments are fake…

nusrep
December 16, 2009 IP:174.55.194.141

just ran hitman pro 3.5.3 found 4 things. romoved and rebooted. the program will not remove a file called spoolsve.dll it says it is a virus but cannot remove it. i am able to search again using google, which is the good news but my internet runs real slow now. i have cable but am running around the speeds of dial up??????? will keep trying to fix before i reinstall windowsxp

Not Working
December 16, 2009 IP:24.153.170.18

Apparently this are all fake :/ If anyone can find a fix for it, let me know legacy9x@yahoo.com

Thanks, the damn hitman pro did not even find my internet connection

kt
December 21, 2009 IP:70.80.25.181

lets see if it works

jaey234
December 21, 2009 IP:70.66.14.65

I had the Google redirect virus – various symptoms but mainly this one: I would search for “poker online” (both in IE and in Firefox, and using either Google or Bing); the searchpage would appear, I would click on ANY result and then the words “you are being redirected” would flash for 2 seconds and some random poker website’s come-on page would appear. This redirect virus is very sneaky and forceful and I found no solution until I tried Combofix. It seemed like strong medecine but I was desperate. Guess what, IT WORKED, and all problems are gone (and have stayed gone for over 14 days now. My massive thanks to the guy who wrote Combofix, I also liked your notes during the running of the program, THANK YOU.

Ben
January 3, 2010 IP:24.128.132.77

I usually don’t post comments but I was on the fence about this program because it looks illegitimate…well, it fixed the issue! Just a tiny occasional redirect problem like a lot of others, this program fixed it right up

Robert.
January 14, 2010 IP:68.46.228.227

Hmm.. i have the google redirect virus, but after downloading XDelBox and using it, it didnt pick anything up..

How to Remove google redirect to newserversearch.com | Spyware Removal Instructions
January 17, 2010 IP:67.210.104.233

[...] for helping fix the google redirected problem.It’s so hot in famous forum to dissicuss google search hijacked issue.Such like combofix,GooredFix or XDelBox are google results redirected removal [...]

How to remove TrojanSPM/LX problem | Spyware Removal Instructions
January 18, 2010 IP:67.210.104.233

[...] for helping fix the google redirected problem.It’s so hot in famous forum to dissicuss google search hijacked issue.Such like combofix,GooredFix,Trojan Remover or XDelBox are google results redirected removal [...]

LarryFromVegas
January 20, 2010 IP:68.227.21.140

After hours of hard research work, I came across this solution—HitMan Pro (ver 3.5 is the latest as of this writing) fixed my Google & Yahoo Redirect Virus. The file culprit was named 7n8001.sys and was located in the Drivers sub-directory under C:\Windows\System32.

It took several hours of research and experimentation before I came upon this solution. I found the software on CNet. Looks like it’s free for 30 days. It’s a cloud computing solution. If you try deleting or renaming the virus yourself, it regenerates itself. It’s nasty and persistent.

As of today, 1/20/2010, the latest updates for AVG, Malwarebytes, Spybot Search & Destroy, and AdAware could not fix it. XDELBox found it but couldn’t fix it (couldn’t write to the HOSTS file in C:\Windows\System32\Drivers\ETC.)

My Windows and IE updates were current.

Adam
January 20, 2010 IP:72.91.223.55

Thanks so much to Jason above! and to the makers of hitman pro. I had tried nearly everything to get rid of this damn redirect, and it’s the first thing that did it. It amazes me how so many of the others couldn’t fix it?!!
Anyway, thanks for the tip

Trish
January 23, 2010 IP:24.19.179.44

Does this really work

lucy
February 9, 2010 IP:174.116.209.55

I used hitman pro 3 times (just to make sure) regtweek and one other antispyware whose name I’ve forgoten than I ran cc cleaner 2x than ran housecalls 2x. Everything seems to runnung smoothly and quicker. Was considering reformatting and might just but things seem stable for the moment.

lucy
February 9, 2010 IP:174.116.209.55

p.s. though I’m writing this from a MAC the computer that was infected is a PC with XP. My computer is still waiting to come home from school where I fixed it yesterday.

samantha20
March 6, 2010 IP:117.18.231.15

How to remove mtn5.goole.ws and popup.adv.net Malware

http://www.tips29.com/2008/11/how-to-remove-mtn5goolews-and.html

Laura
March 15, 2010 IP:99.36.234.154

This FAILED, just like everything else I’ve tried. It was a waste of time.

Tim
June 19, 2010 IP:173.75.13.118

I absoluteness LOVE LOVE LOVE the maker of this program I am 100% satisfied it worked 100% for windows 7. No more random jumping or redirecting. THANK YOU!!!

Jason
June 23, 2010 IP:86.144.205.93

btw regtewaker requires registering etc etc etc. for $29.

GhostWarriorTheGeekonyoutube
July 8, 2010 IP:98.227.192.189

might be a false positive, but this link has a Trojan. So no thank you

File file-1160601_com received on 2010.06.15 20:42:55 (UTC)
Current status: finished
Result: 5/40 (12.50%)

DrWeb 5.0.2.03300 2010.06.15 Trojan.Touch.293

F-Secure 9.0.15370.0 2010.06.15 Suspicious:W32/Malware!Gemini

McAfee-GW-Edition 2010.1 2010.06.15 Artemis!544F11D7B4D5

Sophos 4.54.0 2010.06.15 Sus/Behav-113

Sunbelt 6451 2010.06.15 FraudTool.Win32.RogueSecurity (v)

http://www.virustotal.com/analisis/c690802d1c699c7dd95a4e9b85df02a44fc60ffbdf7b821704b641b4fd447a95-1276634575

Brian H.
July 30, 2010 IP:96.239.133.217

Combofix works for me but I have gotten re-infected several times. But each time Combofix works. Just wish I could find a way to keep it from happening again.

Steve S
July 31, 2010 IP:99.191.109.163

Finally had success with Hitman pro 3.5 My system is Windows XP Media. Did not have success with: MalwareBytes, RegTweaker(altho I quit this when it asked for money to remove what it found), SafeReturner, or programs I already had beofre I found this page (Spybot, Avast, & Yahoo anti-Spy.) thanks for posting all of this. I will re-post if this pest comes back in the near future, but as of now I really like Hitman.

Spyware Removal Instructions

anti spyware,remove Spyware,spyware remove, free spyware removal,free spyware software ,sreng,hijackthis,xdelbox