#1
Member
Profile: Join Date: Nov 2008
Posts: 30
Computer Experience:
[Resolved] Yahoo Searches Redirected to Unwanted Pages
In the last few days Yahoo search result sends me to pages that are not the pages I'm seeking. Usually they are pages that appear to be another kind of search engine. Google doesn't seemed to be affected. All my virus scans show nothing. I had McAffe until yesterday. Without warning I could no longer update for viruses nor perform a scan. I uninstalled McAffe and installed Avast today. But it too does not find a problem.RAM : 1982 MB (45% free)http://www.yahoo.com/ http://go.microsoft.com/fwlink/?LinkId=69157 http://go.microsoft.com/fwlink/?LinkId=54896 http://go.microsoft.com/fwlink/?LinkId=54896 http://ie.redirect.hp.com/svs/rdr?TY...lion&pf=laptop http://www.sitesell.com http://a1540.g.akamai.net/7/1540/52/...x/qtplugin.cab http://h20270.www2.hp.com/ediags/gmn...tDetection.cab http://fpdownload2.macromedia.com/ge...sh/swflash.cab js - edit - js - open - dns -sd.exeHD ---- C:\ProgramDataSP1 )-->msiexec /package {90120000-0016-0409-0000-0000000FF1CE} /uninstall {4CA4ECC1-DBD4-4591-8F4C-AA12AD2D3E59}SP1 )-->msiexec /package {90120000-0018-0409-0000-0000000FF1CE} /uninstall {4CA4ECC1-DBD4-4591-8F4C-AA12AD2D3E59}SP1 )-->msiexec /package {90120000-001B-0409-0000-0000000FF1CE} /uninstall {4CA4ECC1-DBD4-4591-8F4C-AA12AD2D3E59}SP1 )-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {3EC77D26-799B-4CD8-914F-C1565E796173}SP1 )-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {430971B1-C31E-45DA-81E0-72C095BAB72C}SP1 )-->msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {F7A31780-33C4-4E39-951A-5EC9B91D7BF1}SP1 )-->msiexec /package {90120000-006E-0409-0000-0000000FF1CE} /uninstall {FAD8A83E-9BAC-4179-9268-A35948034D85}SP1 )-->msiexec /package {90120000-00A1-0409-0000-0000000FF1CE} /uninstall {4CA4ECC1-DBD4-4591-8F4C-AA12AD2D3E59}SP1 )-->msiexec /package {90120000-0115-0409-0000-0000000FF1CE} /uninstall {FAD8A83E-9BAC-4179-9268-A35948034D85}SP1 )-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {BEE75E01-DD3F-4D5F-B96C-609E6538D419}LAN Adapter-->"C:\Program Files\Broadcom\Broadcom 802.11\Driver\bcmwlu00.exe" verbose /rootkey="Software\Broadcom\802.11\UninstallInfo" /rootdir="C:\Program Files\Broadcom\Broadcom 802.11\Driver"HD Audio-->C:\Program Files\CONEXANT\CNXT_HDAUDIO\HUFSetup.EXE -U -IwisR30B7.infSP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}SP2 (KB941833)-->MsiExec.exe /I{C523D256-313D-4866-B36A-F3DE528246EF}JS ;.JSE;.WSF;.WSH;.MSC
Didn't find the information you thought to find?Similar Threads
#2
Staff
Profile: Join Date: Apr 2003
Location: New Bremen, Ohio U.S.A.
Posts: 12,521
Computer Experience:
Welcome to WindowsBBS Hondo
#3
Member
Profile: Join Date: Nov 2008
Posts: 30
Computer Experience:
Yahoo Searches Redirected to Unwanted Pages
Thanks noahdfear for the welcome and the help.dns -sd.exeTCP :c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNoteTCP :c:\program files\HP\QuickPlay\QP.exe:QPTCP :c:\program files\HP Connections\6811507\Program\HP Connections.exe:HP ConnectionsTCP :c:\program files\HP Connections\6811507\Program\HP Connections.exe:HP ConnectionsTCP :c:\program files\earthlink totalaccess\TaskPanl.exe:taskpanlTCP :c:\program files\earthlink totalaccess\TaskPanl.exe:taskpanlTCP :c:\program files\earthlink totalaccess\TaskPanl.exe:taskpanlTCP :c:\program files\Yahoo!\Messenger\YahooMessenger.exe:Yahoo! MessengerTCP :c:\program files\Yahoo!\Messenger\YServer.exe:Yahoo! FT ServerTCP :c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNoteTCP :c:\program files\Skype\Phone\Skype.exe:SkypeTCP :c:\program files\Bonjour\mDNSResponder.exe:BonjourTCP :c:\program files\iTunes\iTunes.exe:iTunesTCP traffic|http://www.gmer.net
#4
Member
Profile: Join Date: Nov 2008
Posts: 30
Computer Experience:
Yahoo Searches Redirected to Unwanted Pages
Noahdfear,
#5
Staff
Profile: Join Date: Apr 2003
Location: New Bremen, Ohio U.S.A.
Posts: 12,521
Computer Experience:
Hi Hond,dns setting (if you have a router) might be hijacked though. Do you know how to reset the router? Not just toggle the power, but reset it to factory default, which will require you to reconfigure it if accessed by wireless connection.
#6
Member
Profile: Join Date: Nov 2008
Posts: 30
Computer Experience:
Yahoo Searches Redirected to Unwanted Pages
Hey Noahdfear,
#7
Staff
Profile: Join Date: Apr 2003
Location: New Bremen, Ohio U.S.A.
Posts: 12,521
Computer Experience:
First, how many computers are using the router? Next, what type of connection do they have; wired or wireless?
#8
Member
Profile: Join Date: Nov 2008
Posts: 30
Computer Experience:
Yahoo Searches Redirected to Unwanted Pages
6 computers: 1 wired, 5 wireless
#9
Staff
Profile: Join Date: Apr 2003
Location: New Bremen, Ohio U.S.A.
Posts: 12,521
Computer Experience:
OK, lets check a couple of those computers too.cmd then hit Enter to open a command window.dhcp entry and see if it's set to a number similar to below.
#10
Member
Profile: Join Date: Nov 2008
Posts: 30
Computer Experience:
Yahoo Searches Redirected to Unwanted Pages
No similar number with asterisks. There are full ip addresses in the category of DHCP server
#11
Staff
Profile: Join Date: Apr 2003
Location: New Bremen, Ohio U.S.A.
Posts: 12,521
Computer Experience:
Do they all have the same number, and does it start with 68.53.81 ?
#12
Member
Profile: Join Date: Nov 2008
Posts: 30
Computer Experience:
Yahoo Searches Redirected to Unwanted Pages
Noah, by the number of different posts you are working it looks like you have several plates spinning. If you need to get back with me later--I'll understand.
#13
Staff
Profile: Join Date: Apr 2003
Location: New Bremen, Ohio U.S.A.
Posts: 12,521
Computer Experience:
192 is fine as well. So long as you see no IPs that begin with 85.255.112 that's good. Router will not need reset.mbr.exe and save it to your desktop.mbr.exe to run it.mbr.log on the desktop. GMER Rootkit tab.EXCEPT for ‘Show All’.Scan .Copy and paste the results (if any) into this topic.
#14
Member
Profile: Join Date: Nov 2008
Posts: 30
Computer Experience:
Yahoo Searches Redirected to Unwanted Pages
Noahdfear,http://www.gmer.net http://www.gmer.net Tcp aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)http://www.microsoft.com/windows/windowsmedia http://www.microsoft.com/
#15
Staff
Profile: Join Date: Apr 2003
Location: New Bremen, Ohio U.S.A.
Posts: 12,521
Computer Experience:
Download ATF Cleaner by Atribune and save it to your Desktop.Double click ATF-Cleaner.exe to run the program.
Check the boxes to the left of: Windows Temp
Current User Temp
All Users Temp
Temporary Internet Files
Prefetch
Java Cache
Recycle bin
The rest are optional - if you want it to remove everything check "Select All".
Please close all open browser windows
Finally, click Empty Selected. When you get the "Done Cleaning" message, click OK then exit.
Reboot
All times are GMT +1. The time now is 00:29 .
