Firefox Google Redirect Virus

I have a Firefox Google redirect virus that neither BitDefender nor TDSSkiller can detect.

When I search for something on Google, using Firefox, most of the time clicking a link will take me to the page that google is pointing to. However, it will intermittently redirect me to random sites such as find-fast-answers.com, onlinenewsdigest.com, search.yellowise.com, or yellowbook.com.

Here is an example of Google searching for "Margaret Peterson Haddix".

Clicking on the first link should lead to www.haddixbooks.com

Instead, clicking on the first link leads me to onlinenewsdigest.com

Sometimes, clicking on that first link leads me to search.yellowise.com

Sometimes, clicking on that first link leads me to the correct and intended page result

Sometimes, clicking on that first link leads me to yellowbook.com, where no matter how many times, I cannot click the Back button to go back

Before it takes me to yellowbook.com, it redirects first to find-fast-answers.com and THEN to yellowbook.com

PLEASE HELP ME GET RID OF IT. There are search results on google for "find fast answers redirect virus" but I do not trust any of those sites!

Find more posts tagged with

Comments

dragix

Before it takes me to yellowbook.com, it redirects first to find-fast-answers.com and THEN to yellowbook.com

Cristi Raducu

Hi there,

I have sent you an email with a procedure on how to troubleshoot this case.

Please reply back to the email with the log and also post on this forum when you have sent it so I can take a look.

dragix

That's a quick response! I replied to your email.

I think I solved the problem using BitDefender's File Shredder. I uninstalled Firefox and then used the File Shredder to delete any remaining files in Program Files. After that, I re-installed Firefox. Now I think I can Google normally.

Cristi Raducu

Thank you for the log.

Everything looks clean on the system and I am glad to notice that everything is back to normal after reinstalling the browser.

emcecile

I am having the exact same problem! It is really driving me insane. Could you please email me the way to fix it also? Thank you.

Cristi Raducu

I am having the exact same problem! It is really driving me insane. Could you please email me the way to fix it also? Thank you.

I have sent you the email as well.

Please reply back when you can and also post back here when done.

peterscully

I have an issue similar but not with Firefox. I use IE and use Google to search. Thinking the problem was with google I went to Yahoo. Same deal. I am often redirected to another search engine, told Google notavaialble, or taken to a completely unrelated site. I have aske for bitdefender assist on ticket Ticket ID:201107201052405 Supervisor escalation and have been told again my sytem is clean! Help.

bowiefan5

I have sent you the email as well.

Please reply back when you can and also post back here when done.

Yes, may I also receive this email on how to fix it?

~Desperate

friedice

Can I also get that email? Much appreciated!

Steve Arrasmith

Thank you for the log.

Everything looks clean on the system and I am glad to notice that everything is back to normal after reinstalling the browser.

University IT are all on vacation! (I can't blame them, it is a beautiful day.)

I have the same find-fast-answers virus the redirects searches from Google in Firefox but not Internet Explorer or Chrome. I've run multiple full scans in MS Forefront that always find and eliminate Trojan Downloader: Win32/Tracur.Q (or .Y). But then you do one search in Google and they are back. Multiple scans with Malwarebytes finds nothing. tdsskiller from Kapersky does not find anything. Spybot does not find anything.

MS ForeFront pops up with a message "Microsoft wants to know more about the following programs. Please forward." (to paraphrase). The two programs are:

C:\Windows\System32\EPOSLM0032.exe and C:\ProgramData\atmfd32.exe

When I click on the second program above MS ForeFront warning message comes up immediately detecting a virus. It turns off in a few seconds and the log shows it has caught another Tracur.Q Trojan Downloader.

The information tag on atmfd32.exe is "CodeSnip Database Viewer; Company: DelphiDabbler; File Version 1.6.1.91; Date Created 7/14/2011"

Are these two applications hiding the virus? Can they be deleted or are they needed for something else?

I'm just a scientist! Many blessings upon you for the help that you do.

Steve

P.S. Have a nice weekend.

Cristi Raducu

Hi Steve,

Please send me by PM a sample of those 2 files so we can analyse them + C:\Windows\System32\Drivers\etc\hosts (the file doesn't have an extension).

Note that you need to upload the files on www.sendspace.com (or on any site of this kind) and send me back the links.

Thanks !

Cristi Raducu

Can I also get that email? Much appreciated!

Email sent,waiting for reply.

Thanks !

coolcool1227

Read this topic just for information.

Freon

I'm having the same problem in both IE and Firefox. I have run AVG Antivirus, MalwareBytes, TDSSkiller, SuperAntiSpyware, HitmanPro and CCleaner without success. Can you please send me the troubleshooting instructions also, or (better) post them to this forum? Thanks.

gehlover

Can you send me the email as well? Thanks!

gehlover@hotmail.com

Cristi Raducu

Can you send me the email as well? Thanks!

gehlover@hotmail.com

Email sent.

You can also follow the instructions from this link and use the contact form on our website to send the reports for analysis.

http://www.bitdefender.com/support/The-sys...fected-490.html

solstys

Email sent.

You can also follow the instructions from this link and use the contact form on our website to send the results for analysis.

http://www.bitdefender.com/support/The-sys...fected-490.html

Hello,

Can you please send me the email as well? I have the same issue.

Thanks.

paulson

Hi there,

I have sent you an email with a procedure on how to troubleshoot this case.

Please reply back to the email with the log and also post on this forum when you have sent it so I can take a look.

First, let me say that there is nothing more infuriating on the Internet then when you are looking for an answer to a problem, and you see someone say "I sent you an email" followed by "thanks, that fixed it!", with absolutely no indication of what was done to solve the problem.

As you can see by the replies here, there are many other people who would love to know the answer, so please post it here instead of sending emails.

Thanks,

Eric

Cristi Raducu

First, let me say that there is nothing more infuriating on the Internet then when you are looking for an answer to a problem, and you see someone say "I sent you an email" followed by "thanks, that fixed it!", with absolutely no indication of what was done to solve the problem.

As you can see by the replies here, there are many other people who would love to know the answer, so please post it here instead of sending emails.

Thanks,

Eric

The instructions were already posted by me in a previous post.

I have increased the font size so they can be more visible.

paulson

The instructions were already posted by me in a previous post.

I have increased the font size so they can be more visible.

But that's not an answer -- that's just a form for me to send my information to BitDefender. What is the answer that you sent to other people that seems to have fixed their problem?

Cristi Raducu

But that's not an answer -- that's just a form for me to send my information to BitDefender. What is the answer that you sent to other people that seems to have fixed their problem?

Each case is different,it depends from case to case,there are different files that produce this redirect.

anayaq

Could you help me out? I have the same issue.

Thanks.

Cristi Raducu

You need to generate a log as described in this article and send back the results using the contact form.

http://www.bitdefender.com/support/The-sys...fected-490.html

southpaw14mj

I am having the same problem. Any time I click a link on Google it occasionally redirects me to find-answers-fast.com or that yellowpages site. Can you send me the e-mail on how to troubleshoot this? I would really appreciate it.

o_sala

Does this issue only happen on FF? If yes, you might want to try reinstalling it.

Cristi Raducu

Recently the google redirects are caused due to an infected Add-on/Extension in Firefox called: XUL Cache.

You should remove it immediately no matter if Firefox is your default browser or not.