Remnants of a Virus: Fixing IE/Google Redirection?
#1
FlyerTalk Evangelist
Original Poster
Join Date: Apr 2001
Location: DCA
Programs: AMC MovieWatcher, Giant BonusCard, Petco PALS Card, Silver Diner Blue Plate Club
Posts: 22,297
Remnants of a Virus: Fixing IE/Google Redirection?
I wasn't careful, I admit, downloaded something I shouldn't have for the very first time. Wound up with a virus that my fortunately up-to-date virus software caught and supposedly fixed.
However, there's one remaining problem. It seems that certain links from Google searches will open up a new browser and redirect me when I click them. Very annoying, it is slowing down my system tremendously when opening up new browser windows in Internet Explorer. And I'm having to copy and paste links from Google into the address box in order to reach the site, eg just about anything air travel related opens a new window and redirects me through a referral link to onetravel.com.
Any idea how I make this stop?
However, there's one remaining problem. It seems that certain links from Google searches will open up a new browser and redirect me when I click them. Very annoying, it is slowing down my system tremendously when opening up new browser windows in Internet Explorer. And I'm having to copy and paste links from Google into the address box in order to reach the site, eg just about anything air travel related opens a new window and redirects me through a referral link to onetravel.com.
Any idea how I make this stop?
#2
Join Date: Aug 2006
Programs: DL SM Diamond, AA Ex. Platinum, Ph.D in STFU
Posts: 464
I wasn't careful, I admit, downloaded something I shouldn't have for the very first time. Wound up with a virus that my fortunately up-to-date virus software caught and supposedly fixed.
However, there's one remaining problem. It seems that certain links from Google searches will open up a new browser and redirect me when I click them. Very annoying, it is slowing down my system tremendously when opening up new browser windows in Internet Explorer. And I'm having to copy and paste links from Google into the address box in order to reach the site, eg just about anything air travel related opens a new window and redirects me through a referral link to onetravel.com.
Any idea how I make this stop?
However, there's one remaining problem. It seems that certain links from Google searches will open up a new browser and redirect me when I click them. Very annoying, it is slowing down my system tremendously when opening up new browser windows in Internet Explorer. And I'm having to copy and paste links from Google into the address box in order to reach the site, eg just about anything air travel related opens a new window and redirects me through a referral link to onetravel.com.
Any idea how I make this stop?
#3
 
Join Date: Nov 2000
Location: Upcountry Maui, HI
Posts: 13,308
It's probably a browser helper object (BHO) that you accidentally installed. You can certainly try spybot s&d first, but if that doesn't work, you'll probably need to try and figure out what to disable using hijackthis:
http://www.trendsecure.com/portal/en...ols/hijackthis
Most likely the malware is installed as BHO (browser helper object) in IE.
I would try spybot s&d first. Don't bother innoculating or doing anything but a registry backup and system scan, then look at the results. Close IE before installing/running spybot s&d. Typically, you can let it fix anything it wants to fix.
If that doesn't work, you're going to need to run hijackthis and you'll need help analyzing the output. The Spybot S&D Forum is a good place for doing that.
Sybot S&D Home page: http://www.safer-networking.org/index2.html
-David
http://www.trendsecure.com/portal/en...ols/hijackthis
Most likely the malware is installed as BHO (browser helper object) in IE.
I would try spybot s&d first. Don't bother innoculating or doing anything but a registry backup and system scan, then look at the results. Close IE before installing/running spybot s&d. Typically, you can let it fix anything it wants to fix.
If that doesn't work, you're going to need to run hijackthis and you'll need help analyzing the output. The Spybot S&D Forum is a good place for doing that.
Sybot S&D Home page: http://www.safer-networking.org/index2.html
-David
#4
FlyerTalk Evangelist
Original Poster
Join Date: Apr 2001
Location: DCA
Programs: AMC MovieWatcher, Giant BonusCard, Petco PALS Card, Silver Diner Blue Plate Club
Posts: 22,297
I had forgotten that I had Spybot already installed on my computer. I haven't run it in over a year. Updated the file, ran it, problem solved .. thanks! ^
#5
In Memoriam
Join Date: Feb 2000
Location: Easton, CT, USA
Programs: ua prem exec, Former hilton diamond
Posts: 31,801
For stuff spybot can't fix, if you google the name of the site you are being sent to, there's usually a fix somebody has written for it, or instructions of what registry keeys need fixing.