cancel
Showing results for 
Search instead for 
Did you mean: 

Search Engines

oldgeezer
Grafter
Posts: 219
Thanks: 3
Registered: ‎02-02-2010

Search Engines

I've been involved in computer hardware for 40 years but I'm a bit light on modern computing.
I'm having a problem with Google search engine. If I type in a topic instead of taking me straight to a list of  relevant websites, it's now going to a series of advertising sites or even the site of another search engine. If I press the back button a couple of times I can usually get back to the google listings. I use Kaspersky Internet Security set at max settings and IE8. The Kaspersky doesn't report anything amiss.
Any ideas please ?
17 REPLIES 17
Oldjim
Resting Legend
Posts: 38,460
Thanks: 787
Fixes: 63
Registered: ‎15-06-2007

Re: Search Engines

Try Superantispyware free http://www.superantispyware.com/download.html
also Malwarebytes free http://www.malwarebytes.org/mbam.php
if you haven't already run a full scan with Kaspersky
shutter
Community Veteran
Posts: 22,206
Thanks: 3,769
Fixes: 65
Registered: ‎06-11-2007

Re: Search Engines

Have you recently downloaded and installed anything.?  you may well have changed the settings during the install process, by clicking OK on too many things, without fully reading what you were OK ing... before it actually installed....
Oldjim
Resting Legend
Posts: 38,460
Thanks: 787
Fixes: 63
Registered: ‎15-06-2007

Re: Search Engines

good point - have you got a fancy toolbar installed
dgdclynx
Grafter
Posts: 187
Registered: ‎05-04-2007

Re: Search Engines

Google asked me a couple of days ago if I wanted a 'local' search instead of the usual. I didnt ok it but perhaps you did. I have the Google toolbar.
oldgeezer
Grafter
Posts: 219
Thanks: 3
Registered: ‎02-02-2010

Re: Search Engines

I've found a strange add-on listed in my browser. I've disabled it and the problem seems to have disappeared for now. If I try to locate the add-on to delete it then it doesn't appear to be where windows says it is, so I guess that's suspicious.
Thanks for the suggestions.
oldgeezer
Not applicable

Re: Search Engines

Curious - what is the strange add-on?
Would definitely scan with Malwarebytes and/or SAS but in Safe Mode.  Obviously switch off system restore if anything is found and deleted so that it can't be harboured in it.
The other thing might be to download Revo Uninstaller and see if it appears there.
oldgeezer
Grafter
Posts: 219
Thanks: 3
Registered: ‎02-02-2010

Re: Search Engines

The add-on appeared after I visited a history forum which reports other people having trouble. it's name is     CNisExtBho    and it wasn't detected by Malwarebytes. I don't seem to be able to remove it but while it's disabled it doesn't seem to cause any trouble. When it's enabled my web browser goes to various selling sites including some with porn 'so I'd like to get rid of it if I can.
adie:quote
Not applicable

Re: Search Engines

It's a browser helper object and one search that I did turned up a result that it was a remnant of Symantec Norton AV but seeing as you are getting the popups/redirects I would think that it is unlikely.
I am no expert but when I have cleaned up machines before I have sometimes needed to use several utilities to effect a 'cure'.
You could try Superantispyware and Lavasoft Adaware (both in safe mode) to see if they come up with anything.
The other option is to try a scan with Kaspersky, as Oldjim advises. A friend of mind had a tough time with a trojan and I advised her to download a trial version of Kaspersky.
It cleaned up the machine immediately and she has now subscribed. Worth a try if all else fails. Also, they do have a support forum.
Hopefully someone with more knowledge than me might be able to give further advice.
ReedRichards
Seasoned Pro
Posts: 4,927
Thanks: 145
Fixes: 25
Registered: ‎14-07-2009

Re: Search Engines

I have seen this problem a lot recently.  What you probably have is a DNS changer that substitutes its own DNS for whatever one you are supposed to be using.  That means it can take you anywhere it likes on the internet without you necessarily being aware of the fact, so it would be a good way to steal passwords and banking details as well as feeding pop-ups.  The worst incarnation of the virus hides itself in a corrupted version of atapi.sys.  As this is a critical Windows file, the virus is difficult to detect and even harder to remove.
When I last tried a couple of weeks ago, Kaspersky could detect this virus but not remove it in situ.  Ex situ Kaspersky substitutes its own copy of atapi.sys but that may not be an option unless you have a second computer to hand.         
Not applicable

Re: Search Engines

Sounds as if it is a real problem - is the only realistic option a reinstallation of Windows OS then?
Oldjim
Resting Legend
Posts: 38,460
Thanks: 787
Fixes: 63
Registered: ‎15-06-2007

Re: Search Engines

As you have KIS installed I suggest raising the problem here http://forum.kaspersky.com/index.php?showforum=19 and you may well get some specific help from the experts
Note that you need to follow the steps listed here before posting http://forum.kaspersky.com/index.php?showtopic=84003
Not applicable

Re: Search Engines

Embarrassed  Must read the post thoroughly in future - hadn't taken note that Kaspersky was already installed.  Embarrassed
shutter
Community Veteran
Posts: 22,206
Thanks: 3,769
Fixes: 65
Registered: ‎06-11-2007

Re: Search Engines

I wonder if it would "repair" itself, if you inserted the Windows CD. and let it run, BUT instead of INSTALL, look further down on same screen and click on Repair Windows....
oldgeezer
Grafter
Posts: 219
Thanks: 3
Registered: ‎02-02-2010

Re: Search Engines

i have contacted the Kaspersky helpline and they have sent me a couple of test programs which I have run and sent them the logs generated. I am waiting for a reply at the moment. One of the programs reports an infection by  Trojan.Win32.KillWin.iy  located in a program that I cannot locate on the PC. It's something called Easybits\KidsReady which I think was pre-loaded on the HP machine when I bought it. I seem to remember deleting it when I first got the machine.
Lets hope that Kaspersky can help otherwise I suppose it will be a new Windows installation. By the way I am sending these emails via my netbook which seems to be unaffected. Undecided