Google problem that I can't google and my malware and virus trackers aren't getting

Factual Questions
1

Everytime I search on Google, when the links come up, every one redirects to online.adwordssecuregroup. Malarebytes and AVG Free don’t find any thing wrong. I can’t use Google at this point.

HELP!

2

What is your operating system?
Does this happen with every web browser?
Have you seen the How to protect and clean your computer from malware sticky thread in this forum?

3

Do you use a router? If so, this just might be a case of drive-by pharming.

4

Does the problem happen on other search engines, or only Google?

5

Windows XP, I only use IE Explorer and it only happens on Google. I’m pretty religious about keeping AVG and Malwarebytes up to date.

6

Spoke too soon, it does the same thing to Yahoo.

7

You can try Super Anti-Spyware

8

If you could Google, you would find this link on Computing.net to someone who had the same problem. It looks like they eventually solved it using Malwarebytes in safe mode.

I recently had one for an Antivirus malware that I downloaded in the background of a webpage. I was looking for information on Ankara, Turkey when it hit. It was a huge pain to eliminate.

9

Sounds very much like it’s malware/spyware/virus. I had something similar. The forums at http://www.bleepingcomputer.com/ may be able to help. They’re patrolled by trained volunteers and will be able to help restore your Windows system if you’re unable to make any headway yourself. However, they are typically very overwhelmed and may take a day or two just to respond to any thread you may start, and it took me about a week working with them before everything was back to normal. If you’re in a hurry and can deal with the reinstalling and hassle, it may be quicker and cleaner to just reinstall Windows from scratch.

Good luck!

10

It might be a DNS hijack. Go to the following folder: C:\Windows\System32\drivers\etc and open the file ‘hosts’ using notepad, you may need to enable hidden files to see it. If you have trouble try entering ‘notepad C:\Windows\System32\drivers\etc\hosts’ as a run command.

In this file after all the hashed (#) out text should be a single line:

127.0.0.1 localhost

If you have other entries then post them here so can confirm if they are suspicious.

11

Thanks all, this is a real pain. mittu, here is a sample of some of the stuff after local host. It goes on for days.

Start of entries inserted by Spybot - Search & Destroy

127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com