Google redirects.

[tivaelydoc]

All my google links redirect:

http://ad2.doubleclicker.net/c.php?url=http%3A%2F%2Fwww.google.com%2F&p=0&rf=ht tp%3A%2F%2Fgoogle.ad2pay.com%2Findex.php

PHP Code:

http://ad2.doubleclicker.net/c.php?url=http%3A%2F%2Fwww.google.com%2F&p=0&rf=http%3A%2F%2Fgoogle.ad2pay.com%2Findex.php 


Is this bad?

[01001010]

Could you elaborate?

[tivaelydoc]

Oh ok, when I search on google all the links are re-directed to ads and sometimes just stay at the ad site.

[Atomic Rooster]

Sounds like you have a virus or malware playing with you. One or more of these should fix ya right up:

Ad-Aware 2008 Free - Spybot Search & Destroy - Malwarebytes

[wozelbeak]

tiv, if you can't get rid of it with the links provided by Atomic, try
"superantispyware" i managed to shake off a hijacker which i had using it when avg ect failed.

[duja]

Hallo,

I am having the same problem. And also another person here (posted yesterday, Jan 5, 2009): http://forums.mozillazine.org/viewto...7125&p=5400905

I have tried the following tools in an attempt to find and fix the problem:

Ad-Aware 2008 Free
Spybot Search & Destroy
Malwarebytes
SUperAntiSpyware
gmer
combofix
spynomore
spysweeper
mcafee virus scan
...and perhaps even others I don't remember

Nothing has worked.

[Rebel78]

Originally Posted by duja

Hallo,

I am having the same problem. And also another person here (posted yesterday, Jan 5, 2009): http://forums.mozillazine.org/viewto...7125&p=5400905

I have tried the following tools in an attempt to find and fix the problem:

Ad-Aware 2008 Free
Spybot Search & Destroy
Malwarebytes
SUperAntiSpyware
gmer
combofix
spynomore
spysweeper
mcafee virus scan
...and perhaps even others I don't remember

Nothing has worked.

Yep, I found this thread by google. I have the same junk on mine, updated everything and nothing gets it. I've been scanning my computer steadily for 2 days with many, many programs. Tried all the ones you listed except combofix, don't wanna mess anything up with it.

It's a firefox vunerability as far as I can tell. It doesn't affect IE. I uninstalled Firefox and IE is still running fine as my default browser. Just slow as heck compared to FF lol.

The malware redirects google links to ad2.doubleclicker.net and then another website. Strangely, it only affects the first couple of links. It seems it's a variant of the "goored" or "wdmaudio" exploit, pretty nasty too.

I'm just gonna roll with IE till this thing gets fixed.

[InventD100]

download ccleaner and give it ago.


basically id do this

Download ccleaner
run it on registry and pc, clean it, fix the issues , defrag pc, restart go in safe mode, give it another clean and restart back to default

[Rebel78]

I've tried CCleaner. It's a cool program I discovered while researching this, it doesn't help, though it has made my computer start up alot faster.

[wozelbeak]

are you running the programs while in safe mode?
also try turning off system restore while you do it.
make sure you clear all temporary files and cookies as well.

[InventD100]

wait, i didn't see avg on that list.

[bigjimmcbob]

I am dealing with this too.

Seems the first 5 links on the first couple of google searches when Firefox is loaded, links to ad2.doubleclicker.net
Yesterday I noticed it was ad1 and not ad2.doubleclicker.net, odd that the url changed in a day...

I used all the malware and AV tools available, I even copied the entire firefox directory from a non infected computer and it still persisted.

In safe-mode firefox didn't seem to exhibit the behavior
When starting in firefox in safe mode you are presented with a dialog opting to disable all extensions, plugins etc. I selected them all and restarted, and voila its gone. (Even now when not in safe mode)

Now I tried doing this myself before resorting to the safe mode fix, disabling all extensions and add ons and nothing seemed to work.

Using DLL Dependency I compared with a non infected machine all DLL's that firefox.exe depends on and they all matched so I'm assuming its something in the plugable extensions that was the culprit.

So it's probably on my machine still, but just not loaded now by firefox..

What does safe-mode restore options actually do? Its too bad I can't dint he offending DLL/etc that was causing it because I know its still on my machine and no av or malware tool is detecting it.

[larryvgs]

Spent all day yesterday trying to find a fix for this and I found it. (At least for me.) Hope it also helps the rest of you too.

http://forums.somethingawful.com/sho...readid=3041544

Almost near the end find a post by ishootudie where he talks about "GooredFix.exe" and follow the instructions. (Or you can do a Google for "GooredFix.exe" and follow the instuctions at other forums.)

It's fairly recent, (not too many results in Google and they only go back a few weeks) but as you know this thing is annoying as hell. And I've read where others have tried to just delete the registry entries manually, but it came back. So far it seems to have done the job for me. I too tried all of the anti-virus and anti-spyware programs and nothing caught it or removed it until this "GooredFix.exe". Hope it helps all of you as well.

[duja]

Originally Posted by larryvgs

Spent all day yesterday trying to find a fix for this and I found it. (At least for me.) Hope it also helps the rest of you too.

http://forums.somethingawful.com/sho...readid=3041544

Almost near the end find a post by ishootudie where he talks about "GooredFix.exe" and follow the instructions. (Or you can do a Google for "GooredFix.exe" and follow the instuctions at other forums.)

THANK YOU!

GooredFix.exe has finally solved this doubleclicker.net problem!

(I am the one that posted earlier about having tried all those programs without any success)