Unfortunately, yes. I just did a Google search and was redirected for each of the first three links I tried.
Malware Removal Forums
submitting a log
65 min read
Which browser you mainly use?
Mozilla Firefox
So then we check this next:
Please download GooredFix from one of the locations below and save it to your Desktop
Download Mirror #1
Download Mirror #2
Please download GooredFix from one of the locations below and save it to your Desktop
Download Mirror #1
Download Mirror #2
- Double-click GooredFix.exe to run it.
- Select 1. Find Goored (no fix) by typing 1 and pressing Enter.
- A log will open, please post the contents of that log in your next reply (it can also be found on your desktop, called GooredLog.txt).
GooredFix v1.92 by jpshortstuff
Log created at 08:51 on 07/04/2009 running Option #1 (Freeman)
Firefox version 3.0.6 (en-US)
=====Suspect Goored Entries=====
C:\Program Files\Mozilla Firefox\extensions\{8A228DFB-3450-492D-8198-94B1709A4419}
=====Dumping Registry Values=====
[HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Mozilla Firefox 3.0.6\extensions]
"Plugins"="C:\Program Files\Mozilla Firefox\plugins"
[HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Mozilla Firefox 3.0.6\extensions]
"Components"="C:\Program Files\Mozilla Firefox\components"
Log created at 08:51 on 07/04/2009 running Option #1 (Freeman)
Firefox version 3.0.6 (en-US)
=====Suspect Goored Entries=====
C:\Program Files\Mozilla Firefox\extensions\{8A228DFB-3450-492D-8198-94B1709A4419}
=====Dumping Registry Values=====
[HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Mozilla Firefox 3.0.6\extensions]
"Plugins"="C:\Program Files\Mozilla Firefox\plugins"
[HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Mozilla Firefox 3.0.6\extensions]
"Components"="C:\Program Files\Mozilla Firefox\components"
Please double-click GooredFix.exe on your Desktop to run it.
- Select "2. Fix Goored" by typing 2 and pressing Enter.
- Make sure all instances of Firefox are closed at this point.
- Type y at the prompt and press Enter again.
- A log will open, please post the contents of that log in your next reply (it can also be found on your desktop, called GooredLog.txt).
GooredFix v1.92 by jpshortstuff
Log created at 14:21 on 07/04/2009 running Option #2 (Freeman)
Firefox version 3.0.6 (en-US)
=====Goored Deletions=====
C:\Program Files\Mozilla Firefox\extensions\{8A228DFB-3450-492D-8198-94B1709A4419}
->Backing up folder... Done.
->Emptying folder... Done.
->Deleting folder... Done.
=====Dumping Registry Values=====
[HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Mozilla Firefox 3.0.6\extensions]
"Plugins"="C:\Program Files\Mozilla Firefox\plugins"
[HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Mozilla Firefox 3.0.6\extensions]
"Components"="C:\Program Files\Mozilla Firefox\components"
Log created at 14:21 on 07/04/2009 running Option #2 (Freeman)
Firefox version 3.0.6 (en-US)
=====Goored Deletions=====
C:\Program Files\Mozilla Firefox\extensions\{8A228DFB-3450-492D-8198-94B1709A4419}
->Backing up folder... Done.
->Emptying folder... Done.
->Deleting folder... Done.
=====Dumping Registry Values=====
[HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Mozilla Firefox 3.0.6\extensions]
"Plugins"="C:\Program Files\Mozilla Firefox\plugins"
[HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Mozilla Firefox 3.0.6\extensions]
"Components"="C:\Program Files\Mozilla Firefox\components"
OK it is gone now.
Still Google redirects?
Still Google redirects?
Yeah! None detected - every search link tested worked. The only suspicious malingerer is that with all of the search results there is a message "Firefox has prevented this page from automatically reloading" and with other open tabs (including every time I reply) there is often a message "Firefox has prevented this page from being redirected". Does that mean a fix or a problem?
This should help here.
Thank you. Sounds like I should go forth and search from here, hoping all is clear. I appreciate your help so very much.
Great 
Still some issues?
Still some issues?
No - I've been extremely cautious in usage, so will proceed full throttle to make sure there are no glitches. Thank you again so very much!
Good 
Before judging that you are clean, let's run one scan:
Please go to Kaspersky website and perform an online antivirus scan.
Note: If you are using Windows Vista, open your browser by right-clicking on its icon and select ''Run as administrator'' to perform this scan.
If you need a tutorial, see here
Before judging that you are clean, let's run one scan:
Please go to Kaspersky website and perform an online antivirus scan.
Note: If you are using Windows Vista, open your browser by right-clicking on its icon and select ''Run as administrator'' to perform this scan.
- Read through the requirements and privacy statement and click on Accept button.
- It will start downloading and installing the scanner and virus definitions. You will be prompted to install an application from Kaspersky. Click Run.
- When the downloads have finished, click on Settings.
- Make sure these boxes are checked (ticked). If they are not, please tick them and click on the Save button:
- Spyware, Adware, Dialers, and other potentially dangerous programs
Archives
- Click on My Computer under Scan.
- Once the scan is complete, it will display the results. Click on View Scan Report.
- You will see a list of infected items there. Click on Save Report As....
- Save this report to a convenient place. Change the Files of type to Text file (.txt) before clicking on the Save button.
- Please post this log in your next reply along with a fresh HijackThis log.
If you need a tutorial, see here
lack of Response