Child Item

Site Totals

61255 Questions Answered 267 Categories

Big Issues

My system has always worked pretty well until recently. After having Verizon Fios installed at my house, it seems the internet has turned on me. I started noticing a weird redirect shortly after the switch. I would click on a search link and 1/3rd of the times it would redirect me to a different page (sometimes google, somtimes Yahoo, sometimes it was an ad website of some sort) I assumed it was a virus, so I ran a deep scan in safe mode with Mcafee and nothing. So I talked to my IT guy at work and he recommended using Norton instead, as well as trying Spybot. Norton found loads of cache errors and got rid of them, Spybot found nothing. Still the problem persisted. So I formatted my system and reinstalled Windows. Microsoft never has been terribly reliable, and although it's annoying, I sometimes find it refreshing to just start over....but the problem persisted still! How is that possible? I couldn't understand. I tried several other browsers (IE, Firefox and Opera) and no matter the browser, i still had the same issues. Then we noticed it on my husband's system, which is used less often. It's a different OS, a different browser and not networked to my laptop in any way. We tried pulling out an old laptop with XP, and it had the same issues. So it's clearly not browser related, or OS related or a particular virus....

On top of all of that, I just installed a BRAND NEW hardrive in my laptop and installed Windows 7 and the problem started the moment I opened IE, which leads me to believe it HAS to be something to do with the Verizon router! Someone please help! This is getting rediculous!

Comments

prisaz

You could try resetting the router to factory defaults. Use a paper clip and push in the reset button through the little hole in the back of the router. Hold it in for 15-30 seconds to be sure. After the reset, log into the router with your browser at 192.168.1.1 for the URL. Then change the password. The default password is password. Ignore the extra characters when typing the password. The extra asterisk are a security measure.

dslr595148

#1 You could go to http://www.grc.com/dns/operation.htm

#2 Download that tool

#3 Choose at least two DNS Servers, that do not show up as Orange or Red colored server(s).

GregG412

Hi! Did you find a solution to the problem you posted on July 31st about being redirected? I'm using IE7 on XP SP3 machines. My Google search results get redirected to a site trying to sell me a product and, recently, to Scour sites. I am also getting "Internet Explorer cannot display ...." messages. I'm not sure if this is the go.google virus. VISS virus scans and spyware scans report no infected files or spyware. Thank you very much.

viafax999

@GregG412 wrote:
Hi! Did you find a solution to the problem you posted on July 31st about being redirected? I'm using IE7 on XP SP3 machines. My Google search results get redirected to a site trying to sell me a product and, recently, to Scour sites. I am also getting "Internet Explorer cannot display ...." messages. I'm not sure if this is the go.google virus. VISS virus scans and spyware scans report no infected files or spyware. Thank you very much.

What are Scour sites??

Did you try running spybot and adaware- ne version of adaware is reaaaaly slow but it does still work if you have the patience

lasagna

Sounds like you have malware ... the Verizon redirects are to a Verizon search assist site (you disable that by using the .14 DNS servers instead of the .12 servers -- change the last number in the DNS server which is being assigned to your router from .12 to .14).

A redirect to other sites on search results is go.google or one of the other malware varients. Get a copy of malwarebytes from CNET's download site and run it. This one can be particularly difficult to get completely off your system.

GregG412

Thank you for the suggestions, ViaFax999 and lasagna. In answer to your posts:

Scour - I don't know what this is; the word appears in the upper right corner of the window; since it

was the result of being redirected, I exited the site immediately and did not investigate it further.

DNS server - it is set to .12. I'll change it to .14.

Malware detection programs -- I had run the Microsoft Windows Malicious Software Removal Tool and, of course, VISS scans. They detected nothing. Per a post in a different thread in the Verizon Community and a discussion on

http://www.troublefixers.com/remove-virus-which-redirects-to-gogooglecom-gogooglecom-redirect-

virus-removal-tool-for-windows/, I downloaded Malwarebytes’ Anti-Malware from CNet.

On one machine, MBA-m found Trojan.Zlob in 3 registry keys: HKClassesRoot and HKLM\software\Microsoft (2 keys). On the other machine, it found worm autorun in the Recycler folder. I'm still getting redirected.

I guess I'll keep trying additional tools. Other recommended tools were SDfix, spyware-fix, combo fix, and scanforfree's go.google.com-remover. I'm disappointed that VISS let the malware through.

GregG412

I made some progress on solving this, I think. I noticed in my Applications Data folder a few things which I did not recognize or remember as having been there before. So I deleted them. Upon starting up Windows XP SP3, I received error messages to the effect that rundll was looking for itehenuhe.dll and dedprv.dll. I searched for them in Google and found zero. That made me really suspicious; a legitimate driver would have come up in a Google search. I searched the registry and found:
HKEY_USERS\ [my user ID] \Software\Microsoft\Windows\CurrentVersion\Run:

Name: Ifugiwo

rundll32.exe "C:\Documents and Settings\ [my user name]\Local Settings\Application Data\dedprv.dll",Startup

Name: Tqedawumifora

rundll32.exe "C:\Documents and Settings\ [my user name] \Local Settings\Application Data\itehenuhe.dll",Startup

I searched Google for the two named items and got zero results. I deleted both from the registry. Redirect seems to be minimal but I'm not completely convinced I have eradicated it.

In any event, I just got off the phone with Verizon cancelling Verizon Internet Security Suite. They switched from Radialpoint to McAfee. I described the following problems I have with FIOS Internet and VISS:

Security seal - tech support knows nothing about it; every few days it gets deleted
Remember my ID - every few days setting gets re-set to "don't remember"
Vertical scroll sliders don't work on e-mail screen
VISS-Radialpoint let viruses through
VISS-Radialpoint hogs system resources & degrades performance
VISS - I got tired of turning off VerizonServicepoint and the comm handler every session
VISS-McAfee crashed IE and Windows Explorer on a computer with the minimum requirements for McAfee
McAfee CSR said my other computer does not meet their minimum requirements although no mimimum reqs were

stated in Verizon's "you have to upgrade VISS" message
VISS-McAfee is trying to do too much -- such as optimize my computer, network monitor, on-line back-up -- things I don't want

but can't turn off

I bought two licenses for MalwareBytes's Anti-malware and turned on the Windows Firewall. I figure that I can't do worse than my VISS experience.

dfyfe

*** SOLVED ***

I set up Google's public DNS service. See: http://code.google.com/speed/public-dns/

The redirection of your search is being done by VERIZON. This stops it COLD!!

Anti-Phish1

@dfyfe wrote:
I set up Google's public DNS service. See: http://code.google.com/speed/public-dns/
The redirection of your search is being done by VERIZON. This stops it COLD!!
GregG412 has not posted back in this thread since Sept. 2009, so presumably his problem was resolved.
The redirection that GregG412 was experiencing was the result of malware, NOT VZ's redirection.
VZ's search redirection will not direct you to malacious sites as was happening to GregG412.
Changing DNS servers would not have remedied the problem.

Child Item