Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

Resolved Question

Re-directed to blinkx.com etc

My searches are being re-directed to blinkx.com and it's associated sites. Malwarebytes and Spybot are not solving the problem. Please help (in easy to understand terms if possible).

Discussion is locked

pontychris-24342949439140374436769357830505 has chosen the best answer to their question. View answer

Best Answer

- Collapse -
Redirect
Oct 26, 2011 12:27AM PDT

Did you go to internet options in control panel to see what your home page shows as? If it has changed from what you normally use backspace the item out and type in what you normally use, msn.com, mozilla firefox or whatever you normally use, click ok and see if that does the trick.

- Collapse -
Re-direct to blinkx.com etc

Hi pgc3, Thanks for your reply. It's not going to be that simple. I'm pretty confident that my computers registry has been altered by some kind of worm, trojan or malware. Unfortunately I'm not clever enough to know how it was done or how to fix it. I've already paid to have it repaired and yet the same re-direct was back within hours.

- Collapse -
We Fix It This Way...
Oct 26, 2011 6:48AM PDT

Those "redirects" are malware... So...

f you can download the tools listed below on the problem computer, great, but you may need to use a separate, clean computer, download the tools, copy them to a flash drive or CD, then transfer them to the infected computer.
_______________

Once that's done, then restart the computer into "Safe Mode with Networking" and use the instructions below. If you can't start in Safe Mode, then run all the tools while in "normal" Windows first, then run them in Safe Mode afterward.:

AFter restarting into Safe Mode, be sure to clean out all the Temporary Internet Files, Temp files, and Cookies from all browsers.

Then....

After downloading or transferring it to the problem machine, run the
following tool to help allow the removal programs below to run.
(courtesy of Grinler at BleepingComputer.com)There are 3 different
versions. If one of them won't run then try to run the other one. Be
patient.... as a black window should open, then close after finding all
the background programs.Vista and Win7 users need to right click and choose Run as AdminYou only need to get one of them to run, not all of them.

Rkill.exe
http://download.bleepingcomputer.com/grinler/rkill.exe

Rkill.com
http://download.bleepingcomputer.com/grinler/rkill.com

Rkill.scr
http://download.bleepingcomputer.com/grinler/rkill.scr
_____________________

IMMEDIATELY after running the "Rkill" tool above, run/install the Malwarebytes and
SuperAntispyware installer and update files from the links below which
you've also copied to a CD or flash drive, and transfered to the problem
machine. Do NOT restart the computer after running Rkill.Once
downloaded and before transferring Malwarebytes and SuperAntispyware to
the problem machine, rename the program installer "mbam-setup.exe" file
to something else like "Gogetum.exe", then copy the installer file and
the update file to a CD or flash drive.. Transfer the file to the
problem machine, then install the "Gogetum.exe" file, then run the
update to get the program current.. After that, run a full system scan
and delete anything it finds.

Malwarebytes Installer Download Link (Clicking on the links below will immediately start the download dialogue window.)
http://www.besttechie.net/tools/mbam-setup.exe

Malwarebytes Manual Updater link
http://data.mbamupdates.com/tools/mbam-rules.exe

Next, install and run a full system scan with the SuperAntispyware program
and the manual updater from the links below. As before, you may need to
rename the installer file to get the program to install.:

SuperAntispyware
http://www.superantispyware.com/SuperAntispyware

Manual Update
rhttp://www.superantispyware.com/definitions.html

Then download, install, and run the tools below:

Hitman Pro 3.5

Next, download TDSSKiller and follow the guide to use the tool:
http://support.kaspersky.com/viruses/solutions?qid=208280684

Restart the computer and see if things work correctly again.
____________


And after that, if everything's fine by you can't connect to the internet,
then follow the procedures below to check your network "proxy" settings
again.Open Internet Explorer and go to Tools-Internet
Options-Connection Tab. Click on the LAN settings button. IF there is a
check mark next to "Use a proxy server for your LAN", uncheck it. Click
OK. Then OK, again.
__________________

Hope this helps.

Grif

- Collapse -
Re-direct to blinkx.com etc

Hi, Thanks for your full and clear solution. It's very much appreciated.

- Collapse -
BUGS
Oct 27, 2011 1:27AM PDT

Yeah, follow Grif's procedure. I was hoping it was just a glitch but it sounds as if you picked up a bug from somewhere. As to reinfection (within hours) another curiosity would be are you networked? Another computer, external drive, etc. Hopefully the suggested procedure(s) will do the trick BUT as I mentioned IF you are networked you may have a revolving door. At any rate, keep us posted, best of luck!!