Previous Post Next Post

Google redirect

Created: 03 Dec 2012 | Updated: 14 Jan 2013 | 2 comments

mykmiller

This issue has been solved. See solution.

I am not sure if this is the correct forum to post this.

I believe I have some sort of Trojan that is redirecting me but my SEPM 12.1 is not catching it. When I try to go to Google it takes me to a yahoo page. Sometimes it just says that Yahoo page cannot be found and sometimes itt akes me to a Yahoo Developer Console. I have ran Spybot, Malware Bytes and SEPM and cannot find anything. It does this in IE, Firefox and Chrome. I cannot figure out what is going on. Anyone have this happen?

Discussion Filed Under:

Security, Endpoint Protection Small Business Edition 12.x - 12.1, Endpoint Protection Small Business Edition 12.x, Malicious Code

Comments RSS Feed

Comments 2 Comments • Jump to latest comment

Brian81 Trusted Advisor

Google redirect - Comment:03 Dec 2012 : Link

What is the www re-direct link it's going to?

Check this thread for removal tools:

https://www-secure.symantec.com/connect/forums/you...

SEP Knowledge Base

Endpoint SWAT

Mithun Sanghavi Symantec Employee Technical Support Accredited

Google redirect - Comment:04 Dec 2012 : Link

Hello,

Plan of Action -

1) Disable the System Restore http://support.microsoft.com/kb/283073

2) Disable the Browser Helper Objects on all Installed Browsers

3) Check the Host file of the machine if it has been tampered with. If yes, make the necessary changes to the host file.

4) Login to the machine as a Different User and check if this issue is occurying?

If this issue is not occurying, you may like to delete the Infected User Profile after taking a back up of necessary files.

5) To check if there are any Suspicious files on the machine, work on the steps provided in the article below:

Using Symantec Support Tool, how do we Collect the Suspicious Files and Submit the same to Symantec Security Response Team.

https://www-secure.symantec.com/connect/articles/using-symantec-support-tool-how-do-we-collect-suspicious-files-and-submit-same-symantec-sec

Also, Check these Threads with similar issue -

https://www-secure.symantec.com/connect/forums/help-removing-virus-redirects-web-page

https://www-secure.symantec.com/connect/forums/popup-and-redirect-virus

https://www-secure.symantec.com/connect/forums/help-re-direct-virus

Hope that helps!!

Mithun Sanghavi
Symantec Technical Support Engineer, SEP
MIM | MCSA | MCTS | STS | ITIL v3

Twitter: @mithun_sanghavi

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<&a

SOLUTION