Google/Yahoo search links redirect to ads

[jtheod]

Hello,
Hello, My two month old laptop is sudenly redirecting all google, and yahoo searches to ads. I can search with my AV Secure Search, and go to their links, but not google or yahoo. I have tried, trendmicro, AVG, Ad-Aware, Smitfraudfix, Unhack Me, Superantispyware. Can someone please try to help me get rid of this?? Any help would be much appreciated. I am having to use my sons laptop to view the forum, due to searching afterdawn.com, also redirects me when I click on a link.

 

[Guest]

This topic has been moved from the section Forum Feedback to section Windows 7 by Grumpy9117

 

[Dark Lord of Tech]

Have you tried Malwarebytes free edition?

http://www.malwarebytes.org/products/malwarebytes_free

 

[wailiand]

Hello,
Hello, My two month old laptop is sudenly redirecting all google, and yahoo searches to ads. I can search with my AV Secure Search, and go to their links, but not google or yahoo. I have tried, trendmicro, AVG, Ad-Aware, Smitfraudfix, Unhack Me, Superantispyware. Can someone please try to help me get rid of this?? Any help would be much appreciated. I am having to use my sons laptop to view the forum, due to searching afterdawn.com, also redirects me when I click on a link.

Does your browser keep being redirected to “find-answers-fast.com”?
“find-answers-fast.com” is determined by Tee Support Labs as dangerous website hijacker which pretends to be a legal answer site. “find-answers-fast.com” is created to prompte for rogue programs you should pay close attention. This hijacker virus can modify your browser settings, change the homepage, and even shut your internet connection down. It generates annoying threats to inform your computer is badly damaged. The security infections it displays do not exist at all which is designed to scare and lure computer victims to purchase its product. What matter is “find-answers-fast.com” causes more and more damages to the compromised computer. Every time you attempt to open the .exe files it just does not do anything! As “find-answer-fast.com” has stopped your internet access in the background. This virus has the capability to restart your system automatically from now and then. And whatever you google online, your browser gets rerouting to “find-answers-fast.com”. You may have struggled with it by scanning system with the use of countless anti-virus. In reality, no antispyware can detect and remove this website hijacker fully. It still comes back when you turn on computer repeatedly. That is why we kindly recommend you take the efficient removal steps below to make your computer is free of “find-answers-fast.com” instantly once it is detected.
More information at : http://blog.teesupport.com/remove-find-answers-fast-com-website-hijacker-find-answer-fast-com-virus-removal-support/

 

[bobboulero]

if this is some sort of spyware that is absolutely ridiculous. i literally just bought a brand new computer and it did this on day 1. all i did was get firefox and downloaded absolutely nothing else. the computer came with a 60 day trial of norton and it detects nothing. also yes mine is going to fast-find-answers.

 

[JoeJITSU]

Mine Too...PLEASE HELP US OUT GUYS
Ive read Wailands answer which is all over the internet and really isnt a solution. Thanks in advanced.

By the way...mine now is not only getting the find-fast answers.com Now Im getting searchy too.

 

[JoeJITSU]

Ok,
I found the HKEY but do I need to remove all as it says in the link of wailiand? example:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “.exe”

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “”

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “CertificateRevocation” = ’0′

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnonBadCertRecving” = ’0′

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations “LowRiskFileTypes” = ‘/{hq:/s`s:/ogn:/uyu:/dyd:/c`u:/bnl:/ble:/sdf:/lrh:/iul:/iulm:/fhg:/clq:/kqf:/`wh:/lqf:/lqdf:/lnw:/lq2:/l2t:/v`w:/rbs:’

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments “SaveZoneInformation” = ’1′

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = ’1′

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system “DisableTaskMgr” = ’1′


I have some of these....but do I just change the values as indicated? THere are no instructions...it just says "The registry entries of “find-answer-fast.com” that need to be removed are listed as follows"

Need a little bit more details because I just removed "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run" folder. Thank you

 

[bobboulero]

well i think i fixed it

i went to windows/system32/drivers/etc/host and edited with notepad to only show 127.0.0.1 as connecting and removed the entry #1:: right under it so that only 1 local host was on the list.

then i went and reset my router by using a pin to push in the 'reset' button on the back of it.

then i googled for kasperskys TDSS removal kit and ran that to make sure i was clean. then run malwarebytes or your preferred to program to clean up and if it has a lock host option enable it.

then restart and you should be good. this worked for me.

i would have came to these conclusions sooner but i came to this forum thinking i would get help but instead it just made me waste a few days lol. thats my fault for being lazy though i guess. i am continuing the cycle of lazy bastards though by putting this answer here. woe is me.