Google Redirects

[1ceHacka]

Last night I noticed on one of my machines, that google searches were being redirected to a 7.7.7.0 address. I immediately shutdown the Ethernet card, and started scans using AVG and a spyware tool. These found nothing but some tracking cookies. Has anyone uncovered anything like this recently?

The search results listed had the titles of what I was looking for, but the page urls were of advertisement sites among other things.

 

[blackangst1]

Lots of google results for that IP...youre infected it looks like. Just google the IP.

edit: or wait...can you GET to google? lol

edit: looks like Kaspersky found this on another person's machine with the same symptoms:

Rootkit.Win32.Agent.fwt in C:/Windows/system32/wdmaud.sys

Not fun.

edit again: solution here it looks like http://www.bleepingcomputer.co...index.php/t190748.html

 

[Sam25]

Download and run a full system scan with Superantispyware. Also, there appears to be a solution here which might be of some help.

 

[1ceHacka]

I reformat my machines every 6 months anyways, and that one was coming due, so I just reformatted it. I am not sure how that rootkit got onto my system though. I run AVG, Adaware, and blacklight on all my systems.

 

[SagaLore]

Did you check the HOSTS file?

 

[Chiefcrowe]

do you also run Malwarebytes antimalware? that is considered better than adaware these days.

Originally posted by: 1ceHacka
I reformat my machines every 6 months anyways, and that one was coming due, so I just reformatted it. I am not sure how that rootkit got onto my system though. I run AVG, Adaware, and blacklight on all my systems.