Google Redirect Virus

Also Known As: Google Search Results Redirect
Type: Other
Distribution: Low
Damage level: Moderate

Google Redirect Virus - How to remove?

What is Google Redirect?

Redirect viruses commonly target Google search results, and since Google is the most popular search engine in the world, it is no surprise that Internet criminals are targeting it with their malicious programs. After your computer is infected with this virus, your Google search results will be redirected to various porn websites full of advertisements, or other equally infected websites. Usually, this infection is acquired with TDSS rootkit.

google redirect virus

Some of these sites may be infected with spyware, whilst others could ask you to divulge your banking information. Today, there are several versions of Google Redirect Virus. If you notice that your Google results are being redirected, you should first scan your computer with legitimate anti-spyware software - choose from malwarebytes antimalware or superantispyware. Download, install, update these programs, and after running a full system scan, boot your computer in Safe Mode. If you do not know how to do that, read our "How to remove spyware?" section.

Occasionally, anti-spyware and anti-virus programs are unable to detect Google Redirect Virus, since it is difficult to monitor new types of TDSS rootkit. If your security programs are unable to detect redirect virus, you could try downloading and running some standalone removal tools.

TDSSKiller developer Kaspersky Labs

Windows malicious software removal tool developer Microsoft

BlackLight rootkit eliminator developer F-Secure

Commonly, Google redirects are caused by modifying your operating system's Hosts file. Information stored in this file is responsible for resolving canonical names of websites, and if the information in this file is changed by malicious programs, you could encounter redirect problems whilst surfing the Internet.

Hosts file is used to resolve certain canonical names of websites to IP addresses. When it is changed, the user may be redirected to malicious sites whilst observing valid URLs in address bar. Thus, it is difficult to determine whether the site is genuine when the Hosts file is modified. To fix this, please download the Microsoft Fix It tool, which restores your Hosts file to the Windows default. Run this tool when downloaded and follow the on-screen instructions. Download link below:

Instant automatic removal of Google Search Results Redirect: Manual threat removal might be a lengthy and complicated process that requires advanced computer skills. Spyhunter is a professional automatic malware removal tool that is recommended to get rid of Google Search Results Redirect. Download it by clicking the button below:
▼ DOWNLOAD Spyhunter By downloading any software listed on this website you agree to our Privacy Policy and Terms of Use. Free scanner checks if your computer is infected. To remove malware, you have to purchase the full version of Spyhunter.

Quick menu:

Manual removal of Google Redirect Virus

You can also check some settings manually. Follow these instructions and verify that everything is in place.

Check your proxy settings. (Internet Explorer)

Start Internet Explorer. Click Internet Options. Select Connections. Click LAN settings. Check if none of the boxes are selected.

alt

Start Mozilla Firefox. Click Tools, select Options. Click Advanced. Select Network Tab and click Settings. Check if "No proxy is selected".

alt


Reset your Hosts file

Locate your Hosts file. You should find it at %systemroot% \system32\drivers\etc (commonly, it will be c:\windows\system32\drivers\etc) Open the Hosts file with Notepad and confirm that no unusual values are added to it.

The following are the default values. Yours should be the same.

Default Windows XP Hosts File:

# Copyright (c) 1993-1999 Microsoft Corp.

#

# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.

#

# This file contains the mappings of IP addresses to host names. Each

# entry should be kept on an individual line. The IP address should

# be placed in the first column followed by the corresponding host name.

# The IP address and the host name should be separated by at least one

# space.

#

# Additionally, comments (such as these) may be inserted on individual

# lines or following the machine name denoted by a '#' symbol.

#

127.0.0.1 localhost

Default Windows Vista Hosts File:

# Copyright (c) 1993-2006 Microsoft Corp.

#

# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.

#

# This file contains the mappings of IP addresses to host names. Each

# entry should be kept on an individual line. The IP address should

# be placed in the first column followed by the corresponding host name.

# The IP address and the host name should be separated by at least one

# space.

#

# Additionally, comments (such as these) may be inserted on individual

# lines or following the machine name denoted by a '#' symbol.

#

127.0.0.1 localhost

::1 localhost

Default Windows 7 Hosts File:

# Copyright (c) 1993-2006 Microsoft Corp.

#

# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.

#

# This file contains the mappings of IP addresses to host names. Each

# entry should be kept on an individual line. The IP address should

# be placed in the first column followed by the corresponding host name.

# The IP address and the host name should be separated by at least one

# space.

#

# Additionally, comments (such as these) may be inserted on individual

# lines or following the machine name denoted by a '#' symbol.

#

# localhost name resolution is handle within DNS itself.

# 127.0.0.1 localhost

# ::1 localhost

Check your DNS settings.

Click Start, select Settings, click Control Panel. In Control Panel, look for the Network Connections icon. Double click it. Select your Local Area Connection icon. Click it with your right mouse button. Select properties.

alt

In an opened window, look for Internet Protocol (TCP/IP), select it and click Properties.

alt

You should consult your system administrator about these setting. These are the default values:

alt

Google Redirect Virus can be caused by unwanted plug-ins from Internet browsers such as Internet Explorer, Google Chrome, or Mozilla Firefox. Such browser add-ons are often downloaded and installed on your computer while installing free software. Free program developers commonly bundle their products with browser add-ons to monetize their downloads. Therefore, to avoid installation of unwanted browser extensions, closely check every installation window of free software and uncheck all ticks that suggest you should install additional browser add-ons, change your Internet browser’s homepage, or the default search engine.

To remove unwanted browser add-ons, which could cause Google redirect problems:

Internet Explorer logoInternet Explorer:

Click on the "gear" icon Internet Explorer options icon (at the top right corner of Internet Explorer) select "Manage Add-ons". Look for unwanted add-ons and disable them.

Optional method:

If you continue to have problems with redirects to hxxp://google.com, reset your Internet Explorer settings to default.

Windows XP users: Click "Start", click "Run", in the opened window type "inetcpl.cpl" In the opened window click the "Advanced" tab, then click Reset.

Resetting Internet Explorer settings to default on Windows XP

Windows Vista and Windows 7 users: Click the Windows logo, in the start search box type "inetcpl.cpl" and click enter. In the opened window click the "Advanced" tab, then click Reset.

Resetting Internet Explorer settings to default on Windows 7

Windows 8 users: Open Internet Explorer and click the "gear" icon. Select "Internet Options".

Reseting Internet Explorer settings to default in Windows 8 - accessing

In the opened window, select the "Advanced" tab.

Resetting Internet Explorer settings to default on Windows 8 - Internet options advanced tab

Click the "Reset" button.

Resetting Internet Explorer settings to default on Windows 8 - click the Reset button in the Internet options advanced tab

Confirm that you want to reset Internet Explorer settings to default by clicking the "Reset" button.

Resetting Internet Explorer settings to default on Windows 8 - confirm settings reset to default by clicking the reset button

Mozilla Firefox logoMozilla Firefox:

Click on the Firefox menu firefox menu icon (at the top right corner of the main window) select "Add-ons". Click on "Extensions" and disable unwanted items.

Optional method:

If you continue to have problems with redirects to hxxp://google.com, reset your Mozilla FireFox settings to default.

Open Mozilla Firefox, at the top right corner of the main window click the Firefox menu, firefox menu icon in the opened menu, click the "Open Help Menu" icon, firefox help menu

Resettings Mozilla Firefox settings to default - accessing

Select "Troubleshooting Information".

Resetting Mozilla Firefox settings to default - accessing

In the opened window click the "Reset Firefox" button.

Resetting Mozilla Firefox settings to default - clicking the

In the opened window confirm that you want to reset Mozilla Firefox settings to default by clicking the "Reset" button.

Resetting Mozilla Firefox settings to default - confirming settings reset by clicking the

Google Chrome logoGoogle Chrome:

Click the Chrome menu icon Google Chrome options icon (at the top right corner of Google Chrome) select "Tools" and click on "Extensions".  Locate unwanted add-ons and click on the trash can icon.

Optional method:

If you continue having problems with the removal of hxxp://google.com redirects, you can reset your Google Chrome browser settings. Click the Chrome menu icon Google Chrome options icon (at the top right corner of Google Chrome) and select "Tools". From the opened menu, select "Extensions". In the opened window, select "Settings" (at the left corner of the screen). Scroll down to the bottom of the screen. Click the "Show advanced settings…" link.

Resetting Google Chrome setting to default - accessing settings

After scrolling to the bottom of the screen click the "Reset browser settings" button.

Resetting Google Chrome settings to default - advanced settings

 In the opened window confirm that you want to reset Google Chrome settings to default by clicking the "Reset" button.

Resetting Google Chrome settings to default - confirm that you want to reset Chrome settings to default by clicking the Reset button

After completing all of these checks, Google results should be normal.

Additional information: