Google Redirect Virus

Also Known As: Google Search Results Redirect
Distribution: Low
Damage level: Moderate

Google Redirect Virus - How to remove?

What is Google Redirect?

Redirect viruses commonly target Google search results, and since Google is the most popular search engine in the world, it is no surprise that Internet criminals are targeting it with their malicious programs. After your computer is infected with this virus, your Google search results will be redirected to various porn websites full of advertisements, or other equally infected websites. Usually, this infection is acquired with TDSS rootkit.

google redirect virus

Some of these sites may be infected with spyware, whilst others could ask you to divulge your banking information. Today, there are several versions of Google Redirect Virus. If you notice that your Google results are being redirected, you should first scan your computer with legitimate anti-spyware software - choose from malwarebytes antimalware or superantispyware. Download, install, update these programs, and after running a full system scan, boot your computer in Safe Mode. If you do not know how to do that, read our "How to remove spyware?" section.

Occasionally, anti-spyware and anti-virus programs are unable to detect Google Redirect Virus, since it is difficult to monitor new types of TDSS rootkit. If your security programs are unable to detect redirect virus, you could try downloading and running some standalone removal tools.

TDSSKiller developer Kaspersky Labs

Windows malicious software removal tool developer Microsoft

BlackLight rootkit eliminator developer F-Secure

Commonly, Google redirects are caused by modifying your operating system's Hosts file. Information stored in this file is responsible for resolving canonical names of websites, and if the information in this file is changed by malicious programs, you could encounter redirect problems whilst surfing the Internet.

Hosts file is used to resolve certain canonical names of websites to IP addresses. When it is changed, the user may be redirected to malicious sites whilst observing valid URLs in address bar. Thus, it is difficult to determine whether the site is genuine when the Hosts file is modified. To fix this, please download the Microsoft Fix It tool, which restores your Hosts file to the Windows default. Run this tool when downloaded and follow the on-screen instructions. Download link below:

Instant automatic removal of Google Search Results Redirect: Manual threat removal might be a lengthy and complicated process that requires advanced computer skills. Spyhunter is a professional automatic malware removal tool that is recommended to get rid of Google Search Results Redirect. Download it by clicking the button below:
▼ DOWNLOAD Spyhunter By downloading any software listed on this website you agree to our Privacy Policy and Terms of Use. Free scanner checks if your computer is infected. To remove malware, you have to purchase the full version of Spyhunter.

Quick menu:

Manual removal of Google Redirect Virus

You can also check some settings manually. Follow these instructions and verify that everything is in place.

Check your proxy settings. (Internet Explorer)

Start Internet Explorer. Click Internet Options. Select Connections. Click LAN settings. Check if none of the boxes are selected.

alt

Start Mozilla Firefox. Click Tools, select Options. Click Advanced. Select Network Tab and click Settings. Check if "No proxy is selected".

alt


Reset your Hosts file

Locate your Hosts file. You should find it at %systemroot% \system32\drivers\etc (commonly, it will be c:\windows\system32\drivers\etc) Open the Hosts file with Notepad and confirm that no unusual values are added to it.

The following are the default values. Yours should be the same.

Default Windows XP Hosts File:

# Copyright (c) 1993-1999 Microsoft Corp.

#

# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.

#

# This file contains the mappings of IP addresses to host names. Each

# entry should be kept on an individual line. The IP address should

# be placed in the first column followed by the corresponding host name.

# The IP address and the host name should be separated by at least one

# space.

#

# Additionally, comments (such as these) may be inserted on individual

# lines or following the machine name denoted by a '#' symbol.

#

127.0.0.1 localhost

Default Windows Vista Hosts File:

# Copyright (c) 1993-2006 Microsoft Corp.

#

# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.

#

# This file contains the mappings of IP addresses to host names. Each

# entry should be kept on an individual line. The IP address should

# be placed in the first column followed by the corresponding host name.

# The IP address and the host name should be separated by at least one

# space.

#

# Additionally, comments (such as these) may be inserted on individual

# lines or following the machine name denoted by a '#' symbol.

#

127.0.0.1 localhost

::1 localhost

Default Windows 7 Hosts File:

# Copyright (c) 1993-2006 Microsoft Corp.

#

# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.

#

# This file contains the mappings of IP addresses to host names. Each

# entry should be kept on an individual line. The IP address should

# be placed in the first column followed by the corresponding host name.

# The IP address and the host name should be separated by at least one

# space.

#

# Additionally, comments (such as these) may be inserted on individual

# lines or following the machine name denoted by a '#' symbol.

#

# localhost name resolution is handle within DNS itself.

# 127.0.0.1 localhost

# ::1 localhost

Check your DNS settings.

Click Start, select Settings, click Control Panel. In Control Panel, look for the Network Connections icon. Double click it. Select your Local Area Connection icon. Click it with your right mouse button. Select properties.

alt

In an opened window, look for Internet Protocol (TCP/IP), select it and click Properties.

alt

You should consult your system administrator about these setting. These are the default values:

alt

Google Redirect Virus can be caused by unwanted plug-ins from Internet browsers such as Internet Explorer, Google Chrome, or Mozilla Firefox. Such browser add-ons are often downloaded and installed on your computer while installing free software. Free program developers commonly bundle their products with browser add-ons to monetize their downloads. Therefore, to avoid installation of unwanted browser extensions, closely check every installation window of free software and uncheck all ticks that suggest you should install additional browser add-ons, change your Internet browser’s homepage, or the default search engine.

To remove unwanted browser add-ons, which could cause Google redirect problems:

Internet Explorer logoInternet Explorer:

Click on the "gear" icon Internet Explorer options icon (at the top right corner of Internet Explorer) select "Manage Add-ons". Look for unwanted add-ons and disable them.

Optional method:

If you continue to have problems with redirects to hxxp://google.com, reset your Internet Explorer settings to default.

Windows XP users: Click "Start", click "Run", in the opened window type "inetcpl.cpl" In the opened window click the "Advanced" tab, then click Reset.

Resetting Internet Explorer settings to default on Windows XP

Windows Vista and Windows 7 users: Click the Windows logo, in the start search box type "inetcpl.cpl" and click enter. In the opened window click the "Advanced" tab, then click Reset.

Resetting Internet Explorer settings to default on Windows 7

Windows 8 users: Open Internet Explorer and click the "gear" icon. Select "Internet Options".

Reseting Internet Explorer settings to default in Windows 8 - accessing

In the opened window, select the "Advanced" tab.

Resetting Internet Explorer settings to default on Windows 8 - Internet options advanced tab

Click the "Reset" button.

Resetting Internet Explorer settings to default on Windows 8 - click the Reset button in the Internet options advanced tab

Confirm that you want to reset Internet Explorer settings to default by clicking the "Reset" button.

Resetting Internet Explorer settings to default on Windows 8 - confirm settings reset to default by clicking the reset button

Mozilla Firefox logoMozilla Firefox:

Click on the Firefox menu firefox menu icon (at the top right corner of the main window) select "Add-ons". Click on "Extensions" and disable unwanted items.

Optional method:

If you continue to have problems with redirects to hxxp://google.com, reset your Mozilla FireFox settings to default.

Open Mozilla Firefox, at the top right corner of the main window click the Firefox menu, firefox menu icon in the opened menu, click the "Open Help Menu" icon, firefox help menu

Resettings Mozilla Firefox settings to default - accessing

Select "Troubleshooting Information".

Resetting Mozilla Firefox settings to default - accessing

In the opened window click the "Reset Firefox" button.

Resetting Mozilla Firefox settings to default - clicking the

In the opened window confirm that you want to reset Mozilla Firefox settings to default by clicking the "Reset" button.

Resetting Mozilla Firefox settings to default - confirming settings reset by clicking the

Google Chrome logoGoogle Chrome:

Click the Chrome menu icon Google Chrome options icon (at the top right corner of Google Chrome) select "Tools" and click on "Extensions".  Locate unwanted add-ons and click on the trash can icon.

Optional method:

If you continue having problems with the removal of hxxp://google.com redirects, you can reset your Google Chrome browser settings. Click the Chrome menu icon Google Chrome options icon (at the top right corner of Google Chrome) and select "Tools". From the opened menu, select "Extensions". In the opened window, select "Settings" (at the left corner of the screen). Scroll down to the bottom of the screen. Click the "Show advanced settings…" link.

Resetting Google Chrome setting to default - accessing settings

After scrolling to the bottom of the screen click the "Reset browser settings" button.

Resetting Google Chrome settings to default - advanced settings

 In the opened window confirm that you want to reset Google Chrome settings to default by clicking the "Reset" button.

Resetting Google Chrome settings to default - confirm that you want to reset Chrome settings to default by clicking the Reset button

After completing all of these checks, Google results should be normal.

Additional information:

Summary:

declining installation of browser hijackers while downloading free software sampleA browser hijacker is a type of adware infection that modifies Internet browser settings by assigning the homepage and default Internet search engine settings to some other (unwanted) website URL. Commonly, this type of adware infiltrates operating systems through free software downloads. If your download is managed by a download client, ensure that you decline offers to install advertised toolbars or applications that seek to change your homepage and default Internet search engine settings.

Removal assistance:
If you are experiencing problems while trying to remove google search results redirect from your Internet browsers, please ask for assistance in our malware support forum.

Post a comment:
If you have additional information on google search results redirect or it's removal please share your knowledge in the comments section below.

About the author:

Tomas Meskauskas

Tomas Meskauskas - expert security researcher, professional malware analyst.

I am passionate about computer security and technology. I have an experience of over 10 years working in various companies related to computer technical issue solving and Internet security. I have been working as an author and editor for pcrisk.com since 2010. Follow me on Twitter and LinkedIn to stay informed about the latest online security threats. Contact Tomas Meskauskas.

PCrisk security portal is brought by a company RCS LT. Joined forces of security researchers help educate computer users about the latest online security threats. More information about the company RCS LT.

Our malware removal guides are free. However, if you want to support us you can send us a donation.

Removal Instructions in other languages
Software uninstall instructions
Malware activity

Global virus and spyware activity level today:

Medium threat activity
Medium

Increased attack rate of infections detected within the last 24 hours.

QR Code
Google Search Results Redirect QR code
A QR code (Quick Response Code) is a machine-readable code which stores URLs and other information. This code can be read using a camera on a smartphone or a tablet. Scan this QR code to have an easy access removal guide of Google Search Results Redirect on your mobile device.
We Recommend:

Get rid of Google Search Results Redirect today:

▼ REMOVE IT NOW with Spyhunter

Platform: Windows

Editors' Rating for Spyhunter:
Editors ratingOutstanding!

[Back to Top]

Free scanner checks if your computer is infected. To remove malware, you have to purchase the full version of Spyhunter.