Google Redirect Virus

From Wiki-Security, the free encyclopedia of computer security

Google Redirect Virus Information
Type: Spyware
Analysis: Installs & gathers info from a PC without user permission.
Infection: By downloading freeware & shareware.
Symptoms: Changes PC settings, excessive popups & slow PC performance.
Detection Tool: >>> Download SpyHunter's Spyware Scanner <<<
Notice:






SpyHunter's spyware scanner is intended to quickly scan and identify spyware on your PC. If you wish to eliminate spyware from your PC and prevent future spyware attacks, we recommend you buy SpyHunter's spyware removal tool, which includes full technical support and a Spyware HelpDesk to tackle spyware that is uniquely affecting your PC.
IE Alert:


If you are using Internet Explorer and can not download SpyHunter, please use a different browser like Firefox or Chrome.

As this virus's name clearly infers, the Google Redirect Virus is a malicious computer virus that screws with infected systems' users' Google search engines. The Google Redirect Virus has been categorized as a nasty browser hijacker that will change infected systems' web browser settings and will work to forcefully redirect compromised systems' Google searches to various corrupt and infected web domains that work to propagate an assortment of malicious malware products.
 
According to Wiki-security.com security analysts, this particular seditious bit of malware has been reported as one of the most prevalent and endemic of all computer security threats currently circulating the World Wide Web – so much, that there are entire web domains and online user forums devoted solely to annihilating this hateful and frustrating virus from compromised systems.
 
The facts about the Google Redirect Virus are thus:


  • Google Redirect Virus will work to hijack your web browser's homepage.

  • Google Redirect Virus will forcefully redirect your Google searches and queries to various malicious websites devoted to infecting your computer system with dangerous and harmful malware applications.

  • Google Redirect Virus will change/alter various system settings, without its user authorization.

  • Google Redirect Virus will dramatically slow your computer and seriously affect its overall performance.

  • Google Redirect Virus may disable some of your system's Windows features which will result in various system errors.

Clearly, what users are presented with when dealing with this nasty virus, is a precarious situation that is both frustrating and annoying and can, potentially, wreck all kinds of havoc on infected computer systems.
 
If your computer system's security defenses have been breached by Google Redirect Virus, you will not be allowed to utilize the Google search engine successfully to make any kind of queries. This is because if your system has been infected by Google Redirect Virus, no matter what you search or query, your system will only be able to generate various non-related results and links. If you choose to click on any one of the resulting links generated by Google Redirect Virus, you will be automatically redirected to all kinds of malicious web domains that are experts in corrupt drive-by-downloads that work to spread and distribute all kinds of nasty rogue security products.
 

Corrupt Websites Linked to Google Redirect Virus


The Google Redirect Virus has been linked to a variety of malicious web domains and websites that have been detected and categorized as Google Redirect browser hijacking viruses. Like many other harmful computer infections, this means that Google Redirect Virus works under a wide variety of aliases. Wiki-security.com's team of security analysts has provided the following list of some of the corrupt websites that have been categorized as Google Redirect Virus aliases: Therelatedsearch.com, unblock-us.com, valueapproved.com, vshare.toolbarhome.com (vShare), vehiclefind24.com, whatcarefreefeelslike.com, weeklycontestwinner.org, weeklyusa-winner.com, AboutBlank, La.vuwl.com, 10-directory.com, 63.209.69.107, 67.29.139.153, 7search.com, adorika.com, adf.ly, admarketplace.com, alive-finder.com, alltheservices.com, articlemule.org, asklots.com, ave99.com, b00kmarks.com, background-sleuth.net, bargainmatch.com, beoo.com, bestdiscountinsurance.com, bestsearchpage.com, bestclicksnow.com, bestmarkstore.com, bestwebchoices.com, bestwebsearch.com, webplains.net, find-fast-answers.com, search-netsite.com, toseeka.com,celebrity-gossip.net, cheapstuff.com, citysearch.com, clicksor.com (Clicksor), clkads.com, feed.clickbizz.com, comparedby.us, comparestores.net, couponmountain.com, digitaltrends.com, easilyfindlocal.com, everythinghere.com, evoplus.com, expandsearchanswers.com (expand search answers), fastfinder.com, feedsmixer.org (starFeedsMixer), find-quick-results.com, FilesCup.com (FilesCup), findexmark.com, find-answers-fast.com, Zinkwink.com, us-srch-system.com, finditreport.com, findology.com, finderquery.com, findstuff.com, flurrysearch.com, forless.com, gimmeanswers.org, glimpse.com, google-redirect.com, googlesearchserver.net, get-search-results.com, goingonearth.com, goodsearch.com, gomeo.co.uk, gossipcenter.com, gquestionnaire.com, greatsearchserver.com, greenluo.com, grooveswish.com, guide2faucets.com, happili.com, HelloLocal.com, hyperpromote.com, informationgetter.com, inruo.com, jerseyscatalog.com, juggle.com, k100searches.com, YouPorn, liutilities.com, livejasmin.com (creative.livejasmin.com popups), local-search-pages.com, localpages.com, localsearchbug.com, lowpriceshopper.com, manufacturersdirectory.com, multifind24.com, mybestclick.net, mycustomsearch.cn, mydealchoices.com, mydealmatch.com, mylocalhero.com, neatsales.com, neatsearchserver.com (neat search server ZeroAccess rootkit), netsearchfinder.com, netshoppers.com, nexplore.com, privacycheck.ru, Pulse360.com, qooqle.com, questyes.com, quick-search-results.com, quick-suggest.com, redirectsite.net, results5.google.com, safecompare.com, saveandcoupon.com, savecompare.com, savingwithads.com, scoursearch.net, search-redirector.com, searchforall.info, searching4all.com, search-results.com (int.search-results.com), bidsystem.com,secure.bidvertiser.com, britewallet.com, budgetmatch.net, buzzclick.com, Search.babylon.com, scour.com, blinkx.com, Worldslife.com, Blendersearch.com, Bodisparking.com, coolsearchserver.com,searchbacon.com, searchdiscovered.com, searchqu.com, searchqualitysites.com, searchnext.com, searchspice.com, shopcompare.net, shopcompareus.com, shopfinded.com, shopica.com, shopica.com/search, shopzilla.com, socialsurvey2011.info, Social Search Redirect, Search-netsite.com, kitchenrenopages.com, kingtopsearch.net, kiseek.com, lawyerinsight.org, letsbuystuff.com, njksearc.net, qooqlle.com, Storeordersonline.com, somesearchsystem.com,startnow.com, startsearcher.com, supersearchserver.com, TabDiscover.com, tazinga.com (tazinga!), theifinder.com, Thewebtimes.com, Marveloussearchsystem.com, merchantsnearby.com, monstermarketplace.com, mooter.com, TheTop10.com, tubedownloader.com, theyellowpages.com, theyellowpagez.com, topdaodrugs.com, tubedownloader.com, webshoppinghelper.com, webresults6.org, yellowmoxie.com, yellowise.com, ylwbook.addresses.com, youfindmore.com and Zwankysearch.com.

This list includes some of the corrupt websites that have already been categorized as Google Redirect Virus aliases and the list seems to be constantly growing. If, for any reason, you suspect that your system has been invaded by the malicious Google Redirect Virus, Wiki-security.com's security analysts strongly advise you to take any necessary actions to ensure that this dangerous and harmful threat is completely removed from your computer system.

To check your computer for Google Redirect Virus, download SpyHunter Spyware Detection Tool.

SpyHunter spyware detection tool is only a scanner meant to assist you in detecting Google Redirect Virus and other threats. If you detect the presence of Google Redirect Virus on your PC, you have the opportunity to purchase the SpyHunter removal tool to remove any traces of Google Redirect Virus.

Contents

Detection of Google Redirect Virus (Recommended)

Google Redirect Virus is difficult to detect and remove. Google Redirect Virus is not likely to be removed through a convenient "uninstall" feature. Google Redirect Virus, as well as other spyware, can re-install itself even after it appears to have been removed.

You also run the risk of damaging your computer since you're required to find and delete sensitive files in your system such as DLL files and registry keys. It is recommended you use a good spyware remover to remove Google Redirect Virus and other spyware, adware, trojans and viruses on your computer.

Run a Google Redirect Virus scan/check to successfully detect all Google Redirect Virus files with the SpyHunter Spyware Detection Tool. If you wish to remove Google Redirect Virus, you can either purchase the SpyHunter spyware removal tool to remove Google Redirect Virus or follow the Google Redirect Virus manual removal method provided in the "Remedies and Prevention" section.

Method of Infection

There are many ways your computer could get infected with Google Redirect Virus. Google Redirect Virus can come bundled with shareware or other downloadable software.

Another method of distributing Google Redirect Virus involves tricking you by displaying deceptive pop-up ads that may appear as regular Windows notifications with links which look like buttons reading Yes and No. No matter which "button" that you click on, a download starts, installing Google Redirect Virus on your system. Google Redirect Virus installs on your computer through a trojan and may infect your system without your knowledge or consent.

If you think you may already be infected with Google Redirect Virus, use this SpyHunter Spyware dectection tool to detect Google Redirect Virus and other common Spyware infections. After detection of Google Redirect Virus, the next advised step is to remove Google Redirect Virus with the purchase of the SpyHunter Spyware removal tool.

Symptoms

Google Redirect Virus may attempt to change your computer's desktop, hijack your browser, monitor your Internet browsing activities, change system files, and can do this without your knowledge or permission. Therefore, it is strongly recommended to remove all traces of Google Redirect Virus from your computer.

Remedies and Prevention

Google Redirect Virus, as well as other Spyware, are constantly evolving and becoming more advanced to avoid detection. Google Redirect Virus along with its variants can install in different locations and even when you try to uninstall it you find they reappear when you reboot your computer.

Install a good anti-spyware software

When there's a large number of traces of Spyware, for example Google Redirect Virus, that have infected a computer, the only remedy may be to automatically run a Spyware scan from a good anti-spyware software designed to detect Google Redirect Virus and other types of spyware.

Remove Google Redirect Virus manually

Another method to remove Google Redirect Virus is to manually delete Google Redirect Virus files in your system. Detect and remove the following Google Redirect Virus files:

Processes

  • dmgsh.exe
  • C:\WINDOWS\Xzagua.exe
  • Xzagua.exe
  • Xwk.exe
  • Xwo.exe

DLLs

  • C:\WINDOWS\system32\UAC.dll
  • C:\WINDOWS\system32\uacinit.dll
  • C:\WINDOWS\system32\_VOID.dll
  • C:\WINDOWS\SYSTEM32\4DW4R3c.dll
  • C:\WINDOWS\SYSTEM32\4DW4R3.dll
  • C:\Documents and Settings\All Users\Application Data\_VOIDmainqt.dll

Other Files

  • C:\Windows\System32\wdmaud.sys
  • TDSSserv.sys
  • C:\WINDOWS\_VOID\
  • C:\WINDOWS\_VOID\_VOIDd.sys
  • C:\WINDOWS\system32\UAC.db
  • C:\WINDOWS\system32\UAC.dat
  • C:\WINDOWS\system32\uactmp.db
  • C:\WINDOWS\system32\_VOID.dat
  • C:\WINDOWS\SYSTEM32\4DW4R3sv.dat
  • C:\WINDOWS\system32\drivers\_VOID.sys
  • C:\WINDOWS\system32\drivers\UAC.sys
  • C:\WINDOWS\SYSTEM32\DRIVERS\4DW4R3.sys
  • C:\WINDOWS\SYSTEM32\DRIVERS\4DW4R3.sys
  • C:\WINDOWS\Temp\_VOIDtmp
  • C:\WINDOWS\Temp\UAC.tmp
  • %Temp%\UAC.tmp
  • %Temp%\_VOID.tmp

Registry Keys

  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\_VOIDd.sys
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\_VOID
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UACd.sys
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\4DW4R3

External links

PC Infected

If your computer is running slow, or making excessive popups, you may be infected with Spyware.

Click here to Download SpyHunter's Spyware detection tool.Click here



Disclaimer Information
This website, its content or any portion of this website is NOT affiliated with, connected to, or sponsored by Google Redirect Virus or its creators in any way. This website does not advocate the actions or behavior of Google Redirect Virus and its creators. Our objective is to provide Internet users with the know-how to detect and remove Google Redirect Virus and other Internet threats.

The readers of this article should not mistake, confuse or associate this article to be an advertisement or a promotion of Google Redirect Virus in any way. The content provided on this website is intended for educational or informational purposes and is provided "AS IS" with no warranties, and confers no rights.
Views
Navigation