|Clicking on a search result brings me toa blocked site||JerseyCurmudgeon||8/16/12 10:30 AM|
For over a week, when I click on the link to a website listed in Google Search results, this comes up instead: http://googleads.l.doubleeclick.net/url?bs=b14b&url=about:blank. My company firewall, for good reason, blocks these sites.
It does not happen all the time, but often enough that I will either have to find out how to prevent these redirects or make Bing my default search engine.
Anyone have an answer.
|Re: Clicking on a search result brings me toa blocked site||yvbull||8/16/12 5:06 PM|
I have had the same problem which also started a week ago or thereabouts. My government firewall blocks the ad also, but I have not been able to remove the virus ven with anti-malware programs...someone help!!
|Re: Clicking on a search result brings me toa blocked site||Jer L||8/16/12 8:26 PM|
Hey JerseyCurmudgeon and yvbull,
Thanks to both of you for posting about this issue. Mind if I ask you for a bit more information?
1) What type of web browser are you using?
2) Does this happen using any other web browsers?
3) Can you remember downloading or installing any new software just before the problem began?
I'm looking forward to helping get this fixed!
|Re: Clicking on a search result brings me toa blocked site||JerseyCurmudgeon||8/17/12 6:54 AM|
I am using IE9, and am restricted from using any other browser on this computer. I haven't downloaded or installed anything on this computer in several weeks.
|Re: Clicking on a search result brings me toa blocked site||JerseyCurmudgeon||8/17/12 6:56 AM|
I forgot to mention that I have changed my default search engine to Bing until this is resolved.
|Re: Clicking on a search result brings me toa blocked site||Jer L||8/17/12 2:27 PM|
Since you're on a corporate network, the first thing I'd recommend is to chat with your IT department about the issue. If they're unable to resolve it, let me know, there are a few tools available that may do the trick.
Do you happen to have any anti-virus software running on your machine?
|Re: Clicking on a search result brings me toa blocked site||ShaunD76||8/19/12 8:53 AM|
i'm getting the same behavior - tried scanning with malwarebytes, ms security essentials, AVG... nothing came up. I'm getting the spam links on Firefox, IE and Chrome. I'm home at the moment but will try to repro from the office tomorrow.
|Re: Clicking on a search result brings me toa blocked site||ShaunD76||8/21/12 1:57 PM|
just an update - tried to repro @ the office, with other computers on my home network, with no sucess. so i'm pretty sure it's something on my computer that isn't detected yet by anti-malware...
|Re: Clicking on a search result brings me toa blocked site||rtHonNelon||8/23/12 11:07 AM|
Same issue here, ran all the usual suspects which found nothing, just ran http://support.kaspersky.com/faq/?qid=208283363 (tds killer by kaspersky), select change paramaters and select 'detect TDLFS File system', this found and quarantined something which was then picked up by MS Sec Essentials as Trojan:Win32/Alureon.CT
Hope this helps..all well here since.
|Re: Clicking on a search result brings me toa blocked site||ShaunD76||8/24/12 8:33 PM|
thanks for the tip, but sadly TDSKiller didn't find anything on my system, neither did Norton Power Eraser. There is a thread on Reddit about the redirects, here :
if anyone is infected, keep an eye on that thread maybe a solution will come up.
|Re: Clicking on a search result brings me toa blocked site||Jer L||9/4/12 12:28 PM|
Thanks for posting the Reddit link, there's a lot of good info there. As is mentioned in the thread, the redirect issue can sometimes be caused by an unwanted browser extension. I'd recommend disabling any unfamiliar extensions or add-ons and checking whether you're able to search normally again.
If that doesn't work, the problem is likely a bit deeper in your system. In addition to the software you've already tried, Hitman Pro is an option that many users have had success with. You can download it at http://www.surfright.nl/en/hitmanpro/.
Let me know if you need any help investigating extensions or running Hitman Pro and, either way, please let us know what you find.
|Re: Clicking on a search result brings me toa blocked site||JerseyCurmudgeon||9/7/12 1:45 PM|
Thanks for your suggestion and apologies for not acknowledging your earlier reply sooner. We use Symantec EndPoint as our corporate AV tool. I automatically run a full scan each week, and periodically run interim full scans as well. Our AV definitions are automatically downloaded from Symantec and pushed out to all our desktops as soon as they are received. In other words, we run a tight ship as far as AV tools are concerned.
My desktop support team ran Norton Power Eraser and CClean. Both did a good job of cleaning out a lot of low-risk malware and out-of-date registry entries. We also decrypted and reencrypted my system. Still, when I click on a Google search result, I am likely to be redirected to a googleads.i.net site, which we automatically block. However, if I highlight and copy the url listed under the search result link, I get to the right destination.
Given the lack of positive results that so many people with the same or similar problems have reported, I am beginning to suspect that the problem lies outside my system and instead, may be in Google's security infrastructure, especially in the malware protections for the AdSense and related programs. Is Google investigating to determine if internal vulnerabilities are causing this?
|Re: Clicking on a search result brings me toa blocked site||Jer L||9/11/12 3:59 PM|
No worries about the delay -- I've been a bit behind as well. We're always working to make sure our systems are as safe and secure as possible, and we will continue to do so. In the meantime, there are a couple more tools you may want to try running. We hear from users that these are particularly effective at removing search-redirect style malware.
If you choose to run either of these, please let us know what you find. I know you've already run a bunch of software, but I think these are worth a try as well.
|Re: Clicking on a search result brings me toa blocked site||tacktick||9/12/12 8:33 AM|
Microsoft just posted this blog entry:
doubleeclick.net is associated with the malware Win32/Medfos
Try use the new MSRT tool to remove the infection or Microsoft Safety Scanner / Security Essentials
I hope you are able to get this resolved soon!
|AndersBuus||9/13/12 4:23 AM||<This message has been deleted.>|
|Re: Clicking on a search result brings me toa blocked site||AndersBuus||9/13/12 4:31 AM|
When making a google search on the name of my company (Company name: inordvativ, located in Denmark), you recieve some results that looks correct. By trying to follow the suggested links, sends you to a site in the .ru domain, that attemps to infect your computer. This is for sure a GOOGLE PROBLEM, since it happends on any computer and any device (iPads etc.). I tried to fine a contact to google to correct this, since it is important for our company. I could not find ANY contacts at all - VERY VERY frustrating!!!!!!
|Re: Clicking on a search result brings me toa blocked site||Kaleh||9/13/12 5:36 AM|
It appears that your site, or the server your site is hosted on, has been hacked. The redirect to the .ru malware site also occurs with Bing and Yahoo.
You should consider posting in the Malware and Hacked Sites section of the Google Webmaster Central Help Forum if you are not able to identify the source of the redirect.
|Re: Clicking on a search result brings me toa blocked site||AndersBuus||9/13/12 5:59 AM|
Thanks, you are right, I did not test on Bing and Yahoo - my fault.!
Sorry for blaming google!!!
I will have my hosting provider to look in to it right away!
|Re: Clicking on a search result brings me toa blocked site||sli5||9/13/12 9:07 AM|
I've had this redirect.I ended up changing the DNS Server I was using (my ISP is talktalk) and used googles instead. Thats cleared the problem up.
|Re: Clicking on a search result brings me toa blocked site||IO.Device||11/5/12 12:58 AM|
Hi - the MSRT fixed this for me - I had that Mozilla Safe Seach extension installed - Doh!
thanks for the tip :)