Bing Redirect Virus

[TheMastr13]

Hello,

 

I'm having a weird issue with my father's computer. Whenever he goes to bing.com (he wants to use google, but didn't know how to change his default), it takes him to malicious websites claiming that he "has a virus" and needs to call a certain phone number.

 

I know this is fake. I can't get rid of it though. I've tried:

-Kaspersky TDSS Killer

-Malwarebytes

-HitmanPro

-AdwCleaner

-Junkware Removal Tool

-Emsisoft Anti-Malware

 

It happens on all web browsers.

Just to recap: whenever www.bing.com is typed into the address bar, it is redirected to malicious websites.

 

Thanks,

TheMastr13 

[manofsteel]

first its easy to change default starter site and second just dont go to bing.com cuz it can be virus itself

[manikyath]

https://en.wikipedia.org/wiki/Hosts_(file)

 

that'd be my bet. its one of the things an anti malware tool cant catch.

[manikyath]

just dont go to bing.com cuz it can be virus itself

that just made no sense....

[TheMastr13]

https://en.wikipedia.org/wiki/Hosts_(file)

 

that'd be my bet. its one of the things an anti malware tool cant catch.

So should I try deleting this file?

[LittleCarrot]

It might be in control panel. There is an option in almost all browser to reset them.(http://www.howtogeek.com/171924/how-to-reset-your-web-browser-to-its-default-settings/) Try doing that.

[manikyath]

So should I try deleting this file?

you open it, and see if it has some weird lines added to it.

its a tool available in windows mostly to add local entries to DNS (like making you able to bind "router" to "192.168.1.1" so you can access your router easier)

sadly, such an easy tool is also a VERY easy way for a low tech threat to mess with your system.

[TheMastr13]

you open it, and see if it has some weird lines added to it.

its a tool available in windows mostly to add local entries to DNS (like making you able to bind "router" to "192.168.1.1" so you can access your router easier)

sadly, such an easy tool is also a VERY easy way for a low tech threat to mess with your system.

It has some weird lines in it. I think it's the culprit. Give me a minute, and I will reply again

[TheMastr13]

you open it, and see if it has some weird lines added to it.

its a tool available in windows mostly to add local entries to DNS (like making you able to bind "router" to "192.168.1.1" so you can access your router easier)

sadly, such an easy tool is also a VERY easy way for a low tech threat to mess with your system.

It won't let me make changes. It says I need administrative privileges, and I do.

[manikyath]

It won't let me make changes. It says I need administrative privileges, and I do.

open notepad as administrator, and in notepad click file->open, and then browse to the hosts file.

 

or on linux, type sudo  (yes, this is a rant on how hard it is to do admin things in windurp)

[TheMastr13]

open notepad as administrator, and in notepad click file->open, and then browse to the hosts file.

 

or on linux, type sudo  (yes, this is a rant on how hard it is to do admin things in windurp)

okay, i did it, but the problem is still happening.

 

In Internet Exploder, sometimes when I go to bing.com it tells me "this page cannot be displayed" (a legit windows thing). when I click "fix connection problems", it tells me "one or more network protocols are missing on this computer", and then it fails to fix it.

[manikyath]

okay, i did it, but the problem is still happening.

 

In Internet Exploder, sometimes when I go to bing.com it tells me "this page cannot be displayed" (a legit windows thing). when I click "fix connection problems", it tells me "one or more network protocols are missing on this computer", and then it fails to fix it.

did you reboot?

 

might be that the virus left some permanent damage.

could open a cmd window as administrator and type

sfc /scannow

to see if it finds anything.

[TheMastr13]

did you reboot?

 

might be that the virus left some permanent damage.

could open a cmd window as administrator and type

sfc /scannow

to see if it finds anything.

I rebooted and did the scan. No issues found, but bing is still redirecting. I think i'm just going to do an OS reinstall. Thank you for all your help though! have a happy new year!

[HrutkayMods]

I've had the problem before... you did most of this but did you try step 6-8 on this? https://malwaretips.com/blogs/remove-browser-redirect-virus/

it fixed my problem

[TheMastr13]

I've had the problem before... you did most of this but did you try step 6-8 on this? https://malwaretips.com/blogs/remove-browser-redirect-virus/

it fixed my problem

That's the guide I followed. Didn't help.

[HrutkayMods]

That's the guide I followed. Didn't help.

Well in that case I guess it is time to reinstall windows