So my Google doesnt work

[zyl]

1 hour ago, Val3nt1n said:

I found out that it has nothing to do with just one browser; problems persist on all browsers: Opera, Chrome, Chrome Dev, Chrome Canary and Edge. In my case, if I want to go to the download page of any Chrome Channel I get a security stop from Edge that suggests me not to forward to the site. If I do I get the responses:

 

function httpGetAsync(theUrl, callback) { var xmlHttp = new XMLHttpRequest(); xmlHttp.onreadystatechange = function() { if (xmlHttp.readyState == 4 && xmlHttp.status == 200) callback(xmlHttp.responseText); } xmlHttp.open("GET", theUrl, true); // true for asynchronous xmlHttp.send(null); } document.onclick = function() { window.open("http://www1.xmediaserve.com/apu.php?n=&zoneid=17529&cb=INSERT_RANDOM_NUMBER_HERE&direct=1") document.onclick = null; httpGetAsync("http://sstatic1.histats.com/0.gif?3685753&101", null); }

 

and

 

function httpGetAsync(theUrl, callback) { var xmlHttp = new XMLHttpRequest(); xmlHttp.onreadystatechange = function() { if (xmlHttp.readyState == 4 && xmlHttp.status == 200) callback(xmlHttp.responseText); } xmlHttp.open("GET", theUrl, true); // true for asynchronous xmlHttp.send(null); } document.onclick = function() { window.open("http://creativesrv.com/apu.php?n=&zoneid=17513&cb=INSERT_RANDOM_NUMBER_HERE&direct=1") document.onclick = null; httpGetAsync("http://sstatic1.histats.com/0.gif?3685753&101", null); }

 

with above in the url-bar: Certificaatfout (or certificate error)

So I again, asked on another forum and they told me these messages are a pure HTTPS get formular in javascript so it probably is something with Java

[zyl]

2 hours ago, Val3nt1n said:

Even tried to delete all malware, files and restoring some reg's in safe mode. But without succes..

I made a new Therad to Malware: 

 

[hudanachmad]

i have same problem too , before it happen i install the .exe that  have some malware, then i delete it with adwclener, an this happen. still didnt have solution ?

[hudanachmad]

i solve this problem on this web. check on post #3 . install and use free license . enjoy .

https://www.bleepingcomputer.com/forums/t/636609/google-wont-work-because-of-virus-redirect/

[Val3nt1n]

16 hours ago, hudanachmad said:

i solve this problem on this web. check on post #3 . install and use free license . enjoy .

https://www.bleepingcomputer.com/forums/t/636609/google-wont-work-because-of-virus-redirect/

Hi, i would not trust any non-certified programs like these. Even more danger if I see that the program sends packages to different sites and ip's. It gets worse when I see that all the installed programs and date of install have been published on the site; that means that some other companies or organisations got this kind of information for them. You things just have to be hidden from manufacturers. I accept the rules of acknowledgment and security, but my installed (cracked) software they don't need to see.

And the delete of C:\WINDOWS\wininit.ini (File) was completely unnecessary. The worst thing that I remarked is; did the hosts file with all those ip's and host-addresses even change?

[hudanachmad]

 

1 hour ago, Val3nt1n said:

Hi, i would not trust any non-certified programs like these. Even more danger if I see that the program sends packages to different sites and ip's. It gets worse when I see that all the installed programs and date of install have been published on the site; that means that some other companies or organisations got this kind of information for them. You things just have to be hidden from manufacturers. I accept the rules of acknowledgment and security, but my installed (cracked) software they don't need to see.

And the delete of C:\WINDOWS\wininit.ini (File) was completely unnecessary. The worst thing that I remarked is; did the hosts file with all those ip's and host-addresses even change?

what should i do now ? i have already install these program .

[Val3nt1n]

10 hours ago, hudanachmad said:

 

what should i do now ? i have already install these program .

If the issue you had the same was as ours and you have fixed it; do nothing, just delete these progs and carry on.

If the issue is still there, I would suggest going onto this following thread; and try to fix your issue with all the solutions we posted there.

 

[Anitatech1]

I thank you so much for this post!! I had the EXACT same issue. I was only able to rid my Laptop of this menace by doing the following in this order: (See previous texts in this thread for technical details)--

 

Editing the hosts file to delete all the entries

running ccleaner

running malware bytes

rebooting, still had the web redirect issue, and in fact it was opening three cmd shell sessions and sending any of my keyboard typing entries to some other web addresses. I could tell this in the task manager, I just could not delete the dang program that was initiating the processes.

 

I did find a file called startup files in c:\Users\HP\Documents

   that had several lines that referenced    lightning   and irreversible.exe  

   I deleted that file, but I'm not sure if that helped. You might just want to check to see if you have it.

 

I still had the issue after all of those steps, so I followed one of the recommendations on here, and     

Finally, I downloaded and ran HITMAN Pro, which FOUND the .exe in the C:\ProgramData\Appalmaaz directory,   a bunch of files in the Temp directory, and another ugly .exe file, which I was able to find in the task manager, but it would reignite at startup or boot.

 

Finally after all that, this issue is FIXED!!  I guess I'll just have to watch the last six episodes of Veronica Mars third season by finding a real site that won't download malware along with it!! 

 

 

 

[Val3nt1n]

On 10-1-2017 at 2:51 AM, Anitatech1 said:

I thank you so much for this post!! I had the EXACT same issue. I was only able to rid my Laptop of this menace by doing the following in this order: (See previous texts in this thread for technical details)--

 

Editing the hosts file to delete all the entries

running ccleaner

running malware bytes

rebooting, still had the web redirect issue, and in fact it was opening three cmd shell sessions and sending any of my keyboard typing entries to some other web addresses. I could tell this in the task manager, I just could not delete the dang program that was initiating the processes.

 

I did find a file called startup files in c:\Users\HP\Documents

   that had several lines that referenced    lightning   and irreversible.exe  

   I deleted that file, but I'm not sure if that helped. You might just want to check to see if you have it.

 

I still had the issue after all of those steps, so I followed one of the recommendations on here, and     

Finally, I downloaded and ran HITMAN Pro, which FOUND the .exe in the C:\ProgramData\Appalmaaz directory,   a bunch of files in the Temp directory, and another ugly .exe file, which I was able to find in the task manager, but it would reignite at startup or boot.

 

Finally after all that, this issue is FIXED!!  I guess I'll just have to watch the last six episodes of Veronica Mars third season by finding a real site that won't download malware along with it!! 

 

 

 

You're welcome!

[zyl]

On 10.1.2017 at 2:51 AM, Anitatech1 said:

I thank you so much for this post!! I had the EXACT same issue. I was only able to rid my Laptop of this menace by doing the following in this order: (See previous texts in this thread for technical details)--

 

Editing the hosts file to delete all the entries

running ccleaner

running malware bytes

rebooting, still had the web redirect issue, and in fact it was opening three cmd shell sessions and sending any of my keyboard typing entries to some other web addresses. I could tell this in the task manager, I just could not delete the dang program that was initiating the processes.

 

I did find a file called startup files in c:\Users\HP\Documents

   that had several lines that referenced    lightning   and irreversible.exe  

   I deleted that file, but I'm not sure if that helped. You might just want to check to see if you have it.

 

I still had the issue after all of those steps, so I followed one of the recommendations on here, and     

Finally, I downloaded and ran HITMAN Pro, which FOUND the .exe in the C:\ProgramData\Appalmaaz directory,   a bunch of files in the Temp directory, and another ugly .exe file, which I was able to find in the task manager, but it would reignite at startup or boot.

 

Finally after all that, this issue is FIXED!!  I guess I'll just have to watch the last six episodes of Veronica Mars third season by finding a real site that won't download malware along with it!! 

 

 

 

[hudanachmad]

i have differen issue now, winsnare always show up ?

[zyl]

1 hour ago, hudanachmad said:

i have differen issue now, winsnare always show up ?

maybe try editing the hosts file again, check your autostart and run AdwCleaner