Let me give you another great information and the latest news for your online marketing. Here you will find useful resources about SEO, internet marketing, web design and other affiliate programs.
right click on start icon -> properties -> “start menu” tab -> custmize -> scroll down to find the “run command”. check it and you will have the run command in start window.
Did you do an IE optimization? There is a link below video.The only valid step I can suggest right now is doing an IE optimization and checking the host file.
There might be infection inside computer, but its hard for me to give suggestions blindly.Check my website link and you should get more help.Feel free to contact me after going through it.
Hi Anup, I have followed up all your steps, but I can’t find any Virus under the ntbtlog.txt.. Are there other places that the virus hides? Because since last Sunday I have been infected by a virus, I can not use Firefox and Internet explorer effectively. Every time I am visiting a web-site I am being redirected to the following webpage: onlinefwd . I have checked the Installed programs, checked under the Task Manager and the Registry Editor, nothing.. Any Advice?
Restart the computer, keep tapping F8 when the computer starts to get the windows advanced boot menu.There is an option “enable boot logging” This should get you the log file in the specified location
Hi Andrew, Glad it helped. Yes.There are lot of scenarios where the redirection is caused only by corrupted host file and not by any infected file. That is why I insist to follow the troubleshooting in that order. some website scripts are designed to automatically corrupt the host file without being downloaded on the computer.
Man your a genius I have been trying to get a redirect virus off my computer for weeks this worked great, I think it was only in the hosts file i did not find anything any where else in the drivers of otherwise.
is it common for it to only be in the hosts file?
Thanks
Andrew G.
If a line says # 68.3456.120 xxxxxx.com, “#” tells computer to “ignore anything written in the same line” This makes the line safe. Usually you might see lot of entries like this if you use software’s such as spybot or adaware.Removing these thousands of entries is not necessary,but at time it is a good practice to keep it clean.Not sure if you are trying to edit host file correctly.Check video description,there is a link inside to how to edit host file properly.Follow the details.
I got as far as opening that page in notepad, & there were literally 100’s of websites listed, but some seem to have been put there by an anti-virus software?
I tried to copy & paste them here, but got an error message, so I can’t show you what I see.
When I deleted all of them (there was nothing aside from a LONG list of websites, prefaced by this # 127.0.0.1, & this text :# Start/End of entries inserted by Spybot - Search & Destroy) so I removed everything & went to save it, I couldn’t.
Can send me a comment on my website with your valid email id.I will send you the instruction by mail.My website link is mentioned under video description.
Thank you for your quick response! i deleted norton security and the Nisx64 folder and im still being redirected when i use my search engine..any other suggestions? please help thank you
This is from Norton Internet Security. This is not a bad file unless Norton software itself is corrupted by the infection.If you feel so, you can remove it from add/remove program.
For more details on manual removal, check my website link under video description.
I found the following and when I google it it comes up with issues related to it possibly being a trojan. I wanted to get your advice before deleting though as I certainly don’t want to delete if it is legitimate. Below is what it says..
March 12th, 2013 at 1:15 am
right click on start icon -> properties -> “start menu” tab -> custmize -> scroll down to find the “run command”. check it and you will have the run command in start window.
March 12th, 2013 at 1:58 am
Mine is windows 7 but i don’t have the run selection on the start bar
March 12th, 2013 at 2:43 am
Please do more videos
March 12th, 2013 at 3:42 am
Didnt receive anything till now?Make sure the email id you gave is right.
March 12th, 2013 at 3:43 am
Did you do an IE optimization? There is a link below video.The only valid step I can suggest right now is doing an IE optimization and checking the host file.
There might be infection inside computer, but its hard for me to give suggestions blindly.Check my website link and you should get more help.Feel free to contact me after going through it.
March 12th, 2013 at 3:55 am
Hi Anup, I have followed up all your steps, but I can’t find any Virus under the ntbtlog.txt.. Are there other places that the virus hides? Because since last Sunday I have been infected by a virus, I can not use Firefox and Internet explorer effectively. Every time I am visiting a web-site I am being redirected to the following webpage: onlinefwd . I have checked the Installed programs, checked under the Task Manager and the Registry Editor, nothing.. Any Advice?
March 12th, 2013 at 4:07 am
I already have the log but can’t find the infected file. Let me send it to your email so you can look at it.
March 12th, 2013 at 4:32 am
Restart the computer, keep tapping F8 when the computer starts to get the windows advanced boot menu.There is an option “enable boot logging” This should get you the log file in the specified location
March 12th, 2013 at 4:41 am
Glad your computer is working fine now.Thanks for taking time to give me feedback
March 12th, 2013 at 5:19 am
Hi Andrew, Glad it helped. Yes.There are lot of scenarios where the redirection is caused only by corrupted host file and not by any infected file. That is why I insist to follow the troubleshooting in that order. some website scripts are designed to automatically corrupt the host file without being downloaded on the computer.
March 12th, 2013 at 5:52 am
Thank you so much, I have tried other tutorials with no success. I just followed your easy steps and now I’m good. Again thank you.
March 12th, 2013 at 5:56 am
Man your a genius I have been trying to get a redirect virus off my computer for weeks this worked great, I think it was only in the hosts file i did not find anything any where else in the drivers of otherwise.
is it common for it to only be in the hosts file?
Thanks
Andrew G.
March 12th, 2013 at 6:11 am
If a line says # 68.3456.120 xxxxxx.com, “#” tells computer to “ignore anything written in the same line” This makes the line safe. Usually you might see lot of entries like this if you use software’s such as spybot or adaware.Removing these thousands of entries is not necessary,but at time it is a good practice to keep it clean.Not sure if you are trying to edit host file correctly.Check video description,there is a link inside to how to edit host file properly.Follow the details.
March 12th, 2013 at 6:15 am
I got as far as opening that page in notepad, & there were literally 100’s of websites listed, but some seem to have been put there by an anti-virus software?
I tried to copy & paste them here, but got an error message, so I can’t show you what I see.
When I deleted all of them (there was nothing aside from a LONG list of websites, prefaced by this # 127.0.0.1, & this text :# Start/End of entries inserted by Spybot - Search & Destroy) so I removed everything & went to save it, I couldn’t.
March 12th, 2013 at 6:20 am
Can send me a comment on my website with your valid email id.I will send you the instruction by mail.My website link is mentioned under video description.
March 12th, 2013 at 7:19 am
Thank you for your quick response! i deleted norton security and the Nisx64 folder and im still being redirected when i use my search engine..any other suggestions? please help thank you
March 12th, 2013 at 8:04 am
This is from Norton Internet Security. This is not a bad file unless Norton software itself is corrupted by the infection.If you feel so, you can remove it from add/remove program.
For more details on manual removal, check my website link under video description.
March 12th, 2013 at 8:52 am
Great Video!…BUT..when i tried deleting the NISx64 virus through cmd it said my acess was denied when i pressed enter please HELP!! thanks in advance
March 12th, 2013 at 9:36 am
March 12th, 2013 at 10:12 am
This site really worked for me
googleredirectviruses
March 12th, 2013 at 10:20 am
It is a file related to your Norton software.This is not a bad file.
March 12th, 2013 at 10:23 am
It should be a false positive.You may ignore the file and continue with rest of the troubleshooting,
March 12th, 2013 at 11:09 am
I found the following and when I google it it comes up with issues related to it possibly being a trojan. I wanted to get your advice before deleting though as I certainly don’t want to delete if it is legitimate. Below is what it says..
system32driversNATx64106000.011ccSetx64.sys
March 12th, 2013 at 11:35 am
when i type in the attrib command it says “file not found C:Windowssystem32driversrikvm_38F51D56.sys”