Comments on: Fix Uninitiated Google Redirects With GooredFix [Firefox]

By: Norrin Radd

Norrin Radd — Sun, 28 Aug 2011 23:55:41 +0000

Worked exactly as described.

thanks for the research and tools. very well described.

side note…i tested ie and it was fine. so i knew then it was firefox…

its aug 28 211…date of known infection

By: HS

HS — Thu, 14 Jul 2011 04:18:35 +0000

Thank you so much, I had spent several days and pretty much every single malware program. Gooredfix did the job, wish I had seen this much earlier.

By: Douglas McGregor

Douglas McGregor — Fri, 08 Apr 2011 08:25:54 +0000

Worked for me, and thought the problem was solved, but noticed it’s back today after switching on this morning. Very annoying. Would love to hear of a permanent fix. Wonder if Google are aware of the problem.

By: Mike

Mike — Mon, 28 Feb 2011 01:26:51 +0000

GooredFix worked 100% for me. I believe hak01 (see first post) was presumptious in his statement about rootkits usually being at fault. Well it wasn’t for me, and that presumption (which I see all too frequently) misdirected me for the longest time. No amount of antivirus software found the real culprit (a plugin). Did anyone ever think that there are so many websites dedicated this problem, all encouraging the use of one antivirus program or another, because these (antivirus) suggestions don’t usually work! Blaming viruses for everything is an easy way to sell antivirus software. jpshortstuff (GooredFix’s author) deserves some serious acknowledgment for his “outside of the box” thinking.

By: Anon

Anon — Mon, 29 Nov 2010 21:27:34 +0000

Worked fine in my case… hard to google things when you’re being redirected all the time. now, to find a cork for those add-ons…

By: Joseph Ting

Joseph Ting — Sat, 22 May 2010 11:16:41 +0000

Have been using Ad-Aware and SpyBot for half a day. Searched and searched in safe mode too. =X

Thanks to you. I’ve knew their name and voila!
Thanks for the fix. Totally clean and even Norton Internet Security identifies it as safe. LoL~

A ton of thanks to you. =)

By: Carl

Carl — Wed, 12 May 2010 05:01:43 +0000

If I turned off my Java Script and it works like normal, does that mean I can use this GooRed fix to clean it up? or should I use the TDSS killer?

By: -

Tue, 04 May 2010 04:39:04 +0000

never had trouble with this, but google recently changed their meta or scripts or something on image search page.
as of now, I haven’t been able to rewrite my filters to get rid of google’s tracking garbage. (I’m referring to the ei and gbv tracking and garbage, which i’d had under control for a few years. also tbs has turned up in image-search urls in the last few months. tbs has use on plain web searches, and maybe eventually google will make use of tbs, but for now it’s just junk in the url.)

By: yutannelson

yutannelson — Thu, 22 Apr 2010 02:10:08 +0000

I about went crazy trying to fix this. Every recommendation I found did not help until I found this one. Thank you to whoever posted this. Everyone needs to repost this elsewhere on the web to get the message out.

Look in (windows)\system32\drivers\etc\hosts. There should be only some lines starting with # and “127.0.0.1 localhost”. Anything else in there might be redirecting you to a fake Google or other fake site.

By: Martin

Martin — Mon, 01 Mar 2010 17:50:35 +0000

Nope only for Firefox. you might want to check out the other solution that I posted a day later http://www.ghacks.net/2010/01/15/another-fix-for-unauthorized-google-redirects-security/

By: john

john — Mon, 01 Mar 2010 17:28:33 +0000

just found your page, haven’t been able to try the fix yet.
i first noticed the redirect in firefox friday, saturday it started to happen in ie too. will this fix take care of both issues?
thank you

By: Doug

Doug — Wed, 24 Feb 2010 15:59:25 +0000

Martin, this fix seems to have worked for me. It was very easy, GooredFix took only a few seconds to run. Thank you very much!

By: Another Fix For Unauthorized Google Redirects [Security]

Another Fix For Unauthorized Google Redirects [Security] — Fri, 15 Jan 2010 15:57:47 +0000

[...] posted a solution for one of the causes of unauthorized Google redirects yesterday. These redirects can happen in one browser or multiple ones and are usually related to [...]

By: Martin

Martin — Fri, 15 Jan 2010 15:17:50 +0000

hak01 you are right but before you start looking for rootkits you should consider the obvious, especially if it is only happening in Firefox and not in other web browsers.I will publish another cause today.

By: hak01

hak01 — Thu, 14 Jan 2010 12:15:41 +0000

hmm, it’s only one among the many reasons why google redirects. In most cases it’s caused by rootkits not by the plugin. Anyway thanks for this great suggestion.