Hello,

I have had an issue when GOOGLING with the firefox browser for sometime now. I've tried just about every malware tool available, and still, I get rederects when using google in the firefox browser.

Details: Using Firefox, I OPEN up google. I then start a search on any particular subject. I then click on a link and instead of going to google's entended site, I'm redirected to a unfimiliar search site, or a site that claims that I have a virus.

When i click on the history drop down, I see this:

Jump
Redirect
Loading
Loading
XXXXXXXXX - Google Search
XXXXXXXXX - Google Search

As a workaround, I google using an IE's browser. I would really like to resolve this problem with firefox so I can go back to using firefox when using google.Well, it LOOKS as if I'm going to have to help myself...lol

I've researched this problem and It appears that there is a name for this virus. Its called, goored. Goored is an abbreviation for (malicious) Google Redirects although redirects have also been noticed in other search engines like Yahoo as well.

I will give it a try when I get home and post my results.

Source: HTTP://www.ghacks.net/2010/01/14/fix-uninitiated-google-redirects-with-gooredfix-firefox/All is FIXED! The gooredfix tool did the trick and it only took a few seconds. For those who are curious about what gooredfix removed from my registry, I have pasted the gooredfix log below.

GooredFix by jpshortstuff (08.01.10.1)
Log created at 19:32 on 16/02/2010 (Compaq_Owner)
Firefox version 3.5.7 (en-US)

========== GooredScan ==========

Deleting "C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\y78zdvd4.default\extensions\{4e5a0bb3-35d9-42e6-8535-d939c7596103}" -> Success!

========== GooredLog ==========

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd} [03:56 01/02/2006]
{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} [03:40 02/08/2009]

C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\y78zdvd4.default\extensions\
[emailprotected] [07:01 09/02/2008]
{20a82645-c095-46ed-80e3-08825760534b} [01:12 04/09/2009]
{46551EC9-40F0-4e47-8E18-8E5CF550CFB8} [07:50 28/07/2009]
{635abd67-4fe9-1b23-4f01-e679fa7484c1} [08:29 16/11/2006]
{7affbfae-c4e2-4915-8c0f-00fa3ec610a1} [05:20 25/02/2008]

[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]
"[emailprotected]"="C:\Program Files\Java\jre6\lib\deploy\jqs\ff" [03:39 02/08/2009]
"{20a82645-c095-46ed-80e3-08825760534b}"="c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\" [10:12 22/08/2009]

-=E.O.F=-