The Computer Gal Logo - Laptop with coffee and plants
Go.Google.com Browser Hijack
The Computer Gal on Facebook
Ask to receive tips and handouts to your email.
  1. What would you think if every time you do a Google search, all the results lead to ad pages on the address go.google.com? or, if you tried to do a Yahoo search, each of the results linked to an ad on go.yahoo.com?
  2. What would you do if you try to update your virus software, and it said that there was a problem connecting to the server?
  3. What would you do if every time you tried to go to an anti-virus software web site, such as avg.com or symantec.com, your browser showed an empty page?

You might guess correctly that your computer has caught a virus. However, since you can't update your virus protection software, you can't fix it - or can you? If you take your computer in to be cleaned off by a professional, you might find that it would cost you $100.00+.

First Step
Try another computer.
You need to do a web search to find out what is happening to your computer, but all the Google results will just get you to ads. So, start by doing a Google search on another computer, even if you have to go to the public library to do it.

Do various Google searches for what is happening. If you noticed that you are being redirected to go.google.com, you could search for go.google.com. If you happened to be one of the people who received this virus early in its life cycle, there might not be any information out there. Or, you might get an answer like this one, which asks you to download a little program to find and fix the virus.

You may or may not be able to download the program they suggest into your computer because the download function in your browser has actually been redirected back to your own computer. That means that whenever you try to go to a download site, the virus tells your browser to look for the file on your computer - but it's not there! However, you can download the program from another computer onto a jump drive and then copy it into your computer. However, here's the rub, the program you download into your computer may want to communicate with the software web site for "updates" before it lets you finish the install. Now you are twarted again.

Second Step
Find someone who has fixed the problem without going to the sites you need.
In this particular instance, the best solution was found on a site which isn't particularly well designed. So, keep in mind that good tech sites aren't necessarily beautiful! And, the great answers often come from a user submission. The solution given by the reader named Bomp. Thanks to all those good folks who post their solutions on these sites.

1. Go to your Control Panel

Go to the System Icon in the Control Panel

2. Open System Properties
3. Click Device Manager
4. Go to View -> Show hidden devices

Windows: Device ManagerWindows: Hidden Devices in System Properties

5. Look for Non-Plug and Play Drivers
6. Look for TDSServ.sys
7. If you find it, right click and disable it. Do not delete it, or it will just reinstall itself again!

Disable TDSServ.sys

In this case, the virus hijacked your browser. This is a common class of virus that attaches itself to your browser software and affects how your browser works. Since your browser is trusted software, it often avoids detection this way. More about browser hijacking.

Update 2/26/09: There used to be a link on this site to an article about browser hijakcing on the PCStats web site. Today I discovered that clicking on that link was not a good thing because it was an entrance for porn site popups. Even with the extremely undesirable site blocked, going to PCStats would bring it up. I apologize if this link has caused anyone any problems.

 

Related Topics and Resources

  1. go.google.com Browser Hijack
  2. Wikipedia topic: Trojan Horse
  3. How to Recognize a Trojan Horse on your Website
  4. Verizon Wireless Trojan Horse
  5. Domain Name Scam from China
  6. Sports Event Registration Scam
  7. Are Those Tweeter Ads for Real?
Nora McDougall | Missoula, Montana 59801 | 406.253.4045 | Contact Nora
© 2010, Nora McDougall-Collins