8 Steps Completed, Logs Attached

[michelwl]

Symptoms: search engine links (mozilla & internet explorer browsers) are being redirected to other sites.


Actually, after completing the steps, the problem appears to be fixed. What do you suggest?

 

[Bobbye]

Welcome to TechSpot Michel. I'll help with the malware.

You should update the AVG program. You have v8, must have missed v8.5 because current version is v9!

Please reopen HijackThis to 'do system scan only'. Check the following if present:
Note: Optional removals are in Green:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=81&bd=Pavilion&pf=laptop
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=81&bd=Pavilion&pf=laptop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=81&bd=Pavilion&pf=laptop
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=81&bd=Pavilion&pf=laptop
O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll (file missing)> See Optional 1
O3 - Toolbar: Foxit Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll (file missing)> See Optional 1

Optional 1: Foistware> AskBar
You have the Ask Toolbar installed. It looks you either got an update or installed FoxIT and didn't realize the AskBar was pre-checked. I would recommend you uninstall it - decide after taking a look at this article:
http://www.benedelman.org/spyware/ask-toolbars/ You can have HJT remove
the entries, then follow full removal instructions below.

Close all Windows except HijackThis and clik on "FixChecked."

IF you have decided to remove the AskBar, proceed with below:
You can easily uninstall the Toolbar using the instructions below for Windows Vista:

• 
  [1]. Close all open Web browsers
  [2]. From the "Start" menu in Windows, select "Control Panel"
  [3]. Under the "Programs" icon, select "Uninstall a program"
  [4]. Select the program with the Ask logo and the text "Ask Toolbar" (or our partner’s brand for a custom Toolbar)
  [5]. Click "Uninstall" and then "Continue" to remove the Toolbar
  
  If you reopen your Web browser and still see the Toolbar, you may need to restart your computer for the uninstall process to be completed.
  
  I'd like you to do an online AV scan:
  Run Eset NOD32 Online AntiVirus Scanner HERE
  
  Note: You will need to use Internet Explorer for this scan.
  • Tick the box next to YES, I accept the Terms of Use.
  • Click Start
  • When asked, allow the Active X control to install
  • Disable your current Antivirus software. You can usually do this with its Notification Tray icon near the clock.
  • Click Start
  • Make sure that the option "Remove found threats" is Unchecked, and the option "Scan unwanted applications" is checked
  • Click Scan
  • Wait for the scan to finish
  • Re-enable your Antivirus software.
  • A logfile is created and located at C:\Program Files\EsetOnlineScanner\log.txt. Please include this on your post.
  
  Please leave the Eset log in your next reply. If i is clean and the original problem is resolved, I'll have you remove the cleaning tools.

 

[michelwl]

the ESET results state that no threats were found.

the attachment doesn't really contain any information, so i hope i ran the scan correctly...

 

[Bobbye]

No, it doesn't look like it scanned. Please delete this log and run Eset again.

Follow with new scan by HijackThis- attach both logs to next reply.

Are you still getting the redirects? Any other malware related problems?