TechSpot

Google re-direct virus

By voxkill
May 15, 2009
Topic Status:
Not open for further replies.
  1. I have the Google re-direct virus (I think?) and am having a hard time following directions on removing it, as it keeps automatically closing pages related to virus removal. Symptoms: redirected from Google links, slow performance, web pages related to virus removal cause window to automatically close, cannot run or download antivirus software. I've read and re-tried all of the "8-step virus remover" suggestions to no avail. Any help is very much appreciated, as I would like to avoid re-formatting.

    Edit: I got Super Anti Spyware to install and run, but after scanning for roughly a minute it automatically restarts my computer so that the scan cannot progress. It found a few files which, after pausing the scan right away, I could remove, but that's as far as I can get. Both the logs from those files are attached here. Nothing else will open or run except CCleaner.

    Second edit: I got hijack this to run, log is attached. Still can't get Super Anti Spyware or Malwarebytes to run regularly.

    Attached Files:

  2. voxkill

    voxkill TS Rookie Topic Starter

    Update

    After some fiddling, I got Avira to run, log is attached. I think it's worse than I thought hah...still holding onto hope for this PC.
  3. touch

    touch TS Rookie Posts: 978

    Hello voxkill

    Please download combofix here -> http://download.bleepingcomputer.com/sUBs/ComboFix.exe

    Before Saving it to Desktop, please rename it to something like 123.exe to stop malware from disabling it.

    Now, please make sure no other programs are running, close all other windows.

    Please double click on the file you downloaded. Follow the onscreen prompts to start the scan.
    Once the scanning process has started please DO NOT click on the Combofix window or attempt to use your computer as this can cause the scanning process to stall.
    It may take a while to complete scanning and this is normal.

    You will be disconnected from the internet and your desktop icons/toolbars will disappear during scanning, do not worry, this is normal and it will be restored after
    scanning has completed.

    Combofix will create a logfile and display it after your computer has rebooted. Usually located in c:\combofix.txt, please attach it to your next post

    NB. If you can´t run combofix from normal mode, reboot to safe mode, and run combofix.
  4. voxkill

    voxkill TS Rookie Topic Starter

    Combofix

    Ran Combofix successfully, log attached.
  5. touch

    touch TS Rookie Posts: 978

  6. voxkill

    voxkill TS Rookie Topic Starter

    7 out of 20 reported malware, I attached the results from those 7.
  7. touch

    touch TS Rookie Posts: 978

    Ok, we´ll remove it then.

    Open notepad and copy/paste the text in the quotebox below into it:
    Name the file as CFScript
    and Save it on the desktop

    http://www.fromsej.saknet.dk/billeder/cfscript.gif

    Once saved, refering to the picture above, drag CFScript.txt into ComboFix.exe.

    Combofix will create a logfile and display it after your computer has rebooted. Usually located in c:\combofix.txt, please attach it to your next post

    Note:
    Do not mouseclick combofix's window whilst it's running. That may cause it to stall
  8. voxkill

    voxkill TS Rookie Topic Starter

    Seems to have worked, combo fix log attached.
  9. touch

    touch TS Rookie Posts: 978

    That´s good news :)

    Please attach fresh hijackthis log
  10. voxkill

    voxkill TS Rookie Topic Starter

    New hijack this log attached here.
Topic Status:
Not open for further replies.


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.