TechSpot

Google redirect - 8 steps completed

By ncbears
Nov 28, 2009
  1. 8-steps completed.

    Google search results are being redirected back to the Google search homepage and multiple windows pop up. Computer also runs much slower than usual, and occasionally locks up.

    Help would be really appreciated. Thanks,

    Lisa.
     
  2. Tmagic650

    Tmagic650 TS Ambassador Posts: 17,244   +234

  3. ncbears

    ncbears TS Rookie Topic Starter

    Ran ESET

    Ran the scan. Highjackthis log attached. I did a Dr.Web scan eariler, which is why it took so long to respond back. Not sure if system is clean.

    Thanks!

    Lisa
     
  4. Tmagic650

    Tmagic650 TS Ambassador Posts: 17,244   +234

    Anything found in those scans? Your Hijackthis log looks the same...

    Delete:
    "O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)"

    Fix these using LSPfix LSPFix Download

    "O10 - Unknown file in Winsock LSP: c:\windows\system32\inethttpfilter.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\inethttpfilter.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\inethttpfilter.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\inethttpfilter.dll"...

    Possibly a sign of a Trojan past or present...

    Delete:
    O4 - HKLM\..\Run: [OEM05Mon.exe] C:\WINDOWS\OEM05Mon.exe"
     
  5. ncbears

    ncbears TS Rookie Topic Starter

    Ran LSPFix-files not listed

    1. ESET did not find anything. Dr.Web did, and removed what it called a possible trojan. Log attached.

    2. LSPFix did not list those files. It listed instead:
    mswsock.dll
    winrnr.dll
    mdnsNSP.dll
    VetRedir.dll
    rsvpsp.dll

    So, I did not remove those.

    I did delete the two files you told me to.

    Reran Dr.Web this afternoon...that log attached. Then reran Hijackthis.

    Thanks, Lisa
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...