Google-redirect virus keeps coming back

Status
Not open for further replies.
Hi Everyone,

I used malware bytes, superantispyware and spybot search and destroy but the google-redirect virus keeps coming back (usually after I use google / gmail). I looked around on a bunch of forums and it seems each solution is slightly different.

The superantispyware scan didn't turn up anything. Please help, thanks~!

Specs:
Microsoft XP
Del Inspiron 1520
Intel Core 2 Duo
T7500@ 2 Ghz (2 CPU)
2046 MB Ram
DirectX 9.0
 
Hello rezoslavek

Download HostsExpert: http://www.majorgeeks.com/Hoster_d4626.html

Choose one of the servers at Majorgeeks....save the file on your desktop

Unzip HostsXpert 4.2 - Hosts File Manager to a convenient folder such as C:\HostsXpert 4.2 - Hosts File Manager
Run HostsXpert 4.2 - Hosts File Manager from its new home
Click on "File Handling".
Click on "Restore MS Hosts File".
Click OK on the Confirmation box.
Click on "Make Read Only?"
Click the X to exit the program.
Note: If you were using a custom Hosts file you will need to replace any of those entries yourself.


You have Viewpoint running -

Viewpoint is considered foistware and is not needed on your computer.
Download and unzip to own folder on Desktop - http://bellsouthpwp.net/p/r/prprogramsstudios/viewpointkiller.zip

Run ViewpointKiller.exe

Reboot.

Please download Combofix:
http://subs.geekstogo.com/ComboFix.exe

And save to the desktop.

Open notepad and copy/paste the text in the quotebox below into it:
Name the file as CFScript
and Save it on the desktop

Killall::
Snapshot::
File::
C:\WINDOWS\system32\autochk.dll
C:\DOCUME~1\LOCALS~1\protect.dll
C:\WINDOWS\TEMP\ephenr6kg4.exe

http://www.fromsej.saknet.dk/billeder/cfscript.gif

Once saved, refering to the picture above, drag CFScript.txt into ComboFix.exe.

Combofix will create a logfile and display it after your computer has rebooted. Usually located in c:\combofix.txt, please attach it to your next post

Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall
 
Google-redirect virus keeps coming back continued

Hey I really appreciate the help you will get lots of good karma for this =]

Attached is the combofix log. At one point google-redirect went away and v1.adwarefeed.com infected my computer instead but I got rid of that using goored.

Thanks for the help I hope everything's okay now.
 

Attachments

  • combofix log 1.txt
    16.5 KB · Views: 6
A quick question - Have you ever considered replace Norton, with a better Free antivirus ?
"Their products are apparently not good enough to clean a computer.
Norton are also hogging resources and slowing systems down."


Open notepad and copy/paste the text in the quotebox below into it:
Name the file as CFScript
and Save it on the desktop

Killall::
Snapshot::
File::
C:\43214354.bat
c:\windows\Rjifo.dll
c:\windows\system32\kuzSniper.exe
c:\windows\system32\ptch238120.exe
c:\windows\system32\MPh.exe
c:\windows\system32\d3d9caps.dat
c:\windows\system32\sabobosu.exe
c:\windows\system32\tigahifa.exe
c:\windows\system32\drivers\bpwrve.sys

Filelook::
c:\windows\system32\profile.dat
Driver::
yltb

http://www.fromsej.saknet.dk/billeder/cfscript.gif

Once saved, refering to the picture above, drag CFScript.txt into ComboFix.exe.

Combofix will create a logfile and display it after your computer has rebooted. Usually located in c:\combofix.txt, please attach it to your next post

Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall
 
Status
Not open for further replies.
Back