Google redirect virus

Status
Not open for further replies.

loannlam

Posts: 7   +0
I have a nasty redirect virus. When I use google/yahoo or any search engine to search, the links found are redirected to other unwanted sites. How do I remove and clean the virus? Also, it takes longer to boot up the computer and it runs a lot slower. Attached are my logs. Please HELP!
 
I removed Avira Antivirus.

I ran a quick updated scan with McAfee. Nothing was detected.

Still have redirecting problem.
 
kimsland

I forgot to mention...before the redirect virus, I was hit with Antivirus System Pro. I removed the virus by doing a system restore...then I discovered I have problem with redirecting when doing google/yahoo searches.

Do I need to reset system restore point?
 
Well System Restore is usually the first place that is infected by Malware
Actually at the end of confirming your system is clean we actually remove all System Restore points, by unchecking it and applying, then re-checking it, in System in Control Panel,

You can uninstall SUPERAntiSpyware now as well (done in Add/Remove Programs in Control Panel)

Combofix:
  • Download Combofix to your desktop.
  • Disable your Antivirus (as Combofix will remove any found malwares)
  • Double click ComboFix & follow the prompts.
  • A window will open with a warning.
  • When the scan completes it will open a text window. Please attach that log back here
Also restart and provide a fresh HJT Scan log
 
kimsland

I uninstalled SUPERAntiSpyware and ran ComboFix and HJT . Attached are the logs.

I did a few searches and the links seem not redirect anymore. Did the ComboFix remove the virus? Is my system clean of viruses?

Should I clean out the system restore point?
 
McAfee has so many entries its annoying :D

Anyway, the logs look clean, and Combofix got rid of more stuff
I was going to mention a Vundo scan, but I don't think its required

Un-install Combofix
  • Click START then RUN
  • Now type Combofix /uninstall in the runbox and click OK
  • Any popup errors about Antivirus just ok or close
Note: 1 space after ComboFix in that uninstall command

Clear & Reset System Restore's Cache
Go to Start >> Run - type or copy/paste control sysdm.cpl,,4 and then press Enter
  • Tick on the checkbox - Turn off System Restore on all drives
  • Click Apply
Turn it back 'On' by unticking the same checkbox & click Apply, and then OK
 
I did a scan with CA Yahoo! Anti Spy and it said I have Bifrost, WinAntiVirus Pro 2006, and WinSpywareProtect that ComboFix did fix or remove. Are those viruses? I did a quick scan with Malwarebytes Anti-Malware, but it did not detect anything.

How do I identify and close non essential programs that don't load with Windows? My computer takes longer to load up than it used to.

Attached are recent HJT and mbam logs.
 
kimsland

I did a scan with CA Yahoo! Anti Spy and it said I have Bifrost, WinAntiVirus Pro 2006, and WinSpywareProtect that ComboFiX DID NOT fix or remove. Are those viruses? I did a quick scan with Malwarebytes Anti-Malware, but it did not detect anything.

How do I identify and close non essential programs that don't load with Windows? My computer takes longer to load up than it used to.
 
Malwarebytes Anti Malware (updated first) will remove those
So not sure why it hasn't :confused:

There's removal instructions here for: WinAntiVirus Pro http://www.411-spyware.com/remove-winantivirus-pro-2006#deletefiles

And removal instructions here for: WinSpywareProtect http://www.411-spyware.com/win32-galorion-family-removal#deletefiles



Currently I'm reading the logs to work out what happened

Edit:

Well your Malwarebytes database is 1 day old, but that should not have mattered

Edit2:

Can you provide the log from CA Yahoo Anti-Spy

Edit3:

Its not in the logs, therefore I need the log from CA Yahoo Anti-Spy
 
Status
Not open for further replies.
Back