TechSpot

Google Redirect

By dfmaus
Jun 2, 2009
  1. Hi,
    I am having the omnipresent Google redirect problem. When going through the 8-step process I had some problems; I had to rename Malwarebytes and HijackThis so that they would run, and SuperAntiSpyware wouldn't work at all; running the installer (even renamed) caused a blue screen error.

    Thanks very much for your help
     
  2. touch

    touch TS Rookie Posts: 978

    Please download combofix here -> http://download.bleepingcomputer.com/sUBs/ComboFix.exe

    Before Saving it to Desktop, please rename it to something like 123.com to stop malware from disabling it.

    Now, please make sure no other programs are running, close all other windows.

    Please double click on the file you downloaded. Follow the onscreen prompts to start the scan.
    Once the scanning process has started please DO NOT click on the Combofix window or attempt to use your computer as this can cause the scanning process to stall.
    It may take a while to complete scanning and this is normal.

    You will be disconnected from the internet and your desktop icons/toolbars will disappear during scanning, do not worry, this is normal and it will be restored after
    scanning has completed.

    Combofix will create a logfile and display it after your computer has rebooted. Usually located in c:\combofix.txt, please attach it to your next post
     
  3. dfmaus

    dfmaus TS Rookie Topic Starter

    Here is the ComboFix log. While it was scanning it told me to write down the names of a .sys and two .dll files. The names seem to be random strings of letters; do you need them?
    Thank you
     

    Attached Files:

  4. touch

    touch TS Rookie Posts: 978

    No, combofix have deleted them.

    Attach new hijackthis log, and tell how things are running ?
     
  5. dfmaus

    dfmaus TS Rookie Topic Starter

    Thank you so much for your help. The problem seems to be resolved. Attached is the log.
     
  6. touch

    touch TS Rookie Posts: 978

    Sounds good, and hijackthis log looks clean :)

    Now your computer problems are solved, it is time for the clean-up procedure
    You should Create a New Restore Point to prevent possible reinfection from an old one.
    The easiest and safest way to do this is:
    Go to Start > All Programs > Accessories > System Tools > System Restore
    Select Create a restore point, and Ok it.
    Next, go to Start > Run and type in cleanmgr
    Select the More options tab
    Choose the option to clean up system restore and OK it.

    This will remove all restore points except the new one you just created.

    Click START then RUN
    Now type Combofix /u in the runbox and click OK. Note the space between the X and the U, it needs to be there.
    When shown the disclaimer, Select "2"
    The above procedure will:
    Delete the following:
    ComboFix and its associated files and folders.
    Reset the clock settings.
    Hide file extensions, if required.
    Hide System/Hidden files, if required.

    To learn more about how to protect yourself while on the internet, please read Tony KleinĀ“s guide:
    How did I get infected in the first place?
     
Topic Status:
Not open for further replies.


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.