also @ TechSpot: Microsoft wants Xbox to be the entertainment hub for all your devices

TechSpot

[Inactive] (yet another) google redirect hijack case, foul play suspected

Discussion in 'Virus and Malware Removal' started by rvee, Jun 3, 2011.

Thread Status:
Not open for further replies.
Page 2 of 2

  1. Broni Malware Annihilator

    Good Night :)
    Broni, Jun 4, 2011
    #21

  2. rvee Newcomer, in training

    ESET completed scanning 190k files in around an hour, No threats found, and no log popped up - is there a hidden one somewhere?
    rvee, Jun 5, 2011
    #22

  3. Broni Malware Annihilator

    It won't produce any log, if nothing found.

    Your computer is clean [IMG]

    1. We need to reset system restore to prevent your computer from being accidentally reinfected by using some old restore point(s). We'll create fresh, clean restore point, using following OTL script:

    Run OTL

    • Under the Custom Scans/Fixes box at the bottom, paste in the following:

    Code:
    :OTL
:Commands
[purity]
[emptytemp]
[EMPTYFLASH]
[CLEARALLRESTOREPOINTS]
[Reboot]
    • Then click the Run Fix button at the top
    • Let the program run unhindered, reboot the PC when it is done
    • Post resulting log.

    2. Now, we'll remove all tools, we used during our cleaning process

    Clean up with OTL:

    • Double-click OTL.exe to start the program.
    • Close all other programs apart from OTL as this step will require a reboot
    • On the OTL main screen, press the CLEANUP button
    • Say Yes to the prompt and then allow the program to reboot your computer.

    If you still have any tools or logs leftover on your computer you can go ahead and delete those off of your computer now.

    3. Make sure, Windows Updates are current.

    4. If any Trojan was listed among your infection(s), make sure, you change all of your on-line important passwords (bank account(s), secured web sites, etc.) immediately!

    5. Download, and install WOT (Web OF Trust): http://www.mywot.com/. It'll warn you (in most cases) about dangerous web sites.

    6. Run Malwarebytes "Quick scan" once in a while to assure safety of your computer.

    7. Run Temporary File Cleaner (TFC) weekly.

    8. Download and install Secunia Personal Software Inspector (PSI): http://secunia.com/vulnerability_scanning/personal/. The Secunia PSI is a FREE security tool designed to detect vulnerable and out-dated programs and plug-ins which expose your PC to attacks. Run it weekly.

    9. (optional) If you want to keep all your programs up to date, download and install FileHippo Update Checker.
    The Update Checker will scan your computer for installed software, check the versions and then send this information to FileHippo.com to see if there are any newer releases.

    10. Run defrag at your convenience.

    11. Read How did I get infected?, With steps so it does not happen again!: http://www.bleepingcomputer.com/forums/topic2520.html

    12. Please, let me know, how your computer is doing.
    Broni, Jun 5, 2011
    #23

  4. rvee Newcomer, in training

    Thanks, but I'm still getting redirects in IE and FF (and occasionally chrome), so I'm not sure my PC is clean!

    most often clicking a google result points the browser off to one of these:
    scour.com
    gallantsearch.com
    famousclicks.com
    searchpotluck.com
    clinkingclicks.com
    toppingsearch.com

    Then after a wait it ends up elsewhere on ad sites or fake shopping sites

    RVee
    rvee, Jun 5, 2011
    #24

  5. Broni Malware Annihilator

    Please download GooredFix from one of the locations below and save it to your Desktop
    Download Mirror #1
    Download Mirror #2
    • Ensure all Firefox windows are closed.
    • To run the tool, double-click it (XP), or right-click and select Run As Administrator (Vista).
    • When prompted to run the scan, click Yes.
    • GooredFix will check for infections, and then a log will appear. Please post the contents of that log in your next reply (it can also be found on your desktop, called GooredFix.txt).
    Broni, Jun 5, 2011
    #25

  6. rvee Newcomer, in training

    runs OK, a dos box flashes up, then a dialogue box saying its going to scan and fix, when I click yes I get an error dialogue:

    Gooredfix error
    Unable to create logfile.
    rvee, Jun 5, 2011
    #26

  7. Broni Malware Annihilator

    Did you?
    Broni, Jun 5, 2011
    #27

  8. rvee Newcomer, in training

    yes ran as admin, also tried running from elevated cmd prompt - same result.
    rvee, Jun 5, 2011
    #28

  9. Broni Malware Annihilator

    I must admit, it's pretty puzzling...

    Your routers DNS settings my have been hijacked.
    Please, follow this instructions in attempt to fix the issue: https://store.opendns.com/setup/router/
    Once you set your new DNS settings reboot your computer.
    Then go to http://opendns.com/welcome/ to see if it is working. If you see a checkmark then you switched to OpenDNS.
    Broni, Jun 5, 2011
    #29

  10. rvee Newcomer, in training

    I checked the DNS settings were correct when I reset the router yesterday and considered switching over to opendns then, I'll give it a go.

    Thanks, as always for your, time.
    rvee, Jun 5, 2011
    #30

  11. Broni Malware Annihilator

    Let me know...
    Broni, Jun 5, 2011
    #31

  12. rvee Newcomer, in training

    swapped to opendns, rebooted to flush cache, successful connected to the opendns welcome page.

    quick try of firefox & chrome... both redirected. :(

    This is so puzzling. I want to find out the cause just to satisfy curiosity, but by the same token this is taking up a lot of time and I tempted to just reformat and reinstall the OS and apps.
    rvee, Jun 5, 2011
    #32

  13. Broni Malware Annihilator

    There are cases (rare), when sometimes, there is no other option.
    Let me know, what you want to do.
    Broni, Jun 5, 2011
    #33

  14. rvee Newcomer, in training

    Well I think we've given it a good shot and tried just about everything, I think I'll use it as excuse to switch to an SSD and get a fresh install going.

    Really big thanks for your time and patience.:wave:
    rvee, Jun 5, 2011
    #34

  15. Broni Malware Annihilator

    You're very welcome [IMG]

    Good luck!
    Broni, Jun 5, 2011
    #35
Page 2 of 2
Thread Status:
Not open for further replies.