Hello,
I am having a problem with Google redirecting me to different websites. I have tried sweeping my system a few different times and the problems still exists. Is there a major problem? Do I need to reformat?

[B]Hello and welcome to Techspot.[/B]

Go and read this thread [URL="http://www.techspot.com/vb/topic19133.html"]HERE[/URL], then post a HJT log as an attachment into this thread.

Regards Howard

[color=red][b]This thread is for the use of[/color] kep890 [color=red]only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.[/color][/b]

Hello,
See attached .txt file from the Hijack This scan.

Attached Files

hijackthis.log (22.4 KB, 5 views)

Your system has been hijacked.

[b][color=red]Very Important:[/color] Before deciding whether you should clean or reformat your system, go and read this thread [b][URL="http://www.techspot.com/vb/topic65943.html"][color=blue]HERE[/color][/URL][/b] and decide what it is you want to do.[/b]

If after reading the above, you wish to clean your system, do the following.

Download and run the [URL="http://www.f-secure.com/blacklight/try_blacklight.html"]Blacklight programme.[/URL] Follow all the instructions carefully.

Run HJT with no other programmes open(except notepad). Click the scan button. Have HJT fix the following, by placing a tick in the little box next to(if there).

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O9 - Extra button: The Weather Channel - {2E5E800E-6AC0-411E-940A-369530A35E43} - (no file)

O9 - Extra 'Tools' menuitem: The Weather Channel - {2E5E800E-6AC0-411E-940A-369530A35E43} - (no file)

O16 - DPF: {25365FF3-2746-4230-9DA7-163CCA318309} (Automatic Driver Installation Control) - [url]http://inst.c-wss.com/n024p/EN/install/gtdownlr.cab[/url]

O16 - DPF: {63DF43C2-469A-41F3-B119-17B1ACE8BB34} (Sony SNC-RZ30 Image Viewer) - [url]http://webcam2.ci.schaumburg.il.us/home/SonySncRz30View.cab[/url]

O16 - DPF: {B020B534-4AA2-4B99-BD6D-5F6EE286DF5C} - [url]http://a248.e.akamai.net/f/248/5462/2h/www.symantecstore.com/v2.0-img/operations[/url] /symbizpr/xcontrol/SymDlBrg.cab

Fix all 017 entries.

Fix all 018 Protocol: entries.

Click on the fix checked button.

Close HJT and reboot your system.

Post a fresh HJT log and let me know the results of the Blacklight scan.

Regards Howard

[color=red][b]This thread is for the use of[/color] kep890 [color=red]only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.[/color][/b]

I still have not been able to finish the steps you provided. I was trying to make some back ups on CD and I accidentally knocked my laptop on the floor. The disk drive was partially ejected and it broke off. I have to have it repaired tomorrow.
I'll let you know what happens.

I`m sorry to hear that, I hope it can be fixed.

Good luck.

Regards Howard

It's completely intact it just snapped off the rails and pulled apart from the ribbon cable connection. I hope a local computer store can fix it tomorrow. But I am sure it will not be cheap......

Hello Howard,
I have finally got my important items backed up. I don't know what was wrong with the DVDs but CDs seemed to work just fine.
I ran the programs like you suggested. The Blacklight program found one problem. It was called kdult. I renamed it, as the program prompted me to do so.
The HJT has been ran and I attached the log titled Hijackthis2

Let me know what you think.

Thanks!

Attached Files

hijackthis2.log (9.2 KB, 2 views)

Your HJT log is now clean.

[b]Turn off system restore.(XP/ME only)[/b] See how [URL="http://www.bleepingcomputer.com/forums/tutorial56.html"]HERE[/URL].

Now, turn system restore back on. This will have deleted all your old restore points and any nasties that are in them. It will also have created a new, clean restore point.

If you have any further virus/spyware problems, please post in this thread.

Regards Howard

[color=red][b]This thread is for the use of[/color] kep890 [color=red]only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.[/color][/b]

Ok. I went into control panel and found that system was already off. I turned it on and allowed max 12%. I left it on. Is that ok?

Yes, that`s fine.

Regards Howard

[color=red][b]This thread is for the use of[/color] kep890 [color=red]only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.[/color][/b]

So do you think I should be ok now? I should not have to re-format the PC?

If so, I do plan on buying some better virus and spyware protection. Probably Norton.

Providing you`re having no other problems, you should be good to go.

I don`t recommend you get Norton, it`s utter crap and McAfee isn`t much better. See This thread [URL="http://www.techspot.com/vb/topic58483.html"]HERE[/URL].

Here`s what I recommend.

[URL="http://free.grisoft.com/doc/1"]AVG free[/URL] or [URL="http://www.avast.com/"]Avast[/URL] antivirus programmes.

[URL="http://www.zonelabs.com/store/content/catalog/products/sku_list_za.jsp;jsessionid=EElu1mSWlQjHS1lqOdGhtXP8vPmn2BX3FugIF1oqBBJ4j9pn XWWc!-559734354!-1062696904!7551!7552!NONE?dc=12bms&ctry=US&lang=en&lid=dbtopnav_zass"]Zonealarm[/URL] or [URL="http://www.sunbelt-software.com/Kerio.cfm"]Kerio[/URL] free firewall programmes.

[URL="http://www.safer-networking.org/en/download/index.html"]Spybot Search & Destroy[/URL].

[URL="http://www.majorgeeks.com/download506.html"]Ad-Aware se personal.[/URL]

[URL="http://www.javacoolsoftware.com/downloads.html"]Spyware Blaster.[/URL]

[URL="http://free.grisoft.com/doc/5390/lng/us/tpl/v5"]AVG Antispyware.[/URL]

[URL="http://www.filehippo.com/download_ccleaner/"]Ccleaner[/URL].

Regards Howard

[color=red][b]This thread is for the use of[/color] kep890 [color=red]only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.[/color][/b]

I'll take a look at what you provided for anti virus protection. I have McAfee currently through my internet provider and that is what let this virus through... And even tried to take credit for removing the virus AFTER I did what you told me to do.

I suggested Norton because I had it once before and it worked pretty good. I'll try the ones you provided.

I also have Webroot spy sweeper that recently updated.

Thanks so much for your help!

What antivirus program do you run on your computer?

[URL="http://free.grisoft.com/doc/1"]AVG free[/URL] is what I run and have done for a numbers of years, with no problems or viruses.

Regards Howard

So you didn't buy the AVG Internet Security? Is that worth it?

Nope, didn`t buy that, so can`t really say if it`s worth it or not.

The secret to having a safe computer, isn`t really what antivirus software you have, but rather how you do your surfing/downloading etc. This thread [URL="http://www.techspot.com/vb/topic31474.html"]HERE[/URL] has some good tips for keeping your computer more secure.

Regards Howard