Google Redirecting

By Metesh · 7 replies
Dec 29, 2008
  1. Hi There,

    I am having a problem with Google redirecting to odd websites when I use Mozilla Firefox v3 and IE7. I can usually see loading before I am redirected. Recently, I also have annoying tray icon which tells me "You have a security problem" before asking me to install fake anti-spyware tools.

    I have AVG installed (although I can't get the scan to run as the 'scan' button is unresponsive), CCleaner, SUPERAntiSpyware, Malwarebytes' Anti-Malware, HijackThis. Java has been updated to latest version (update 6, version 11).

    Here are the relevant logs...

    I would be grateful for you help...thanks in advance.
  2. Metesh

    Metesh TS Rookie Topic Starter

    I am also having difficulty accessing 'My Computer' and other folders. When I click on them, the taskbar along the bottom of the screen disappears for a second, then returns, and two Command Prompt screens appear very briefly but then disappear. I cannot get into any files or folders after this...any idea what's going on?

    The problem seems to resolve on rebooting.
  3. rf6647

    rf6647 TS Maniac Posts: 829

    It appears that MBAM was not used to remove the infections found. Repeat all scans. Respond to actions required by MBAM.
    Memory Modules Infected:
    C:\Program Files\Mozilla Firefox\components\iamfamous.dll (Spyware.Passwords) -> No action taken.

    • More progress is needed if your logs show found but unanswered items
    • React to unanswered items appearing in scan logs
      • NO Action’ - Remove Selected when offered by MBAM
      • 'Delete on Reboot’ - Restart the computer after concluding the scan
  4. Metesh

    Metesh TS Rookie Topic Starter

    The problem seems to have resolved after a few scans I did earlier. No more redirecting! I'll post the new MBAM scan after it's finished. Thanks.
  5. Darthvader101

    Darthvader101 TS Rookie

    Why don't you try spybot search and destroy? I was havign the same problem.
  6. Metesh

    Metesh TS Rookie Topic Starter

    Here is my latest MBAM, HJT and SAS log. Thanks for the help.
  7. rf6647

    rf6647 TS Maniac Posts: 829

    Thanks for the logs. It appears that you have handled the crisis well. HJT reveals a few minor points to consider.

    O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (file missing) >> truly a file is expected.

    Does TeaTime nag about this every restart?
    O4 - HKCU\..\RunOnce: [SpybotDeletingB2151] command /c del "c:\resycled\"
    O4 - HKCU\..\RunOnce: [SpybotDeletingD2499] cmd /c del "c:\resycled\"

    Remove ComboFix history & Qoobox

    Establish a new clean restore point and Clear your existing System Restore points:
    • New
      • Go to Start > All Programs > Accessories > System Tools > System Restore>
      • Select Create a restore point> OK.
    • Clear Old
      • go to Start > Run > cleanmgr > Select the More options tab >
      • Choose the option to clean up System Restore > OK

        • This will remove all restore points except the new one you just created.
  8. Metesh

    Metesh TS Rookie Topic Starter

    Thanks rf6647 and others for all your help. I have done as you requested and the problem is now fully resolved. Many thanks.
Topic Status:
Not open for further replies.

Similar Topics

Add your comment to this article

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...