I have a virus that redirects google/yahoo search results... I've tried running a number of things to get rid of it (CCleaner, Avira, Malwarebytes, etc.)... Some of the stuff I've downloaded won't run (Hijackthis and Superantispyware) and in addition my defrag won't run... What should I do??? Thanks in advance..
Help please
- Thread starter ctastrees
- Start date
- Status
spehling
Posts: 51 +1
it sounds like the Gumblar virus.
I found some information on removal:
How I removed this malware from my PC
1. I installed and scanned my PC with Malwarebytes’ Anti-Malware, which found the single file - in my case it was C:\WINDOWS\ukvvq.qnx - that was keeping the infection active. Manually deleting it, or letting Anti-Malware attempt to delete it, would delete it, but the file would reappear almost immediately. Don’t worry if Anti-Malware is unable to update its definitions online - this is another symptom of Gumblar - it still detects it, though as something else.
2. I ran Hijackthis (I didn’t need a scan), chose “misc tools”, and chose “delete file on reboot” for this file (according to http://www.dynamicdrive.com/forums/showthread.php?p=194695).
3. I ran regedit and deleted the registry entry (according to http://www.dynamicdrive.com/forums/showthread.php?p=194695).
That was it to remove it from my PC, voila! To protect my PC from re-infection, I disabled Adobe JavaScript according to http://www.pcauthority.com.au/forums/yaf_postsm289075_A-nasty-virus-called-Gumblar.aspx.
Unfortunately, it seems that several people resorted to rebuilding their machines from scratch.
I found some information on removal:
How I removed this malware from my PC
1. I installed and scanned my PC with Malwarebytes’ Anti-Malware, which found the single file - in my case it was C:\WINDOWS\ukvvq.qnx - that was keeping the infection active. Manually deleting it, or letting Anti-Malware attempt to delete it, would delete it, but the file would reappear almost immediately. Don’t worry if Anti-Malware is unable to update its definitions online - this is another symptom of Gumblar - it still detects it, though as something else.
2. I ran Hijackthis (I didn’t need a scan), chose “misc tools”, and chose “delete file on reboot” for this file (according to http://www.dynamicdrive.com/forums/showthread.php?p=194695).
3. I ran regedit and deleted the registry entry (according to http://www.dynamicdrive.com/forums/showthread.php?p=194695).
That was it to remove it from my PC, voila! To protect my PC from re-infection, I disabled Adobe JavaScript according to http://www.pcauthority.com.au/forums/yaf_postsm289075_A-nasty-virus-called-Gumblar.aspx.
Unfortunately, it seems that several people resorted to rebuilding their machines from scratch.
- Status
Similar threads
