November 3rd, 2009, 01:07 PM
#1
Google Redirect
Hello,http://www.yahoo.com/ http://go.microsoft.com/fwlink/?LinkId=69157 http://go.microsoft.com/fwlink/?LinkId=54896 http://us.rd.yahoo.com/customize/ie/...ch/search.html http://go.microsoft.com/fwlink/?LinkId=54896 http://go.microsoft.com/fwlink/?LinkId=69157 http://us.rd.yahoo.com/customize/ie/.../www.yahoo.com http://www.hp.com/ https://mygmgw.gm.com/http://usabhem...m/iNotes6W.cab http://lads.myspace.com/upload/MySpaceUploader1006.cab http://cdn.scan.onecare.live.com/res...scbase5036.cab http://www.update.microsoft.com/wind...?1253794816171 http://vsp.closetmaid.com/vsp/cmaidc...downloader.cab
November 3rd, 2009, 02:43 PM
#2
Post the gmer log.http://www.gmer.net/files.php Warning ! Please, do not select the "Show all" checkbox during the scan.
November 3rd, 2009, 05:04 PM
#3
Post the MBA-M log too please. Which browser is getting re-directed?
November 3rd, 2009, 05:51 PM
#4
Gmer log page 1
GMER 1.0.15.15087 - http://www.gmer.net
November 3rd, 2009, 05:52 PM
#5
gmer log page 2
The gmer log is really big, page 2
November 3rd, 2009, 05:54 PM
#6
Crunchie, I get redirected with google and yahoo, here is the mbam log:
November 3rd, 2009, 09:26 PM
#7
Originally Posted by
jmm4600
Crunchie, I get redirected with google and yahoo,
Yes, it says that in your thread title browser is being re-directed.
November 4th, 2009, 09:03 AM
#8
Err.. sorry Crunchie, I am running Internet Explorer 8.
November 4th, 2009, 04:35 PM
#9
Download the HostsXpert. download ComboFix by sUBs from HERE HERE You must download it to and run it from your Desktop Physically disconnect from the internet. Now STOP all your monitoring programs (Antivirus/Antispyware, Guards and Shields) as they could easily interfere with ComboFix. Double click combofix.exe & follow the prompts. When finished, it will produce a log. Please save that log to post in your next reply along with a fresh HJT log Re-enable all the programs that were disabled during the running of ComboFix.. Note: Do not mouse-click combofix's window while it is running. That may cause it to stall. CF disconnects your machine from the internet. The connection is automatically restored before CF completes its run. If CF runs into difficulty and terminates prematurely , the connection can be manually restored by restarting your machine. Run Combofix ONCE only!!
November 6th, 2009, 10:13 AM
#10
Crunchie,http://www.yahoo.com/ http://go.microsoft.com/fwlink/?LinkId=69157 http://go.microsoft.com/fwlink/?LinkId=54896 http://us.rd.yahoo.com/customize/ie/...ch/search.html http://go.microsoft.com/fwlink/?LinkId=54896 http://go.microsoft.com/fwlink/?LinkId=69157 http://us.rd.yahoo.com/customize/ie/.../www.yahoo.com http://www.hp.com/ https://mygmgw.gm.com/http://usabhem...m/iNotes6W.cab http://lads.myspace.com/upload/MySpaceUploader1006.cab http://cdn.scan.onecare.live.com/res...scbase5036.cab http://www.update.microsoft.com/wind...?1253794816171 http://vsp.closetmaid.com/vsp/cmaidc...downloader.cab
November 6th, 2009, 04:47 PM
#11
Please download FileFind from Atribune:http://www.atribune.org/downloads/FileFind.zip Click on FileFind.exe In the box labeled "Enter the directory to search" Enter Drive eg.. C:\ In the box labeled "Enter the file to search" Enter the file tdlwsp.dll Now click on the "Find" button Once the utility has found the files click on "Export" This will save a text file to your C:\ drive as "Export.txt" Double click on Export.txt, copy and paste this information in your next post.
November 7th, 2009, 09:15 AM
#12
Crunchie,
November 7th, 2009, 10:13 AM
#13
Download DDS from the following location:DDS Tool dds.scr to the desktopDDS.scr icon to start the program. If you did not disable a script-blocker that may be part of your antimalware program, you may receive a warning from your antimalware product asking if you would like DDS.scr to run. Please allow it to do so. DDS . If no warning appeared, then you should just continue. DDS will now display a small black window providing information as to what DDS is doing on your computer.DDS will now start scanning your computer and compiling a variety of information about what programs are starting on your computer, what files have been recently created, and the general configuration of your computer. When DDS has finished scanning, all of this information will be compiled and be displayed in two Notepad windows named dds.txt and attach.txt .DDS.txt window and click on the File menu and then select Save As ... menu option.DDS.txt to the desktop. Now click on the Attach.txt Notepad window and save that to the desktop also.DDS.txt log and paste it into your reply here.attach.txt log with your reply using Reply to Thread button, then the Manage Attachments button.
November 8th, 2009, 09:05 AM
#14
Thanks for all of your help Crunchie, here is the DDS.txt;http://www.yahoo.com/ext/search/search.html http://www.yahoo.com
November 8th, 2009, 04:38 PM
#15
Download Avenger by Swandog and unzip it to your Desktop.Note: This program must be run from an account with Administrator privileges. Open the Avenger folder and double click Avenger.exe Copy the text in the code box below and Paste it into the Input script here: box.
Code:
Files to delete:
c:\windows\PEV.exe
Note: the above code was created specifically for this user. If you are not this user, do NOT follow these directions as they could damage the workings of your system. Ensure the following:Scan for Rootkits is checked.Automatically disable any rootkits found is Unchecked Press the Execute key. Avenger will now process the script you've pasted (this may involve more than one re-boot), when finished it will produce a log file. Post the log back here please. C:\avenger.txt )
Thread Information
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
Forum Rules
Reply With Quote
Originally Posted by jmm4600
. I asked which browser is being re-directed.
