While using my laptop a couple of days ago, I noticed that my google search results page, were redirecting me to different sites, after FireFox was abruptly restarted while performing a search (I can sometimes reach the intended site by clicking the back button). This started happening in all my user accounts. First FireFox restarts and then all searches are redirected. I downloaded Ad-Aware and didn't find anything but a few tracking cookies that got deleted. I also run the Avast antivirus (which is been running for a couple of years) and I notice 2 thing; the Avast icon in the task bar is gone and I can't longer update Avast.(Ad-Aware can't be updated either) Never the least I runned avast at boot and while in the administrator account and it didn't find any viruses. I Downloaded 7770finder. Which found a problem and I delete it. After that I was able to use google without being redirected for a few minutes, but then FireFox abruptly restarted again and the symptoms started right back. I also downloades and run: Malwarebytes, SuperantySpyware (found: gec_logging[1].htm and gpl_lp[1].js - were removed) and unistalled and re-intalled Avast. I tried ComboFix but I can't make it run. It does not even let me acces the download site:bleepingcomputer.com (I had to download the program to a usb drive to put it in the laptop) In Advance thanks for your Time! Zucye edited by moderator: remove HJT log

Do a clean install from OEM disks. Update and use best practices. "Best Practices", Event viewer, host file, perfmon, antivirus, anti-spyware, Live CD's, backups, are in my top 10

A clean install is but the last option! And I do use "good practices" I have Avast and Ad-Aware up to date and running all the time. Is not nice to assume people doesn't!

I think maybe you got that response because its against the rules to post a HJT log without a request. Some HELP in posting on Computing.net plus free progs and instructions Cheers

DO NOT DO A CLEAN INSTALL as it was absurdly suggested by “jefro” Read my next response, download 7770FINDER.exe and then look for help in another forum!

I think the problem is partially solved. But I still might be infected, I don't expect help from this forum, but I wanted to update the topic for the benefit of those facing the same issues. I uninstalled all my virus and spyware removal tools and ran once again "7770finder" with following parameters "7770FINDER.exe /r /p c:\" for a full drive scan. As before it found "csfici.lgy" in the windows file. Which I had previously deleted. I renamed it to “csficiZucye.lgy” and Even though another one re-appeared shortly after (as it did before), the new “csfici.lgy” is only 1 kb. And the redirection has stopped. Also, after uninstalling all virus and spyare tools. I was able to run "ComboFix", but I am kind of scare to use it without guidance. So far I have only re-installed AVAST (the anti virus). I don't know if my computer is clean now, but at least the redirection is gone. As for the icon for Avast not appearing in the task bar and not updating, I think it was a conflict between Avast and Ad-Aware. ***7770finder can be downloaded here: http://www.techish.net/2009/01/10/g...

As for the icon for Avast not appearing in the task bar and not updating, I think it was a conflict between Avast and Ad-Aware. ***7770finder can be downloaded here: http://www.techish.net/2009/01/10/g...