Tom's Guide | Tom's Hardware | Tom's Games

Computing.Net > Forums > Security and Virus > google redirect to central-search

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Click here to start participating now! Also, check out the New User Guide.

google redirect to central-search

Reply to Message Icon

Name: Murry
Date: May 20, 2009 at 07:55:41 Pacific
OS: Windows XP
CPU/Ram: 2 gig
Product: N/a / CUSTOM BUILD
Subcategory: Spyware
Comment:

This redirect thing is killing me, i'm using
crome to avoid the issue. Any help to remove
this would be appreciated.



Sponsored Link
Ads by Google

Response Number 1
Name: jdk (by neoark)
Date: May 20, 2009 at 11:28:33 Pacific
Reply:

Hi,
Download and run Kaspersky AVP tool:

http://devbuilds.kaspersky-labs.com...

Once you download and start the tool select all the objects/places to be scanned and hit Scan. Fix what it detects and at the end of the scan post screen shot/log of detected items that is fixed and which it could not fix. Once you post the scan log we will proceed to next step from there.

--------------------------------------------
To Private Message me Click Here


0

Response Number 2
Name: Murry
Date: May 20, 2009 at 12:44:08 Pacific
Reply:

Thanks for the reply.

I have KIS and ran the full scan along with Ad-aware full scan
neither found nor fixed the issue.

Not clear on how to provide a screen shot as I know of no logs
within KIS (only the report gui)



0

Response Number 3
Name: jdk (by neoark)
Date: May 20, 2009 at 14:11:17 Pacific
Reply:

Can you please post your AVZ log:

1) To create the logfile, download AVZ by clicking HERE. Please save this file to your desktop or "My Documents" folder.

2) Next, unpack the file to a new folder using the Compressed (zipped) folders wizard built into Windows XP/Vista, or a zip utility of your choice.

3) Once you have unpacked the contents of the zip archive, please launch the file AVZ.exe by double clicking on it or right clicking and selecting Open.
Note: If you are running Windows vista launch AVZ.exe by right clicking and selecting Run as Administrator

You should now see the main window of the AVZ utility. Please navigate to File->Custom Scripts. Copy the script below by using the keyboard shortcut CTRL+C or the corresponding option via right click.

begin
ExecuteStdScr(3);
RebootWindows(true);
end.

Paste the script into the execution window by using CTRL+V keyboard shortcut, or the "paste" option via the right click menu. Click on Run to run the script, the PC will reboot. After the reboot the LOG subfolder is created in the folder with AVZ, with a file called virusinfo_syscure.zip inside. Upload that file to rapidshare.com and paste the link here.

Image Tutorial

--------------------------------------------
To Private Message me Click Here


0

Response Number 4
Name: chevigny
Date: May 21, 2009 at 05:53:35 Pacific
Reply:

I have the same issue. Also I cannot restore system, nor create new system restore points. A lot of helpful URL's do not load anymore (eg. Kaspersky downloads don't work). Programs like spybot do not run. This does not look good.


0

Response Number 5
Name: jdk (by neoark)
Date: May 21, 2009 at 07:15:06 Pacific
Reply:

chevigny Please start your own post with the problem.

--------------------------------------------
To Private Message me Click Here


0

Related Posts

See More



Response Number 6
Name: chevigny
Date: May 22, 2009 at 04:09:35 Pacific
Reply:

Problem solved, AVG Internet Security found a couple of troians and other stuff.


0

Response Number 7
Name: Murry
Date: May 27, 2009 at 12:11:25 Pacific
Reply:

http://rapidshare.com/files/2379041...
ml


0

Response Number 8
Name: jdk (by neoark)
Date: May 27, 2009 at 12:28:43 Pacific
Reply:

Follow these steps in order numbered:

1) Run this script in AVZ like before. Your computer will reboot.

begin
SetAVZGuardStatus(True);
SearchRootkit(true, true);
 QuarantineFile('c:\documents and settings\murry kane\application data\microsoft\windows\lsass.exe','');
 QuarantineFile('C:\WINDOWS\system32\__c00ED48A.dat','');
 DeleteFile('C:\WINDOWS\system32\__c00ED48A.dat');
 DeleteFile('c:\documents and settings\murry kane\application data\microsoft\windows\lsass.exe');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.

2) After reboot. Attach a Combofix log, please review and follow these instructions carefully.

Download it here -> http://download.bleepingcomputer.co...

Before Saving it to Desktop, please rename it to something like 123.exe to stop malware from disabling it.

Now, please make sure no other programs are running, close all other windows and pause Antivirus/Sypware programs (http://www.bleepingcomputer.com/forums/topic114351.html Programs to disable) until after the scanning and removal process has taken place.

Please double click on the file you downloaded. Follow the onscreen prompts to start the scan. Once the scanning process has started please DO NOT click on the Combofix window or attempt to use your computer as this can cause the scanning process to stall. It may take a while to complete scanning and this is normal.

You will be disconnected from the internet and your desktop icons/toolbars will disappear during scanning, do not worry, this is normal and it will be restored after scanning has completed.

Combofix will create a logfile and display it after your computer has rebooted. Usually located in c:\combofix.txt, please upload that file to rapidshare.com and paste the link here.

--------------------------------------------
To Private Message me Click Here


0

Response Number 9
Name: Murry
Date: May 27, 2009 at 15:46:17 Pacific
Reply:

http://rapidshare.com/files/2379670...


0

Response Number 10
Name: jdk (by neoark)
Date: May 27, 2009 at 15:55:38 Pacific
Reply:

Follow these steps next in order numbered:

1) Run this script in AVZ:


begin
CreateQurantineArchive('c:\quarantine.zip');
end.

2) A file called quarantine.zip should be created in C:\. Then please zip up C:\qoobox\quarantine and upload both it and C:\quarantine.zip to a filehost such as http://rapidshare.com/ Then, Private Message me the Download link to the uploaded file.

3) Lastly, uninstall Combofix by: pause Antivirus/Sypware programs (http://www.bleepingcomputer.com/forums/topic114351.html Programs to disable) > Start > run > type combofix /u > ok. Or Start > run > type 123 /u > ok.

PS: Are you still getting redirected?

--------------------------------------------
To Private Message me Click Here


0

Response Number 11
Name: jdk (by neoark)
Date: May 27, 2009 at 16:16:43 Pacific
Reply:

Are you still getting redirected?

--------------------------------------------
To Private Message me Click Here


0

Response Number 12
Name: Murry
Date: May 27, 2009 at 16:54:50 Pacific
Reply:

Looks to be fixed! Thanks for you quick help!


0

Response Number 13
Name: jdk (by neoark)
Date: May 27, 2009 at 17:00:27 Pacific
Reply:

Run malwarebytes/Superantispyware, fix what it detects and post scan log. After that run full AV scan with your antivirus.

--------------------------------------------
To Private Message me Click Here


0

Sponsored Link
Ads by Google
Reply to Message Icon

Virtumonde & Win32 TDSS cannot stay online



Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links
Ads by Google


Results for: google redirect to central-search
Google Redirect to Central-Search www.computing.net/answers/security/google-redirect-to-centralsearch/27895.html

how to fix google redirects to mywebsearch www.computing.net/answers/security/how-to-fix-google-redirects-to-mywebsearch/26298.html

Google Redirected to Moniker www.computing.net/answers/security/google-redirected-to-moniker/15984.html