Tom's Guide | Tom's Hardware | Tom's Games

Computing.Net > Forums > Security and Virus > google redirect virus

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

google redirect virus

Reply to Message Icon

Name: smdmxz
Date: May 25, 2009 at 13:02:27 Pacific
OS: Microsoft Windows 2000 Professional
CPU/Ram: 1.694 GHz / 1023 MB
Product: Dell / Optiplex gx400
Subcategory: Viruses
Comment:

I'm sure you have all heard it before. I got the google redirect virus. I do a search the results come up and I click on the link and low and behold instead of indysuperbikes or something else I get redirected to a search engine or another add. Help me get this off of my computer.. Thank you all



Sponsored Link
Ads by Google

Response Number 1
Name: jdk (by neoark)
Date: May 25, 2009 at 13:04:21 Pacific
Reply:

Did you try to scan with any antivirus? If not scan your PC with kaspersky/bitdefender/eset online scanners and post scan results.

--------------------------------------------
To Private Message me Click Here


0

Response Number 2
Name: jdk (by neoark)
Date: May 25, 2009 at 17:24:43 Pacific
Reply:

Does the "same thing" happen in all the web browser or just one?

--------------------------------------------
To Private Message me Click Here


0

Response Number 3
Name: smdmxz
Date: May 25, 2009 at 17:51:29 Pacific
Reply:

Happens in all browsers. I down loaded firefox and same thing. I used avg 8.5 free showed a trojan horse and a worm. It said repaired/removed and was in the virus vault so I deleted it. Re scanned and no show. Still acts the same. Accidently bought regcure-showed a lot of problems and I selected to fix the problems and still no change. Tried ccleaner and now its like everyother time. If I click the back button sometimes it will then let me go to the site I want. Downloaded kaspersky and went thru all the setup process and I can't get it to do anything. I installed it ran the setup process and rebooted and I still cannot get it to scan at all ??? I'm gonna get out the m-80s next or a big hammer. hope this helps.


0

Response Number 4
Name: jdk (by neoark)
Date: May 25, 2009 at 17:53:54 Pacific
Reply:

Can you please post your AVZ log:
Note: Run AVZ in windows normal mode. If avz.exe doesn't start, then try to rename the file avz.exe to something else and try to run it again. Make sure you have your default web browser open in background.

1) To create the logfile, download AVZ by clicking HERE. Please save this file to your desktop or "My Documents" folder.

2) Next, unpack the file to a new folder using the Compressed (zipped) folders wizard built into Windows XP/Vista, or a zip utility of your choice.

3) Once you have unpacked the contents of the zip archive, please launch the file AVZ.exe by double clicking on it or right clicking and selecting Open.
Note: If you are running Windows vista launch AVZ.exe by right clicking and selecting Run as Administrator

You should now see the main window of the AVZ utility. Please navigate to File->Custom Scripts. Copy the script below by using the keyboard shortcut CTRL+C or the corresponding option via right click.

begin
ExecuteStdScr(3);
RebootWindows(true);
end.

Paste the script into the execution window by using CTRL+V keyboard shortcut, or the "paste" option via the right click menu. Click on Run to run the script, the PC will reboot. After the reboot the LOG subfolder is created in the folder with AVZ, with a file called virusinfo_syscure.zip inside. Upload that file to rapidshare.com and paste the link here.

Image Tutorial

--------------------------------------------
To Private Message me Click Here


0

Response Number 5
Name: smdmxz
Date: May 25, 2009 at 17:58:07 Pacific
Reply:

Will avz work with widows 2000 professional ??? Also as far as unzipping should I use winzip ??


0

Related Posts

See More



Response Number 6
Name: jdk (by neoark)
Date: May 25, 2009 at 18:25:45 Pacific
Reply:

Yes and doesn't matter whatever you have to unzip .zip.

--------------------------------------------
To Private Message me Click Here


0

Response Number 7
Name: smdmxz
Date: May 25, 2009 at 19:00:01 Pacific
Reply:

http://rapidshare.com/files/2372582...
MD5: CCDBEA973CBC4588B7A14D4AB8A75099


0

Response Number 8
Name: jdk (by neoark)
Date: May 25, 2009 at 19:20:27 Pacific
Reply:

Follow these steps in order numbered:

1) Run this script in AVZ like before. Your computer will reboot.

begin
SetAVZGuardStatus(True);
SearchRootkit(true, true);
 QuarantineFile('C:\WINNT\System','');
 QuarantineFile('\\?\globalroot\systemroot\system32\gxvxcccsvalainjyxlagtyyvuhhnyhtpyojgp.dll','');
 DeleteFile('\\?\globalroot\systemroot\system32\gxvxcccsvalainjyxlagtyyvuhhnyhtpyojgp.dll');
 DeleteFile('C:\WINNT\System');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.

2) Attach a Combofix log, please review and follow these instructions carefully.

Download it here -> http://download.bleepingcomputer.co...

Before Saving it to Desktop, please rename it to something like 123.exe to stop malware from disabling it.

Now, please make sure no other programs are running, close all other windows and pause Antivirus/Sypware programs (http://www.bleepingcomputer.com/forums/topic114351.html Programs to disable) until after the scanning and removal process has taken place.

Please double click on the file you downloaded. Follow the onscreen prompts to start the scan. Once the scanning process has started please DO NOT click on the Combofix window or attempt to use your computer as this can cause the scanning process to stall. It may take a while to complete scanning and this is normal.

You will be disconnected from the internet and your desktop icons/toolbars will disappear during scanning, do not worry, this is normal and it will be restored after scanning has completed.

Combofix will create a logfile and display it after your computer has rebooted. Usually located in c:\combofix.txt, please upload that file to rapidshare.com and paste the link here.

--------------------------------------------
To Private Message me Click Here


0

Response Number 9
Name: jdk (by neoark)
Date: May 25, 2009 at 20:31:46 Pacific
Reply:

Is your original problem fixed? If its fixed there are few more steps to follow please finish them. Follow These steps next as numbered:

1) Run this script in AVZ:


begin
CreateQurantineArchive('c:\quarantine.zip');
end.

2) A file called quarantine.zip should be created in C:\. Then please zip up C:\qoobox\quarantine and upload both it and C:\quarantine.zip to a filehost such as http://rapidshare.com/ Then, Private Message me the Download link to the uploaded file.

3) Lastly, uninstall Combofix by: pause Antivirus/Sypware programs (http://www.bleepingcomputer.com/forums/topic114351.html Programs to disable) > Start > run > type combofix /u > ok. Or Start > run > type 123 /u > ok.

--------------------------------------------
To Private Message me Click Here


0

Response Number 10
Name: smdmxz
Date: May 25, 2009 at 20:42:48 Pacific
Reply:

Seems to have fixed problem... You Rock. Did the avz and it said ran successful or something of that nature. Working on the zip thing.


0

Response Number 11
Name: smdmxz
Date: May 25, 2009 at 20:45:19 Pacific
Reply:

winzip says filename of archive not complete. be sure to specify a valid file name. ???? Help


0

Response Number 12
Name: jdk (by neoark)
Date: May 25, 2009 at 20:49:43 Pacific
Reply:

After you finish Response Number 9 follow these steps as numbered and post summary log after each step.

1) If you use Windows System restore, turn it off > reboot. How to turn it off/on: http://support.kaspersky.com/faq/?q... Run a full scan with:

Download and run Kaspersky AVP tool:

http://devbuilds.kaspersky-labs.com...

Once you download and start the tool select all the objects/places to be scanned and hit Scan. Fix what it detects and at the end of the scan post screen shot/log of detected items that is fixed and which it could not fix.

2) Run a full scan with http://www.eset.eu/online-scanner

# Check the box next to YES, I accept the Terms of Use.
# Click Start
# When asked, allow the activex control to be installed.
# Click Start
# Check below options:

    * Remove found threats
    * Scan unwanted applications.

# Click Scan
# Wait for the scan to finish
# When it finishes it will create a log file here: C:\Program Files\EsetOnlineScanner\log.txt
# Attach this logfile to your next message.

Note: Turn system restore back on, if you wish; this to remove malware from system volume information files.

3) Install, update and run full scan with Malwarebytes' Anti-Malware. Attach malwarebyte full scan log, but Please Don't fix anything yet, until the log is reviewed.

4) House cleaning [Optional]. Scan with SuperAntispyware : http://www.superantispyware.com/dow... . Fix what it detects and post summary scan log.

--------------------------------------------
To Private Message me Click Here


0

Response Number 13
Name: smdmxz
Date: May 25, 2009 at 23:34:24 Pacific
Reply:

http://rapidshare.com/files/2373113...
MD5: 2D237C4126518D14B2E4CFFF605F5B27

Kaspersky- No Threats
Superanti spyware no threats


0

Sponsored Link
Ads by Google
Reply to Message Icon

AVG says no active compon... laptop will not reboot us...



Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links
Ads by Google


Results for: google redirect virus
Google Redirect Virus www.computing.net/answers/security/google-redirect-virus/23426.html

Google Redirect Virus--help! www.computing.net/answers/security/google-redirect-virushelp/23496.html

Google Redirect Virus www.computing.net/answers/security/google-redirect-virus/23500.html