Pages redirecting, svchost & tracking cookies

Acer / ASPIRE 4720Z
December 25, 2009 at 17:03:39
Specs: Windows Vista home
Ok so im computer literate and can handle the minor stuff but im having some major problems with my laptop. i have some kind of nasty virus that is redirecting all search engine links to ads, downloading tracking cookies, and constantly attempting to download trojans (trojan.zbot is a common one) and other viruses that thankfully norton 2010 is managing to block most of, saying that svchost.exe is the culprit, yet i know this is an essential file. somehow though the tricky b---tard behind all this is eluding every mcafee and norton scan, whether in safe mode or not. please, i could really use some help here. much abliged.

See More: Pages redirecting, svchost & tracking cookies

Report •

December 26, 2009 at 13:15:57
First if you have two antivius programs (Nortons and McAfee) you need to uninstall one of them. They will conflict and cause many problems although redirects is not one of them. If you choose to uninstall Nortons be sure to use their removal tool for your particular version of Nortons or you may lose you internet connectivity.

Please run RSIT.exe by random/random and post its logs.

Download random's system information tool (RSIT) by random/random from the following link and save it to your desktop.


1. Double click on RSIT.exe to launch program.
2.(Vista Users Only) Right click on the RSIT.exe icon and select "Run as Administrator" to run the program.
3. Click Continue at the disclaimer screen.
4. Your firewall may alert you that RSIT is requesting Internet access. Please allow it.
5.Once it has finished, two logs will open: log.txt<-- this will be maximized and info.txt<-- this will be minimized. Both logs will be located at C:\RSIT.exe.

Download RootRepeal from one of the links on the rootrepeal download page. It can be downloaded as a .rar or .zip file which ever you like. If you get a bandwidth problem notice just try another link.


Extract the RootRepeal.exe file from the RAR or ZIP and save the EXE file to your Desktop.
Disable your antivirus, antispyware, and firewalls before continuing or they may block RootRepeal from running properly.
Now run the RootRepeal.exe program by double clicking on it.
On the botton click the Files tab and then click the Scan button
A Select Drives form will open. Select all of your drives by checking the boxes and then click ok.
It will start scanning. It may take a while to finish depending on how many drives, files and folder you have so be patient and wait on it.
When it finishes click “save report” and save at a easy place to locate such as your desktop. Save it as Rrlog.txt.
Place post the log that was produced to the forum.

Report •

January 22, 2010 at 13:56:28
ok everytime i download and try to run rsit.exe it tells me its not a valid win32 applicaton, no matter what source i get it from. and now the computer can barely use the web because its so slow and is always saying internet explorer has stopped working and must restart. not to mention it says the windows defender interface(i believe) has stopped working plus the computer is constantly saying it must shut down due to one reason or another. windows said i had the gaobot worm but the removal tool for norton said it wasnt on the computer. please please help im slowly losing my computer. i would just format and reinstall windows but i lost the disk.

Report •
Related Solutions

Ask Question