Redirect virus while browsing

Sony / Vpcf119fx
January 21, 2011 at 14:51:42
Specs: Windows 7, i7 4 GB ram
Not sure what it is. I have kaspersky running, everything ok. TDSSkiller showed nothing. Spybot search & destroy showed nothing.

It redirects to random advertisements, and weird search engines, on both chrome and firefox.

See More: Redirect virus while browsing

January 22, 2011 at 06:51:47
Install Malwarebytes, update it and run a full scan. If that doesn't do it, reboot to safe mode with networking and run another full scan removing all that is found.

Is it doing the same on IE?

Some HELP in posting on plus free progs and instructions Cheers

Report •

January 22, 2011 at 16:39:23
First off, thank you for your help.

Ran malwarebites, detected the following below.
Will fix, and rerun scan to see what happens.

I think IE also (dont use it much)

Here are the results:
Malwarebytes' Anti-Malware

Database version: 5572

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

1/22/2011 4:38:21 PM
mbam-log-2011-01-22 (16-38-14).txt

Scan type: Full scan (C:\|)
Objects scanned: 454799
Time elapsed: 3 hour(s), 21 minute(s), 25 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 1
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 3
Files Infected: 2

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CURRENT_USER\SOFTWARE\MalwareRemovalBot (Rogue.MalwareRemovalBot) -> No action taken.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
c:\Users\William\AppData\Roaming\malwareremovalbot (Rogue.MalwareRemovalBot) -> No action taken.
c:\Users\William\AppData\Roaming\malwareremovalbot\Log (Rogue.MalwareRemovalBot) -> No action taken.
c:\Users\William\AppData\Roaming\malwareremovalbot\Settings (Rogue.MalwareRemovalBot) -> No action taken.

Files Infected:
c:\program files (x86)\hidden administrator\ha_server\ha_server.dll (Malware.Packer.Gen) -> No action taken.
c:\Users\William\AppData\Roaming\malwareremovalbot\Log\2010 aug 20 - 06_35_57 pm_292.log (Rogue.MalwareRemovalBot) -> No action taken.

Report •

January 23, 2011 at 18:17:08
No issues so far, it seems to have solved that problem. I can't believe my research did not uncover malwarebytes as a possible solution. Thank you!!

Report •

Related Solutions

January 23, 2011 at 19:52:49
Thanks for posting back, it will help someone with the same problem ;-)

Some HELP in posting on plus free progs and instructions Cheers

Report •

January 24, 2011 at 04:15:37
The google redirect virus is one of the most frustrating things to have to deal with.I fought with this thing for almost a week. It was driving me crazy. Finally found an easy solution. Hitman Pro 3.5 will get rid of it, along with any other malware on your PC. and it is very easy to use.

Help Desk Software

Report •

Ask Question