Let's see if this one nails 'whatever' is causing the redirections...
If you have ComboFix (CF) already on your Desktop, please remove it! We'll download an updated version.
ComboFix can run on the following versions: Windows 7 (32-bit and 64-bit), so please download:
Save ComboFix.exe to your Desktop!!
Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with the running of CF.
Note: If you are having difficulty properly disabling your protective programs, or are unsure as to what programs need to be disabled, please refer to the information available through these links:
Windows 7 - Right-click on ComboFix.exe and select: Run as Administrator
Follow the prompts.
Click on ‘Yes‘, to continue scanning for malware.
When finished, CF produces a report.
Since this report can be quite large, please go to the ‘Uploading’ website:
In: Select files to upload, click 'Browse', and 'Look in' the Desktop.
Select the ComboFix report, and click on 'Open'
You will see the following:
“Your file has been uploaded successfully: (Name and size of the file)”
Please copy the 'Download link', and provide it in your reply.
1.Do not mouse-click the ComboFix window while it is running.
This action may cause it to stall.
2. ComboFix may reset a number of Internet Explorer's settings, including making IE the default browser.
3. CF disconnects your machine from the internet. However, the connection is automatically restored before CF completes its run. If CF runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your machine.
Retired - Doin' Dis, Dat, and slapping malware.
Malware Eliminator/ Member of UNITE and the
Alliance of Security Analysis Professionals