#1
Senior Member
Profile: Join Date: Oct 2008
Posts: 54
Computer Experience:
[InActive] Google redirect, Desktop frozen, Lots of AdWare
Im getting the same google redirect virus, It is also affecting Windows Live search. Virus also uninstalled IE7Pro. I do not know what logs to post, I know I have seen lots of people posting logs in their first post, but I am not sure what programs to use. Thanks in advance for the help.
Didn't find the information you thought to find?Similar Threads
#2
Geek Member
Profile: Join Date: Sep 2005
Location: Philadelphia
Posts: 542
Computer Experience:
#3
Senior Member
Profile: Join Date: Oct 2008
Posts: 54
Computer Experience:
Yes, read that, the virus blocks the DL link for RSIT
#4
Geek Member
Profile: Join Date: Sep 2005
Location: Philadelphia
Posts: 542
Computer Experience:
The malware experts can take over.
#5
Staff
Profile: Join Date: Mar 2003
Location: Washington State
Posts: 4,541
Computer Experience:
Hi smithno13here and select Open (or Run ) to run a tool that will check your computer for a specific rootkit infection.
#6
Senior Member
Profile: Join Date: Oct 2008
Posts: 54
Computer Experience:
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_tdssservTDSS infection active!
#7
Staff
Profile: Join Date: Mar 2003
Location: Washington State
Posts: 4,541
Computer Experience:
Hi
#8
Senior Member
Profile: Join Date: Oct 2008
Posts: 54
Computer Experience:
Yes I do. What do I need to Download?
#9
Staff
Profile: Join Date: Mar 2003
Location: Washington State
Posts: 4,541
Computer Experience:
HiHere disable realtime protection applications as they sometimes interfere with the tool. this link for any applicable programs you may have.Close all open programs and windows Double click combofix.exe and follow the prompts.
Vista users When finished, it shall produce a log for you. Post the Combofix log
Note: Do not mouseclick combofix's window while its running. That may cause it to stall Note - ComboFix may reset a number of Internet Explorer's settings, including making it the default browser.Note - Combofix makes some changes when run to prevent autorun/autoplay of ALL CDs, floppies and USB devices, to assist with malware removal & increase security. If this is an issue or makes it difficult for you to use those devices, please ask how to reset it.
#10
Senior Member
Profile: Join Date: Oct 2008
Posts: 54
Computer Experience:
ComboFix 08-10-24.02 - Compaq_Owner 2008-10-25 22:45:39.1 - NTFSx86http://www.gmer.net Also, It seems to have fixed EVERYTHING. Thank You. If anything comes up, I will let you know.
#11
Staff
Profile: Join Date: Mar 2003
Location: Washington State
Posts: 4,541
Computer Experience:
HiPlease go to Jotti's malware scan
Copy and paste the following file path into *the *"File to upload & scan" box on the top of the page: one at a timeC:\DOCUME~1\ALLUSE~1\APPLIC~1\upqrsbut.dll
Click on the submit button
Please post the results in your next reply.
contents of the code box below and paste it into a blank Notepad , then save it to your desktop as;CFScript.txt All Files (*.*) Close all other windows and programs . Now drag the CFScript.txt onto ComboFix.exe and drop it, using the left mouse button.Click here to see how to use CFScript.txtPlease do not click on the ComboFix window while it is running a scan. This can cause it to stall.
Code:
File::
C:\WINDOWS\Sysvxd.exe
C:\WINDOWS\system32\TDSSdxgp.dll
Registry::
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"="" Please post the Jotti Results, and the Combofix log.
#12
Senior Member
Profile: Join Date: Oct 2008
Posts: 54
Computer Experience:
A-Squared Found Trojan.Win32.Obfuscated!IK
All times are GMT +1. The time now is 13:10 .
