Active internet search redirect?

again I messed up. I tried to save the report to the desktop, but failed somehow?! I had two names and 4 infected. I will have to run the entire test again and try to post after work tomorrow.

 

Any chance you remember at least what folder the detections were in? The scan will allow you to scan selected folders rather than the whole computer.

 

Sorry... I think I have acute goldfish syndrome... No, I dont remember, there was more than one, though. I am doomed to rescan....

 

Do Qoobox and System Volume Information ring any bells?

 

yep. Actually they do! Both were on there.

 

I have to go to bed, but I will check back after work tomorrow. Thanks again!!

 

One is ComboFix's quarantine folder, the other system restore. Provided there were no other locations, we can just proceed with cleanup. If you're just not sure, a rescan might be a good idea.

 

i am pretty confident that was the two locations listed. I am ready to begin the cleanup when u r ready.

 

If you're satisfied things are working normally again, lets cleanup now.

Open MBAM and remove any items quarantined. Do the same with your resident antivirus.

Click Start>Run and type ComboFix /u then hit Enter to uninstall ComboFix and remove the files it has quarantined. This action will also reset the System Restore points, removing any infected files there as well.
Verify the C:\Qoobox and C:\ComboFix folders were removed, as well as the C:\ComboFix.txt file.

Delete RSIT.exe and the C:\rsit folder.
You can delete any other logs that were created/saved too.
Empty the recycle bin when done.

That should do it. Geri has posted some very helpful information and recommendations regarding future protection in the following link.

http://www.windowsbbs.com/showthread.php?t=67958

Surf safe!