BleepingComputer.com: Google Redirect Solution

It appears my TCP/IP properties were changed from "Obtain DNS automatically" I found solution on the following blog.

http://deletemalware.blogspot.com/2010/02/remove-google-redirect-virus.html

Hope this helps.

SJ

This post has been edited by Orange Blossom: 14 November 2010 - 08:26 PM
Reason for edit: Moved to AV forum. ~ OB

Hello Sirjack.

Some of those Removal Instructions are safe and can be found in various guides here at Bleeping Computer.

For example, that same information for checking LAN/proxy settings can be found in steps 3-7 under the section Automated Removal Instructions... in this guide.

Instructions for using TDSSKiller can be found in How to remove Google Redirects or the TDSS, TDL3, Alureon rootkit using TDSSKiller.

However, that blog recommends using ComboFix in step 6. No one should be using ComboFix unless specifically instructed to do so by a Malware Removal Expert who can interpret the logs. It is a powerful tool intended by its creator to be "used under the guidance and supervision of an expert. Using this tool incorrectly could lead to disastrous problems with your operating system such as preventing it from ever starting again. When issues arise with new malware infections or other security tools conflicting with ComboFix, experts are aware of them and can advise users what should or should not be done while providing assistance. Those attempting to use ComboFix on their own do not have such information and are at risk when running the tool in an unsupervised environment. Please read the pinned topic ComboFix usage, Questions, Help? - Look here.

Also in step 3c, the HOSTS file may not look like the sample they provided as many folks use custom HOSTS files for more protection.