BleepingComputer.com: Google Redirect Virus - Round 2

Quote

.
Is someone else helping you,as I never asked about firefox?

No. No one else is. What does the desktop or explorer.exe have to do with redirects?

This post has been edited by Shandley: 13 January 2011 - 06:03 PM

I was wondering if yo can see anything with a white screen.

Oh! I get it now. I'm sorry. What I meant was a white screen in Firefox. like right before a web page loads, it sits at a white screen before displaying the web page... only I just get the white page while gostats.com tries to load (but never does).

This post has been edited by Shandley: 14 January 2011 - 11:42 AM

I see Gringo replied to your other topic. Let's try removing gostats from the hosts file.
Download hosts.zip and extract (unzip) to its own folder C:\hosts
(Click here for information on how to do this if not sure.)
You can read more about what we are doing here.

Open up the hosts folder and double-click on the mvps.bat file.
The script will rename your present HOSTS file to HOSTS.MVP and copy the new HOSTS file to the correct location on your system. Here are the MVPS HOSTS File Install Instructions with graphics if you need them..

I'm afraid I still get redirects; however, I did not see the gostats.com in the lower left of firefox.

This post has been edited by Shandley: 17 January 2011 - 01:02 PM

Sometimes I am told to do it and sometimes I am told not to do it..... bump?

Have I been forgotten?

No you are working a malware topic here, that you left... Would you like it reopened.

http://www.bleepingcomputer.com/forums/topic372542.html/page__st__15

No. That topic is dealt with and closed. I have a different computer needing help.

This post has been edited by Shandley: 30 January 2011 - 07:20 PM

Ok, lets check if it;s the router. Since nothing else is showing anything. If this doesn't do it we'll need to go to the Malware forum with this one too.

Next you must reset the router to its default configuration. This can be done by inserting something tiny like a paper clip end or pencil tip into a small hole labeled "reset" located on the back of the router. Press and hold down the small button inside until the lights on the front of the router blink off and then on again (usually about 10 seconds). If you don?t know the router's default password, you can look it up HERE.
Note: After resetting your router, it is important to set a non-default password, and if possible, username, on the router. This will assist in eliminating the possibility of the router being hijacked again.

I have just finished the router reset but I still get redirects with Google search results.

Arrggh.. this is the last thing we can try or we need to post in the other forum.

If still redirecting>>>
Change your DNS Servers:

• Go to > Run... and in the open box, type: cmd
  
• Press OK or Hit Enter.
  
• At the command prompt, type or copy/paste: ipconfig /flushdns
  
• Hit Enter.
  
• You will get a confirmation that the flush was successful.
  
• Close the command box.

If the above commands did not resolve the problem, the next thing to try is to reset your network settings and Configure TCP/IP to use DNS.

• Go to > Control Panel, and choose Network Connections.
  
• Right-click on your default connection, usually Local Area Connection or Dial-up Connection if you are using Dial-up, and and choose Properties.
  
• Double-click on Internet Protocol (TCP/IP) or highlight it and select Properties.
  
• Under the General tab, write down any settings in case you should need to change them back.
  
• Select the button that says "Obtain an IP address automatically" or make sure the DNS server IP address is the same as provided by your ISP.
  
• Select the button that says "Obtain DNS servers automatically".
  
• If unknown Preferred or Alternate DNS servers are listed, uncheck the box that says "Use the following DNS server address".
  
• Click OK twice to get out of the properties screen and restart your computer. If not prompted to reboot go ahead and reboot manually.

-- Vista users can refer to How to Change TCP/IP settings

CAUTION: It's possible that your ISP (Internet Service Provider) requires specific DNS settings here. Make sure you know if you need these settings or not BEFORE you make any changes or you may lose your Internet connection. If you're sure you do not need a specific DNS address,
then you may proceed.



And if no joy.
Please go here....
Preparation Guide ,do steps 6 - 9.

Create a DDS log and post it in the new topic explained in step 9,which is here Virus, Trojan, Spyware, and Malware Removal Logs and not in this topic,thanks.
If Gmer won't run,skip it and move on.
Let me know if that went well.