BleepingComputer.com: Google redirect after reinstalling XP

Recently I got hit with the Internet Security 2011 rogue software. I thought I had removed it but a similar one came back a couple days later. I was also having redirect problems with google in IE8. This was after a computer error where I had to manually copy backed up files to the system32 directory. Rather than go through the trouble of trying to get rid of the viruses I decided to just reinstall XP (the computer needed a good cleaning anyways). I reinstalled XP tonight (did an fdisk from the XP cd and reformat) and I'm still getting redirects from google. The only website I went to was Microsoft to install all the updates. All the drivers were downloaded on my laptop and transferred to the desktop via flash drive. I did update Adobe Flash Player before I saw there are security issues with it, could that have caused the problem? We have 4 computers in the house and they all have the same issue. Can this problem be passed through the home network passively? We rarely if ever transfer files over the network. Any help would be appreciated.

Something else to add. I only counted the computers that have been in use. My wife's desktop hasn't been used in a month but it hasn't been shutdown recently either and the problem occurs on that one as well. It's almost like the issue is in the network.

Your router is hijacked by trojan DNS-hijacker.

• Please read this: Malware Silently Alters Wireless Router Settings
  
  
  
• Then reset your router to it's factory default settings:
  
  

  Quote

  "If your machine has been infected by one of these Zlob/DNSchanger Trojans, and your router settings have been altered, I would strongly recommend that you reset the router to its default configuration. Usually, this can be done by inserting something tiny like a paper clip end or pencil tip into a small hole labeled "reset" located on the back of the router. Press and hold down the small button inside until the lights on the front of the router blink off and then on again (usually about 10 seconds)"
  
  
  
  
• This is the difficult part.
  First get to the routers server. To do that open Internet Explorer and type http:\\192.168.1.1 in the address bar and click Enter. You get the log in window.
  Fill in the password you have already found and you will get the configuration page.
  Configure the router to allow you to connect to your ISP server. In some routers it is done by a setup wizard. But you have to fill in the log in password your ISP has initially given to you.
  You can also call your ISP if you don't have your initial password.
  Don't forget to change the routers default password and set a strong password. Note down the password and keep it somewhere for future reference.

So far so good. I thought about doing that but didn't for some reason. Thanks.

Great!! Download and Run FlashDisinfector

You may have a flash drive infection. These worms travel through your portable drives. If they have been connected to other machines, they may now be infected.
Please download Flash_Disinfector.exe by sUBs and save it to your desktop.
Double-click Flash_Disinfector.exe to run it and follow any prompts that may appear.
The utility may ask you to insert your flash drive and/or other removable drives including your mobile phone. Please do so and allow the utility to clean up those drives as well.
Wait until it has finished scanning and then exit the program.
Reboot your computer when done.

Note: Flash_Disinfector will create a hidden folder named autorun.inf in each partition and every USB drive plugged in when you ran it. Don't delete this folder. It will help protect your drives from future infection.


When you plug the drive into the clean computer make sure you hold down the SHIFT key, which will stop any AutoRuns from executing. You can then run this tool:


Running On a clean Comp
You would need to run sub's flash disinfector on the clean computer first and hold down the shift key before connecting the external drive.