hello
i have a virus that redirects to to spampages on google and other searchengines...and also sometimes when i mon my normal pages.
i have ran malwarebytes , but it didnt help...it is still the same.
can someone pls helpme...i am starting to get despearet since i cant use my internet anymore...
this is what i got from my malware:
Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org
Database version: 6582
Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.13
5/15/2011 5:53:52 PM
mbam-log-2011-05-15 (17-53-52).txt
Scan type: Full scan (C:\|)
Objects scanned: 230595
Time elapsed: 1 hour(s), 46 minute(s), 0 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 4
Files Infected: 6
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
c:\WINDOWS\system32\0F6226 (Worm.AutoRun) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\5A8DCC (Worm.AutoRun) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\76682F (Worm.AutoRun) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\ACF7EF (Worm.AutoRun) -> Quarantined and deleted successfully.
Files Infected:
c:\WINDOWS\system32\5A8DCC\dp1.fne (Worm.Autorun) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\5A8DCC\HtmlView.fne (HackTool.Patcher) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\5A8DCC\internet.fne (HackTool.Patcher) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\5A8DCC\krnln.fnr (Trojan.Agent) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\5A8DCC\RegEx.fnr (Worm.AutoRun) -> Quarantined and deleted successfully.
c:\documents and settings\Anny\start menu\Programs\Startup\74BE16.lnk (Worm.AutoRun) -> Quarantined and deleted successfully.
thank u guys:)
Page 1 of 1
how doi deal with a redirecting virus????please help
#2
Posted 16 May 2011 - 08:26 AM
Hi lulolias,
Try this for your redirects http://www.bleepingcomputer.com/virus-removal/remove-tdss-tdl3-alureon-rootkit-using-tdsskiller
Then run malwarebytes again.
Try this for your redirects http://www.bleepingcomputer.com/virus-removal/remove-tdss-tdl3-alureon-rootkit-using-tdsskiller
Then run malwarebytes again.
#3
Posted 16 May 2011 - 12:35 PM
Before doing anything if you have not already done so, you should back up all your important documents, personal data files and photos to a CD or DVD drive as some infections may render your computer unbootable during or before the disinfection process. The safest practice is not to backup any files with the following file extensions: exe, .scr, .ini, .htm, .html, .php, .asp, .xml, .zip, .rar, .cab as they may be infected.
After running TDSSKiller, a log file named TDSSKiller_version_date_time_log.txt will be created and saved to the root directory (usually Local Disk C:). Copy and paste the contents of that file in your next reply.
- How and Where to backup your files in XP or Vista
- How to Backup and Restore in Windows 7
- How to use Ubuntu Live CD to Backup Files from your dead Windows Computer
After running TDSSKiller, a log file named TDSSKiller_version_date_time_log.txt will be created and saved to the root directory (usually Local Disk C:). Copy and paste the contents of that file in your next reply.
Microsoft MVP - Consumer Security 2007-2012 
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

Member of UNITE, Unified Network of Instructors and Trusted Eliminators
Share this topic:
Page 1 of 1

Help


Back to top









