Forum Guidelines
Read the following topic before creating a new topic in this forum. It contains instructions on the what we would like you to post, which will enable us to help you more quickly.
Preparation Guide For Use Before Using Malware Removal Tools and Requesting Help Unfortunately, with the amount of logs we receive per day, the average response time is 5 days. I want to assure you, though, that your topic
will be looked at and responded to. So please be patient.
DO NOT RUN ComboFix unless requested to.
Only members of the Malware Response Team or Moderators are allowed to help people with logs. Anyone else should refrain from posting to another user's log.
When posting a log please put the type of infection you have in the topic title. IE: Winfixer, Virtumonde, WinTools, WebSearch, Home Search Assistant, etc.
Do not bump your topic. We try to resolve logs on a first come/first served basis. By bumping your log you will be pushed back in line due to the new date of your bump.
Infected redirection virus
Unable to remove
New Member
Group:
Members
Posts:
7
Joined:
16-December 08
Posted 24 September 2011 - 12:04 PM
Reference this original topic
http://www.bleepingcomputer.com/forums/topic413162.html/page__p__2361722__fromsearch__1#entry2361722
I have had this problem for some time and unable to remove it this infection is very stubborn
it will redirect mostly on a google search but also redirects other times as well
Group:
Malware Response Team
Posts:
5,053
Joined:
16-June 06
Gender: Male
Location: Montreal, QC. Canada
Posted 29 September 2011 - 08:33 AM
Hello, Welcome to BleepingComputer.
I'm nasdaq and will be helping you.
If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps.
===
Please run the DDS tool. I need to see the DDS.txt log to suggest our next step of action.
Download DDS and save it to your desktop from
here or
here .
Disable any script blocker, and then double click
dds.scr to run the tool.
When done, DDS will open two (2) logs: Save both reports to your desktop.
Please just
paste the contents of the
DDS.txt log in your next post.
===
New Member
Group:
Members
Posts:
7
Joined:
16-December 08
Posted 03 October 2011 - 11:00 AM
.
Group:
Malware Response Team
Posts:
5,053
Joined:
16-June 06
Gender: Male
Location: Montreal, QC. Canada
Posted 04 October 2011 - 08:33 AM
Please download
ComboFix from any of the links below, and save it to your desktop. For information regarding this download, please visit this web page:
http://www.bleepingcomputer.com/combofix/how-to-use-combofix
Link 1 Link 2 * IMPORTANT !!! Save ComboFix.exe to your Desktop
IMPORTANT....
1. Close any open browsers.
How to : Disable Anti-virus and Firewall...
http://www.bleepingcomputer.com/forums/topic114351.html
Double click on
ComboFix.exe & follow the prompts.
When finished, it will produce a report for you. Please post the C:\ComboFix.txt
Note:
Note: If you have difficulty properly disabling your protective programs, refer to this link -->
http://www.bleepingcomputer.com/forums/topic114351.html
===
Third party programs if not up to date can be the cause infiltration of an infection.
Please run this security check for my review.
Download
Security Check by screen317 from
here .
Save it to your Desktop. Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt ; please post the contents of that document.
===
Please post the logs and let me know if the problem persists.
New Member
Group:
Members
Posts:
7
Joined:
16-December 08
Posted 08 October 2011 - 12:46 PM
ComboFix 11-10-08.01 - Receiving 10/08/2011 11:21:48.5.2 - x86
New Member
Group:
Members
Posts:
7
Joined:
16-December 08
Posted 08 October 2011 - 12:48 PM
Results of screen317's Security Check version 0.99.21 (UAC is disabled!) Out of date! `````````````````````````````` Antivirus/Firewall Check: WMI entry may not exist for antivirus; attempting automatic update. ``````````````````````````````` Anti-malware/Other Utilities Check: Out of date Java installed! ```````````````````````````````` objlist.exe by Laurent ``````````End of Log````````````
Group:
Malware Response Team
Posts:
5,053
Joined:
16-June 06
Gender: Male
Location: Montreal, QC. Canada
Posted 12 October 2011 - 08:29 AM
Sorry for this delay.
Secure your system by updating 3rd party programs.
Your version of Java is outdated and needs to be updated to take advantage of fixes that have eliminated security vulnerabilities.
Updating Java: Download the latest version of Java SE Runtime Environment 6 Update 27 In the box labeled "Java Platform, Standard Edition", click the "Download JRE " button to the right. In the Window that opens, select Windows (or Windows x64), and check the "agree" box and click "Continue". Click on the link to download Windows Offline Installation and save to your Desktop. Then from your Desktop double-click on jre-6u27-windows-i586.exe that you have downloaded to install the newest version. jre-6u27-windows-x64.exe ). Make sure you download the corrent version.- Note: If you are running Vista or Windows 7, you may need to right-click on the installation file and select Run as Administrator.
If present remove the old version(s) of Java using the Add/Remove Programs applet.
===
Critical vulnerabilities have been identified in Adobe Flash Player 10.3.183.10 and earlier versions... being exploited in the wild in active targeted attacks...
update to Adobe Adobe Flash Player 11.0.1.152
Flash Player 11.0.1.152
On the top of the page you will be given an opportunity to download the version for your operating system.
Make sure you select appropriate version.
You will also have an option to install the
Free! McAfee Security Scan Plus Un-check the box if you are NOT using McAfee's virus protection software.
===
If all is well.
Time for some housekeeping The following will implement some cleanup procedures as well as reset System Restore points:ComboFix /Uninstall
===
Surf Safely, and Think
Prevention!
===
Delete the other tools we used to clean this computer.
Group:
Malware Response Team
Posts:
5,053
Joined:
16-June 06
Gender: Male
Location: Montreal, QC. Canada
Posted 17 October 2011 - 10:08 AM
It appears that this issue is resolved, therefore I am closing the topic. If that is not the case and you need or wish to continue with this topic, please send me or any
Moderator a Personal Message (PM) that you would like this topic re-opened.
Share this topic:
1 User(s) are reading this topic0 members, 1 guests, 0 anonymous users
Read the following topic before creating a new topic in this forum. It contains instructions on the what we would like you to post, which will enable us to help you more quickly.
This topic is locked
Attach.txt (4.17K)
Help
Back to top