Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Google Redirect help


  • Please log in to reply
8 replies to this topic

#1 Fiddler24

Fiddler24

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:11:15 PM

Posted 28 November 2009 - 03:21 PM

I had the Antivirus System Pro last night and was able to get rid of that using removal guide/MBAM. However I am having problems now with the links from google being redirected. I've run MBAM and Super, but I am still getting redirected. Anything other suggestions?

Thanks.

BC AdBot (Login to Remove)

 


#2 neilmac

neilmac

  • Members
  • 38 posts
  • OFFLINE
  •  
  • Local time:11:15 PM

Posted 28 November 2009 - 03:33 PM

goto http://www.avira.com and download antivir it's free and a very good antivirus program one of the best

#3 xblindx

xblindx

  • Banned
  • 1,923 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:15 AM

Posted 28 November 2009 - 03:46 PM

So are the scans with Malwarebytes and superantispyware coming up clean?

#4 Fiddler24

Fiddler24
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:11:15 PM

Posted 28 November 2009 - 03:49 PM

MBAM was clean, Super showed only a few adware tracking cookies.

#5 xblindx

xblindx

  • Banned
  • 1,923 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:15 AM

Posted 28 November 2009 - 04:10 PM

Try using Gooredfix
  • Please download GooredFix and save it to your desktop
  • Double click GooredFix.exe to open it.
    • Select 1. Find Goored (no fix) by typing 1 and pressing Enter.
    • A log will open which you can just close. The log file is named GooredLog.txt and is on your Desktop.
  • Please post the contents of GooredLog.txt in your next reply.
Note:Do not use Option 2 (Fix Goored) unless instructed to.

#6 Fiddler24

Fiddler24
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:11:15 PM

Posted 28 November 2009 - 04:15 PM

GooredFix by jpshortstuff (27.11.09.1)
Log created at 13:12 on 28/11/2009 (XXXXX)
Firefox version 3.5.5 (en-US)

========== GooredScan ==========


========== GooredLog ==========

C:\Program Files\Mozilla Firefox\extensions\
{3112ca9c-de6d-4884-a869-9855de68056c} [22:01 05/08/2007]
{972ce4c6-7e08-4474-a285-3208198ce6fd} [22:01 05/08/2007]
{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} [21:23 17/08/2008]
{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} [21:42 17/08/2008]
{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA} [04:47 29/10/2008]
{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} [18:59 18/12/2008]

[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]
"jqs@sun.com"="C:\Program Files\Java\jre6\lib\deploy\jqs\ff" [04:47 29/10/2008]
"smartwebprinting@hp.com"="C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3" [18:49 01/08/2009]
"{ABDE892B-13A8-4d1b-88E6-365A6E755758}"="c:\program files\real\realplayer\browserrecord\firefox\ext" [19:37 07/09/2009]

-=E.O.F=-

#7 xblindx

xblindx

  • Banned
  • 1,923 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:15 AM

Posted 29 November 2009 - 12:53 PM

Hmmmm, that log seems to be clean.

You may have a Rootkit, I am not an expert in rootkit removal so I can PM a mod to come look at this thread if you wish?

#8 Fiddler24

Fiddler24
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:11:15 PM

Posted 29 November 2009 - 01:49 PM

Any help would be appreciated......thanks!

#9 Computer Pro

Computer Pro

  • Members
  • 2,448 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:02:15 AM

Posted 29 November 2009 - 07:25 PM

Hello and welcome to Bleeping Computer.

As it seems that you may have a rootkit, lets take a look with RootRepeal.

Please install RootRepeal

Go HERE, and download RootRepeal.zip to your Desktop.
Tutorial with images ,if needed >> L@@K
Unzip that to your Desktop and then click RootRepeal.exe to open the scanner.

*Open the folder and double-click on RootRepeal.exe to launch it. If using Vista, right-click and Run as Administrator...
* Click on the Report tab, then click the Scan button. Check all seven of the boxes.
* In the Select Drives, dialog Please select drives to scan: select all drives showing, then click OK.
* When the scan has completed, a list of files will be generated in the RootRepeal window.
* Click on the Save Report button and save it as rootrepeal.txt to your desktop or the same location where you ran the tool from.
* Open rootrepeal.txt in Notepad and copy/paste its contents in your next reply.
* Exit RootRepeal and be sure to re-enable your anti-virus, Firewall and any other security programs you had disabled.

Please note: If Rootrepeal fails to run, try this step: Click Settings - Options. Set the Disk Access slider to High


Note 2: If RootRepeal cannot complete a scan and results in a crash report, try repeating the scan in "Safe Mode".
Computer Pro




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users