Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


IE Redirecting, Trojan unsuccessfully removed

  • Please log in to reply
1 reply to this topic

#1 Reclaimer


  • Members
  • 1 posts
  • Local time:11:44 AM

Posted 01 December 2009 - 03:35 AM

Hello and thank you for taking the time to read my post.

I am using a personal laptop: it is an ACER Aspire One, I am using XP home edition version 2002 service pack 3.

About 3 days ago I began experiencing problems while using search engines such as Google. When I search a topic the results page will display with what appears to correct links, but when I click the link I am redirected to random web pages, usually various ads. In addition occasionally an additional IE window will open displaying similar webpages. I began running virus scans with SpyBot Search and Destroy, Spyhunter, and I attempted to use Symantec as well but it will not respond. After the very first scan with SpyBot a number of risks were detected ranging from trojans to tracking cookies and I chose to Fix Selected Problems. I assumed that I the problem was solved but when I tested IE I found that nothing had changed. My computer is now running so slowly that I am unable to boot it in Normal Mode successfully, I have had to resort to Safe Mode. Also when I run a virus scan, on any program, I can no longer find any apparent problems. The problem is steadily getting worse, I am no longer able to run MalwareBytes or Symantec Endpoint protection at all, I keep getting an error message:

Symantec: First: It appears that the Symantec Management Client service is not running. You will not be able to manage network protection settings through the main user interface until it is running.

I am then asked if I want to start the service now. Upon clicking yes I recieve this message:

Failed to start the Symantec Management Client service. Error code returned: 0x8007043c

MalwareBytes: The first error message window for Malware has a title of vbAccelerator SGrid II Control, and the message reads Run-time error '0'. I have the ability to click ok, upon doing so I recieve this message: Run-time error '440': Automation error. This error window is titled Malwarebytes' Anti-Malware.

One of my good friends suggested that I come to you guys for help with HijackThis and Combofix. Again thank you for any help you can give me, it is greatly appreciated.

BC AdBot (Login to Remove)


#2 garmanma


    Computer Masochist

  • Members
  • 27,809 posts
  • Gender:Male
  • Location:Cleveland, Ohio
  • Local time:12:44 PM

Posted 02 December 2009 - 06:31 PM

Run this application first and then try Mbam again

Please download Rkill by Grinler and save it to your desktop.Link 2
Link 3
Link 4
  • Double-click on the Rkill desktop icon to run the tool.
  • If using Vista, right-click on it and Run As Administrator.
  • A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.
  • If not, delete the file, then download and use the one provided in Link 2.
  • If it does not work, repeat the process and attempt to use one of the remaining links until the tool runs.
  • If the tool does not run from any of the links provided, please let me know.
Do not reboot the computer or you will have to run it again

Also try:

We Need to check for Rootkits with RootRepeal
  • Download RootRepeal from the following location and save it to your desktop.
  • Extract RootRepeal.exe from the archive (If you did not use the "Direct Download" mirror).
  • Open Posted Image on your desktop.
  • Click the Posted Image tab.
  • Click the Posted Image button.
  • Check all seven boxes: Posted Image
  • Push Ok
  • Check the box for your main system drive (Usually C:), and press Ok.
  • Allow RootRepeal to run a scan of your system. This may take some time.
  • Once the scan completes, push the Posted Image button. Save the log to your desktop, using a distinctive name, such as RootRepeal.txt. Include this report in your next reply, please.

Posted Image
why won't my laptop work?

Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time around
Do not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefits
Become a BleepingComputer fan: Facebook and Twitter

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users