Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Google.com loads hack forums


  • Please log in to reply
3 replies to this topic

#1 stupidhackforumvirus

stupidhackforumvirus

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:10:27 AM

Posted 05 July 2010 - 02:56 PM

When I try to load google.com, it loads Hack Forums. I also can't get to gmail. This affects both Firefox, Chrome and IE browsers.

I have done a complete antivirus scan with Kaspersky in safe mode and it found and removed these three files:

Trojan.Win32.Cosmu.zny in C:\Program Files\sam.exe
Trojan.Win32.Cosmu.zny in C:\Users\owner\AppData\Local\Temp\msconfig.exe
Trojan.Win32.Cosmu.zny in C:\$Recycle.Bin\S-1-5-21-1529291139-3996524414-2757359542-1000\$RCEC4UK.exe

I still have the problem even after those were removed. I ran a full scan with Kaspersky again and it found nothing. Google and Gmail work for me on two other computers, so it is definitely this machine.

I have no idea what to do. I can't find any information about this problem online. Everything I find is about a "google redirect" which is apparently when google searches are coming back wrong. Again, when I go to www.google.com, the page looks like I went to www.hackforums.net but the address bar still reads www.google.com

Please help me! Thank you!

BC AdBot (Login to Remove)

 


#2 stupidhackforumvirus

stupidhackforumvirus
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:10:27 AM

Posted 05 July 2010 - 03:09 PM

Sorry, I left out that I am on Windows 7. Also, I used a keygen a one or two days ago, which I assume is the cause of the virus.

#3 stupidhackforumvirus

stupidhackforumvirus
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:10:27 AM

Posted 05 July 2010 - 04:25 PM

Another update.

I just ran a spyware check with SUPERAntiSpyware and it found these four registry keys:

(x64) HKCR\Interface\{4897BBA6-48D9-468C-8EFA-846275D7701B}
(x64) HKCR\Interface\{4897BBA6-48D9-468C-8EFA-846275D7701B}\ProxyStubClsid32
(x64) HKCR\Interface\{4897BBA6-48D9-468C-8EFA-846275D7701B}\TypeLib
(x64) HKCR\Interface\{4897BBA6-48D9-468C-8EFA-846275D7701B}\TypeLib#Version

I removed them and restarted, and the problem still persists.

#4 stupidhackforumvirus

stupidhackforumvirus
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:10:27 AM

Posted 05 July 2010 - 07:04 PM

OK I'm too impatient to wait for a response. If anyone was looking at this, don't bother. I'm reformatting the hard drive and starting from scratch.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users