Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Google redirect? + can't open malwarebytes


  • This topic is locked This topic is locked
6 replies to this topic

#1 Anemicshoe

Anemicshoe

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:08:32 PM

Posted 31 July 2010 - 07:47 PM

Hello, from reading other posts I am guessing I might have the google re-direct virus and maybe something else. I am not super computer literate but I will try my best to describe and follow instructions.

I am on a wireless laptop through a router, my browser is Firefox and I use Windows XP.

My problems:

Every once in a while while I am browsing the internet, more frequently when I open a new tab another tab that I did not authorize will open, the URL makes it look like a pop up but usually only a blank screen loads. I try to X it quickly.
Computer started running slowly. Internet browsing loading slowly.
Every so often my sound card would stop working (may be unrelated)
I recognized the signs and tried to run Malwarebytes. It showed a working hourglass for a moment then did not open, I checked the process manager, I clicked again and it still would not open. Not in safe mode either.

Currently the anti spyware/malware programs I have installed are: Rkill, Malwarebytes and Spybot - search and destroy. Spybot will open and scan but Malware won't. Rkill dosn't seem to find anything worth closing.

Please any directions you can offer would help.

~ Holly

BC AdBot (Login to Remove)

 


#2 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,490 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:08:32 PM

Posted 31 July 2010 - 07:54 PM

The problem is actually based in your router and that in turn is infecting all the other computers on your network (if networked_).
Here is the entire fix(from the beginning) that you will need to run on each PC.

Please download Malwarebytes' Anti-Malware from Here or Here

Next disconnect your system from the internet, and your router, then…

Double Click mbam-setup.exe to install the application.
  • Launch Malwarebytes' Anti-Malware, then click Finish.
  • Once the program has loaded, select "Perform Quick Scan", then click Scan.
  • The scan may take some time to finish,so please be patient.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Make sure that everything is checked, and click Remove Selected.
  • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
  • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
  • Copy&Paste the entire report in your next reply.
Extra Note:
If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediatly.



Next you must reset the router to its default configuration. This can be done by inserting something tiny like a paper clip end or pencil tip into a small hole labeled "reset" located on the back of the router. Press and hold down the small button inside until the lights on the front of the router blink off and then on again (usually about 10 seconds). If you don’t know the router's default password, you can look it up HERE

However, if there are other Zlob-infected machines using the same router, they will need to be cleared with the above steps before resetting the router. Otherwise, the malware will simply go back and change the router's DNS settings. You also need to reconfigure any security settings you had in place prior to the reset. Check out this site here for video tutorials on how to properly configure your router's encryption and security settings. You may also need to consult with your Internet service provider to find out which DNS servers your network should be using.

Once you have ran Malwarebytes' Anti-Malware on the infected system, and reset the router to its default configuration you can reconnect to the internet, and router. Then return to this site to post your logs.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#3 Anemicshoe

Anemicshoe
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:08:32 PM

Posted 31 July 2010 - 08:17 PM

Ok, I already had megabytes installed but I uninstalled and then re-installed it while offline like you mentioned.
Restarted. Malwarebytes STILL will not open, offline or on, safe mode or not all I get is a quick show of the hourglass symbol then nothing. It will not open to perform a scan.

#4 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,490 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:08:32 PM

Posted 31 July 2010 - 08:24 PM

Man...We need a deeper look. Please go here....
Preparation Guide ,do steps 6 - 9.

Create a DDS log and post it in the new topic explained in step 9,which is here Virus, Trojan, Spyware, and Malware Removal Logs and not in this topic,thanks.
If Gmer won't run,skip it and move on.
Let me know if that went well.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#5 Anemicshoe

Anemicshoe
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:08:32 PM

Posted 01 August 2010 - 12:31 AM

Sorry for the gap in attendance. I had to leave the house. I posted a log thread in the forum you indicated.

#6 Anemicshoe

Anemicshoe
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:08:32 PM

Posted 01 August 2010 - 03:24 PM

No help with it yet :< for some reason trying to attatch a physical txt file was blocked in the same way as malwarebytes so im hoping they don't pass over mine because it lacks an attachment. http://www.bleepingcomputer.com/forums/topic336334.html

#7 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,490 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:08:32 PM

Posted 01 August 2010 - 03:28 PM

Ok, that post looks fine.. I combined your second into the first..

Now that your log is properly posted, you should NOT make further changes to your computer (install/uninstall programs, use special fix tools, delete files, edit the registry, etc) unless advised by a Malware Removal Team member, nor should you continue to ask for help elsewhere. Doing so can result in system changes which may not show it the log you already posted. Further, any modifications you make on your own may cause confusion for the helper assisting you and could complicate the malware removal process which would extend the time it takes to clean your computer.

From this point on the Malware Removal Team should be the only members that you take advice from, until they have verified your log as clean.

Please be patient. It may take a while to get a response because the Malware Removal Team members are very busy working logs posted before yours. They are volunteers who will help you out as soon as possible. Once you have made your post and are waiting, please DO NOT make another reply until it has been responded to by a member of the Malware Removal Team. Generally the staff checks the forum for postings that have 0 replies as this makes it easier for them to identify those who have not been helped. If you post another response there will be 1 reply. A team member, looking for a new log to work may assume another HJT Team member is already assisting you and not open the thread to respond.

To avoid confusion, I am closing this topic.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users