Posted 07 August 2010 - 09:35 AM
I'm trying to fix an infected PC for one of my work colleagues. The PC is running Windows XP Home SP3 and has a working version of McAfee Security Center. There are 3 active user accounts on the machine.
They brought me the computer at the end of June complaining that McAfee was reporting a problem and the browser (IE) was re-directing to random websites. Through a combination of rkill, Malwarebytes, CCleaner etc. I was able to return the machine to what I thought was working order, it seemed that the website re-direction was caused by an infected Google toolbar.
Unfortunately the machine is back again and I have taken another look at it. Malwarebytes reports the machine is clean, I think have removed all suspicious startup entries and McAfee reports it is ok.
Typing a web address directly into IE works except for the Windows Update website which posts an "Internet Explorer cannot display the webpage" message with the standard "Diagnose connection problems" button.
If you search from the Google website the search links work however if you use the built-in IE search (which is using Google) clicking the links takes you to random websites.
So it looks like I never got rid of the problem in the first place. Some help would be appreciated.