Posted 30 April 2011 - 04:54 AM
Here are the symptoms:
When doing a Google search, the links I click often lead to search engine websites or other random websites. So far I have been able to bypass this by selecting open link in new tab.
Also I have noticed a 0 byte TMP File named tvvrpbofff appears on my desktop whenever I use Internet Explorer.
What I have done so far:
I have run MBAM (quick scan and full scan) and it finds 2 threats; however, when I click "Remove Selected" and restart my computer, the virus persists. These threats, as displayed in the quarantine section of MBAM are as follows.
Vendor: Trojan.FakeAlert Category: File and Memory Process Item: wscsvc32.exe
I then updated MBAM to the latest version and ran a quick scan. After this scan, MBAM found many threats which I removed, but the Google redirect virus still was not removed.
I use Windows XP and some version of Internet Explorer.