May want to try updating MBAM. Then disconnect and scan before resetting the router. Otherwise, the malware will simply go back and change the router's DNS settings.
Open MBAM in normal mode and click Update
tab, select Check for Updates
Next disconnect your system from the internet, and your router, thenů
Open MBAM in normal mode and click Scanner
scan and scan (normal mode).
After scan click Remove Selected
Next you must reset the router to its default configuration.
Once you have ran Malwarebytes' Anti-Malware on the infected system, and reset the router to its default configuration you can reconnect to the internet, and router. Then return to this site to post your logs.
If still redirecting>>>Change your DNS Servers:
- Go to > Run... and in the open box, type: cmd
- Press OK or Hit Enter.
- At the command prompt, type or copy/paste: ipconfig /flushdns
- Hit Enter.
- You will get a confirmation that the flush was successful.
- Close the command box.
If the above commands did not resolve the problem, the next thing to try is to reset your network settings and Configure TCP/IP to use DNS
- Go to > Control Panel, and choose Network Connections.
- Right-click on your default connection, usually Local Area Connection or Dial-up Connection if you are using Dial-up, and and choose Properties.
- Double-click on Internet Protocol (TCP/IP) or highlight it and select Properties.
- Under the General tab, write down any settings in case you should need to change them back.
- Select the button that says "Obtain an IP address automatically" or make sure the DNS server IP address is the same as provided by your ISP.
- Select the button that says "Obtain DNS servers automatically".
- If unknown Preferred or Alternate DNS servers are listed, uncheck the box that says "Use the following DNS server address".
- Click OK twice to get out of the properties screen and restart your computer. If not prompted to reboot go ahead and reboot manually.
users can refer to How to Change TCP/IP settingsCAUTION
: It's possible that your ISP (Internet Service Provider) requires specific DNS settings here. Make sure you know if you need these settings or not BEFORE you make any changes or you may lose your Internet connection. If you're sure you do not need a specific DNS address,
then you may proceed.
Please download GooredFix
from one of the locations below and save it to your DesktopDownload Mirror #1Download Mirror #2
- Ensure all Firefox windows are closed.
- To run the tool, double-click it (XP), or right-click and select Run As Administrator (Vista).
- When prompted to run the scan, click Yes.
- GooredFix will check for infections, and then a log will appear. Please post the contents of that log in your next reply (it can also be found on your desktop, called GooredFix.txt).
Finally...I'd like us to scan your machine with ESET OnlineScan
NOTE: In some instances if no malware is found there will be no log produced.
- Hold down Control and click on the following link to open ESET OnlineScan in a new window.
- Click the button.
- For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
- Click on to download the ESET Smart Installer. Save it to your desktop.
- Double click on the icon on your desktop.
- Click the button.
- Accept any security warnings from your browser.
- Under scan settings, check and check Remove found threats
- Click Advanced settings and select the following:
- Scan potentially unwanted applications
- Scan for potentially unsafe applications
- Enable Anti-Stealth technology
- ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
- When the scan completes, push
- Push , and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
- Push the button.