Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Search engine redirection, Internet Explorer opening by itself


  • Please log in to reply
7 replies to this topic

#1 Hometown Boy

Hometown Boy

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:10:54 AM

Posted 26 July 2011 - 02:10 PM

Hello.
Recently my computer got infected with some virus calling itself "Windows 7 Fix", and thanks to the awesome guides on this site I was able to fight it off. However, there are still some lingering problems. I don't know if they're caused by the same program, or if a bunch of different things decided to attack at once.
Those problems are:
・There are always two instances of Internet Explorer running. I can't see them anywhere except for Task Manager. When I end them there, they'll just spawn again. On rare occasions, they'll appear in windows with some random web page (for example, today it appeared with a Twitter search for the hashtag "sustainable".)
・Clicking any link on Google will redirect me to some dodgy page, all of which seem to have a green globe as their icon. The URL which I get sent to differs every day. I'm still able to get to the page I want, but only through quick reflexes- when the desired URL appears in my address bar, I have to press "enter" before it is replaced by one of these villainous sites.
・My desktop is still black (although, since I'm using Windows 7 Starter, I actually prefer it to the dreary default wallpaper..)
Neither McAfee nor MalwareBytes can detect whatever the cause of these things might be, and there may also be other problems I haven't noticed yet.
I'd be really appreciative of any help you could give me.
Thanks in advance,
Hometown Boy

BC AdBot (Login to Remove)

 


#2 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:10:54 AM

Posted 26 July 2011 - 02:12 PM

Can you post the logs for Malwarebytes?

#3 laurasautographs

laurasautographs

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:05:54 AM

Posted 26 July 2011 - 02:20 PM

I think my brother is having the same problem. Malwarebytes and superantispyware can not find any problems. But randomly internet explorer will just open. I don't see any rogue viruses on the desktop, and everything seems to be working other then that. What could I do to fix it?

#4 Hometown Boy

Hometown Boy
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:10:54 AM

Posted 26 July 2011 - 02:24 PM

Here is the one that removed the "Windows 7 Fix" program:
Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Database version: 7059

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

09/07/2011 18:37:05
mbam-log-2011-07-09 (18-37-05).txt

Scan type: Quick scan
Objects scanned: 179067
Time elapsed: 42 minute(s), 19 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 1
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 3

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\rejygLBkhvvh (Trojan.FakeAlert) -> Value: rejygLBkhvvh -> Quarantined and deleted successfully.

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
c:\programdata\rejyglbkhvvh.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
c:\Users\Sean\AppData\Local\Temp\8905.tmp (Trojan.FakeAlert) -> Quarantined and deleted successfully.
c:\programdata\27320056.exe (Trojan.Agent) -> Quarantined and deleted successfully.

Here's the full scan I ran when I found that the Google redirect problem was still there:

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Database version: 7059

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

10/07/2011 00:30:15
mbam-log-2011-07-10 (00-30-15).txt

Scan type: Full scan (C:\|D:\|Q:\|)
Objects scanned: 310388
Time elapsed: 5 hour(s), 36 minute(s), 34 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

#5 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:10:54 AM

Posted 26 July 2011 - 02:33 PM

Please update Malwarebytes and scan again.

#6 Hometown Boy

Hometown Boy
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:10:54 AM

Posted 26 July 2011 - 02:58 PM

Here's the Quick Scan results. If you like, I can also do a full one.

Malwarebytes' Anti-Malware 1.51.1.1800
www.malwarebytes.org

Database version: 7285

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

26/07/2011 20:56:57
mbam-log-2011-07-26 (20-56-57).txt

Scan type: Quick scan
Objects scanned: 179896
Time elapsed: 32 minute(s), 12 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

#7 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:10:54 AM

Posted 26 July 2011 - 02:59 PM

Do a full one.

#8 Hometown Boy

Hometown Boy
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:10:54 AM

Posted 29 July 2011 - 04:35 PM

Malwarebytes' Anti-Malware 1.51.1.1800
www.malwarebytes.org

Database version: 7285

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

29/07/2011 21:40:28
mbam-log-2011-07-29 (21-40-27).txt

Scan type: Full scan (C:\|D:\|Q:\|)
Objects scanned: 329116
Time elapsed: 8 hour(s), 31 minute(s), 43 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

Sorry it took me so long to do this, but it crashed the first time I tried..




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users