Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


Search Redirect Malware

  • Please log in to reply
3 replies to this topic

#1 james27_84


  • Members
  • 2 posts
  • Local time:04:04 PM

Posted 02 August 2011 - 02:21 PM


I have a laptop running 32bit Windows Vista Home Premium OEM, SP2. It was infected with a fake antivirus of some kind. I removed that with Malware Bytes. The only thing that lingers is this search redirect. Whenever I do a search on Yahoo, Google, etc... and click one of the results from that search, I am redirected to a dummy results page somewhere else. I've done multiple scans but can't seem to get rid of this symptom. Any help is greatly appreciated.

BC AdBot (Login to Remove)


#2 boopme


    To Insanity and Beyond

  • Global Moderator
  • 73,565 posts
  • Gender:Male
  • Location:NJ USA
  • Local time:04:04 PM

Posted 02 August 2011 - 02:40 PM

Hello and welcome..

Please follow our Removal Guide here How to remove Google Redirects. You will move to the Automated Removal Instructions

If it finds something make sure Cure is selected
Next click Continue then Reboot now
A log file should be created on your C: drive named "TDSSKiller.txt" please copy and paste the contents in your next reply.

Rerun MBAM (MalwareBytes) like this:

Open MBAM in normal mode and click Update tab, select Check for Updates,when done
click Scanner tab,select Quick scan and scan (normal mode).
After scan click Remove Selected, Post new scan log and Reboot into normal mode.

Please ask any needed questions,post logs and Let us know how the PC is running now.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#3 james27_84

  • Topic Starter

  • Members
  • 2 posts
  • Local time:04:04 PM

Posted 03 August 2011 - 11:38 AM

That worked! Here's my MABM Log

Malwarebytes' Anti-Malware

Database version: 7359

Windows 6.0.6002 Service Pack 2
Internet Explorer 9.0.8112.16421

8/2/2011 5:42:26 PM
mbam-log-2011-08-02 (17-42-26).txt

Scan type: Full scan (C:\|)
Objects scanned: 323944
Time elapsed: 1 hour(s), 30 minute(s), 58 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

Thanks for the help!

#4 quietman7


    Bleepin' Janitor

  • Global Moderator
  • 52,067 posts
  • Gender:Male
  • Location:Virginia, USA
  • Local time:04:04 PM

Posted 03 August 2011 - 01:17 PM

Please post the complete results of your TDSSkiller scan for review.

After running TDSSkiller, a log file named TDSSKiller_version_date_time_log.txt will have been created and saved to the root directory (usually Local Disk C:). Open that file in notepad, then copy and paste the contents in your next reply.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users