Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Google started to redirect, now I can't open programs.


  • Please log in to reply
5 replies to this topic

#1 Ikari01

Ikari01

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Local time:09:36 PM

Posted 28 October 2011 - 01:58 PM

Earlier this week google started to redirect me to weird websites, I quickly used Malwarebytes in SAFE MODE to remove the problem, it said it removed 15 infected items, on Thursday Oct. 27 my computer won't run Firefox, Malwarebytes (not even in safe mode) pretty much any program, I would be really grateful if someone could help me with this issue.

BC AdBot (Login to Remove)

 


#2 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,490 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:10:36 PM

Posted 28 October 2011 - 02:35 PM

Hello, please do not run a Temp file or Registry cleaning tool now.

This infection changes settings on your computer so that when you launch an executable, a file ending with .exe, it will instead launch the infection rather than the desired program. To fix this we must first download a Registry file that will fix these changes. From a clean computer, please download the following file and save it to a removable media such as a CD/DVD, external Drive, or USB flash drive.

FixNCR.reg

insert the removable device into the infected computer and open the folder the drive letter associated with it. You should now see the FixNCR.reg file that you had downloaded onto it. Double-click on the FixNCR.reg file to fix the Registry on your infected computer



Please download MiniToolBox, save it to your desktop and run it.

Checkmark the following checkboxes:
  • Flush DNS
  • Report IE Proxy Settings
  • Reset IE Proxy Settings
  • Report FF Proxy Settings
  • Reset FF Proxy Settings
  • List content of Hosts
  • List IP configuration
  • List Winsock Entries
  • List last 10 Event Viewer log
  • List Installed Programs
  • List Users, Partitions and Memory size.
  • List Minidump Files
Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run.

Note: When using "Reset FF Proxy Settings" option Firefox should be closed.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#3 Ikari01

Ikari01
  • Topic Starter

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Local time:09:36 PM

Posted 29 October 2011 - 04:26 AM

Hi, thank you for your quick response.
I went ahead and downloaded the items you requested, I ran FixNCR.reg after doing so I receive a message that says;

"Adding information can unintentionally change or delete values and cause components to stop working correctly. If you do not trust the source of this information in J:\FixNCR.reg, do not add it to the registry."

After pressing yes, the next message follows;

"The keys and values contained in J:\FixNCR.reg have been successfully added to the registry."

After clicking ok, I tried running MiniToolBox, but I'm still unable to run it, please let me know if I'm making any mistakes, I'm running Windows 7 Home Premium 64-bit.

Again thank you for your help and time.

#4 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,490 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:10:36 PM

Posted 29 October 2011 - 08:28 PM

Looks like we need a deeper look. Can you do this??

Please go here....
Preparation Guide ,do steps 6 - 9.

Create a DDS log and post it in the new topic explained in step 9,which is here Virus, Trojan, Spyware, and Malware Removal Logs and not in this topic,thanks.
If Gmer won't run,skip it and move on.
Include a link back to this topic.

Let me know if that went well.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#5 Ikari01

Ikari01
  • Topic Starter

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Local time:09:36 PM

Posted 31 October 2011 - 03:21 AM

Hi, its me again.
I tried following the steps you linked me to, but I was unable to do so, Defogger is a .exe file and it won't, DDS is a .scr but it won't run either.

Do I have any others options left?

#6 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,490 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:10:36 PM

Posted 31 October 2011 - 03:39 PM

If you cannot get DDS to work, please try this instead.

Please download OTL by OldTimer and save it to your Desktop.
  • Close all other applications and windows so that you have nothing open.
  • Double click on the Posted Image icon on your desktop.

    Vista/Windows 7 users right-click and select Run As Administrator.
    If you receive a UAC prompt asking if you would like to continue running the program, you should press the Continue button.
  • Under Output, ensure that Minimal Output is selected.
  • Click the "Scan All Users" checkbox.
    Leave the remaining selections to the default settings.
  • Click the Posted Image button.
  • Do not use the computer while the scan is in progress.
  • When the scan is complete, two log files will open in Notepad:
    • OTListIt.txt <- (will be maximized)
    • Extras.txt <- (will be minimized in the Task Bar).
  • Both logs are automatically saved to the Desktop.
  • Please copy and paste the contents of OTListIt.txt and Extras.txt in your next reply.
    If the Extras.txt log is too long, you may need to add a second reply to your thread or upload it as an attachment.
  • Click the red X in the upper right corner to exit OTL.
Important: Be sure to mention that you tried to follow the Prep Guide but were unable to get DDS to run. If OTL did not work, then reply back here.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users