Posted 15 December 2011 - 11:00 PM
My sister asked me to take a look at her computer because she recently started having some ugly google redirect symptoms.
She says the issue started after going to a website called "blinx", which I think is some kind of sketchy video streaming site.
I've seen a few pop-ups, mostly for this "blinx" website, another starts with an M (Miveo, maybe), but I only saw it once.
Before getting my help, my sister ran Malware Bytes and Avira. They found some things and seem to have cleared up the pop-ups, but we still have the google redirecting issue.
These are the steps I took:
I restarted windows in safemode
Ran Rkill (which stopped a process "C:/windows/syswow64/rundll32.exe")
RanTDSSKiller, which didn't find anything
Ran MalwareBytes again, which didn't find anything else.
Upon restarting windows, we are still getting incessant requests to allow permission for the obviously phony "C:/windows/syswow64/rundll32.exe" and a truncated path ending with "vuimfqb.apx"
We would greatly appreciate any help!
Her OS is Windows Vista Home Premium (6.0, Build 6002)