Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Running ComboFix to repair redirect virus


  • Please log in to reply
1 reply to this topic

#1 Sportsfan123

Sportsfan123

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:06:25 AM

Posted 20 April 2012 - 09:27 PM

I started noticing today that when I clicked on links when doing a search, some of them would redirect to other websites. So I was looking for software that could remove it and read about ComboFix being thorough and the best to remove the virus. I should've come here first before using it. I'm worried I messed something up. I have Windows XP. The scan is still going on now but I think it's not going right. Before I started scanning I disabled my antivirus Avast 5 but I didn't permanently disable it and it came back on after 10 minutes. When it came back on, CF already set up a new restore point and backed up the registry.

So when I realized the antivirus went back on I disabled it permanently this time. At this point in the scan, it already said Scanning for infected files... this usually doesn't take more than 10 minutes etc. Then it said "Access is denied. SED: Can't read the Plist02. No such file or directory. Access is denied." The desktop has also disappeared. Next it went through the 50 stages and it said deleting files.. and listed them but I can't copy it right now. Also it said deleting folders and had some that said like documents and settings\admin\windows and system32\config\systemprofile\windows. Right now it's still showing the scan and hasn't shown anything new for like an hour and a half. Since the scan is still happening, is there a way to stop and cancel it or do I have to let it finish? It was so foolish of me to try this without help.

I'm sorry if I posted this in the wrong area. I'm new to this website.

Edited by Sportsfan123, 20 April 2012 - 11:38 PM.


BC AdBot (Login to Remove)

 


#2 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,141 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:06:25 AM

Posted 23 April 2012 - 07:33 AM

Since you already ran Combofix, it should have saved a log to the root directory, usually C:\ComboFix.txt. Reviewing that log will be helpful in resolving your issue but they are not permitted in this forum.

Please follow the instructions in the "Preparation Guide For Requesting Help" starting at Step 6. When you have done that, post the required logs to include your ComboFix log in that forum, NOT here, for assistance by the Malware Response Team Experts.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users