Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


Flash Player Installer and Google Redirect Virus

  • Please log in to reply
3 replies to this topic

#1 greeninker


  • Members
  • 1 posts
  • Local time:08:03 PM

Posted 17 July 2012 - 07:12 AM


I'm having the same issue as described here: http://www.bleepingcomputer.com/forums/topic459767.html.

Adobe Flash Player Installer is popping up every 10 minutes and sites are being redirected to random ads. In Chrome I get the following error message when trying to visit any site: "The site's security certificate is signed using a weak signature algorithm!"

I've run a quick scan on Malwarebytes a few times and it detects trojans, deletes them, reboots the computer but the problem persists. Now Malwarebytes is blocking services.exe and svchost.exe every five minutes.

I'm running Windows 7 Home Premium 64-bit.

Any help would be greatly appreciated.

Thank you.

BC AdBot (Login to Remove)


#2 narenxp


  • BC Advisor
  • 16,371 posts
  • Gender:Male
  • Location:India
  • Local time:03:03 PM

Posted 17 July 2012 - 08:51 AM



Launch it.Click on change parameters-Select TDLFS file system

Click on "Scan".Please post the LOG report(log file should be in your C drive)



Launch it, allow it to download latest Avast! virus definitions
Click the "Scan" button to start scan.After scan finishes,click on Save log

Post the log results here


ESET online scanner

Install it

Click on START,it should download the virus definitions
When scan gets completed,click on LIST of found threats

Export the list to desktop,copy the contents of the text file in your reply

#3 OhHaiDare


  • Members
  • 4 posts
  • Local time:03:03 PM

Posted 18 July 2012 - 09:24 AM

I have the same problem, so I guess I could put my log posts here too? :P

Here's my aswMBR one.

aswMBR version Copyright© 2011 AVAST Software
Run date: 2012-07-18 10:06:51
10:06:51.684 OS Version: Windows x64 6.1.7601 Service Pack 1
10:06:51.684 Number of processors: 4 586 0x102
10:06:51.685 ComputerName: ROCKY UserName:
10:06:53.935 Initialize success
10:07:05.205 AVAST engine download error: 0
10:07:15.804 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\00000060
10:07:15.807 Disk 0 Vendor: ST500DM0 JC4B Size: 476940MB BusType: 3
10:07:15.823 Disk 0 MBR read successfully
10:07:15.826 Disk 0 MBR scan
10:07:15.829 Disk 0 Windows 7 default MBR code
10:07:15.837 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 100 MB offset 2048
10:07:15.847 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 476838 MB offset 206848
10:07:15.862 Disk 0 scanning C:\Windows\system32\drivers
10:07:21.149 Service scanning
10:07:29.926 Modules scanning
10:07:29.933 Disk 0 trace - called modules:
10:07:29.967 ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys storport.sys hal.dll nvstor64.sys
10:07:29.971 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8007ab1060]
10:07:29.977 3 CLASSPNP.SYS[fffff8800165143f] -> nt!IofCallDriver -> [0xfffffa8006ae8210]
10:07:29.982 5 ACPI.sys[fffff88000e2f7a1] -> nt!IofCallDriver -> \Device\00000060[0xfffffa8006ae9060]
10:07:29.986 Scan finished successfully
10:08:56.720 Disk 0 MBR has been saved successfully to "C:\Users\CrisPy\Documents\virus stuff\MBR.dat"
10:08:56.725 The log file has been saved successfully to "C:\Users\CrisPy\Documents\virus stuff\aswMBR.txt"

I'm having trouble downloading the ESET online scanner, I'll post the results once I get it to download

Edited by OhHaiDare, 18 July 2012 - 09:25 AM.

#4 narenxp


  • BC Advisor
  • 16,371 posts
  • Gender:Male
  • Location:India
  • Local time:03:03 PM

Posted 18 July 2012 - 02:57 PM


Create a new topic


0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users