hijack virus clean?

Hi there and welcome. I am currently reviewing your logs and will get back to you with a set of instructions in the next post I make to you.

 

Have the redirects stopped since running the scans then?

Important Notice: A new version of SUPERAntiSpyware is available.

• Please uninstall your current version (this is necessary).
• Then download this SUPERAntiSpyware
• Install this new version. It may tell you that you need to reboot to complete the installation. You must reboot at this time.
• After the reboot, run SUPERAntiSpyware and immediately click the Check for Updates button to get more updates for the database.
• Now run a new full scan of your system. And attach this log later.

You need to be running combofix directly from your desktop, NOT where you have it here:

Now we need to use ComboFix

• Make sure that combofix.exe that you downloaded while doing the READ & RUN ME is on your Desktop but Do not run it!
  • If it is not on your Desktop, the below will not work.
• Also make sure you have shut down all protection software (antivirus, antispyware...etc) or they may get in the way of allowing ComboFix to run properly.
• If ComboFix tells you it needs to update to a new version, make sure you allow it to update.
• Open Notepad and copy/paste the text in the below quote box. Ensure you scroll down to select ALL the lines:

Code:

KILLALL::

File::
c:\program files\Common Files\evotifazev.pif
c:\program files\Common Files\ekeca.dl
c:\program files\crack_pscs4_x64.bat
c:\windows\yvezi.com
c:\windows\system32\supogojex.bat
c:\windows\system32\1033\vsjitdebuggerui.dll
c:\windows\system32\axulygoly.sys
c:\windows\sybu.sys
c:\windows\rujymoneg.dat
c:\program files\AskBarDis\bar\bin\AskService.exe

Folder::
c:\program files\AskBarDis

Driver::
ASKService

DirLook::
c:\windows\system32\js
c:\windows\system32\html
c:\windows\system32\css
c:\windows\system32\1033

• Save the above as CFscript.txt and make sure you save it to the same location (should be on your Desktop) as ComboFix.exe
• At this point, you MUST EXIT ALL BROWSERS NOW before continuing!
• You should have both the ComboFix.exe and CFScript.txt icons on your Desktop.
• Now use your mouse to drag CFscript.txt on top of ComboFix.exe
  
  
  
  
• Follow the prompts.
• When it finishes, a log will be produced named c:\combofix.txt
• I will ask for this log below

Note:

Do not mouseclick combofix's window while it is running. That may cause it to stall.

Now run the C:\MGtools\GetLogs.bat file by double clicking on it. Then attach the new C:\MGlogs.zip file that will be created by running this.

Tell me, how are things running? Still being redirected? Attach the new SAS log.