google redirection

[cpfccp]

Hi, im follwing the instrucions for the redirection removal and am posting my goored log hopefully this is the right place to post it

[Kestrel13!]

Hello there. You need to follow ALL of the below not just the GooredFix part.

Fixing Google Redirection/Hijacking Problems

Then I want you to continue with the below.

READ & RUN ME FIRST. Malware Removal Guide

[cpfccp]

Hi kestrel and thanks, ok working my way through everything, got as far as Root repeal which is running an error "error-invalid pe image found.
Do i still go ahead and run MGTools?

Thanks

[Kestrel13!]

Yes skip Rootrepeal.

[cpfccp]

Ok with MGtools itran for around 15 minuetes then the screen went blank for around 2 hrs, i have attached all logs that i have.

Thanks

[Kestrel13!]

Whilst I review those logs can you please also attach the log from running TDSSKiller. Were you indeed able to run it or not?

[cpfccp]

This is all i got from tdsskiller.

[Kestrel13!]

Still being redirected? If so I suspect an MBR infection and I need to know if you have your windows XP boot CD? Or can you borrow one? We are going to need it.

[cpfccp]

i will get back to you shortly on that as my brother in law gave me the laptop, so need to check with him

[Kestrel13!]

No problem.

[cpfccp]

Hi yep can get hold of one in the morning.

Thanks again

[cpfccp]

Hi Kestrel just to let you know i have the boot cd now

[Kestrel13!]

You need to use your Windows XP CD to boot to the Recovery Console and run the fixmbr to clear a Master Boot Record infection that you have.

You can read the below to help you do this:

http://support.microsoft.com/kb/307654

After running the fixmbr command then boot back to normal mode Windows and try running TDSSkiller now. Then attach the log.

[cpfccp]

The cd he gave me didn't work so will try to get hold of another one

[Kestrel13!]

OK! Do try but let me know if you really can't and we will explore other avenues.

[cpfccp]

Can't get hold ofone, everyone seems to have windows 7 now or their pc was preloaded so no disc

[Kestrel13!]

Then perhaps you may want to try creating and using Hiren's CD to fix the MBR. See what was posted in message # 12 of the below thread and see if you can get this CD to run. If you still need special drivers to access your drive, you will need to post in the Software Forum on how to do this.

whistler/black internet@mbr again!