MajorGeeks Support Forums

Go Back   MajorGeeks Support Forums > ----------= PC, Desktop and Laptop Support =---------- > Malware Removal
Register FAQ Members List Calendar Casino Mark Forums Read

Malware Removal Malware removal forum. Please see the READ ME FIRST thread before you post. Forum is staffed by a small number of volunteers, please be patient.


Reply
 
Thread Tools Display Modes
  #1  
Old 04-10-13, 16:35
sn1026 sn1026 is offline
Private E-2
 
Join Date: Apr 2013
Posts: 8
Thanks: 1
Thanked 0 Times in 0 Posts
Default Google Redirect Virus: Google Chrome

Hi, I followed the Google Redirect sticky to no avail so I'm posting here. I had this Google Redirect virus removed from Firefox about a year ago. Recently decided to switch over to Chrome and it seems the virus is still on Chrome. Logs are attached. Thanks in advance to whoever helps me.
Attached Files
File Type: txt RKreport[1]_S_04092013_02d2343.txt (1.6 KB, 1 views)
File Type: txt TDSSKiller.2.8.16.0_10.04.2013_00.06.21_log.txt (146.9 KB, 0 views)
File Type: txt MBAM-log-2013-04-10 (00-04-48).txt (1.9 KB, 0 views)
File Type: log HitmanPro_20130410_0023.log (8.3 KB, 1 views)
File Type: zip MGlogs.zip (354.6 KB, 1 views)
Reply With Quote
Sponsored links
  #2  
Old 04-12-13, 14:18
TimW's Avatar
TimW TimW is offline
MajorGeeks Administrator - Jedi Malware Expert
 
Join Date: Jan 2005
Location: The recesses of my mind!
Posts: 45,948
Thanks: 400
Thanked 4,456 Times in 4,232 Posts
Default Re: Google Redirect Virus: Google Chrome

Rerun Hitman and have it fix everything it found.

Reboot and rescan with Hitman and attach the new log. Tell me how things are running after doing all that.
__________________
Major cake licker.
YCLAHTW, BYCMHD!!

Major Geeks on Facebook

Major Geeks Newsletter
Reply With Quote
  #3  
Old 04-12-13, 15:59
sn1026 sn1026 is offline
Private E-2
 
Join Date: Apr 2013
Posts: 8
Thanks: 1
Thanked 0 Times in 0 Posts
Default Re: Google Redirect Virus: Google Chrome

Alright, Hitman Pro took care of the files found but I'm still getting a redirect. Here's the log as requested.
Attached Files
File Type: log HitmanPro_20130412_1655.log (1.8 KB, 1 views)
Reply With Quote
  #4  
Old 04-13-13, 14:56
TimW's Avatar
TimW TimW is offline
MajorGeeks Administrator - Jedi Malware Expert
 
Join Date: Jan 2005
Location: The recesses of my mind!
Posts: 45,948
Thanks: 400
Thanked 4,456 Times in 4,232 Posts
Default Re: Google Redirect Virus: Google Chrome

Rerun Hitman and have it remove those PUP's.

Please disable all anti-virus and anti-spyware programs while we do the following (re-enable when you are finished):

Run C:\MGtools\analyse.exe by double clicking on it (Note: if using Vista, don't double click, use right click and select Run As Administrator). This is really HijackThis (select Do a system scan only) and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:
Quote:
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://feed.snap.do/?publisher=SnapdoOpenCandy&dpid=SnapdoOpenCandy&co=US&userid=e7322fec-190b-40d2-940c-6867465a2da8&searchtype=ds&q={searchTerms}
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://feed.snap.do/?publisher=SnapdoOpenCandy&dpid=SnapdoOpenCandy&co=US&userid=e7322fec-190b-40d2-940c-6867465a2da8&searchtype=ds&q={searchTerms}
NOTE: HJT may popup an error about the AppInit_DLLs line. Ignore it and click OK to continue.

After clicking Fix, exit HJT.

Now copy just the bold text below to notepad (Do not include any space above the word REGEDIT). Save it as fixME.reg to your desktop. Be sure the "Save as" type is set to "all files" Once you have saved it double click it and allow it to merge with the registry.
Quote:
REGEDIT4

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]

[-HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}]

[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}]

Make sure that you tell me if you receive a success message about adding the above
to the registry. If you do not get a success message, it definitely did not work.


Now run the C:\MGtools\GetLogs.bat file by double clicking on it (Note: if using Vista or Win7, don't double click, use right click and select Run As Administrator).

Then attach the below logs:

* C:\MGlogs.zip

Make sure you tell me how things are working now!
__________________
Major cake licker.
YCLAHTW, BYCMHD!!

Major Geeks on Facebook

Major Geeks Newsletter
Reply With Quote
The Following User Says Thank You to TimW For This Useful Post:
sn1026 (04-13-13)
  #5  
Old 04-13-13, 17:04
sn1026 sn1026 is offline
Private E-2
 
Join Date: Apr 2013
Posts: 8
Thanks: 1
Thanked 0 Times in 0 Posts
Default Re: Google Redirect Virus: Google Chrome

The regedit file executed successfully and it seems that I'm not receiving a redirect anymore. Thanks a lot! Anyways, here's the MGlogs.zip file as requested.
Attached Files
File Type: zip MGlogs.zip (352.3 KB, 0 views)
Reply With Quote
Sponsored links
  #6  
Old 04-13-13, 20:20
sn1026 sn1026 is offline
Private E-2
 
Join Date: Apr 2013
Posts: 8
Thanks: 1
Thanked 0 Times in 0 Posts
Default Re: Google Redirect Virus: Google Chrome

Edit: Never mind. Still getting redirects.
Reply With Quote
  #7  
Old 04-14-13, 09:16
TimW's Avatar
TimW TimW is offline
MajorGeeks Administrator - Jedi Malware Expert
 
Join Date: Jan 2005
Location: The recesses of my mind!
Posts: 45,948
Thanks: 400
Thanked 4,456 Times in 4,232 Posts
Default Re: Google Redirect Virus: Google Chrome

Have you tried uninstalling Chrome, running CCleaner and then reinstalling?
__________________
Major cake licker.
YCLAHTW, BYCMHD!!

Major Geeks on Facebook

Major Geeks Newsletter
Reply With Quote
  #8  
Old 04-14-13, 13:08
sn1026 sn1026 is offline
Private E-2
 
Join Date: Apr 2013
Posts: 8
Thanks: 1
Thanked 0 Times in 0 Posts
Default Re: Google Redirect Virus: Google Chrome

Yeah, I neglected to reinstall Chrome afterwards. Thanks for that. It's all clear now. Cheers!
Reply With Quote
  #9  
Old 04-14-13, 14:41
TimW's Avatar
TimW TimW is offline
MajorGeeks Administrator - Jedi Malware Expert
 
Join Date: Jan 2005
Location: The recesses of my mind!
Posts: 45,948
Thanks: 400
Thanked 4,456 Times in 4,232 Posts
Default Re: Google Redirect Virus: Google Chrome

Good to know.

If you are not having any other malware problems, it is time to do our final steps:
  1. We recommend you keep Malwarebytes Anti-Malware for scanning/removal of malware. You can uninstall RogueKiller and HitManPro.
  2. Go back to step 4 of the READ ME and renable your Disk Emulation software with Defogger if you had disabled it.
  3. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
  4. If running Vista or Win 7, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
  5. Go to add/remove programs and uninstall HijackThis.
  6. Goto the C:\MGtools folder and find the MGclean.bat file. Double click on this file to run this cleanup program that will remove files and folders
    related to MGtools and some other items from our cleaning procedures.
  7. After doing the above, you should work thru the below link


Malware removal from a National Chain = $149
Malware removal from MajorGeeks = $0
__________________
Major cake licker.
YCLAHTW, BYCMHD!!

Major Geeks on Facebook

Major Geeks Newsletter
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Google Chrome Redirect virus infection - have logs and programs ready to go jis3 Malware Removal 6 08-18-11 22:03
Google redirect virus but only in google chrome... zdavies Malware Removal 5 08-12-11 15:11
Google Chrome/Firefox google search redirect virus help. time_warrior66 Malware Removal 3 07-12-11 11:54
Google Redirect malware in Google Chrome browser only zicozak Malware Removal 10 04-05-11 20:59
Google Firefox & Chrome Redirect Virus geek_mark Malware Removal 10 09-10-10 01:03


All times are GMT -5. The time now is 08:19.


MajorGeeks.Com Home Page
| Admin Tools | All In One | Anti-Spyware | Anti-Virus | Appearance | Backup | Benchmarking | BIOS | Browsers | Covert Ops |
Data Recovery | Diagnostics | Drive Cleaners | Drive Utilities | Drivers | Driver Tools Ergonomics | Firewalls | Games | Game Tweaks | Graphics | Input Devices | Internet Tools | Macintosh | Mail Utilities | Memory | Messaging | Monitoring | Microsoft | Multimedia | Networking | Office Tools | Process Management | Processor | Registry | Security | System Info | Toys | Video | Miscellaneous
|
Powered by vBulletin® Version 3.8.4
Copyright © 2009 vBulletin Solutions, Inc. All rights reserved.
Ad Management by RedTyger