win7, IE fail, funmood redirect/malware?

Greetings,
running dell win7, home premium with majorgeeks standard malware protection (SAS, avast, spyblast, spybot, comodo); problem with IE started tonight.... when IE opened, funmoods.com came up.... knowing majorgeeks is my home page and setup not to change... figure something smelly... funmoods was not in program list... found in cc cleaner and uninstalled from there; then tried IE and the IE frame now comes up for about 1-2 seconds, all blank and then goes away... spybot found one 'doubleclick' threat; ran cc cleaner a few times. continuing to try other things, when i updated cc cleaner, its site came up ok with google chrome... then attempted running google chrome and it came up to funmood site asking me to download plugin.. didn't do it, instead came to major geeks from address bar and here i am.... any help is super appreciated! thanks

 

Hello yodel99,

Please read ALL of this message including the notes before doing anything.

Please follow the instructions in the below link:

READ & RUN ME FIRST. Malware Removal Guide


and then attach the requested logs to your next reply when you finish these instructions.

• **** If something does not run, write down the info to explain to us later but keep on going. ****
• Do not assume that because one step does not work that they all will not. MGtools will frequently run even when all other tools will not.

• After completing the READ & RUN ME and attaching your logs, make sure that you tell us what problems still remain ( if any still do )!

Helpful Notes:

1. If you run into problems trying to run the READ & RUN ME or any of the scans in normal boot mode, you can run the steps in safe boot mode but make sure you tell us what you did later when you post logs. See the below if you do not know how to boot in safe mode:
   
   • Starting your computer in Safe mode
2. If you have problems downloading on the problem PC, download the tools and the manual updates for SUPERAntiSpyware and Malwarebytes ( links are given in the READ & RUN ME) onto another PC and then burn to a CD. Then copy them to the problem PC. You will have to skip getting updates if (and only if) your internet connection does not work. Yes, you could use a flash drive too, but flash drives are writeable and infections can spread to them.
3. If you cannot seem to login to an infected user account, try using a different user account (if you have one) in either normal or safe boot mode and running only SUPERAntiSpyware and Malwarebytes while logged into this other user account. Then reboot and see if you can log into the problem user account. If you can then run SUPERAntiSpyware, Malwarebytes, ComboFix and MGtools on the infected account as requested in the instructions.
4. To avoid additional delay in getting a response, it is strongly advised that after completing the READ & RUN ME you also read this sticky:
   • Don't Bump! It Only Hurts You!!!

* Any additional post is a bump which will add more delay. Once you attach the logs, your thread will be in the work queue and as stated - our system works the oldest threads FIRST.
​

 

Hi, went through read and run; flushed java, comodo unhappy about deploy.jar, but allowed anyway; dont' have firefox, cant' get into IE (root issue); dns pass; did not cycle router since other pc in house is fine; ran tdssfix, no infec found; ran MBRchecker, avast didnt like it, but allowed, log attached; in proxy area only thing found was that on my pc 'automatic detect settings' was checked, and in forum notes it was not checked, so I checked mine. so, checked again, and when IE opens, it comes up for 1-2 sec and disappears. When GC opened, def site is start.funmood and trys to download something, or get me to download something. i can get here my typing MG in GC address bar. thanks again for working with me. Yodel99

 

My fault I jumped the gun, I'm sorry! I read more carefully and followed instructions as best I could; while going through IE suggestions in step 1, decided to uninstall IE9. Seems that windows update installed IE9. after removal, IE program was still in listing and when I ran it, IE8 came up.... in fact it came up fine without my initial issue. Guessing IE9 was the culprit. Went through rest of steps no issues found; thanks for your help; please consider this thread closed.

 

Glad to hear that
Surf safely!