After R&RMF (whew!) we're better, but still get a page redirect...

Greetings, and thanks for your help.

After going thought the Run & Read Me First steps, I (ok, we; thank you again) seem to have cleaned up a lot of Bad Behavior on my PC. It took almost 24 hours, but it helped. I had tried just about everything.

Now, I still have a constant page redirect going in Firefox, when i click on a link to another URL. I have redirect turned off in FF, so it never gets there. I have to cut and paste the link URL in the address box to go there.

This misbehavior started about three weeks ago or so, after visiting that ring of time-wasting sites that include 'Facebook fails' and 'There I fixed it' dot coms... whatever.

I ran a lot of antivirus apps before coming here, and played cat and mouse with it for weeks.

So.....:

1. During the R&RMF process, I ran SuperAntiSpyware - no problems found.

2. Then, a system error message pops up:

Generic Host Process for Win32 Services

Generic Host Process for Win32 Services has encountered a problem and needs to close....

Details....

Generic Host Process for Win32 Services
Error Signature
szAppName : svchost.exe szAppVer : 5.1.2600.2180 szModName : mshtml.dll
szModVer : 6.0.2900.2180 offset : 001f57fa

To view technical information about the report, click here;

The following files will be included in this error report:
C:\DOCUME~1\Owner\LOCALS~1\Temp\WER459d.dir00\svchost.exe.mdmp
C:\DOCUME~1\Owner\LOCALS~1\Temp\WER459d.dir00\appcompat.txt

3. The rest of the steps went well...

4. I didn't have the Windows XP Recovery console. Combofix couldn't download it while running due to a lost connection. So, after running ComboFix, I downloaded and dropped the WinXP SP2 file on it. ComboFix restarted the scan. That wasn't documented, but it seemed harmless enough.

5. The R&RMF process requests I provide you with all 5 logs; it seems vBulletin configuration only allows 4, so I have zipped them as one.

- Thanks again for your help -

RogerN

 

Thank you, Chas....

I ran both. rebooted between... nothing to delete, yet.

I've attached the TDSSKiller log file... - r

 

Wow, my time to edit my previous post has expired quickly.

I have just realized that the R&RMF process may have been successful; I have been limiting my testing to MSN and my work email, both of which legitimately use redirecting. a lot.

So, my FF check box to warn of redirects may be giving me false positives; I got brave, and so far, they have all been legitimate.

If it continues to behave, I guess I need to move on to the cleanup process, eh?

After doing my happy dance, of course, and thanking you profusely.

thanks again, - r



Thank you, Chas....

I ran both. rebooted between... nothing to delete, yet.

I've attached the TDSSKiller log file... - r