Browser Search Results Wrong

Brad V · Jan 1, 2009

Problem: I do a search from IE or Firefox with diffferent engines and get strange results.

MajorGeeks.com - Download Freeware and Shareware Computer Utilities.
Download freeware and shareware software utilities. Download files for your computer that tweak, repair, enhance, protect ...
www.shopasearch.com - 73k

We did acquire Antivirus 2009 at the same time this problem arose...I am not sure if this is realated? I went through the steps you suggested and am still having search engine problems. No pop ups, "you have a virus" or redirect issues. Using XP pro w/sp2

Thanks,

Brad V · Jan 1, 2009

4th log... thanks.

Brad V · Jan 2, 2009

Help With Logs, Still Broken

I have loaded on Avast, and Online Armour... removing MS firewall and Norton,
and done as many other housekeeping things I see you suggest...(Been neglected to long)

I ran Smitfraud as well. Attached log

I am a bit of a novice here and fear I may getting in too deep..
Thanks all for your dedicated voluntarism...

Brad V · Jan 3, 2009

Hurray... Maybe.

After doing all the preventative measures, I was on the pc and Avast popped up with an alert for a Win32 virus... then asked do do a complete scan after reboot... It did , and found 6 more win32 trojan-gen's in c:\system volume information\restore.... .exe. Not found by other programs.

And after it finished and was up and running another alert came up and I put that bug away also..

No more problems with my searches being hijacked.... and it seems the PC is running faster ( more maintenance to do yet). Kudos's for Avast
Thanks for all your good "sticky" posts.

Can I assume now that all is well? or are there any more logs I should run to make sure?

Brad V · Jan 3, 2009

DO AS -Major Geeks- "GEEKS" SAY!!

First... thanks to the Major Geeks community for providing a great wealth of information and brilliant, dedicated support!
You will be my one stop shopping store... (just joined)

After wrestling with malware issues these past few days (reading your instructions/posts), I realize that if this were a "Family Services" issue that I, being the father of my PC, would definitely be arrested, tried, convicted, jailed (60 days at least), and put on probation for the rest of my life.. All for the blatant neglect of my child (PC)!

If only I had carefully followed line by line the loving instructions provided by the "Geeks" for the care, protection, and maintenance of my baby... then all this could have been avoided, but no... I was too busy to care, not realizing how precious my child was to me until it was to late... the damage done.

I do hereby publicly repent... :cry
Dear PC, Please forgive me...
Dear Geek community... help me back on my feet and on the road to recovery. I know you understand.

Lastly and most importantly; for all you parents of PC's... please do not make the same mistakes I made. Listen to the "Geeks"! Follow their sticky posts line by line... They know what they're talking about, They care. They are there to help. They will bring you back to that wonderful symbiotic relationship you want with your PC.... or more importantly... they can help you avoid the problems altogether!!!

postscript... I am now on the road to recovery, thanks to the "Geeks" words of wisdom.
My story... "Browser Search Results Wrong" http://forums.majorgeeks.com/showthread.php?t=178301

TimW · Jan 5, 2009

Now how many AV programs do you have running?
You had:
Norton AntiVirus Corporate Edition
Kaspersky Anti-Virus Personal

You should only have ONE AV program installed!

Your logs are clean.....If you are not having any other malware issues, then:

We recommed you keep SUPERAntiSpyware and Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase them, they provide no real time protection, but are effective as backup scanners. They do not use any significant amount of resources ( except a little disk space ) until you run a scan.

If we had you use ComboFix, uninstall ComboFix (This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)

Click START then RUN and enter the below into the run box and then click OK. Note the quotes are required

"%userprofile%\Desktop\combofix" /u

Notes: The space between the combofix" and the /u, it must be there.

This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.

Delete the C:\combofix folder from combofix (if it exists)

Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.

If running Vista, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.

Go to add/remove programs and uninstall HijackThis.

You can delete the C:\MGtools folder and the C:\MGtools.exe file. You can also delete the C:\MGlogs.zip

If you are running Vista, Windows XP or Windows ME, do the below:

Refer to the cleaning steps in the READ ME for your Window version and see the steps to Disable System Restore which will flush your Restore Points.

Then reboot and Enable System Restore to create a new clean Restore Point.

After doing the above, you should work thru the below link:

How to Protect yourself from malware!

Click to expand...

Brad V · Jan 5, 2009

I have removed Norton and Kapersky.
Installed Avast, and Spywareblaster, and CC cleaner
Disabled MS firewall and Installed Online Armour.
Have Spybot, SUPERAntiSpyware and Malwarebytes Anti-Malware to do manually as needed.

I will finish as you suggest and go from there....

My wife came upon the same "Antivirus 2009" one hour ago- doing an "Oregon prefix" google- it seems at this link.

• Telephone Prescription Line › Telephone Prefix 356
telephone prefixes in oregon telephone prefix 272 telephone prefix directory telephone preference scheme bt telephone ports explained telephone prefix 866 ...
biodrive.ch/viewtopic.php?m=8&tp=41954&l=548 - 4 hours ago - Similar pages

I was not sure if it was my PC or lightning was striking twice in a week...
I did a Whois and emailed the company.... just in case.
And... warned my wife about questionable addresses...

I wasn't sure how to check out that link on my other PC without opening it...and too unsure of my skills to face that evil again....

Thanks,

TimW · Jan 6, 2009

I would suggest that you simply use white pages rather than a google prefix search.

And you are quite welcome.

Log in or Sign up

Browser Search Results Wrong

Brad V Private E-2

Attached Files:

SUPERAntiSpyware Scan Log - 12-31-2008 - 15-43-34.log

mbam-log-2008-12-31 (23-58-01).txt

ComboFix.txt 01-01-08.txt

Brad V Private E-2

Attached Files:

MGlogs.zip

Brad V Private E-2

Attached Files:

rapport.txt

Brad V Private E-2

Brad V Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

Brad V Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member