Google Redirect Removal

Welcome to MajorGeeks!

Malwarebytes' logs are located here for Vista and Windows 7
C:\Users\<insert your user account name>\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Logs

Please attach the MBAM log while I review your other logs.

 

Before we begin - you must set MSconfig for "Normal Startup Mode"
Use MSconfig to setup for Normal Startup Mode

Please re-scan with Hitman Pro and have it delete everything under the heading of

• Malware remnants

...ignore any other findings.
Afterwards, click the Next button.
HitmanPro may want to reboot the PC in order for the changes to take affect, please do so.
After reboot and when you are back in Windows, run another scan with HitmanPro and then attach the latest HitmanPro log

Next, double-click RogueKiller.exe to run it. (Vista/7 right-click and select Run as Administrator)
When it opens, press the Scan button, then select the Registry tab and then select any of the below that exist and then click the Delete button.

• ¤¤¤ Registry Entries : 8 ¤¤¤
  [RUN][SUSP PATH] HKCU\[...]\Run : Apple (rundll32 "C:\Users\Gary\AppData\Local\Deployment\Apple\yluyvn.dll",DllRegisterServerW) [-] -> FOUND
  [RUN][SUSP PATH] HKUS\S-1-5-21-3605171494-1786776628-2313547810-1001[...]\Run : Apple (rundll32 "C:\Users\Gary\AppData\Local\Deployment\Apple\yluyvn.dll",DllRegisterServerW) [-] -> FOUND
  [TASK][SUSP PATH] IHUninstallTrackingTASK : CMD /C DEL C:\Users\Gary\AppData\Local\Temp\IHUFE0F.tmp.exe [x] -> FOUND

When it is finished there will be a log on your desktop called RKreport[2].txt, attach it to your next reply.
Then immediately reboot your PC.

After reboot, run new scans with both RogueKiller and Hitman Pro, attach those new logs to your next reply.

Uninstall:
Coupon Printer for Windows <--- unwanted app
*All installed Java is outdated and a secuirty risk
J2SE Runtime Environment 5.0 Update 17
Java Auto Updater
Java(TM) 6 Update 23

Delete this folder using Windows Explorer
C:\ProgramData\Uniblue

http://imageshack.us/a/img841/7292/thisisujrt.gif Please download Junkware Removal Tool to your desktop.

• Shut down your protection software now to avoid potential conflicts.
• Run the tool by double-clicking it. If you are using Windows Vista or Seven, right-mouse click it and select Run as Administrator.
• The tool will open and start scanning your system.
• Please be patient as this can take a while to complete depending on your system's specifications.
• On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
• Attach the JRT.txt to your next message.

Now download AdwCleaner and save it to your Destop.

• Double-click AdwCleaner.exe to run it. (Vista & Win7 users should right-click and "Run As Administrator")
• Click on Delete
• Your pc should now automatically re-boot
• AdwCleaner will display a log showing the files, folders, and registry entries that were removed.
• Attach this log to your next reply.

Re-boot your pc, then install the latest Sun Java Runtime Environment

Please attach these logs to your next reply:

• RKreport[2].txt
• updated HitmanPro log
• JRT.txt
• AdwCleaner[S1].txt

How is your pc running?

 

We are all volunteers here in MajorGeeks' Malware Removal, devoting some of our free time and talents to help members remove malicious software from their machines. Your expressed "Thanks!" is our reward.

* If you are not having any other malware problems, it is time to do our final steps:

1. We recommend you keep Malwarebytes Anti-Malware for scanning/removal of malware. It provides no "real-time" protection unless you purchase it and does not use any significant amount of resources ( except a little disk space ) until you run a scan.
2. Go back to step 4 of the READ ME and re-enable your Disk Emulation software with Defogger if you had disabled it.
3. If running Vista or Win 7, it is time to make sure you have re-enabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
4. Go to add/remove programs and uninstall HijackThis.
5. Go to the C:\MGtools folder and find the MGclean.bat file. Double click on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.
6. If we had you download any registry patches like fixme.reg or fixWLK.reg (or any others) and running MGclean.bat did not remove, you can delete these files now.
7. Any other miscellaneous tools we may have had you install or download can be uninstalled and/or deleted.
8. If you are running Win 7, Vista, Windows XP or Windows ME, do the below:
   • Refer to the cleaning procedures pointed to by step 6 of the READ ME
     for your Window version and see the instructions to Disable System Restore which will flush your Restore Points.
   • Then reboot and Enable System Restore to create a new clean Restore Point.
9. After doing the above, you should work through the below link:
   • How to Protect yourself from malware!

Safe surfing! http://i268.photobucket.com/albums/jj5/drmoriarty/Emoticons/char145.gif