Google redirection and some other virus/malware?

Please downloadComboFix
to your desktop. Turn off any AV software you have before you run it. Attach the log when finished.

Then please run the C:\MGtools\GetLogs.bat file by double clicking on it (Note: if using Vista or Win7, don't double click, use right click and select Run As Administrator).


Then attach the below logs:
* C:\ComboFix.txt
* C:\MGlogs.zip
Make sure you tell me how things are working now!

 

* Make sure that combofix.exe that you downloaded while doing the READ & RUN ME is on your Desktop

but Do not run it!
If it is not on your Desktop, the below will not work.
* Also make sure you have shut down all protection software (antivirus,

antispyware...etc) or they may get in the way of allowing ComboFix to run properly.
* If ComboFix tells you it needs to update to a new version, make sure you allow it to update.
* Open Notepad and copy/paste the text in the below code box into it (make sure you scroll all the

way down in the code box to get all lines selected ):

Code:

ClearJavaCache::
KILLALL::
File::
C:\Users\Mke\AppData\Roaming\Microsoft\Windows\Templates\4g0bk7t7pvk4po2q12ad613hu6tr
C:\Users\Mke\AppData\Roaming\Microsoft\Windows\Templates\7245pm74uh3s45828
C:\Users\Mke\AppData\Roaming\Microsoft\Windows\Templates\hm574rin7weu6s02i

* Save the above as CFscript.txt and make sure you save it to the same location (should be on your

Desktop) as ComboFix.exe
* At this point, you MUST EXIT ALL BROWSERS NOW before continuing!
* You should have both the ComboFix.exe and CFScript.txt icons on your Desktop.
If it asks you to overide the previous file with the same name, click YES.
* Now use your mouse to drag CFscript.txt on top of ComboFix.exe
http://img.photobucket.com/albums/v666/sUBs/CFScriptB-4.gif
* Follow the prompts.
* When it finishes, a log will be produced named c:\combofix.txt
* I will ask for this log below

Note:

Do not mouseclick combofix's window while it is running. That may cause it to stall.



Note: If after running Combofix you discover none of your programs will open up, and you recieve the

following error: "Illegal operation attempted on a registry key that has been marked for deletion".

Then the answer is to REBOOT the machine, and all will be corrected.

Now re-run RogueKiller and attach the new log.

Then run the C:\MGtools\GetLogs.bat file by double clicking on it (Note: if using Vista or Win7, don't double click, use right click and select Run As Administrator).

Then attach the below logs:
* RogueKiller log
* C:\ComboFix.txt
* C:\MGlogs.zip

Make sure you tell me how things are working now!