nasty viruses ruin my day

Discussion in 'Malware Help (A Specialist Will Reply)' started by hkandm4s, Mar 26, 2009.

  1. hkandm4s

    hkandm4s Private E-2

    Well it seems I have to actually ask for help on this one. I got some sort of nasty google redirect virus about a month ago that would not even allow me to see the search result web address under the description. I ran the read me here and it got rid of it. It was clean all of a few days, then when I was out of town my husband said the taskbar and desktop stopped loading at startup about half of the time and it started redirecting google and yahoo again but it is sporadic. Nothing about search results is altered (I can see the web address of the real result unlike the first time) and when you click the result it either sends you to the right page and then crashes within about ten seconds or sends you to the right page then redirects you to an ad site. I downloaded avg free to replace clamwin as it stopped updating properly, but it won't allow me to update avg's virus database or run clamwin at all anymore. I went to run the readme again, and everything went alright except I can't run combofix-it shows the little loading progress bar and then nothing. It took me a while to find a legit mirror to download it from (used geekstogo link) because my browser crashes when I go to the bleepingcomputer site at all or when I google combofix. Other than that, the desktop has loaded with the 'restore my active desktop' thing for a very very long time and the little windows update shield seems to pop up for a few seconds every now and then then disappear, but it looks like the real one. I don't know, my computer has always seemed to screw up everytime windows update ran (why do I need google desktop?!?!)

    My computer is a sony viao vgnn120g notebook and I'm running windows xp media center edition. I am not opposed to reinstalling windows but I'm not sure how because my cd drive stopped working 1 week after my warranty expired (go figure)

    I attached the logs from this time and in a second post I'm attaching the logs I can find from the first time I ran it a month or so ago (I have the combofix log from that one)

    Thanks so much!
     

    Attached Files:

    hkandm4s, Mar 26, 2009
    #1
  2. hkandm4s

    hkandm4s Private E-2

    These are the logs I can find from the first time I ran the read me and *thought* things were fixed.
     

    Attached Files:

    hkandm4s, Mar 26, 2009
    #2
  3. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Your recent logs are clean. I would suggest you post in the software section for further assistance.

    If you are not having any other malware problems, it is time to do our final steps:

    1. We recommed you keep SUPERAntiSpyware and Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase them, they provide no real time protection. They are useful as backup scanners. They do not use any significant amount of resources ( except a little disk space ) until you run a scan.
    2. If we had you use ComboFix, uninstall ComboFix (This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)
      • Click START then RUN and enter the below into the run box and then click OK. Note the quotes are required
      • "%userprofile%\Desktop\combofix" /u
        • Notes: The space between the combofix" and the /u, it must be there.
        • This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.

      • Delete the C:\combofix folder from combofix (if it exists)

    3. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
    4. If running Vista, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
    5. Go to add/remove programs and uninstall HijackThis.
    6. You can delete the C:\MGtools folder and the C:\MGtools.exe file. You can also delete the C:\MGlogs.zip
    7. If you are running Vista, Windows XP or Windows ME, do the below:
      • Refer to the cleaning steps in the READ ME for your Window version and see the steps to Disable System Restore which will flush your Restore Points.
      • Then reboot and Enable System Restore to create a new clean Restore Point.

    8. After doing the above, you should work thru the below link:

     
    TimW, Mar 29, 2009
    #3

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds