Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Google Redirect Virus and Internet Explorer issue [Solved]


  • This topic is locked This topic is locked

#16
Transience

Transience

    Unofficial Music Guru

  • Retired Staff
  • 2,448 posts
Almost there :). Log's looking good, just a final check left now:

1. ATF Cleaner

Please download ATF Cleaner by Atribune to your desktop.
  • Double-click ATF-Cleaner.exe to run the program.
  • Under Main choose: Select All
  • Click the Empty Selected button.
If you use Firefox browser
  • Click Firefox at the top and choose: Select All
  • Click the Empty Selected button.
  • Note: If you would like to keep your saved passwords, please click No at the prompt.
If you use Opera browser
  • Click Opera at the top and choose: Select All
  • Click the Empty Selected button.
  • Note: If you would like to keep your saved passwords, please click No at the prompt.
Click Exit on the Main menu to close the program.


2. Malwarebytes' Anti-Malware

Please download Malwarebytes' Anti-Malware from here or here.

Doubleclick mbam-setup.exe to install the program.
  • Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware at the end of setup, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select Perform Full Scan, then click Scan.
  • The scan will take a fairly long time to finish (you can leave it to run and go do something else), please be patient.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Make sure that everything is checked, and click Remove Selected.
  • When disinfection is completed, a log will open in Notepad and you may be prompted to restart.
  • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab.
  • Copy & Paste the entire report in your next reply.
Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process. If asked to restart the computer, please do so and allow MBAM to finish.

3. Kaspersky Online Scan

Kaspersky online scanner uses Java technology to perform the scan. Because your Java is out of date, we need to update it first so that the scan will run without issues.

Update Java

Please download JavaRa to your desktop and unzip it to its own folder
  • Run JavaRa.exe, pick the language of your choice and click Select. Then click Remove Older Versions.
  • Accept any prompts. A log will appear (JavaRa.log), do not post this log, I have no need for it.
  • Open JavaRa.exe again and select Search For Updates.
  • Select Update Using Sun Java's Website then click Search and click on the Open Webpage button. Download and install the latest Java Runtime Environment (JRE) version for your computer.
Scan
  • Follow this link to the Kaspersky WebScanner
  • Read through the requirements and privacy statement and click on Accept button.
  • It will start downloading and installing the scanner and virus definitions. You will be prompted to install an application from Kaspersky. Click Run.
  • When the downloads have finished, click on Settings.
  • Make sure the following is checked.
    • Spyware, Adware, Dialers, and other potentially dangerous programs
      Archives
      Mail databases
  • Click on My Computer under Scan.
  • Once the scan is complete, it will display the results. Click on View Scan Report.
  • You will see a list of infected items there. Click on Save Report As....
  • Save this report to a convenient place. Change the Files of type to Text file (.txt) before clicking on the Save button.
  • Please post this log in your next reply.
So post back with the logs from MBAM and Kaspersky and give me an update on how the PC is running, and we should have you on your way :).

- Dave
  • 0

Advertisements


#17
RutgersFan 13

RutgersFan 13

    Member

  • Topic Starter
  • Member
  • PipPip
  • 57 posts
hey Dave

I am a little tied up right now so i am going to attempt to do the listed steps later today or tomorrow so bear with me.
Thank you for the help so far. Greatly appreciated

RutgersFan 13
  • 0

#18
Transience

Transience

    Unofficial Music Guru

  • Retired Staff
  • 2,448 posts
No hurry, take your time with the steps and get back to me when it's convenient for you :)
  • 0

#19
RutgersFan 13

RutgersFan 13

    Member

  • Topic Starter
  • Member
  • PipPip
  • 57 posts
Dave

I am currently running Malwarebytes and I also tried to update Java but I am getting error when i try to install Java
It says "Error 1606 Could not access network location :." I know I have updated Java in the past with out any problems so what should I do?

RutgersFan 13

Edited by RutgersFan 13, 06 January 2009 - 09:31 PM.

  • 0

#20
RutgersFan 13

RutgersFan 13

    Member

  • Topic Starter
  • Member
  • PipPip
  • 57 posts
Malwarebytes' Anti-Malware 1.32
Database version: 1625
Windows 6.0.6001 Service Pack 1

1/7/2009 7:09:34 AM
mbam-log-2009-01-07 (07-09-34).txt

Scan type: Full Scan (C:\|)
Objects scanned: 387885
Time elapsed: 5 hour(s), 50 minute(s), 48 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 2
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 2
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{3aa42713-5c1e-48e2-b432-d8bf420dd31d} (Rogue.Antivirus2008) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb} (Adware.MyWebSearch) -> Quarantined and deleted successfully.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\homeview (Trojan.DNSChanger) -> Quarantined and deleted successfully.
C:\Users\Joe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\homeview (Trojan.DNSChanger) -> Quarantined and deleted successfully.

Files Infected:
(No malicious items detected)
  • 0

#21
Transience

Transience

    Unofficial Music Guru

  • Retired Staff
  • 2,448 posts
Hello -

MBAM log looks good :).

As for Java, let's try doing the update manually:
  • Download the appropriate version of the update installer file from here.
  • Disable all your protection programs (antivirus, firewall, antipsyware), if you need specific instructions for a program they can be found here.
  • Right click on the installer file and select Run as Administrator
  • Follow the prompts and allow the installation to complete.
Let me know how that goes, if the update is successful then go ahead and give Kaspersky a run as per my previous instructions.

Cheers,
Dave
  • 0

#22
RutgersFan 13

RutgersFan 13

    Member

  • Topic Starter
  • Member
  • PipPip
  • 57 posts
I still can't install it. It downloads the Java installer and and as it goes to install that error pops up. All firewalls/antivirus protection programs are off so what should I do?
  • 0

#23
RutgersFan 13

RutgersFan 13

    Member

  • Topic Starter
  • Member
  • PipPip
  • 57 posts
I just checked in my add/remove panel and it said that java 6 update 11(latest version) was installed on 12/14/08... Is that maybe why it wont update because I already have the update installed?

Trying to run Kaspersky and it looks like its updating its database and what not. I guess it's running...

Edited by RutgersFan 13, 07 January 2009 - 03:28 PM.

  • 0

#24
Transience

Transience

    Unofficial Music Guru

  • Retired Staff
  • 2,448 posts
Yeah go ahead with Kaspersky seems you already have the latest version :). I'll await the log.
  • 0

#25
RutgersFan 13

RutgersFan 13

    Member

  • Topic Starter
  • Member
  • PipPip
  • 57 posts
Hey Dave

I didn't forget about you. Power went out at my house last night so Kaspersky was disrupted. I'm in the middle of re-running the scan again so hang in there
  • 0

Advertisements


#26
Transience

Transience

    Unofficial Music Guru

  • Retired Staff
  • 2,448 posts
No problem. Whenever you can get it is fine :)
  • 0

#27
RutgersFan 13

RutgersFan 13

    Member

  • Topic Starter
  • Member
  • PipPip
  • 57 posts
--------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER 7 REPORT
Friday, January 9, 2009
Operating System: Microsoft Windows Vista Home Premium Edition, 32-bit Service Pack 1 (build 6001)
Kaspersky Online Scanner 7 version: 7.0.25.0
Program database last update: Thursday, January 08, 2009 14:30:24
Records in database: 1587442
--------------------------------------------------------------------------------

Scan settings:
Scan using the following database: extended
Scan archives: yes
Scan mail databases: yes

Scan area - My Computer:
C:\
D:\
E:\
F:\
O:\
P:\
Q:\
R:\

Scan statistics:
Files scanned: 549977
Threat name: 0
Infected objects: 0
Suspicious objects: 0
Duration of the scan: 06:02:33

No malware has been detected. The scan area is clean.

The selected area was scanned.
  • 0

#28
Transience

Transience

    Unofficial Music Guru

  • Retired Staff
  • 2,448 posts
Looks good to me :). Congratulations! You're clean! :)

We have a couple last things to take care of and then you're good to go.

Over the course of the fix you've used a variety of special tools to help with the cleaning process - none of these are of any use to you now that you're clean, and it's best not to have them hanging around on your computer. OTCleanIt is a small program that removes all the leftover tools and logs from cleanup of malware.

Please download OTCleanIt! to your desktop.
  • Double-click OTCleanIt.exe to run it. (Vista users, please right click on OTCleanIt.exe and select "Run as an Administrator")
  • Click on the CleanUp! button
  • A list of tool components used in the cleanup of malware will be downloaded.
  • If your firewall or other protection attempts to block OTCleanIt's attempts to reach the internet, please allow it to run.
  • Click Yes to begin the Cleanup process and remove the tools we used, including this application.
  • You will be asked to reboot the machine to finish the Cleanup process, choose Yes.
  • After the reboot all the tools we used should be gone.

We need to flush out all your old system restore points as they are likely to be infected, and then create a new one so you have a clean configuration to return to should you become infected again. The system restore files are protected by your operating system, so this is how we have to get at them:

To manually create a new Restore Point
  • Go to Control Panel and select System and Maintenance
  • Select System
  • On the left select Advance System Settings and accept the warning if you get one
  • Select System Protection Tab
  • Select Create at the bottom
  • Type in a name i.e. Clean
  • Select Create
Now we can purge the infected ones
  • Go back to the System and Maintenance page
  • Select Performance Information and Tools
  • On the left select Open Disk Cleanup
  • Select Files from all users and accept the warning if you get one
  • In the drop down box select your main drive i.e. C
  • For a few moments the system will make some calculations
  • Select the More Options tab
  • In the System Restore and Shadow Backups select Clean up
  • Select Delete on the pop up
  • Select OK
  • Select Delete
Here are some tips to reduce the potential for malware infection in the future; I strongly that you read them and take them to heart so that you don't have to endure the process of cleaning your computer again.

Proper use of antivirus and firewall
Antivirus and Firewall programs are integral to your computer security. However, just having them installed isn't enough. The definitions of these programs are frequently updated to detect the latest malware, and if you don't keep up with these updates then you'll be vulnerable to infection. Many antivirus and firewall programs have automatic update features, make use of those if you can. If your program doesn't, then get in the habit of routinely performing manual updates, because it's important.

You should keep your antivirus and firewall guard enabled at all times, don't shut them off unless there's a specific reason to do so. Also, regularly performing a full system scan with your antivirus program is a good idea to make sure nothing has slipped through your protection. Once a week works well for many people. You can set the scan to run during a time when you don't plan to use the computer and just leave it to complete on its own.

Finally, for a great tutorial on how to get the best protection out of your firewall, visit this link.

Safer web browser
Internet Explorer is not the most secure tool for browsing the web. It has been known to be very susceptible to infection, and there are a couple good free alternatives: Firefox and Opera. Both are excellent faster, safer, more powerful and functional free alternatives to Internet Explorer. It's definitely worth the short period of adjustment to start using one of these. If you wish to continue using Internet Explorer, it would be a good idea to follow the tutorial here which will help you to make IE much safer.

Be careful
Having security programs installed is very helpful to you, but none of them have the gift of human thought. The best way to make sure you don't get infected is to exercise common sense. Be careful of what websites you visit - if a site looks suspicious, trust your instincts and get out of there. Be careful of what attachments you open in emails and files you download from websites - check them over carefully and look at the file extensions to make sure that you know what you're getting. Using peer-to-peer file sharing programs or downloading cracks and keygens is something else to avoid - the files you will be downloading are infected in a vast majority of cases, and the benefits simply aren't worth the risk to your computer.

A couple other useful utilities:
ATF Cleaner: Cleans unnecessary temporary files from your computer, run regularly to save disk space and keep your computer performing smoothly.
McAfee SiteAdvisor: A great firefox add-on that puts McAfee's database of tested sites at your fingertips so you can know whether or not that link you're about to click is safe.

Windows Updates
Along with keeping all of the programs above that you choose to use updated, it is also important to keep up on system updates from Microsoft, as these patch critical security vulnerabilities and keep you safe. You can update them at this site if they don't automatically install for you: http://www.windowsupdate.com. If you have automatic updates, you should always install them as soon as possible, that little bit of extra time is very well worth it instead of getting infected from an exploit and having to clean your PC again.

And finally, see TonyKlein's good advice (recently rewritten by our own admin Kat) which reinforces and extends on some of the above concepts:
So how did I get infected in the first place?

I'll leave this thread open for a couple days in case you come across any lingering problems that need fixing, then I'll close it up. If you need it reopened for any reason just shoot me a PM. It's been a pleasure working with you, now best of luck!

Cheers,
Dave
  • 0

#29
RutgersFan 13

RutgersFan 13

    Member

  • Topic Starter
  • Member
  • PipPip
  • 57 posts
Thank you for all your help Dave. I can't thank you enough... Feels good to be able to browse with a clean computer.

Have a nice day

RutgersFan 13
  • 0

#30
Transience

Transience

    Unofficial Music Guru

  • Retired Staff
  • 2,448 posts
Glad to help, best of luck to you :).
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP