Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Malware/Rootkit/Redirect


  • This topic is locked This topic is locked

#46
heir

heir

    Trusted Helper

  • Malware Removal
  • 5,427 posts
What sites do you get redirected to?
Is it always the same or does it differ?


From your first post

I am constantly being redirected to google image search or being told my page was not found.

Can you elaborate on this. Are you being redirected the same way now?

I need you to run yet another tool to find out some network settings on your computer.



Please download TCPView from here (TCPView.zip) and save it to your desktop.

Right-click on TCPView.zip and chose Extract all... Click the default selections and the files will be extracted to TCPView -folder on your desktop.

Open TCPView folder and double-click on Tcpview.exe

Close ALL other windows except TCPView - SysInternals: www.sysinternals.com (the window that was opened).

Goto File -> Save as ... and save the log ( name it TCPV.txt ) - click Save ( it willl be located in the TCPViewv folder on your desktop).

Post the content of that log in your reply.



How was the router reset?

It needs to have been reset to factory settings.
Then reconfigured according to the settings that AT&T provides.

If it wasn't reset to factory settings before reconfiguring it, contact AT&T again for guidance on how to reset it to factory settings and to reconfigure it.

If you made a reconfiguration of the router rerun TCPView and save the log with a different name and post it's content in your reply.



In your reply I would like answers to my questions and 1 or 2 logs from TCPView depending on if you reconfigured the router.
  • 0

Advertisements


#47
MsChief

MsChief

    Member

  • Topic Starter
  • Member
  • PipPip
  • 33 posts
If I get fully re-directed it is to google image search and the url of the site I was trying to go to is usually in the search bar. If I do not get the entire re-direct it tells me "navigation was cancelled", my page could not be found. If I refresh or retype the address it usually takes me to the correct page. Sometimes I have to refresh or retype 4 or 5 times to get to my page... I use the goverment page for our 'county' as they have links to everything I need to do my research so I know the page has not moved when I get that message.

AT&T 2Wire router was set according to AT&T. I am having trouble recalling all of the steps I've taken with this. I am pretty sure when i was on with At&T we reset to factory defaults then set a password. The AT&T rep then used remote acess to configure settings.


AppleMobileDeviceService.exe 1716 TCP LawClerkTS-PC 27015 localhost 49169 ESTABLISHED
AppleMobileDeviceService.exe 1716 TCP LawClerkTS-PC 27015 LawClerkTS-PC 0 LISTENING
avgemc.exe 2892 TCP LawClerkTS-PC 10110 LawClerkTS-PC 0 LISTENING
iexplore.exe 1224 UDP LawClerkTS-PC 50908 * *
iexplore.exe 1500 UDP LawClerkTS-PC 63274 * *
iTunesHelper.exe 4060 TCP LawClerkTS-PC 49169 localhost 27015 ESTABLISHED
LMpdpsrv.exe 3816 TCP LawClerkTS-PC 49161 LawClerkTS-PC 0 LISTENING
LMpdpsrv.exe 3816 TCPV6 lawclerkts-pc 49161 lawclerkts-pc 0 LISTENING
lsass.exe 664 TCP LawClerkTS-PC 49156 LawClerkTS-PC 0 LISTENING
lsass.exe 664 TCPV6 lawclerkts-pc 49156 lawclerkts-pc 0 LISTENING
mDNSResponder.exe 1996 TCP LawClerkTS-PC 5354 LawClerkTS-PC 0 LISTENING
mDNSResponder.exe 1996 UDP lawclerkts-pc.gateway.2wire.net 5353 * *
mDNSResponder.exe 1996 UDP LawClerkTS-PC 53155 * *
mDNSResponder.exe 1996 UDP LawClerkTS-PC 56496 * *
mDNSResponder.exe 1996 UDPV6 lawclerkts-pc 56497 * *
services.exe 640 TCP LawClerkTS-PC 49159 LawClerkTS-PC 0 LISTENING
services.exe 640 TCPV6 lawclerkts-pc 49159 lawclerkts-pc 0 LISTENING
spoolsv.exe 1908 TCP LawClerkTS-PC 49155 LawClerkTS-PC 0 LISTENING
spoolsv.exe 1908 UDP LawClerkTS-PC 56495 * *
spoolsv.exe 1908 TCPV6 lawclerkts-pc 49155 lawclerkts-pc 0 LISTENING
svchost.exe 1108 TCP LawClerkTS-PC epmap LawClerkTS-PC 0 LISTENING
svchost.exe 1244 TCP LawClerkTS-PC 49153 LawClerkTS-PC 0 LISTENING
svchost.exe 1324 TCP LawClerkTS-PC 49154 LawClerkTS-PC 0 LISTENING
svchost.exe 1536 UDP LawClerkTS-PC ntp * *
svchost.exe 1324 UDP LawClerkTS-PC isakmp * *
svchost.exe 1536 UDP LawClerkTS-PC ssdp * * 36 17,214 129 54,285
svchost.exe 1536 UDP lawclerkts-pc.gateway.2wire.net ssdp * *
svchost.exe 1536 UDP LawClerkTS-PC 3702 * *
svchost.exe 1536 UDP LawClerkTS-PC 3702 * *
svchost.exe 1324 UDP LawClerkTS-PC ipsec-msft * *
svchost.exe 1696 UDP LawClerkTS-PC llmnr * * 4 176
svchost.exe 1324 UDP LawClerkTS-PC 53860 * *
svchost.exe 1536 UDP LawClerkTS-PC 56498 * *
svchost.exe 1536 UDP lawclerkts-pc.gateway.2wire.net 57763 * *
svchost.exe 1536 UDP LawClerkTS-PC 57764 * *
svchost.exe 1108 TCPV6 lawclerkts-pc epmap lawclerkts-pc 0 LISTENING
svchost.exe 1244 TCPV6 lawclerkts-pc 49153 lawclerkts-pc 0 LISTENING
svchost.exe 1324 TCPV6 lawclerkts-pc 49154 lawclerkts-pc 0 LISTENING
svchost.exe 1536 UDPV6 lawclerkts-pc 123 * *
svchost.exe 1324 UDPV6 lawclerkts-pc 500 * *
svchost.exe 1244 UDPV6 [fe80:0:0:0:5066:fe07:dcf2:a32e] 546 * *
svchost.exe 1536 UDPV6 [0:0:0:0:0:0:0:1] 1900 * *
svchost.exe 1536 UDPV6 [fe80:0:0:0:1075:280f:3f57:fe31] 1900 * *
svchost.exe 1536 UDPV6 [fe80:0:0:0:5066:fe07:dcf2:a32e] 1900 * *
svchost.exe 1536 UDPV6 lawclerkts-pc 3702 * *
svchost.exe 1536 UDPV6 lawclerkts-pc 3702 * *
svchost.exe 1696 UDPV6 lawclerkts-pc 5355 * *
svchost.exe 1536 UDPV6 lawclerkts-pc 56499 * *
svchost.exe 1536 UDPV6 [fe80:0:0:0:5066:fe07:dcf2:a32e] 57760 * *
svchost.exe 1536 UDPV6 [0:0:0:0:0:0:0:1] 57761 * *
svchost.exe 1536 UDPV6 [fe80:0:0:0:1075:280f:3f57:fe31] 57762 * *
System 4 TCP lawclerkts-pc.gateway.2wire.net netbios-ssn LawClerkTS-PC 0 LISTENING
System 4 TCP lawclerkts-pc.gateway.2wire.net 51129 bigsweet microsoft-ds ESTABLISHED
System 4 TCP LawClerkTS-PC microsoft-ds LawClerkTS-PC 0 LISTENING
System 4 TCP LawClerkTS-PC icslap LawClerkTS-PC 0 LISTENING
System 4 TCP LawClerkTS-PC 5357 LawClerkTS-PC 0 LISTENING
System 4 TCP LawClerkTS-PC 10243 LawClerkTS-PC 0 LISTENING
System 4 UDP lawclerkts-pc.gateway.2wire.net netbios-ns * * 4 200 4 343
System 4 UDP lawclerkts-pc.gateway.2wire.net netbios-dgm * *
System 4 TCPV6 lawclerkts-pc microsoft-ds lawclerkts-pc 0 LISTENING
System 4 TCPV6 lawclerkts-pc icslap lawclerkts-pc 0 LISTENING
System 4 TCPV6 lawclerkts-pc 5357 lawclerkts-pc 0 LISTENING
System 4 TCPV6 lawclerkts-pc 10243 lawclerkts-pc 0 LISTENING
wininit.exe 548 TCP LawClerkTS-PC 49152 LawClerkTS-PC 0 LISTENING
wininit.exe 548 TCPV6 lawclerkts-pc 49152 lawclerkts-pc 0 LISTENING
wmpnetwk.exe 3756 TCP LawClerkTS-PC rtsp LawClerkTS-PC 0 LISTENING
wmpnetwk.exe 3756 UDP LawClerkTS-PC 5004 * *
wmpnetwk.exe 3756 UDP LawClerkTS-PC 5005 * *
wmpnetwk.exe 3756 TCPV6 lawclerkts-pc rtsp lawclerkts-pc 0 LISTENING
wmpnetwk.exe 3756 UDPV6 lawclerkts-pc 5004 * *
wmpnetwk.exe 3756 UDPV6 lawclerkts-pc 5005 * *
  • 0

#48
heir

heir

    Trusted Helper

  • Malware Removal
  • 5,427 posts
Thanks

Could you please create a log with TCPView again but before you save the log please, in the menu, goto Options and untick Resolve Addresses

Please post the log in your reply.
  • 0

#49
MsChief

MsChief

    Member

  • Topic Starter
  • Member
  • PipPip
  • 33 posts
AppleMobileDeviceService.exe 1716 TCP 127.0.0.1 27015 0.0.0.0 0 LISTENING
AppleMobileDeviceService.exe 1716 TCP 127.0.0.1 27015 127.0.0.1 49169 ESTABLISHED
avgemc.exe 2892 TCP 127.0.0.1 10110 0.0.0.0 0 LISTENING
iTunesHelper.exe 4060 TCP 127.0.0.1 49169 127.0.0.1 27015 ESTABLISHED
LMpdpsrv.exe 3816 TCP 0.0.0.0 49161 0.0.0.0 0 LISTENING
LMpdpsrv.exe 3816 TCPV6 [0:0:0:0:0:0:0:0] 49161 [0:0:0:0:0:0:0:0] 0 LISTENING
lsass.exe 664 TCP 0.0.0.0 49156 0.0.0.0 0 LISTENING
lsass.exe 664 TCPV6 [0:0:0:0:0:0:0:0] 49156 [0:0:0:0:0:0:0:0] 0 LISTENING
mDNSResponder.exe 1996 TCP 127.0.0.1 5354 0.0.0.0 0 LISTENING
mDNSResponder.exe 1996 UDP 192.168.1.206 5353 * * 1 41
mDNSResponder.exe 1996 UDP 0.0.0.0 53155 * * 1 44 1 100
mDNSResponder.exe 1996 UDP 0.0.0.0 56496 * *
mDNSResponder.exe 1996 UDPV6 [0:0:0:0:0:0:0:0] 56497 * *
services.exe 640 TCP 0.0.0.0 49159 0.0.0.0 0 LISTENING
services.exe 640 TCPV6 [0:0:0:0:0:0:0:0] 49159 [0:0:0:0:0:0:0:0] 0 LISTENING
spoolsv.exe 1908 TCP 0.0.0.0 49155 0.0.0.0 0 LISTENING
spoolsv.exe 1908 UDP 0.0.0.0 56495 * * 63 5,341 63 5,537
spoolsv.exe 1908 TCPV6 [0:0:0:0:0:0:0:0] 49155 [0:0:0:0:0:0:0:0] 0 LISTENING
svchost.exe 1108 TCP 0.0.0.0 135 0.0.0.0 0 LISTENING
svchost.exe 1244 TCP 0.0.0.0 49153 0.0.0.0 0 LISTENING
svchost.exe 1324 TCP 0.0.0.0 49154 0.0.0.0 0 LISTENING
svchost.exe 1536 UDP 0.0.0.0 123 * *
svchost.exe 1324 UDP 0.0.0.0 500 * *
svchost.exe 1536 UDP 127.0.0.1 1900 * * 360 172,140 3,409 1,159,968
svchost.exe 1536 UDP 192.168.1.206 1900 * *
svchost.exe 1536 UDP 0.0.0.0 3702 * *
svchost.exe 1536 UDP 0.0.0.0 3702 * *
svchost.exe 1324 UDP 0.0.0.0 4500 * *
svchost.exe 1696 UDP 0.0.0.0 5355 * * 448 25,984
svchost.exe 1324 UDP 127.0.0.1 53860 * *
svchost.exe 1536 UDP 0.0.0.0 56498 * *
svchost.exe 1536 UDP 192.168.1.206 57763 * *
svchost.exe 1536 UDP 127.0.0.1 57764 * *
svchost.exe 1108 TCPV6 [0:0:0:0:0:0:0:0] 135 [0:0:0:0:0:0:0:0] 0 LISTENING
svchost.exe 1244 TCPV6 [0:0:0:0:0:0:0:0] 49153 [0:0:0:0:0:0:0:0] 0 LISTENING
svchost.exe 1324 TCPV6 [0:0:0:0:0:0:0:0] 49154 [0:0:0:0:0:0:0:0] 0 LISTENING
svchost.exe 1536 UDPV6 [0:0:0:0:0:0:0:0] 123 * *
svchost.exe 1324 UDPV6 [0:0:0:0:0:0:0:0] 500 * *
svchost.exe 1244 UDPV6 [fe80:0:0:0:5066:fe07:dcf2:a32e] 546 * *
svchost.exe 1536 UDPV6 [0:0:0:0:0:0:0:1] 1900 * *
svchost.exe 1536 UDPV6 [fe80:0:0:0:1075:280f:3f57:fe31] 1900 * *
svchost.exe 1536 UDPV6 [fe80:0:0:0:5066:fe07:dcf2:a32e] 1900 * *
svchost.exe 1536 UDPV6 [0:0:0:0:0:0:0:0] 3702 * *
svchost.exe 1536 UDPV6 [0:0:0:0:0:0:0:0] 3702 * *
svchost.exe 1696 UDPV6 [0:0:0:0:0:0:0:0] 5355 * *
svchost.exe 1536 UDPV6 [0:0:0:0:0:0:0:0] 56499 * *
svchost.exe 1536 UDPV6 [fe80:0:0:0:5066:fe07:dcf2:a32e] 57760 * *
svchost.exe 1536 UDPV6 [0:0:0:0:0:0:0:1] 57761 * *
svchost.exe 1536 UDPV6 [fe80:0:0:0:1075:280f:3f57:fe31] 57762 * *
System 4 TCP 192.168.1.206 139 0.0.0.0 0 LISTENING
System 4 TCP 0.0.0.0 445 0.0.0.0 0 LISTENING
System 4 TCP 0.0.0.0 2869 0.0.0.0 0 LISTENING
System 4 TCP 0.0.0.0 5357 0.0.0.0 0 LISTENING
System 4 TCP 0.0.0.0 10243 0.0.0.0 0 LISTENING
System 4 UDP 192.168.1.206 137 * * 18 900 103 5,150 50 1
System 4 UDP 192.168.1.206 138 * * 11 2,276 28 5,921
System 4 TCPV6 [0:0:0:0:0:0:0:0] 445 [0:0:0:0:0:0:0:0] 0 LISTENING
System 4 TCPV6 [0:0:0:0:0:0:0:0] 2869 [0:0:0:0:0:0:0:0] 0 LISTENING
System 4 TCPV6 [0:0:0:0:0:0:0:0] 5357 [0:0:0:0:0:0:0:0] 0 LISTENING
System 4 TCPV6 [0:0:0:0:0:0:0:0] 10243 [0:0:0:0:0:0:0:0] 0 LISTENING
wininit.exe 548 TCP 0.0.0.0 49152 0.0.0.0 0 LISTENING
wininit.exe 548 TCPV6 [0:0:0:0:0:0:0:0] 49152 [0:0:0:0:0:0:0:0] 0 LISTENING
wmpnetwk.exe 3756 TCP 0.0.0.0 554 0.0.0.0 0 LISTENING
wmpnetwk.exe 3756 UDP 0.0.0.0 5004 * *
wmpnetwk.exe 3756 UDP 0.0.0.0 5005 * *
wmpnetwk.exe 3756 TCPV6 [0:0:0:0:0:0:0:0] 554 [0:0:0:0:0:0:0:0] 0 LISTENING
wmpnetwk.exe 3756 UDPV6 [0:0:0:0:0:0:0:0] 5004 * *
wmpnetwk.exe 3756 UDPV6 [0:0:0:0:0:0:0:0] 5005 * *
  • 0

#50
heir

heir

    Trusted Helper

  • Malware Removal
  • 5,427 posts
How are your computers connected to Internet?

As I understood it your boss computer is connected to yours. Your computer is connected to the router. The router is connected to Internet
Hence your computer must be running if your boss should be able to access Internet.

Is this correct?
If not describe how they are connected to Internet.

Are both you and your boss getting redirected?
  • 0

#51
MsChief

MsChief

    Member

  • Topic Starter
  • Member
  • PipPip
  • 33 posts
You understand our set-up. The way you have described it is correct. Yes we are both being re-directed.
  • 0

#52
heir

heir

    Trusted Helper

  • Malware Removal
  • 5,427 posts
A bit strange that you both are re-directed

Let's try two more things.
After each, check if both of you are getting re-directed or not.
No need to do the second if it stops.


First:

We are going to change a setting in Internet Explorer.

Start Internet Explorer, click on Tools, then Internet Options, go to Advanced and scroll down to Search from Address Bar and make sure Do not search from the Address bar is checked.


Check if you are being re-directed.

Second:

We are going to uninstall a program.

In Control Panel goto Add Remove Programs and uninstall Browser Address Error Redirector

Check again

Let me know the outcome.



Note!
As I mentioned before. If you connect each computer directly to the router. The computers can operate independent of each other. Your boss can access Internet without your computer turned on. (Or if yours should fail in some way, your boss should still have access to Internet.)
  • 0

#53
MsChief

MsChief

    Member

  • Topic Starter
  • Member
  • PipPip
  • 33 posts
I do not seem to be getting redirected after Step 1. I have only been online for about 5 minutes but have several tabs open in a research page. THank You So Much For All Your Help with this. I will be back in the morning for cleanup instructions.
  • 0

#54
heir

heir

    Trusted Helper

  • Malware Removal
  • 5,427 posts
How about your boss is he being redirected?

As we haven't looked at his computer.

I would suggest his computer be checked as well as it has been connected through yours to Internet.

In case so please start a new topic with the initial logs OTL.txt Extras.txt and ark.txt .
Post a link to this topic in that topic.

I'll be back with the cleanup later.
  • 0

#55
heir

heir

    Trusted Helper

  • Malware Removal
  • 5,427 posts
Hey there, MsChief !

OK! Well done, your log is clean again! :D

Time for some housekeeping.

Step 1.
Clean up:

We need to do is to remove all the tools that you have used. This is so that should you ever be re-infected, you will download updated versions. It will also remove the quarantined Malware from your computer.

First:
  • Click START then RUN
  • Now type Combofix /Uninstall in the runbox and click OK. Note the space between the X and the /U, it needs to be there.
    Posted Image


Second:

Double-click OTL.exe to start it.
Click the Clean Up button
Click Yes to the reboot.

Now delete any tools/logs that is left over after you ran OTL Clean Up.


Third:
Now lets Reset and Re-enable your System Restore to remove any infected files that have been backed up by Windows. The files in System Restore are protected to prevent any programs from changing those files. This is the only way to clean these files: (You will lose all previous restore points which are likely to be infected, but that's good news).

Turn OFF System Restore.
  • On the Desktop, right-click My Computer.
  • Click Properties.
  • Click the System Restore tab.
  • Check Turn off System Restore.
  • Click Apply, and then click OK.
Restart your computer.

Turn ON System Restore.
  • On the Desktop, right-click My Computer.
  • Click Properties.
  • Click the System Restore tab.
  • UN-Check Turn off System Restore.
  • Click Apply, and then click OK.
System Restore will now be active again.


Step 2.
Prevention:

OK, lets carry out a few preventative steps to make sure you reduce the risk of further infections.

First:
Your Adobe Acrobat Reader needs to be updated. Older versions are vulnerable to attack.

Start Adobe reader 9

Under the "Help" menu, select "Check for Updates..." and update it.


Second:
One of the essentials is to keep your computer updated with the latest operating system patches and security fixes. Windows Updates are constantly being revised to combat the newest hacks and threats, Microsoft releases security updates that help your computer from becoming vulnerable. It is best if you have these set to download automatically.

Automatic Updates for Windows
  • Click Start.
  • Select Settings and then Control Panel.
  • Select Automatic Updates.
  • Click Automatic (recommended)
  • Choose a day and a time when you know the computer will be on and connected to the Internet.
  • Click Apply then OK.


Third:
Now lets download some preventative programs that will help to keep the nasties away! We will start with Anti Spyware programs. I would advise getting a couple of them at least, and running each at least once a month.

Anti Spyware
  • SpywareBlaster to help prevent spyware from installing in the first place. A tutorial can be found here.
  • SpywareGuard to catch and block spyware before it can execute. A tutorial can be found here.
Note: If you find your system slows down after installing any of these, just uninstall it, or disable it from running at startup.


Fourth:
Next lets look at Firewalls. These help to prevent unauthorized access both to and from the Internet or your local network. A firewall is considered a first line of defense in protecting private information. Below are two free firewalls to choose from, if you do not already have one. Note: You only need one firewall one your system.

Personal Firewalls
Fifth:
On to personal Anti Virus programs.

One AV is a must have! But never more than one, as this can and will cause conflicts and false readings. I have listed three free AV's below which are as good as any paid subscription AV, as long as you allow them to update themselves.

Anti Virus Programs
Sixth:
Nearly done! If you like to use chat, MSN and Yahoo have vulnerabilities that can leave you open to infections. There are however a couple of very good, Malware free Instant Messenger programs which allow you to connect to multiple IM services in one program! (AOL, Yahoo, ICQ, IRC, MSN):

Instant Messengers
Lastly:
To find out more information about how you got infected in the first place and some great guidelines to follow to prevent future infections you can read this article by Tony Klein.


I will keep this log open for the next couple of days, so if you have any further problems post another reply here.

OK, all the best, and stay safe!
  • 0

Advertisements


#56
MsChief

MsChief

    Member

  • Topic Starter
  • Member
  • PipPip
  • 33 posts
Heir;

Thank you again for all your patience and hard work. My boss was getting re-directed and he started screaming at me forcing me to explain to him that nowhere on my resume does it say IT expert. On my advice he decided to call in an expert. The expert is coming in on Monday to re-network all of our computers and remove any unwanted infections. While he is here I am going to have him "wire" all of our wireless devices and hide the cables under the carpets. He did give me some advice over the phone that I though I'd share with you, and you could look into it with some of the other advisors.

1.) Go to "Control Panel"
2.) "Hardware Device"
3.) Click "Show hidden devices"
4.) find "TDSSserv.sys"
4.) "Disable" do not uninstall as it automatically re-installs...
5.) Reboot System
6.) update Virus protections

This should remove the "Google Re-Direct"

I am going to wait for him to get here and let him do this to my bosses PC since you did all the hard work cleaning mine.

Thank You so much, if I have any other problems I'll be back.

MsChief
  • 0

#57
heir

heir

    Trusted Helper

  • Malware Removal
  • 5,427 posts
You're welcome!

About those instructions.
The symptom from getting re-directed can come from different sources. A proper analysis needs to be made. Just doing those steps without analyzing why the re-directions occur shows lack of competence in my opinion.

It depends which type it is and how deep it has gotten into a computer.
There are some out there that loads into the system during the boot sequence.
Not analyzing them properly and fixing them the wrong way may convert the computer to a really expensive doorstop.

It's your boss' money. Dealing with removing malware can be expensive if you hire someone to do it.
Either it's time-consuming finding it - as you by now probably understand - or a reformat, reinstalling and rebuilding of the information on the computers is needed - which also takes time. :D

Removing some symptoms of malware isn't the same as removing it. On the other hand the visible symptoms are the only proofs a "customer" has.......
If it returns - has it been properly removed or is it a new infection??? Who's responsible ???

Note!
Bottom line, there is seldom a quick fix, a tool that fixes it. The nastier types of malware almost always needs to be manually removed.

I wish you and your boss good luck in getting the malware removed on your computers.

heir
  • 0

#58
MsChief

MsChief

    Member

  • Topic Starter
  • Member
  • PipPip
  • 33 posts
heir;

I followed your clean up instructions and have not been re-directed since Wednesday. Thanks again! As for my boss and his expert... I'm hearing a lot of cursing from in there...

MsChief
  • 0

#59
heir

heir

    Trusted Helper

  • Malware Removal
  • 5,427 posts
Since this issue appears to be resolved ... this Topic has been closed. Glad we could help. :D

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP