Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Search Engine Redirect


  • This topic is locked This topic is locked

#1
Natattack13

Natattack13

    Member

  • Member
  • PipPip
  • 17 posts
Lately every time I google something, one or more of the links redirects me to a site with links to advertisements. Now it redirects me to a site that CA Security Center deems "unsafe". My computer has also been extremely slow, particularly on the internet.
My computer is the hp dv6-3122us Entertainment Notebook w/ Windows 7 Home Premium.
Manufacturer: Hp
Model: Hp Pavilion dv6 Notebook PC
Processor:AMD Turion 2 p540 dual core 2.40 GHz
RAM: 4.00 GB
I dont know what other specs to put. PLEASE HELP!!!!
  • 0

Advertisements


#2
Nedklaw

Nedklaw

    Trusted Helper

  • Malware Removal
  • 1,652 posts
Hello, Natattack13! :yes:

:) I'm Nedklaw and I'll be glad to help you with your malware issues. :)

I am currently still in training and my posts have to be approved by an expert so please expect a delay between my posts.

These instructions are specifically designed for Natattack13 only. No one else should follow these instructions because it can cause serious damage to your computer.

Before we start to clean your computer of malware, please read through the following points to help me and you, and prevent damage to your computer:
  • Please completely read through all of the instructions given to you before attempting to follow them. Reading too lightly will cause you to miss important steps, which could have DESTRUCTIVE effects. If you can't perform a certain step or you are unsure about what to do, let me know!
  • Don't be afraid to ask questions! If you are unsure about anything, ask me! No question is considered stupid here!
  • Be patient with me, logs can take some time to research and my life can mean that I'm busy.
  • Please copy and paste all logs into your reply. Do not attach logs to a post unless I tell you to or if they don't fit in the post.
  • If I instruct you to download a specific tool in which you already have, please delete the copy that you have and re-download the tool. The reason I ask you to do this is because these tools are updated fairly regularly.
  • NEVER fix anything in OTL or other programs on your own! This can be very dangerous and cause harm to your system.
  • Refrain from running any other tools apart from the ones I tell you to.
Note: You should save or print out my instructions for easy reference, as part of the fix may be in Safe Mode and you won't be able to access GeeksToGo.


Step 1

Posted Image Download OTL to your Desktop.

  • Double click on the icon to run it. Make sure all other windows are closed to let it run uninterrupted.
    • Select Scan All Users.
    • Under the Custom Scan box paste this in:
    netsvcs
    %SYSTEMDRIVE%\*.exe
    %USERPROFILE%\..|smtmp;true;true;true /FP
    /md5start
    explorer.exe
    winlogon.exe
    Userinit.exe
    svchost.exe
    /md5stop
    %systemroot%\*. /mp /s
    hklm\software\clients\startmenuinternet|command /rs
    hklm\software\clients\startmenuinternet|command /64 /rs
    CREATERESTOREPOINT
  • Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan won't take long.
  • When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
  • Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time and post them in your topic.

Step 2

Download aswMBR.exe (1.8mb) to your desktop.

Double click aswMBR.exe to run it.

Click the "Scan" button to start the scan.

Posted Image

On completion of the scan click save log, save it to your desktop and post it in your next reply.

Posted Image

Things I want to see in your next reply

  • OTL.txt
  • Extras.txt
  • aswMBR.txt

  • 0

#3
Natattack13

Natattack13

    Member

  • Topic Starter
  • Member
  • PipPip
  • 17 posts
i clicked on the link you had for downloading OTL and a blank internet explorer page opened; i clicked on the yellow pull-tab and selected download, but nothing happened
  • 0

#4
Nedklaw

Nedklaw

    Trusted Helper

  • Malware Removal
  • 1,652 posts
Hi. :)
Lets try these instructions again.

Step 1

Posted Image Download OTL to your Desktop.

  • Double click on the icon to run it. Make sure all other windows are closed to let it run uninterrupted.
    • Select Scan All Users.
    • Under the Custom Scan box paste this in:
    netsvcs
    %SYSTEMDRIVE%\*.exe
    %USERPROFILE%\..|smtmp;true;true;true /FP
    /md5start
    explorer.exe
    winlogon.exe
    Userinit.exe
    svchost.exe
    /md5stop
    %systemroot%\*. /mp /s
    hklm\software\clients\startmenuinternet|command /rs
    hklm\software\clients\startmenuinternet|command /64 /rs
    CREATERESTOREPOINT
  • Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan won't take long.
  • When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
  • Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time and post them in your topic.

Step 2

Download aswMBR.exe (1.8mb) to your desktop.

Double click aswMBR.exe to run it.

Click the "Scan" button to start the scan.

Posted Image

On completion of the scan click save log, save it to your desktop and post it in your next reply.

Posted Image

Things I want to see in your next reply

  • OTL.txt
  • Extras.txt
  • aswMBR.txt

Edited by Nedklaw, 03 October 2011 - 01:05 PM.

  • 0

#5
Nedklaw

Nedklaw

    Trusted Helper

  • Malware Removal
  • 1,652 posts
Hi. :)

If the links still don't work then try this:

Right click on the link and select "Save Link as", "Save Target as" or "Save as", depending on your browser, and save OTL and aswMBR on the desktop. You can then run them following my instructions.


If that still doesn't work then do you have another clean PC you can download tools off?
  • 0

#6
Natattack13

Natattack13

    Member

  • Topic Starter
  • Member
  • PipPip
  • 17 posts
The new directions didn't work either. I will try on another computer and give you feedback.
  • 0

#7
Nedklaw

Nedklaw

    Trusted Helper

  • Malware Removal
  • 1,652 posts
Hi. :)


I will try on another computer and give you feedback.

Your one stop ahead of me.

First though I need to vaccinate your USB drive(s) so you don't infect them and your clean computer when transferring tools.


  • Please download Panda USB Vaccine (you must provide valid e-mail and they will send you download link to this e-mail address) to your desktop.
  • Install and run the program.
    • Double-click on the file USBVaccine.zip located on your desktop.
    • A file viewer will open. Double-click on the file USBVaccineSetup.exe. Please select Yes if you are asked if you want to allow the program to make changes to the computer.
    • Follow the steps on screen to install the program on your computer.
  • Plug in your USB drive and click on Vaccinate USB and Vaccinate Computer.

  • 0

#8
Natattack13

Natattack13

    Member

  • Topic Starter
  • Member
  • PipPip
  • 17 posts
Do I vaccincat the usb drive on the clean computer?
  • 0

#9
Nedklaw

Nedklaw

    Trusted Helper

  • Malware Removal
  • 1,652 posts
Yes
  • 0

#10
Natattack13

Natattack13

    Member

  • Topic Starter
  • Member
  • PipPip
  • 17 posts
when i tried to download panda software and i put in phone number, it kept coming up with "the phone must be numeric" and it didn't work.
  • 0

Advertisements


#11
Natattack13

Natattack13

    Member

  • Topic Starter
  • Member
  • PipPip
  • 17 posts
nevermind i figured that part out.
  • 0

#12
Natattack13

Natattack13

    Member

  • Topic Starter
  • Member
  • PipPip
  • 17 posts
Okay, I vaccinated my USB. Now what?
  • 0

#13
Nedklaw

Nedklaw

    Trusted Helper

  • Malware Removal
  • 1,652 posts
Hi. :)

You can download the files by typing these web addresses into your search bar:

  • hxxp://oldtimer.geekstogo.com/OTL.exe
  • hxxp://public.avast.com/~gmerek/aswMBR.exe

After downloading them, follow my instructions in Post 4.
  • 0

#14
Natattack13

Natattack13

    Member

  • Topic Starter
  • Member
  • PipPip
  • 17 posts
The first link will run but then it says it can't run from a temporary internet file, so i don't know what to do. The second link leads to a google search...
  • 0

#15
Nedklaw

Nedklaw

    Trusted Helper

  • Malware Removal
  • 1,652 posts
On the first link when the file asks to download make sure to click Save rather than Run. Save the file to your desktop then follow the instructions in Post 4.

The second link should work; make sure you haven't copied and pasted the bullet point into your address bar. If done successfully the file download should flash orange in the taskbar. Also save this file to your desktop. When the file has been downloaded follow the instructions in Post 4.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP