I have been having random tabs popping up on my Firefox browser that always redirect to a website starting with "mediashifting.com/(various titles) then it redirects to a secondary website that has been everything from video players to porn, sports to health insurance.
I've also been coming back to my laptop to find that it has been either crashing or shutting itself off from time to time. When I restart, everything says it's in "recovery mode".
When I run malwarebytes, this is what I'm told:
Malwarebytes' Anti-Malware 1.51.2.1300
www.malwarebytes.org
Database version: 8399
Windows 6.1.7600
Internet Explorer 8.0.7600.16385
12/21/2011 4:51:21 PM
mbam-log-2011-12-21 (16-51-21).txt
Scan type: Quick scan
Objects scanned: 243113
Time elapsed: 5 minute(s), 0 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 1
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell (Backdoor.Agent) -> Value: Shell -> Quarantined and deleted successfully.
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
(No malicious items detected)
It says its deleted the problem, but it comes up when I run the malwarebytes the next day.
Any suggestions would be greatly appreciated!