239 replies to this topic

[WoWAddictsadface]

My redirect malware is still a survivor =/

[SpySentinel]

My redirect malware is still a survivor =/

Please start your own topic in the Malware Removal Forum so we can help clean up your computer.

[WoWAddictsadface]

I did a couple days ago, thought i'd give this method a try aswell though

[bretenysphere]

hello dear

The right now my computer is finally running normal again. so This is very quick and very easy.so No more redirects or other annoying things.but I hope it stays this way, but as of right now, everything is good.

[lmd46]

does this fix work for windows 7 64 bit?
If not, what do I do?
Thanks

[SweetTech]

Hi lmd46!

In order to assist you better, I'm going to ask that you take a look at this thread here: http://www.geekstogo...cleaning-guide/ and follow the instructions that are outlined in that post. You will be asked to create a new thread, and post your logs in the Malware Removal forum. Please do so, and wait for a helper to pick up your log, and assist you further.

Kindest Regards,
SweetTech.

[lmd46]

who are you asking--if u want the expert I thing u have to start your own topic

[vbloom]

I can not get tddskiller to run, I have tried everything, downloaded it to my desktop, changed the file name and simple can't get it to run. Other .exe programs run, I'm using XP

Thanks

[sari]

vbloom,

I would suggest following the instructions here: http://www.geekstogo...cleaning-guide/, and then starting a topic in the malware removal forum. One of our experts there can help you with the process - it's possible it's being blocked from running and they'll need to use another tool first.

[Carla224]

Thank you so much! I really appreciate it. Everything seems to be running fine now.

[JoshStevenGray]

This is what The OTM log reported.

All processes killed
========== FILES ==========
< ipconfig /flushdns /c >
Windows IP Configuration
Could not flush the DNS Resolver Cache: Function failed during execution.
C:\Documents and Settings\HP_Administrator\Desktop\cmd.bat deleted successfully.
C:\Documents and Settings\HP_Administrator\Desktop\cmd.txt deleted successfully.
========== COMMANDS ==========
C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: HP_Administrator
->Temp folder emptied: 6066800 bytes
->Temporary Internet Files folder emptied: 12716711 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 589790611 bytes
->Google Chrome cache emptied: 0 bytes
->Opera cache emptied: 0 bytes
->Flash cache emptied: 2541 bytes

User: HP_Administrator.YOUR-55E5F9E3D2
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->FireFox cache emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Incomplete

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: NetworkService
->Temp folder emptied: 51648 bytes
->Temporary Internet Files folder emptied: 33170 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 4018664 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 92338 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 584.00 mb

Restore point Set: OTM Restore Point (0)

OTM by OldTimer - Version 3.1.18.0 log created on 06262011_135859

Files moved on Reboot...

Registry entries deleted on Reboot...

[redeyepirate]

I have been fighting the redirect virus for a while. Every other advice has been too complicated, expensive or didn't work. At one point, I had found the tdsserv.sys file, but couldn't do anything about it, then it wasn't there. I had tried the tdsskiller.exe before, but that didn't work. By following ALL your 3 steps, I don't seem to have the redirect issue anymore. I hope that your advice took care of it for good. THANK YOU!!!!!

PS. tdsskiller never did find anything wrong!

Edited by redeyepirate, 23 July 2011 - 04:51 PM.

[orapaho]

I tried the steps above. I have a browser redirect and it has not been fixed. I have tried malwarebytes, hitmanPro 3.5, Microsoft security essentials, TDSSkiller, I have DDS logs, RKunkooker reports, and security checkup report too. After 1 week of this issue, my internet access went down. What to do? I am thinking of using ccleaner or combofix Have not tried this.

[sari]

Orapaho,

Please go to this link, follow the directions, and start a new topic in the malware forum. Ccleaner will not remove this, and using the registry cleaner could cause serious damage. You shouldn't run Combofix without the supervision of a trained helper, and I would always advise against the use of Hitman Pro. Please let one of our hedlpers look at your logs and help you out.

[mbittencourtcs]

Hi,

I tried to run step 2 GooredFix but appear the "Windows found a problem and will try to solve.."and don't work.
I have google redirect virus and I can not fix it since March 2011.

Thanks
Marcelo